Privacy policy

DATA CONTROLLER OF THE PERSONAL DATA FILE

 

Identity of the holder: INICIATIVES DE COMUNICACIONS GEMINIS S.L. (ICG)
Address: C. Mestral, s/n, Polígono Industrial de Torrefarrera, 25123 Torrefarrera-Lleida (España)
Phone: +34 973 751 533
Email address: rgpd@icg.es

 

The communication of personal data is not a legal requirement, but it will be necessary if you wish to formalize a contract. Failure to provide the necessary data for its execution could lead to termination or even the non-formalization of the contract.

 


HOW DO WE OBTAIN YOUR PERSONAL DATA?

We collect your personal data on different occasions:

Every time you contact us directly, in events, meetings, presentations, or through the contact forms on our corporate websites.

PURPOSES OF PROCESSING PERSONAL DATA

The data provided by the interested party to Fundació ICG is intended to manage your requests, provide you with the information you need, and keep you informed about our social action.

Data is not processed for the purpose of automated data processing, including profiling, that produces legal effects concerning you or significantly affects you.

WHAT DATA DO WE OBTAIN?

Contact Data: name, address, phone numbers, email…

Website usage: information obtained through cookies.

Commercial and fiscal data in case of establishing a contractual relationship.

LEGAL BASIS FOR DATA PROCESSING

The processing of your data for the aforementioned purposes is based on the consent you have granted us. However, you may withdraw consent at any time, without this affecting the commercial relationship that binds us. You can withdraw this consent by sending an email to rgpd@icg.es

RECIPIENTS

The data may be communicated to:

The competent authority if requested.

Banks and financial entities.

Other companies within the group for administrative and management purposes.

The professional channel of the ICG Group in order to be processed to address queries and requests, offer support and technical assistance.

RIGHTS

The interested party has the right to exercise their rights of access, rectification, erasure, and objection to the processing of their data at any time, by contacting rgpd@icg.es for this purpose.

These rights are regulated in articles 15 to 22 and 34 of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016 (GDPR) and in Organic Law 03/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPD), in its articles 12 to 18.

They are summarized as follows:

Right of access

Right to obtain confirmation as to whether or not your data is being processed, the origin, and the right of access to data and information on the purposes of processing, the category of personal data, the recipients of the data, the envisaged period for its storage or the criteria used to determine that period, the existence of the right to request rectification or erasure of data or restriction of processing and the right to lodge a complaint with a supervisory authority.

Right to rectification

Right to obtain rectification of inaccurate personal data and to have incomplete personal data completed.

Right to erasure

Right to obtain erasure of personal data concerning you.

Exceptions apply where processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for the performance of a task carried out in the public interest or in the exercise of official authority, for reasons of public interest in the area of public health, for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes, and for the establishment, exercise or defense of legal claims.

Right to restriction of processing

Right to obtain restriction of processing where:

a) The data subject contests the accuracy of the data, for a period enabling the controller to verify its accuracy.

b) The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use.

c) The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims.

d) The data subject has objected to processing pending the verification of whether the legitimate grounds of the controller override those of the data subject.

After obtaining restriction of processing, the right to be informed before lifting this restriction.

Right to data portability

Right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit those data to another controller.

Right to object

Right to object to personal data being processed, including profiling. The controller shall cease processing the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise or defense of legal claims.

Right to automated decision-making

Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Right to be notified of data breaches

Right to be notified without undue delay when the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons. Describing, in clear and plain language, the nature of the personal data breach, its possible consequences, the measures taken, and the contact information of the Data Protection Officer.

In addition to the above rights, it is emphasized that the data subject has the possibility to object to the processing of data and to revoke the consent given at any time, without this affecting the lawfulness of the processing based on the prior consent to its withdrawal, by communicating it to the Data Protection Officer via the provided email.

DATA RETENTION PERIOD

Personal data will be retained for a period of five years from the first contact, unless the data subject notifies us of the exercise of their rights, referenced above.