In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR), you will find below all relevant information on how ASPA processes the personal data you share with us.
Data Controller:
ASPA CONSULTORÍA Y SISTEMAS, S.L.
Av. de Europa, 26 – Edificio Ática 5 Planta Baja – 28224 Pozuelo de Alarcón (Madrid)
info@aspaconsulting.com
Purposes of Processing and Legal Basis
ASPA processes your personal data for the following purposes:
- To prepare proposals for services requested by our current and potential clients.
- To respond to any other requests made by current and potential clients.
- To ensure the proper conduct of our commercial activities.
- To manage support activities related to the services provided to our clients.
- To develop, perform, and manage the service contracts entered into with our clients.
- To measure the effectiveness of our advertising actions, sales activities, and support services.
- To carry out customer satisfaction surveys.
- To send commercial communications and advertising.
- To handle requests or inquiries received through customer service channels.
- To conduct recruitment and personnel selection processes.
In addition, subject to your prior consent, ASPA will also process your personal data in order to send you commercial communications related to our services.
You may withdraw your consent at any time by contacting us at info@aspaconsulting.com
What Types of Personal Data Do We Collect?
At ASPA, we process only the personal data strictly necessary for each of the purposes identified above. The categories of personal data processed may include:
- First and last name of individuals identified as “business contacts”
- Tax identification number (when clients are natural persons)
- Postal address
- Telephone number
- Email address
- Payment data
How Long Do We Store Your Personal Data?
The data retention period depends on the purpose for which the data is processed. For each of the processing purposes described above, the applicable maximum retention period is defined accordingly. Once such periods have elapsed, ASPA will no longer process your personal data for the relevant purpose.
With Whom Do We Share Your Personal Data?
Service Providers
In order to provide the services and products you request, we may share your personal data with service providers. In all cases, ASPA ensures that appropriate contractual safeguards are in place so that such providers process personal data with the same level of protection applied by ASPA.
These providers may include companies offering website hosting, email services, hosting services, digital marketing, sponsorship of prize draws, contests and promotions, auditing, customer order management, data analytics, customer support services, and the conduct of research and customer satisfaction surveys.
Other Recipients
No sharing of personal data with other companies is envisaged.
Legal Compliance and Security
Your personal data may be disclosed where required by law, legal proceedings, litigation, and/or requests from public authorities or governmental bodies within or outside your country of residence. Disclosure may also occur for reasons of public order, law enforcement, or other matters of public interest, to the extent such disclosure is necessary, appropriate, and legally required. Where legally permitted and feasible, we will inform you prior to such disclosure.
If we determine in good faith that disclosure is reasonably necessary to protect our rights, enforce our terms and conditions, investigate fraud, or safeguard our operations or users, we may also disclose personal data to the relevant supervisory authorities.
International Data Transfers
In certain cases, the disclosure of your personal data may involve international transfers outside the European Union (EU). When such transfers occur, ASPA implements appropriate measures to ensure that the transferred personal data benefits from an adequate level of protection and that suitable safeguards are applied. You may obtain further information regarding the safeguards in place by contacting us at info@aspaconsulting.com
What Are Your Rights?
You have the right to:
- Access your personal data to know which data are being processed, for what purposes, their origin, and whether they have been disclosed to third parties.
- Rectification of inaccurate or incomplete data.
- Erasure of your data when the purpose for which they were collected no longer applies, processing is unlawful, consent is withdrawn, or in other cases provided by law.
- Object to the processing of your data for certain purposes, or request that processing cease, where legally applicable.
- Restriction of processing while the accuracy of the data is being verified, where processing is unlawful and erasure is opposed, where ASPA no longer needs the data, but they are required for legal claims, or where you have objected to processing pending verification of legitimate interests.
- Data portability, to receive your personal data in a structured, commonly used, electronic format and transmit them to another data controller.
- Not to be subject to automated individual decision-making, including profiling, that produces legal effects or significantly affects you in a similar manner.
To exercise any of these rights, withdraw consent, or submit any request or complaint regarding the processing of your personal data, please contact info@aspaconsulting.com.
You are also reminded that you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) whenever you deem it appropriate in relation to the processing of your personal data.