By means of this notice, “ACENTO PUBLIC AFFAIRS, S.L.” (hereinafter “ACENTO”), informs users of the website www.acento.es, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (General Data Protection Regulation) and with reference to Organic Law 7/2021, of 26 May, on the protection of personal data processed for the purposes of the prevention, detection, investigation and prosecution of criminal offences and the execution of criminal penalties, as well as all other applicable regulations, with regard to the personal data protection policy with the purpose that they decide expressly, freely and voluntarily, to provide “ACENTO” with the personal data that are requested of them motivated by the request for information or for the contracting of the various products offered within the scope of the provision of communication agency services.
Unless specifically stated otherwise, it is considered necessary to complete all the data required in the form or similar form in a true, accurate, complete and updated manner. Otherwise, “ACENTO” may, depending on the case, not proceed with the user’s registration, or deny the specific service requested. All data provided by the user/interested party shall be processed in accordance with the characteristics detailed below.
Information concerning the processing of personal data
Identification of the responsible party. “ACENTO PUBLIC AFFAIRS, S.L., with registered office at Paseo de la Castellana, 20, Planta 6º, 28046, Madrid, with Tax Identification Number: 88276266, registered in the Companies Register of Madrid in volume 38567, folio 171, page M-685879. Contact e-mail [email protected].
Purpose of processing. All data provided will be processed for the following purposes:
– To respond to the requests made by the interested party.
– Maintenance of the relationship that may be established.
– Management, administration, information, provision and improvement of the services that you decide to contract.
– Commercial communications related to our products and services.
The personal data provided shall be kept for as long as the business relationship is maintained, the interested party does not request their deletion or they are necessary for the purposes of the processing. The data shall not be destroyed when there is a legal provision that requires its conservation, in which case the data shall be blocked, and shall only be kept at the disposal of the Public Administrations, Judges and Courts, for the attention of possible liabilities arising from the processing, during the period of prescription of these.
At present, no automated decisions, including profiling, are made on the basis of your personal data. In the event that such automated decisions are to be made in the future, prior consent will be sought.
Legitimation of the processing. All processing carried out on your personal data has been previously and expressly consented to by you. You are informed beforehand of all the details required by law so that you can give your informed consent.
You may revoke this consent at any time as detailed below.
Recipients, assignments and transfers of data. Your data will not be transferred unless it is strictly necessary for the fulfilment of the aforementioned purposes or legal obligation.
Likewise, your data will not be transferred to countries outside the European Union unless it is indispensable for the fulfilment of the purposes and you give us prior express authorisation.
Obligation to make the information available to the data subject. Under the terms included in Article 21 of Organic Law 7/2021 of 26 May on the protection of personal data processed for the purposes of the prevention, detection, investigation and prosecution of criminal offences and the execution of criminal penalties, which addresses the obligation of the data controller to make available to the data subject at least the following information:
(a) the identification of the controller and his or her contact details.
(b) the contact details of the data protection officer, if any.
(c) the purposes of the processing for which the personal data are intended.
(d) the right to lodge a complaint with the competent data protection authority and the contact details of the competent data protection authority.
(e) the right to request from the controller access to personal data relating to the data subject and their rectification, erasure or restriction of processing.
In addition to the information referred to above, the following additional information shall be provided to the data subject by the controller on a case-by-case basis to enable the exercise of his or her rights:
a) The legal basis for the processing.
(b) the period for which the personal data will be kept or, where this is not possible, the criteria used to determine that period.
(c) the categories of recipients of personal data, where appropriate, in particular those established in States which are not members of the European Union or international organisations.
(d) any other necessary information, in particular where personal data have been collected without the data subject’s knowledge.
Rights of interested parties. Similarly, in any case, you may also exercise the rights detailed below at any time, by post to “ACENTO”, Paseo de la Castellana, 20, Planta 6º, 28046, Madrid; by e-mail to [email protected]. The request must contain the name, surname(s) and documentation accrediting the identity of the interested party or their legal representative, as well as a document accrediting representation, the request specifying the request, address for notification purposes, date and signature of the applicant and documents accrediting the request being made. If the application does not meet the specified requirements, it will be required to be corrected.
The rights of data subjects are: access, rectification, limitation, portability, objection and erasure; and their definition, in accordance with the General Data Protection Regulation, is:
Right of access (Art. 15 of the General Data Regulation):
1.- The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data relating to him or her are being processed and, if so, the right of access to the personal data and to the following information:
(a) the purposes of the processing
(b) the categories of personal data being processed
(c) the recipients or categories of recipients to whom the personal data were or will be disclosed, in particular recipients in third parties or international organisations
(d) if possible, the intended period for which the personal data will be kept or, if not possible, the criteria used to determine this period (e) the existence of the right to request from the controller the rectification or erasure of personal data or the restriction of the processing of personal data relating to the data subject, (
f) the right to lodge a complaint with a supervisory authority (
g) where the personal data have not been obtained from the data subject, any available information concerning their origin
(h) the existence of automated decisions, including profiling, as referred to in Article 22(1) and (4) and, at least in such cases, meaningful information about the logic involved and the significance and expected consequences of such processing for the data subject.
2. Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 concerning the transfer.
3. The controller shall provide a copy of the personal data undergoing processing. The controller may charge for any further copies requested by the data subject a reasonable fee based on the administrative costs. Where the data subject makes the request by electronic means, and unless the data subject requests otherwise, the information shall be provided in a commonly used electronic format.
Right of rectification (Art. 16 of the General Data Regulation):
The data subject shall have the right to obtain without undue delay from the controller the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data supplemented, including by means of an additional statement.
Right of erasure (Art. 17 of the General Data Regulation):
1. The data subject shall have the right to obtain without undue delay from the controller the erasure of personal data relating to him or her, and the controller shall be obliged to erase personal data without undue delay in any of the following circumstances:
(a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed
(b) the data subject withdraws the consent on which the processing is based pursuant to Article 6(1)(a) or Article 9(2)(a) and the consent is not based on another legal ground
(c) the data subject objects to the processing pursuant to Article 21(1) and no other legitimate grounds for the processing prevail, (
d) the personal data have been unlawfully processed
(e) the personal data must be erased in order to comply with a legal obligation under Union or Member State law applicable to the controller (
f) the personal data have been obtained in connection with the provision of information society services referred to in Article 8(1)
2. Where the controller has made public the personal data in respect of which the data subject has exercised his or her right of erasure, the controller shall, taking into account the technology available and the cost of its implementation, take reasonable steps to inform third parties who are processing such information of the request for erasure of the data, as well as of any link to such data or to any copy or replica thereof.
This right shall be limited by other rights such as the right to freedom of expression and information, by compliance with a legal obligation, or when there are reasons of public interest.
Right to restriction of processing (art. 18 of the General Data Regulation):
1.- The data subject shall have the right to obtain from the controller the restriction of processing where one of the following conditions is met:
(a) the data subject contests the accuracy of the personal data, for a period which allows the controller to verify the accuracy of the personal data
(b) the processing is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of their use
(c) the controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the establishment, exercise or defence of claims
(d) the data subject has objected to the processing pursuant to Article 21(1), pending verification of whether the legitimate grounds of the controller outweigh those of the data subject
2. Where the processing of personal data has been restricted pursuant to paragraph 1, such data may be processed, with the exception of their retention, only with the consent of the data subject or for the purposes of the formulation, exercise or defence of claims, or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a particular Member State.
Any data subject who has obtained the restriction of processing pursuant to paragraph 1 shall be informed by the controller prior to the lifting of the restriction.
Right to object (Art. 21 of the General Data Regulation):
1. The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data relating to him or her on the basis of Article 6(1)(e) or (f), including profiling on the basis of those provisions. The controller shall no longer process the personal data unless he or she establishes compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of claims.
2. Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to the processing of personal data concerning him or her, including profiling insofar as it is related to such marketing.
3.- Where the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for such purposes.
4. Where personal data are processed for scientific or historical research or statistical purposes in accordance with Article 89(1), the data subject shall have the right, on grounds relating to his or her particular situation, to object to the processing of personal data relating to him or her, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
Right to data portability (Art. 20 of the General Data Regulation):
1.- The data subject shall have the right to receive personal data relating to him or her which he or she has provided to a controller in a structured, commonly used and machine-readable form and to transmit them to another controller without being prevented from doing so by the controller to whom he or she has provided them, where (
a) the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b), and
(b) the processing is carried out by automated means.
When exercising his or her right to data portability in accordance with paragraph 1, the data subject shall have the right to have personal data transmitted directly from data controller to data controller where technically feasible.
The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. Such right shall not apply to processing which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Form for the exercise of rights RGPD/LOPDGDDD
Obligation of notification concerning rectification or erasure of personal data or restriction of processing. The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out pursuant to Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this is impossible or would involve a disproportionate effort. The controller shall inform the data subject of those recipients if the data subject so requests.
Revocation of consent. The data subject who has given consent to the processing of his or her personal data may also withdraw such consent with equal ease. Withdrawal of consent shall not entail the unlawfulness of the processing previously carried out.
The data subject shall have the right to lodge a complaint with the competent supervisory authority.
Where personal data are to be further processed for other purposes, the controller shall inform the data subject accordingly.
Security measures. The Data Controller declares that it has adopted the technical and organisational measures necessary to guarantee the security of the data and to avoid its alteration, loss, unauthorised processing or access, taking into account the state of the technology, the nature of the data stored and the risks to which they are exposed, whether from human action or from the physical or natural environment.
The www.acento.es website contains links to other websites that may be of interest to the interested party. “ACENTO assumes no responsibility for these links, and no guarantee can be given regarding compliance with appropriate privacy policies, and the interested party therefore accesses the content of the aforementioned websites under the conditions of use set out therein and under his or her sole responsibility.
If you have any questions, concerns or recommendations regarding our Privacy Policy, you may contact us by e-mail at the following address: [email protected].