CONTROLLER OF PERSONAL DATA
Company: Lexcrea S.L.P. (hereinafter referred to as “LEXCREA”)
Address: Carrer Dr. Pere i Pons 9-11, 8 – 4, 08034, Barcelona, España
We inform that this website, which is owned by LEXCREA (hereinafter, “the portal or website”), complies with the guidelines of current regulations on the protection of personal data, EU Regulation (EU) 2016/679 of 27 of April 2016 (GDPR) as well as LO 3/2018, of December 5, Protection of Personal Data and guarantee of digital rights, regulations on the protection of natural persons regarding the processing of personal data and free movement of these data (LOPDGDD).
PRINCIPLES FOR TREATMENT
In the treatment of personal data, we will apply the following principles that comply with the requirements of the regulations on the Protection of Personal Data:
- Principle of legality, loyalty, and transparency: we will require consent for the processing of your personal data for one or more specific purposes of which we will inform in advance with absolute transparency.
- Principle of data minimization: we will request only the data strictly necessary concerning the purposes for which it is necessary.
- Principle of limitation of the conservation period: the data will be kept no longer than necessary for the treatment, we will inform of the corresponding conservation period.
- Principle of integrity and confidentiality: the data will be treated in such a way that adequate security and confidentiality of personal data is guaranteed.
DATA REQUESTED AND PURPOSE OF TREATMENT
As a user, you are solely responsible for the veracity and correctness of the data that you send to us, exonerating us from any responsibility for them.
In this sense, we inform that the data that you provide us voluntarily are collected and processed for the following purposes:
Lexcrea will process the data of suppliers to proceed with the management and administration of the contracted products and / or services, preparation of the budget and monitoring communications between both parties, sending information by electronic means that relate to said request, sending communications commercial that refer to products or services similar to those that were contracted by the interested party, billing and declaration of the appropriate taxes and control and recovery procedures, sending commercial information or events by electronic means, provided that there is express authorization.
The legitimizing basis is the execution of a contract in which the interested party is a party or for the application at his request of pre-contractual measures 6.1.b) GDPR and the legitimate interest 6.1.f) GDPR.
Suppliers and partners
Lexcrea will process the data for the maintenance of the contractual relationship, carry out the corresponding billing and the corresponding notifications and communications. The data provided by the client or supplier as a result of the maintenance of this contractual relationship are extensible, not only to the data of the signatories of the contracts, proposals or , but to all the personal data that were necessary for the achievement of the contractual or pre-contractual relationship.
The legitimizing basis is the execution of a contract in which the interested party is a party or for the application at his request of pre-contractual measures, 6.1.b) GDPR.
Candidates and selection process
In the event that you provide your data to apply for a job at Lexcrea, we inform you that Lexcrea will manage your request and keep the data for the time provided for in the legislation.
The legitimizing basis is the consent of the attendees 6.1.a) GDPR
Webinars and Lexevents
In the event that you attend an event organized by Lexcrea or any Partner, you may provide your personal data, as well as your email.
The legitimizing basis is the consent of the attendees 6.1.a) GDPR
Marketing and commercial shipments
In the event that you subscribe to Lexcrea’s Newsletter and you receive information by email related to Lexcrea activities, we inform you that Lexcrea will use the data with to send information about news, blog entries, services and possible promotions, invite to events organized by Lexcrea or by other organizations with the participation of Lexcrea members, carry out analyzes and improvements in sending mailing, to improve our commercial strategy and, where appropriate, loyalty actions.
The legitimizing basis is the consent of the users 6.1.a) GDPR and 6.1.f) GDPR.
In the event that Lexcrea does not act as a Data Controller but as a Data Controller, your personal data will be processed in accordance with the Data Processing Agreement entered into between Lexcrea and the client.
By providing us your data, as a user you grant express and unequivocal consent, stating that you have been informed of the terms on the protection of personal data, accepting and consenting its use, so that we can proceed with the processing of the data provided, for the purposes mentioned. It also implies consent to the international transfer of data, exclusively since some of the providers or third parties that provide services necessary for the development of this website are located in other countries. consentimiento expreso e inequívoco, declarando haber sido informado de las condiciones sobre protección de datos de carácter personal, aceptando y consintiendo el tratamiento automatizado de los mismos, para que procedamos al tratamiento de los datos facilitados en pro de las finalidades mencionadas. También implica el consentimiento a la transferencia internacional de datos, debido exclusivamente a que alguno de los proveedores o terceros que proveen servicios necesarios para el desarrollo de esta web se encuentran ubicados en otros países.
Failure to provide the requested personal data and failure to accept this data protection policy (“checkbox” in the form) implies the impossibility of managing the services (purposes) mentioned above.
