● +34 925 150 544 info@instaladoresrme.com
/
Request a quote →
Home/Privacy policy

Privacy policy

3.4. Privacy Policy

3.4.1. Introduction

INSTALADORES RME SL must ensure that personal data of the data subject are processed in accordance with the principles relating to processing:

  • Processed lawfully, fairly and in a transparent manner in relation to the data subject ("lawfulness, fairness and transparency").
  • Collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes ("purpose limitation").
  • Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed ("data minimisation").
  • Accurate and, where necessary, kept up to date, with every reasonable step taken to ensure that inaccurate data are erased or rectified ("accuracy").
  • Kept in a form which permits identification for no longer than is necessary for the purposes of the processing ("storage limitation").
  • Processed in a manner that ensures appropriate security by applying appropriate technical or organisational measures ("integrity and confidentiality").

INSTALADORES RME SL shall be responsible for and be able to demonstrate compliance with the above ("accountability").

Lawfulness of processing

Processing shall be lawful only if and to the extent that at least one of the following applies:

  • the data subject has given consent to the processing of their personal data for one or more specific purposes;
  • processing is necessary for the performance of a contract to which the data subject is party;
  • processing is necessary for compliance with a legal obligation to which the controller is subject;
  • processing is necessary to protect the vital interests of the data subject or of another natural person;
  • processing is necessary for the performance of a task carried out in the public interest;
  • processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

Where consent is given in the context of a written declaration which also concerns other matters, the request for consent shall be presented clearly distinguishable from the other matters, in an intelligible and easily accessible form, using clear and plain language.

The data subject shall have the right to withdraw consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Information to the data subject

INSTALADORES RME SL must include in the forms used for the collection of personal data the information necessary to comply with the duty to inform set out in Articles 13 and 14 of the GDPR.

When personal data are obtained directly from the data subject, INSTALADORES RME SL must provide: the identity and contact details of the controller; the purposes of the processing and the legal basis; the recipients of the data; the retention period; and information about the data subject's rights of access, rectification, erasure, restriction, portability and objection.

When personal data have not been obtained from the data subject, INSTALADORES RME SL shall inform them within a reasonable period, but at the latest within one month, or at the time of the first communication, or before the data are disclosed to another recipient.