1.1. Data Controller and purpose of processing
The processing of your personal data that you provide through the data protection channel (“DPC”) will be carried out by the Agbar Foundation (“Agbar Foundation”) with registered office at carretera de Sant Joan Despí, 1, 08940 Cornellà de Llobregat as data controller for the purpose of handling communications, queries and requests by data subjects to exercise the rights conferred on data subjects by the law relating to the protection of personal data.
1.2. Legal basis
The legal basis for the processing of your personal data is compliance with Agbar Foundation’s legal obligations, specifically to enable data subjects to exercise their rights under Article 12 of the General Data Protection Regulation and Article 12 of the Spanish Data Protection and Safeguard of Digital Rights, Law 3/2018 of 5 December.
1.3 Recipients of personal data
The Agbar Foundation will only disclose personal data to third parties when required to comply with legal obligations.
1.4 Security Measures
The Agba Foundation processes personal data in an absolutely confidential manner. Consequently, it has adopted technical and organisational measures that are sufficient to ensure the security of personal data and to prevent their destruction, loss, unauthorised access and unauthorised alteration. In determining those measures, account has been taken of matters such as the scope, the context and the purpose of processing, the state of the technology and the risks that exist.
1.5 International transfer of personal data
The Agbar Foundation has contracted for the provision of certain services with the Microsoft Corporation which is based in the United States of America (USA). Any international transfer of personal data to the USA will be lawful because adequate steps have been taken to protect personal data through adopting contractual provisions of the type adopted by decision of the European Commission and corresponding adaptations to the specific service, without prejudice to the eventual adoption of additional measures proposed by the European Data Protection Committee in accordance with the principle of proactive responsibility.
1.6 Periods for retention of personal data
Personal data will be processed by the Agbar Foundation for so long as necessary to manage and resolve a communication received through DPC. When that time has expired, the Agbar Foundation will retain blocked personal data for so long as legal liabilities could arise (three years). When those liabilities have expired, personal data will be irrecoverably deleted.
1.7 Rights of data subjects
Dispone de los siguientes derechos en materia de protección de datos:
|
Right |
What is it? |
|
Access |
To be told which of your personal data we hold. |
|
Rectification |
To rectify any of your personal data that we hold that are inaccurate or incomplete. |
|
Objection |
To request that we do not process your personal data for certain specific purposes. |
|
Erasure |
To request us to delete your personal data. |
|
Restriction of processing |
To request us to restrict the processing of your personal data in certain circumstances. |
|
To make a complaint to the competent authority |
To make a complaint to the competent authority for the safeguarding of your rights the Spanish Data Protection Agency through the website www.aepd.es. |
Those rights may be exercised by application to the Agbar Foundation either by email to the email address dpofundacioagbar@agbar.es or by post to the address carretera de Sant Joan Despí, 1, 08940 Cornellà de Llobregat under subject “Data Protection”. Your request should contain a copy of your National Identity Document or an equivalent identity document and the minimum information required by relevant law. If a request does not comply with the stated requirements, the Agbar Foundation may require it to be amended. The exercise of those rights is free, but a fee may be charged when requests are baseless, excessive or repetitive.
