Legal basis for processing | Legal basis for processing |
Providing our products or services, accepting payments, and collecting owed amounts | (1) Performance of a contract (2) For our own legitimate interest (for example, to manage potential unpaid debts) |
Registering as a website user or new customer | (1) Express consent of the data subject (2) Performance of a contract |
Managing our relationship with customers, which includes: (1) Notifying you of changes to our terms or policies (2) Requesting survey responses or reviews of our products/services | (1) Performance of a contract (2) Compliance with a legal obligation (3) For our own legitimate interest (to update our records and learn our customers' opinions about our products/services) |
Sending commercial communications, newsletters, and advertising through any communication channel | (1) Express consent of the data subject (2) For our own legitimate interest (provided you have not expressed a desire to stop receiving communications, ‘opt-out’) |
Responding to inquiries and/or providing information requested by the data subject, including sending quotes | (1) Our own legitimate interest (2) Performance of a contract (3) Consent of the data subject (4) Compliance with a legal obligation |
Managing user interactions on our social media networks | (1) Compliance with a legal obligation (for example, to remove offensive, racist, vulgar, or insulting comments; to maintain an environment of respect and integration, to preserve the privacy of minors, etc.) (2) Our own legitimate interest (when we remove third-party advertising from our networks, for example) |
Using analytical data to improve the web browsing experience, implement marketing strategies, and optimize contracting processes through the use of cookies | (1) Our own legitimate interest (2) Consent of the data subject (by accepting the use of analytical cookies, for example) |
Managing and protecting our business and website (troubleshooting, data analysis, web testing, etc.) | (1) Compliance with a legal obligation (2) Our own legitimate interest (running our business, providing network security, preventing fraud, etc.) |
Suggesting and recommending products and services that may be of interest | (1) For legitimate interest (to grow our business) |
Providing personal information to authorities or by court order | Compliance with a legal obligation |
Updating and improving our customer records | (1) In compliance with a legal obligation (2) In the performance of a contract (3) For legitimate interest (to verify that we can remain in contact with our customers for matters related to their subscriptions, orders, or purchased products). |
Managing and protecting our business and our website. This includes detecting browsing issues, data analysis, web testing, etc. | 1) In compliance with a legal obligation (2) For our own legitimate interest and that of third parties. To improve the experience of our employees in the performance of their duties. |
Subject Matter | Limitation period | Regulation |
Labor, for the purposes of infringements | 3 years | Art. 4.1 RD 5/2000 |
Social Security, for the purposes of infringements | 4 years | Art. 4.2 RD 5/2000 |
Occupational Risk Prevention, for the purposes of infringements | 5 years | Art. 4.3 RD 5/2000 |
Tax, for the purposes of tax debts | 4 years | Art. 66 Ley 58/2003 |
Tax, for the purposes of checking offset quotas or applied deductions | 10 years | Art. 66 bis Ley 58/2003 |
Accounting and Commercial | 6 years | Art. 30 del CC |
Offenses against the Public Treasury and Social Security | 10 years | Art. 131 LO 10/1995 |
Right of access | The right to receive a copy of your personal information. |
Right of rectification | The right to request the correction of errors in your personal information. |
Right of cancellation/erasure (right to be forgotten) | The right to request that we delete your personal information – in some situations. |
Right to restriction | The right to request the restriction of the processing of your data. |
Right to object | The right to object to: - the processing of your data for direct marketing (including profiling). - in certain circumstances, our continued processing of your data. For example, processing carried out based on our legitimate interest. |
Right to portability | The right to receive your personal information in a structured, commonly used, and machine-readable format and/or to transmit this data to a third party – in specific situations. |
Automated individual decisions | The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or significantly affects you. |