Carantia Privacy Policy

DATA PROTECTION POLICY

In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter the “General Data Protection Regulation” or “GDPR”) and the Organic Law 3/2018, of December 5, on the Protección de Datos Personales y garantía de los derechos digitales (Protection of Personal Data and Guarantee of Digital Rights) (hereinafter “LOPDGDD”), we provide you with this Privacy Policy:

 

Data Controller: CARANTIA TRES S.L. INSURANCE BROKERAGE

Administrative Authorization: Insurance Brokerage authorized by DGSFP [General Directorate of Insurance and Pension Funds with the administrative key], with the administrative authorization key J-1858

Tax ID: B-82.388.349

Address: C/ Hermosilla, 28 – first floor 28001 - Madrid (Madrid)

Phone 91 360 0579

Email rgpd@sabseggroup.com

In accordance with Article 13 GDPR and Article 11 of the LOPDGDD, we inform you of the following:

  •  The Data Controller is committed to the protection of the information it manages, not only for the due compliance with the regulations that govern us, but also for the confidentiality of the personal data entrusted to us.
  • In this regard, we care about our users and their privacy by complying with the applicable regulations on data protection. To this end, we provide you with information regarding the processing of personal data that we carry out, with the aim that, at all times, you can know how we treat your data and the rights that you have as the data subject. 

WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA FOR?

 Depending on the category of the data subject, in CARANTIA TRES S.L. INSURANCE BROKERAGE we process the data you provide us for the following purposes:

Categories of data subjects Purposes

Contacts and potential clients

Manage the potential commercial and/or professional relationship, manage contact data. Attend to, process and adequately manage the queries raised, provide offers of our services and/or products that may be of interest to you.

Clients

Manage the commercial and/or professional relationship, maintain accounting, administrative, and payment management, as well as tax obligations. Attend to, process and adequately manage the queries raised and the information requested, provide offers of our services and/or products that may be of interest to you.

Suppliers

Manage the professional and/or commercial relationship, accounting, administrative, and payment management, as well as tax obligations.

Applicants

Manage your data in the personnel selection process

Web users

Manage the analysis of your browsing data

WHAT IS THE LEGITIMACY WITH WHICH WE PROCESS YOUR DATA?

 The legal basis that legitimizes the processing of your personal data is:

Potential clients

- Art. 6.1.b GDPR: application, at the request of the data subject, of pre-contractual measures (budgets, service offers…).

- Art. 6.1.f GDPR: Legitimate interest (information requested, responding to inquiries raised…).

- Art. 6.1.a GDPR: consent of the data subject (sending commercial communications).

Clients

- 6.1.a GDPR: consent of the data subject

- Art. 6.1.b GDPR: execution of a contract in which the data subject is a party

Suppliers Art. 6.1.b GDPR: execution of a contract in which the data subject is a party
Applicants

Art. 6.1.a GDPR: consent of the data subject

Web users

Art. 6.1.a GDPR: consent of the data subject

TO WHOM WILL YOUR DATA BE DISCLOSED?

 The communication of personal data is not foreseen, unless expressly informed.

 Certain data, by virtue of the contractual relationship you maintain with us or the current regulations, may be communicated to:

-        Banks and financial institutions for the collection of contracted services. 

-        Competent public administrations in the sector, when established by current regulations.

-        The companies that are part of Sabseg Group S.L., by virtue of Article 6 of the GDPR.

Through this website, international data transfers could occur as a result of the acceptance of cookies.

 Google LLC and Google Ireland Limited perform transfers to the United States based on user consent on accepting cookies. When the user accepts these cookies, they consent to the data that such cookies may collect being transferred to the U.S.

 If the user does not consent to this international data transfer to the United States, they must reject these cookies, in which case the functionalities or services offered with these cookies may not be provided or obtained.

 You can find out about the transfers to third countries that, where applicable, are made by third parties identified in the cookie policy in their respective policies.

PROFILE CREATION

 In compliance with Article 13.2.f) and 22 of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter, “GDPR”), we inform you that for the creation of profiles, automated decisions are made with legal effects for the user or that significantly affect them in a similar way.

HOW LONG WILL WE KEEP YOUR DATA?

 The data will be kept for the time necessary depending on the purpose for which they were provided or collected for the correct provision of the service, as well as to address any potential responsibilities that may arise or for compliance with any other legal requirement.

 
WHAT ARE YOUR RIGHTS?

In relation to your personal data, you have the following rights:

 -        Right to request access to personal data concerning the data subject.

-        Right to rectification or erasure.

-        Right to object.

-        Right to request the restriction of processing.

-        Right to data portability.

-        Right not to be subject to decisions based solely on automated data processing.

 Data subjects may exercise these rights before the Data Controller. To do so, they may write to the registered office of the controller at C/ Lluis Companys, 1-3 (25003 - Lleida, Lleida) or send an email to rgpd@sabseggroup.com

 Models, forms and more information available about your rights on the website of the Agencia Española de Protección de Datos, www.aepd.es   

RIGHT TO WITHDRAW YOUR CONSENT

 The data subject shall have the right to withdraw their consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

 

RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY

 If you believe your data has not been properly processed or your rights request has not been addressed, you may lodge a complaint with the Agencia Española de Protección de Datos: Calle Jorge Juan, n°6 (28001 – Madrid) www.aepd.es  

 If, in the execution of our privacy and data protection policy, we cause any damage, you may claim individually or collectively in the ordinary courts of your jurisdiction.

MODIFICATION OF THE PRIVACY POLICY

 The Data Controller reserves the right to modify this Privacy Policy to adapt to legislative changes, so we recommend reading it before each access and navigation through the website.

 In addition, we inform you that in order to protect the security of your personal data, all necessary technical and organizational measures have been adopted to safeguard their security.