Who is the data controller?
Denominación: Baixa House
For what purposes do we process your personal data?
In accordance with EU Regulation 679/2016 (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights, we inform you that the personal data you provide to us, as well as those generated during the course of our relationship with you, are processed for the following purposes:
- To handle the requests you submit to us.
- To provide you with information about Baixa House products, including—where you have consented—sending marketing communications by email or any other equivalent electronic means of communication (such as SMS) you have provided.
- To enable your participation in prize draws and/or promotional offers.
- If you send us a résumé/CV, to assess your candidacy in recruitment processes.
- To send communications by any means you have provided, related to the activities carried out by the entity and which may be of interest to you.
- To respond to queries, complaints and suggestions, and to carry out all types of communication actions.
- For the entity’s accounting, tax and administrative management.
- For entering into a sales contract, delivering products, or performing services purchased through the website.
How long will we keep your data?
The personal data provided will be kept unless the data subject—or their lawful representative—requests their deletion and such deletion is appropriate, and for as long as they are necessary— including the need to retain them for the applicable limitation periods—or relevant for the purpose for which they were collected or recorded.
Data retention will be conditioned by Baixa House’s legal obligation to retain them. Once those periods have elapsed, the data will be destroyed or erased, and deletion will be performed in such a way that the information contained on the media cannot be recovered.
Lawful basis
The legal basis for processing your data is the consent given by the data subject. This is obtained expressly and unequivocally by completing and, where applicable, submitting the paper or electronic documents and forms in which your data are collected. All of the entity’s documents used to collect data for the various purposes include information clauses in accordance with data protection regulations, and consent is expressly given by the data subject’s signature or by submitting the forms available on the website.
Processing is also lawful where it is necessary for the performance of a contract, or the provision of a service offered to data subjects in which they are a party, or for the application—at their request—of pre-contractual measures (Art. 6.1.a and 6.1.b GDPR).
Baixa House is also entitled to process your data to comply with its legal obligations and to pursue legitimate interests, provided that such interests are not overridden by the interests or fundamental rights of the data subjects.
Whatever the lawful basis, consent may be withdrawn at any time.
Who will your data be disclosed to?
Your data will not be disclosed to any entity without your consent, except for disclosures provided for by law; in this regard, your express consent will be requested for the disclosure of your data to any other entity.
As a consequence of managing the authorised purposes, your data may be communicated to entities or individuals directly related to Baixa House and the services it provides. Likewise, your personal information will be available to public administrations and to judges and courts, in order to address potential liabilities arising from processing, provided such disclosures are supported by law.
Your data may also be disclosed to companies that provide us with advisory, IT maintenance, marketing, training or auditing services. These entities have access only to the personal information necessary to carry out such services, and they are required by a data processing agreement to maintain confidentiality, not to use the information for other purposes, and to adopt measures that ensure its integrity and availability.
No international data transfers are envisaged outside the European Union or to entities that do not meet the data protection standards established by EU Regulation 679/2016.
What is the source of your data?
The personal data processed by Baixa House are provided by the data subject, or obtained from publicly accessible sources.
What categories of data does Baixa House process?
Baixa House will process the data you provide, which may fall into the following categories:
- Identification and contact details
- Academic and professional data
- Employment details
- Economic, financial and insurance data
- Commercial information
What are your rights?
Any person has the right to obtain confirmation as to whether or not Baixa House processes personal data concerning them.
Data subjects have the right to access their personal data and obtain a copy of the personal data undergoing processing, to update them, and to request the rectification of inaccurate data or, where appropriate, to request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. Baixa House will cease processing the data, unless there are compelling legitimate grounds, or for the exercise or defence of possible claims.
Also in certain circumstances, as provided in Article 18 GDPR, data subjects may request the restriction of the processing of their data, in which case Baixa House will process them—apart from storage—only with the data subject’s consent, or for the formulation, exercise or defence of claims, or for the protection of the rights of another natural or legal person, or for important reasons of public interest of the Union or of a particular Member State.
Where applicable, as a consequence of exercising the right to erasure or to object to the processing of personal data in the online environment, data subjects have the right to be forgotten, in accordance with the case law of the Court of Justice of the EU.
Under the right to data portability, data subjects have the right to receive the personal data concerning them, in a structured, commonly used and machine-readable format, and to transmit them to another controller.
Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, except for the exceptions provided in Article 22(1) GDPR.
The data subject has the right to the erasure of their data due to the disappearance of the purpose that motivated their processing or collection, due to withdrawal of consent where consent is the lawful basis, or for any of the other grounds contained in Article 17 GDPR. Erasure will be carried out by high-level deletion of data stored on automated media and by the physical destruction of non-automated media.
How can rights be exercised?
By sending a written request, always accompanied by a copy of your National ID (DNI) or other document that proves the identity of the data subject, to the addresses indicated in the heading.
How can you lodge a complaint?
If you believe your rights have not been properly addressed, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos).
- Telephone: 901 100 099 91.266.35.17
- Postal address: C/ Jorge Juan,6 Madrid.