In compliance with Articles 5, 12 and 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April (General Data Protection Regulation – GDPR), as well as Articles 5, 6 and 11 of Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), users are informed of the following:
1. Data controller
BUCEO SUR – Yann Nicolas DEBROISE. Tax ID (C.I.F./N.I.E): Y3657764L Registered office: Calle Roger de Lauria 80 – 35118 Playa de Arinaga, Las Palmas.
2. Purpose of data processing
The personal data provided by the user will be processed by BUCEO SUR as data controller for the following purposes:
- Management of the commercial and administrative relationship.
- Provision of professional services.
- Invoicing and compliance with legal obligations.
- Management of pre-contracting and contracting processes.
- Maintenance of the contractual or pre-contractual relationship.
- Internal company–client management.
3. Legal basis for processing
The legal basis for processing the data is the data subject’s express consent and/or the performance of a contract or the application of pre-contractual measures requested by the user.
By reading and accepting this Privacy Policy, the user expressly consents to the processing of their personal data for the purposes indicated.
4. Data retention
Personal data will be retained while the commercial relationship remains in force and, thereafter, for the time necessary to comply with applicable legal obligations. Once these periods have ended, the data will be duly blocked or deleted.
5. Disclosure of data to third parties
Personal data will not be disclosed to third parties, except where required by a legal obligation.
6. Rights of the data subject
The user may exercise at any time the rights recognised by current legislation, in particular:
- Right of access
- Right of rectification
- Right of erasure (right to be forgotten)
- Right to restriction of processing
- Right to object
- Right to data portability
- Right to withdraw consent at any time
Withdrawal of consent will not affect the lawfulness of processing based on consent given prior to its withdrawal.
Likewise, the data subject has the right to lodge a complaint with the competent supervisory authority.
To exercise their rights, the user must send a written request, together with a copy of their identification document, to BUCEO SUR’s postal address or email address.
7. Updating of data
In the event of any change to the personal data provided, the user undertakes to communicate it in writing in order to keep the information up to date.
8. Security measures
BUCEO SUR applies appropriate technical and organisational measures to ensure a level of security commensurate with the risk, in accordance with Article 32 of the GDPR, including, among others:
- Pseudonymisation and encryption of personal data.
- Ensuring the confidentiality, integrity, availability and resilience of the systems.
- Ability to restore access to data in the event of incidents.
- Periodic evaluation of the effectiveness of the security measures applied.
9. Confidentiality and duty of secrecy
BUCEO SUR undertakes to respect the confidentiality of personal data and to comply with the professional duty of secrecy during the term of the contractual relationship and after its termination. It also guarantees that its staff complies with the legal obligations regarding data protection.
10. Blocked retention of data
BUCEO SUR may retain personal data duly blocked when legal liabilities could arise or when there is a legal obligation to retain it.