Who is the data controller?
- Organisation: BISCAY ECO AGGREGATES S.L.
- TAX ID NO.: B44955789
- Company Address: Edificio Energy Intelligence Center – EIC Serantes Bidea,, 2 48500 Abanto Zierbena.
- E-mail: info@b-ecoaggregates.com
For what purposes do we process your personal data?
Pursuant to the provisions of EU Regulation 679/2016 and the Spanish Personal Data Protection and Digital Rights Assurance Act of 5 December 2018 (Ley Orgánica 3/2018), please note that any personal data you provide and data generated during the relationship with you are processed for the following purposes:
- To handle your requests.
- To provide you with information on the services of BISCAY ECO AGGREGATES, for which you consent to the sending of communications by e-mail or any other equivalent means of electronic communication (such as SMSs) to the address/number you have provided.
- Responding to queries, complaints and suggestions, and conducting all kinds of communication actions.
How long do we store your data for?
Any personal data provided shall be held for as long as the data subject or any person acting as his or her legal representative does not request that they be deleted, and for as long as they are required —including storage during applicable or relevant prescription periods— for the purpose for which they were collected or recorded.
Storage of the data shall be conditional on BISCAY ECO AGGREGATES’ legal obligation to conserve them. Upon conclusion of said periods, the data shall be destroyed or erased, and the deletion, elimination or destruction shall be carried out in such a way that the information contained in the media shall not be recoverable.
Legal basis
The legal basis for the processing of data is the consent given by the data subject. This is obtained explicitly and unequivocally by the completion and —where applicable— submission by the data subject of the paper or electronic documents and forms in which their details are collected. In accordance with the provisions of the data protection regulations, all of the organisation’s documents used to collect data for different uses contain information clauses, and consent must be given explicitly by means of the data subject’s signature or by their submission of the forms provided on the website.
Processing is also legitimate if it is required for the performance of a contract, or the provision of a service to the data subjects, to which they are party, or for application of pre-contractual measures at their request (GDPR Art. 6.1.a and b).
BISCAY ECO AGGREGATES is also legitimated by fulfilment of the legal obligations to which it is subject and for the satisfaction of legitimate interests, provided that the fundamental rights or interests of the data subjects do not take precedence thereover.
Whatever the legal basis, consent may be withdrawn at any time.
What other parties will we transfer your personal data to?
Your data will not be passed on to any entity without your consent, except for the transfers provided for by law. In this regard, your express consent will be requested for your data to be transferred to any other entity.
Arising out of management of the authorised purposes, your data may be communicated to entities or persons directly related to BISCAY ECO AGGREGATES and the services provided thereby. Likewise, your personal information will be at the disposal of government authorities, judges and courts, for matters related to possible liabilities arising from the processing thereof, always provided these transfers are protected by law.
No international transfers of data outside the European Union or to entities that do not comply with the data protection standards established in EU Regulation 679/2016 are foreseen.
What is the source of your data?
The personal data processed by BISCAY ECO AGGREGATES are provided by the data subject through our contact form.
What categories of data does BISCAY ECO AGGREGATES process?
BISCAY ECO AGGREGATES will process the data you provide us with, which may belong to any of the following categories:
- Contact information.
What rights do you have?
Any person has the right to obtain confirmation as to whether or not BISCAY ECO AGGREGATES processes personal data concerning them.
Data subjects have the right to access their personal data and to obtain a copy of the personal data processed, to update it and to request rectification of inaccurate data or, where appropriate, to request that it be deleted when, amongst other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances and for reasons related to their particular situation, data subjects may oppose processing of their data. BISCAY ECO AGGREGATES will stop processing the data, except for legitimate purposes or for the exercise or defence of possible claims.
Also in certain circumstances, provided for in GDPR Article 18, data subjects may request restriction of processing of their data, in which case BISCAY ECO AGGREGATES will process the data, with the exception of their storage, with the consent of the data subject or for the formulation, exercise or defence of claims, or for the protection of the rights of another natural or legal person or for reasons of public interest of the Union or of a specific Member State.
As a consequence of application of the right to erasure or objection to the processing of personal data in the online environment, data subjects may exercise their right to be forgotten, in accordance with ¡case law¡ of the Court of Justice of the European Union.
Under the right to portability, data subjects have the right to receive the personal data concerning them in a structured, commonly used and machine-readable format and to transfer that data to another controller.
Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, subject to the exceptions provided for in GDPR Article 22(1).
Data subjects have the right to obtain from the controller erasure of their data, due to the cessation of the purpose for which the data were processed or collected, due to withdrawal of consent when said consent forms the sole legal ground for the processing, or for any of the other reasons set out in GDPR Article 17. Erasure shall be carried out by high-level deletion of data contained on automated media and physical destruction of non-automated media.
How can I exercise my rights?
In writing, enclosing a copy of an identity card or other document accrediting the identity of the data subject, to be sent to the addresses indicated above.
What avenues of complaint are available?
If you feel that your rights have not been properly addressed, you have the right to lodge a complaint with the Spanish Data Protection Agency. The agency’s contact details are as follows: Telephone numbers: +34 901 100 099 / +34 912 663 517. Postal address: C/ Jorge Juan, 6 Madrid.
