Who is the data controller for the processing of your data?
SPEC, S.A. (hereinafter “SPEC”)
Address: Calle Caballero, 81-83, 08014 (Barcelona)
Telephone No.: 932478800
Company Tax Number (N.I.F.): A-08537300
Why do we process your personal data?
We process the information provided to us by interested parties in order to manage the contact requests sent via the form on our website.
The personal data that are part of our database are processed in order to manage our services and products.
Also to manage electronic communications related to the products and services offered by SPEC.
How long will we keep your data for?
The personal data provided via the contact form shall be kept until we reply to the question asked, and no longer than six (6) months from receipt of the question.
The personal data that are part of our database and have a contractual relationship will be kept no longer than five (5) years from the last invoice issued.
The personal data provided in the subscription to electronic communications regarding SPEC products and services shall be kept until you revoke your consent.
You may revoke your consent at any time.
What is the legitimation for processing your data?
The legal basis for the processing of your data is the request for information by the interested party via the contact form, a current contractual relationship and the subscription to electronic communications regarding SPEC products and services.
Who is your data sent to?
Your personal data shall not be assigned to third parties, except when it is legally required.
What are your rights when you provide us with your data?
Any person is entitled to obtain confirmation concerning whether at SPEC we are processing data related to them or not.
Interested persons are entitled to access their personal data and request the rectification of inaccurate data, or, if they wish, request deletion when, among other reasons, the data are no longer required for the purposes for which they were collected.
In certain circumstances, interested parties may request a limitation concerning the processing of their data, in which case we shall only store the data required to make or defend ourselves against claims.
Also, in certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data.
SPEC, S.A. shall cease to process the data, except for legitimate mandatory reasons, or in order to make or defend itself against possible claims.
How have we obtained your data?
The personal data that we process at SPEC come from requests made by interested parties.
The data categories processed are:
▪ Identification data, and
▪ Email addresses
Specially protected data are not processed.
Rights of interested parties
1. Rights of access: The right to obtain confirmation from the data controller about whether it is processing data related to them and, if so, the right of access to their personal data. Also:
a. The purposes of the processing;
b. The personal data categories involved;
c. The recipients or the types of recipients that have received or will receive the personal data, in particular recipients in third-party countries or international organisations;
d. If possible, the planned storage period for the personal data or, if this is not possible, the criteria used to determine this period;
e. The right to ask the data controller to rectify or delete personal data or to limit the processing of personal data related to the interested party, or to object to said processing;
f.The right to submit a claim to a supervisory authority;
g. Any question regarding the origin, when the personal data have not been obtained from the interested party;
h. The existence of automated decisions, including the preparation of profiles, the logic applied and the importance and predicted consequences of said processing.
2. Right of rectification: Derecho a obtener del responsable del tratamiento la rectificación de los datos personales inexactos que le conciernan. Teniendo en cuenta los fines del tratamiento, el interesado tendrá derecho a que se completen los datos personales que sean incompletos, inclusive mediante una declaración adicional.
3. Right of deletion: The right to obtain the deletion of the personal data related to them from the data controller, which must delete the personal data without undue delay in any of the following circumstances:
a. If the personal data are no longer required for the purposes for which they were collected or otherwise processed;
b. If the interested party withdraws the consent on which the processing is based;
c. If the interested party objects to the processing;
d. If the personal data have been processed illegally;
e. If the personal data must be deleted to comply with a legal obligation established in European Law or the law of member states that is applied to the data controller;
f. If the personal data have been obtained in relation to the offer of information society services directly to a child.
However, a series of exceptions are regulated in which this law is not applicable. For example, when the right to freedom of expression and information must prevail.
4. Right of opposition: The right to object to personal data related to them being processed.
The data controller shall cease to process the personal data, unless it can demonstrate legitimate mandatory reasons for the processing that prevail over the interests, rights and liberties of the interested party, or for the preparation of, exercise of and defence against claims.
5. Right to limitation of the processing: The right to obtain a limitation in the data processing from the data controller when one of the following conditions is fulfilled:
a. If the interested party challenges the accuracy of the personal data within a period that allows the data controller to check their accuracy;
b. If the processing is illegal and the interested party objects to the deletion of the personal data and instead requests the limitation of their use;
c. If the data controller no longer needs the personal data for the purposes of processing, but the interested party needs them for the preparation of, exercise of or defence against claims; and
d. If the interested party has objected to the processing while it is being verified whether the legitimate reasons of the data controller prevail over those of the interested party.