You have the right to be informed by the Data Controller whether or not your personal data is being processed, and if the processing is confirmed, they will allow you to access it by providing you the following information:

• The purpose of the processing.
• The categories of data in question.
• The storage period or criteria.

Rectification of data:

You have the right to have your data rectified by the Data Controller in the event of inaccuracy or incompleteness by means of an additional corrective statement.

Data erasure:

The data subject shall have the right to have her/his data deleted by the Data Controller when:

• The processing is unlawful.
• The data subject has withdrawn his/her consent.
• They are no longer necessary in relation to the purposes for which they were collect or processed.
• The data subject has exercised the right to object and other legitimate grounds for processing do not prevail.
• The data must be deleted in order to comply with a legal obligation on the part of the Data Controller.

The data subject shall not have the right to have his/her data deleted by the Data Controller when processing is necessary:

• To exercise the right of freedom expression and information.
• To comply with a legal obligation of the Data Controller.
• For the formulation, exercise or defense of claims.
• For public interest based on current legislation for reasons of public health or for purposes historical, statistical or scientific research.

Data portability right:

You have the right to have your data transmitted by the Data Controller to another Data Controller or to the data subject himself, in a structured format of habitual use and mechanical reading, when the processing is carried out by automated means and is based on:

• The consent of the data subject for specific purposes.
• The execution of a contract or pre-contract with the data subject.

The right to data portability does not apply when:

• The transmission is technically impossible.
• It may adversely affect the rights and freedoms of third parties.
• The processing has a public interest mission based on current legislation.

Limitation of treatment right:

The data subject shall have the right to object to the processing of his/her data carried out by the Data Controller for reasons related to his/her particular situation, when the processing is based on:

• Direct marketing.
• Creation of profiles.
• Legitimate interest of the Data Controller or third parties, provided that the interests or rights and freedoms of the data subject do not prevail, especially if the data subject is a child.
• Historical, statistical or scientific research, unless the treatment is necessary for reasons of public interests.

Even if the data subject objects to the processing of his/her data, the Data Controller may continue to process them as long as the legitimate interest of the Data Controller prevails over the interests or rights and freedoms of the data subject in a judicial proceeding that justifies it.

The Data Controller shall inform the data subject of the right to object the processing of his/her data in an explicit, clear and separate manner from any other information at the time of the first communication.

The right to object:

It is the right not to carry out the treatment of these or cease in the same when it is not necessary consent for treatment, by the concurrence of a legitimate and well-founded reason, referring to their specific personal situation, which justifies it, and provided that a Law does not provide otherwise.

Right not to be subject of profiling:

The data subject shall have the right not to be a subject of profiling for the purpose of taking individual decisions based on automated data processing with a view to assessing, analyzing or predicting the following personal aspects:

• Professional performance.
• Economic situation.
• Preferences or personal interests.
• Location or movements of the person.

When the profiling is based solely on automated processing:

• The data subject shall have the right to be informed if the decision that can be taken can produce legal effects that significantly affect him/her.

The data subject has the right to obtain human intervention by the Data Controller, to express his/her point of view and to challenge the decision, if the processing has been authorized by means:

• The explicit consent of the data subject.
• A contract between the Data Controller and the data subject.

It does not apply to the right not to be subject of profiling when the decision that can be taken as a result of the same one is authorized by means:

• The explicit consent of the data subject.
• A contract between the Data Controller and the data subject.
• A treatment based on current legislation.