1. Introduction
The purpose of this Policy is to provide information, in accordance with applicable regulations, about the processing that will be carried out with respect to the personal data collected through the website https://www.gapd.es/ (hereinafter, “gapd.es”).
Accessing and using gapd.es and/or its subdomains confers on you the status of user (hereinafter, “User(s)”) and implies knowledge and acceptance of all the conditions included in this Privacy Policy.
We are transparent about what we do with your personal data so that you understand the implications of the uses we make of it and the rights available to you in relation to your data. To that end, all the information is permanently available to you in this Privacy Policy, which you may consult whenever you see fit.
2. Who is the data controller?
3. How do we collect personal data?
Users are hereby informed that, as a result of using certain features of gapd.es, they must provide certain personal data, which will be incorporated into files for which APD is the data controller. Specifically, gapd.es will record the following information:
Please remember that, when we ask you to fill in your personal data to give you access to any feature or service of the Website, we will mark some fields as mandatory, since this is information we need in order to provide you with the service or give you access to the feature in question. Please note that, if you decide not to provide us with this data, you may not be able to complete your registration as a customer/user or to enjoy those services or features.
4. For what purpose do we process your data?
As a general rule, the information recorded through gapd.es that APD obtains from Users will be processed:
5. Is there any automated decision-making or profiling?
Please be advised that no automated decision-making, including profiling, takes place.
6. To which recipients will we disclose your data?
APD does not intend to disclose your personal data to any third party.
In order to fulfill the purposes set out in this Privacy Policy and to properly manage the service provided and the personal data of its customers/users, APD will rely on the collaboration of third-party service providers who may have access to your personal data and who will process such data in the name and on behalf of APD as a result of providing their services.
APD undertakes to enter into the corresponding data processing agreement with them, under which it will impose, among others, the following obligations: to apply appropriate technical and organizational measures; to process the personal data for the agreed purposes and solely in accordance with APD's documented instructions; and to delete or return the data to APD once the provision of the services has ended.
No international transfers are made.
7. What is the legal basis for the processing?
The legal basis for processing the data collected is:
8. How long will we retain your data?
The personal data collected will be retained by APD only for as long as necessary to address and manage each specific request submitted by the User.
However, once that period has elapsed, the data may be blocked and retained by APD in order to address any liabilities that may arise from the processing, and only for the limitation period of such liabilities. Once these periods have elapsed, the personal data will be deleted by APD.
9. What are your rights when you provide us with your data?
We are committed to respecting the confidentiality of your personal data and to guaranteeing you the exercise of your rights.
At APD, we have agreed that you may exercise them free of charge by sending an email to a single email address, dpd@gapd.es, simply stating the reason for your request and the right you wish to exercise. If we consider it necessary in order to identify you, we may ask you for a copy of a document proving your identity. The User may withdraw the consent given for the processing of their data at any time.
In particular, regardless of the purpose or legal basis under which we process your data, the User may, at any time, request confirmation from APD as to whether their personal data is being processed by our Company and, if so, access it. The User may also request the rectification of inaccurate data or, where applicable, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
Likewise, in certain circumstances, the User may request the restriction of the processing of their data, in which case we will retain it only for the exercise or defense of claims. The User may also object to the processing of their data in certain circumstances. APD will stop processing the data, except on compelling legitimate grounds or for the exercise or defense of possible claims. Finally, where applicable, the User may exercise the right to data portability in order to obtain the data in electronic format or to have it transmitted to another entity.
For these purposes, you may use the following channels, always enclosing a photocopy of your national ID card (DNI) or any other document that proves your identity:
Finally, you are hereby informed that you may file a complaint with the Spanish Data Protection Agency (AEPD), the competent supervisory authority in this matter, especially if you have not obtained satisfaction in the exercise of your rights, by writing to it at C/ Jorge Juan, número 6, 28001 – Madrid or through its website: https://www.aepd.es
10. Updates and changes to the Privacy Policy
APD reserves the right to make changes to this Privacy Policy; Users are therefore advised to visit it periodically. When significant changes are made to this Privacy Policy, they will be communicated to Users for their acceptance through notices on gapd.es or through any other procedure appropriate to the circumstances.