Personal data processing, purpose of data processing, and consent to transfer said data
Our website ensures an adequate level of data protection, and adopts the technical and organizational measures required to guarantee the safety of your data as required by law with the aim to avoid the loss, damage, and unauthorized access by third parties to and of any personal data gathered in this website. We routinely monitor our systems to detect any possible vulnerabilities and attacks. However, we cannot guarantee the security of the information you send. We cannot guarantee that the personal data will not be accessed, disclosed, altered or deleted in the event that there is a leak in any of the physical, technical or management measures we have in place.
The legal basis to process your data is the consent provided by you to process your data, as per article 6.1.a of Regulation (EU) 2016/679. However, it is required that the data subject is aware of his/her right to withdraw said consent at any given moment, without this fact affecting the lawfulness of data processing based on the data subject’s consent prior to the withdrawal thereof. Our website does not transfer data to third parties, nor does it transfer data internationally except for where it is permitted by the Spanish Data Protection Agency, or wherever the data subject has expressly consented to said transfer. Therefore, should any personal data be transferred, this shall be done exclusively within the data protection framework established by the Spanish Data Protection Agency, or when the data subject has given his/her consent, and to those countries where the safety and confidentiality of the personal data can be guaranteed.
Data gathering and storage duration
Data gathering on this website occurs via:
- Contact form
The data received from the user shall be stored on this website for a variable amount of time, depending on the user. By default, personal data shall be stored for:
- Insofar as the right to erasure is not exercised.
However, the possibility exists that we will store the data subject’s personal data even after he/she has closed the account, if it is deemed reasonable to comply with our legal obligations (including requests from law enforcement and legal bodies, Tax Authority, or SEPBLAC – the Spanish Financial Intelligence Unit), comply with legal requirements, solve any disputes which may arise, ensure security, avoid cases of fraud or abuse, apply our terms and conditions of use or comply with your request to not receive future messages from www.coworkinglafabrica.es.
The user will be solely liable for any loss or damages suffered by the website or by the personal responsible for the web portal, or any third party, as a result of incorrect, inexact or incomplete information provided in the login forms.
Purpose of Data Processing
|WHERE WE GATHER DATA||GATHERED DATA||PURPOSE AND LEGAL BASIS|
|Contact form||Name, email, telephone number and message||We gather data to provide you with an answer to any consultations made via our website regarding our services, and to answer any questions relative to our services. By ticking the corresponding box, you will also enable us to send you information on our website.|
Personal Data Recipient Categories
All third-party services are strictly necessary to provide our web services, and have been selected taking into account the current and applicable legislation.
We work closely with third parties which may be recipients of your personal data, such as:
- Business partners which are social media platforms, and who can provide you with related services, such as linking information to your profile, from social media platforms to our platform. This is the case of Facebook and WordPress, for example.
- Our server host, or web host.
Exercising of Rights by the Data Subject
Once you, as the website user, have provided us with your personal data, the applicable legislation enables you in your capacity as data subject to:
- Request access to personal data relative to the data subject.
- Request its modification or erasure.
- Request restriction of data processing.
- Object to personal data processing.
- Request data portability.
In order to exercise any of the aforementioned rights, the data subject must send in said request with a valid ID, passport or similar identification document. The request must be sent to the following email address: firstname.lastname@example.org. Furthermore, the request must state the following: data subject’s name and surname, photocopy of their ID, passport or similar document, and, if applicable, a photocopy of the person acting in representation of the data subject, the object of the present request, data subject’s address where notifications must be addressed to, date and signature of the requesting party. Exercising the aforementioned rights will be free of cost for the data subject, except where the request is clearly unfounded or unreasonable, especially in case of repetitive petitions. In such cases, the data controller can charge a reasonable fee based on any administration costs, or refuse to act on the request.
Complaints and Exercise of Rights
Data subjects can address their complaints to Data Protection Authorities if they believe that there is an issue with the way in which we are handling the personal data, or by enforcing their rights.
Said complaints can be filed through the following link to the Spanish Data Protection Agency (AEPD):
The Data controller is ÁLVARO NICOLÁS GONZÁLEZ, with ID no. 51100134-E, and registered address in: Calle Avenida de Brasil, 17, Planta 1, 28020, Madrid; and telephone number: (+34) 910616053.
Commercial Notifications and Promotions
In compliance with LSSI (Spanish Law on Information Society Services and Electronic Commerce), this website does not spam its users, therefore, it does not send its users emails which have not been previously authorized or requested by the user. Therefore, in each of the website forms, the user has the chance to indicate whether he/she expressly consents to receiving newsletters, regardless of any specific or one-time commercial information the user may request.
Under the dispositions of the Spanish Law 34/2002 on Information Society Services and Electronic Commerce, this website undertakes to not send its users any commercial notifications without duly identifying said notifications.
As a general rule, this website will not process personal data, where it has express knowledge thereof, of users under the age of fourteen (14) years.
If, when carrying out any monitoring or control activities, the website discovers that personal data of users under 14 years of age has been involuntarily gathered, the website shall, in their capacity as service provider and data controller, adopt all measures necessary to erase said information as soon as reasonably possible, except for in those instances where it is necessary to store said data due to applicable legislation.
In accordance with the dispositions of the European General Data Protection Regulation, users over 13 years of age can give their consent, except where legal dispositions require the presence of the holder of parental responsibility or legal guardian.
Acceptance and Consent