Privacy Policy

PRIVACY POLICY

Basic personal data protection information:
Data controller Cetaqua Centro Tecnológico del Agua, Fundación Privada (hereinafter, CETAQUA)
Main purposes ·       To manage requests, queries or complaints you send through the form set up for such purposes.
Additional purposes ·       Only if pre-authorized by you, we will use your data for promotional purposes to send commercial communications related to products and services offered by CETAQUA, Fundación Centro Gallego de Investigaciones del Agua, Fundación Privada and Centro Andaluz de Investigaciones del Agua, Fundación Privada as well as to send you information on events, webinars, conferences and other dissemination activities organized by CETAQUA and the aforementioned foundations.
Legal basis ·       The legal basis of the main purpose is consent.

·       The legal basis of the additional purpose is consent granted, as applicable, by the data subject.

Recipients ·       Your personal data may be communicated to third parties to comply with legal obligations.

·       CETAQUA contracts data storage services from Microsoft Ireland, which subcontracts Microsoft Corporation, located in the USA. For this reason, your data may be transferred to the USA under the scope of Privacy Shield and subject to a decision by the Spanish Data Protection Agency regarding the lawfulness under certain conditions of transfers to said entity.

Data subjects’ rights You have the right to access, rectify and erase your data as well as exercise other rights as explained in the additional information on personal data protection.
Additional information You may find additional information on how your personal data are processed in “Additional information on personal data protection”

 

ADDITIONAL INFORMATION ON PERSONAL DATA PROTECTION

Who is the data controller responsible for your personal data?

The processing of the personal data collected via this website and any collected as a result of the management of your requests, queries or complaints shall be the responsibility of CETAQUA Centro tecnológico del Agua, Fundación Privada (hereinafter, “CETAQUA”), with a registered address at Carretera d’Esplugues 75, Cornellà de Llobregat 08940 (Barcelona) and assigned tax identification number G-64386626. If you have any questions about how your personal information is processed, you may contact the CETAQUA Data Protection Officer via the following means of contact:

What is the purpose of processing your personal data?  How long are they processed?

The personal data collected will be processed for the following main purpose:

  • To manage requests, queries or complaints you send via the website for the purposes of internal processing and, as applicable, to respond to you.

Your personal data will be processed for the main purposes as long as necessary to manage the request, query or complaint and will be processed throughout the contractual relationship if related to a contract you have signed with the company.

Likewise, if you grant consent by ticking the corresponding boxes, your personal data will be processed for the following additional purposes:

  • To send commercial communications related to Fundación Centro Gallego de Investigaciones del Agua, Fundación Privada and Centro Andaluz de Investigaciones del Agua, Fundación Privada activities as well as to send you information on events, webinars, conferences and other dissemination activities organized by CETAQUA and the aforementioned foundations.

Your personal data will be processed for the additional purposes until you ask us to stop doing so. Of course, you may at any time ask that we stop processing your data for the additional purposes. To do so, simply send us a request as indicated in the section of this document entitled “What are your rights?”.

In any case, your personal data will be blocked and saved when the indicated periods end throughout the period during which any liabilities may derive in relation to the performance of the contract or any other purpose. When such liabilities expire, your personal data will be definitively deleted.

What is the legal basis for processing your data?

The legal basis for processing your personal data for the main purposes is consent.

The legal basis for processing your personal data for the additional purposes is the consent you grant, as applicable, by ticking the corresponding boxes.

What security measures have been implemented to protect your personal data?

Your personal data will be processed under absolute confidentiality. Likewise, the proper technical and organizational measures have been implemented to guarantee their security and to prevent their destruction, loss, illegal access or illegal alteration. Criteria were taken into account when determining these measures such as the scope, context and purposes of processing, the state of technology and the existing risks.

Do any other entities have access to your personal data to help CETAQUA with any of its tasks?

CETAQUA relies on several providers who assist it with the performance of different tasks relating to the processing of your personal data.

Moreover, CETAQUA contracts the services of Microsoft Ireland Operations Limited to store different types of information in Microsoft Azure possibly including your personal data. Microsoft Ireland Operations Limited may subcontract some of these tasks with Microsoft Corporation, with a registered address in the USA. However, any international data transfer to Microsoft Corporation is legal as sufficient guarantees have been established to protect your personal data. To this end, Microsoft Corporation (i) operates under Privacy Shield and (ii) the Spanish Data Protection Agency believes transfers to said entity are legal given certain conditions.

Are your personal data assigned to third parties?

Your personal data will be communicated to third parties if necessary to comply with any legal obligations.

What are your rights?

You have the following data protection rights:

Right What is it?
Right of access To ask what personal data we have on you.
Right of rectification To modify the personal data we have on you when they are inaccurate.
Right to object To ask that we stop processing your personal data for some specific purposes.
Right of deletion To ask that we delete your personal data.
Right of restriction To ask that we restrict the processing of your personal data.
Right of portability To ask that we deliver the information we have on you in a computerized format.
The right to submit a claim with the competent supervisory authority To submit a claim with the competent authority to defend your rights via the website www.agpd.es.

You may exercise these rights by sending a communication to CETAQUA either by email at the address info@cetaqua.com or regular mail to the address Carretera d’Esplugues 75, Cornellà de Llobregat 08940, with the reference “Protección de datos” (Data protection). The request must include a copy of your national identity document or other equivalent form of identification as well as the minimum content established by applicable regulations. If the request does not meet these requirements, CETAQUA may ask for correction. Exercising these rights is free of cost; however, a fee may be charged when the requests are ungrounded, excessive or repetitive.