Express mention is made of minors under 14 years of age, concerning the processing of their personal data. Minors may not access this website without the consent of their parents or guardians. In this sense, LEXCREA is not responsible for the breach of this provision. menores de 14 años, en relación al tratamiento de sus datos personales. Los menores no podrán acceder al presente sitio web sin el consentimiento de sus padres o tutores. En este sentido, LEXCREA no se hace responsable frente al incumplimiento de esta previsión.
PERSONAL DATA OF THIRD PARTIES
At LEXCREA we only treat the data provided by the holders. If you provide us with third-party data, you must first inform and request their consent from said persons, or otherwise, you exempt us from any responsibility for the breach of this requirement. In the event that we process data that has been provided by third parties, this data will have been previously anonymized.
LEXCREA informs you that it will not transfer personal data to third parties, except by legal obligation. However, in the case of being transferred to a third party, prior information will be produced requesting your consent.
If the disclosure to interested third parties and their advisors in the context of any corporate operation of LEXCREA involves a data transfer outside of the European Economic Area, this international data transfer will be carried out applying the guarantees and safeguards necessary to preserve your privacy.
Some of the suppliers and providers have their servers located in foreign countries located outside of the European Economic Area (“Third Countries”). These providers have signed the confidentiality and data processing contracts required by the regulations for providers located in Third Countries, applying the guarantees and safeguards necessary to preserve your privacy. Such guarantees and safeguards consist of adequacy decisions of the European Commission, standard contractual clauses approved by the European Commission or other legal mechanisms allowed by GDPR.
LEXCREA guarantees in any case as a user the exercise of the rights of access, rectification, cancellation, information and opposition, limitation, and portability, in the terms established in the current legislation. Therefore, you can exercise your rights by sending an express request to the postal address indicated in the heading and/or by sending an email to the address firstname.lastname@example.org, indicating in the subject: PLARCO Rights, and attaching a photocopy of your ID. If you require it, we have forms at your disposal for the correct exercise of your rights. We proceed to detail what each of these rights consists of: email@example.com, indicando en el asunto: Derechos ARCO-POL, y adjuntando fotocopia de tu DNI.. Procedemos a detallarte en qué consisten cada uno de estos derechos:
- Right of access:: allows to know and obtain information about your personal data subjected to treatment.
- Right of rectification:: it allows correcting errors, modifying the data that turn out to be inaccurate or incomplete, and guaranteeing the certainty of the information being processed.
- Right of deletion:: allows you to request the deletion of the data being processed when they are no longer necessary for the execution or provision of the service.
- Right of opposition:: allows you to avoid that the processing of your personal data is not carried out, except for legitimate reasons or for the exercise or defense of possible claims, in which case we will keep them blocked during the corresponding period while the legal obligations persist.
- Limitation of treatment:: allows you to request the limitation of the treatment of your data, in which case it will only be kept for the exercise or defense of claims.
- Data portability:: allows you to request and send the data that concern you and that you have provided to another person in charge that you indicate to us (whenever it is technically possible).
- Right not to be subject to automated individual decisions (including profiling): right not to be subject to a decision based on automated processing that produces effects or significantly affects.: derecho a no ser objeto de una decisión basada en el tratamiento automatizado que produzca efectos o afecte significativamente.
In the event of acting as a representative of the owner of personal data, it will be necessary for you to prove said representation employing your ID or electronic signature.
In turn, as a user, you have the right to withdraw the consent given at any time. The withdrawal of consent will not affect the legality of the treatment carried out before the withdrawal of consent. You have additional information at the following link: https://www.aepd.es/es/derechos-y-deberes/conoce-tus-derechos
You also have the right to file a claim with the control authority if you consider that your rights may have been violated concerning the protection of your data before the Spanish Agency for Data Protection (AEPD), at street Jorge Juan, 6, 28001 -Madrid or through the electronic website of the AEPD: https://sedeagpd.gob.es/sede-electronica-web/.
Lexcrea conservará los datos proporcionados mientras se mantenga la relación contractual que motivó su tratamiento o durante los años necesarios para cumplir con las obligaciones legales, atender las responsabilidades que de la misma se pudieran derivar y mientras el destinatario no ejercite su derecho de supresión u oposición al tratamiento. Cuando ya no sea necesario para tal fin, se suprimirán con medidas de seguridad adecuadas para garantizar la seudonimización de los datos o destrucción total de los mismos. Si lo requieres, disponemos de una tabla con el período específico de duración del cada uno de los tratamientos realizados.
LEXCREA reserves the right to modify this policy to adapt it to new legislation or jurisprudence.