INFORMATION ON THE USE OF PERSONAL DATA
(Art. 13 of EU Regulation 2016/679)
In accordance with Article 13 of the EU Regulation 2016/679 (hereinafter referred to as GDPR) on the protection of personal data, freedivinglanzarote.com informs you that the personal data collected, with reference to the contractual relations established or to simple requests for information, will be processed in compliance with the above-mentioned legislation.
In relation to the above treatments, Free Diving Lanzarote also provides the following information:
PERSONAL DATA COLLECTED
Personal data collected, , upon your free and express consent by contacting the contact details on the site, are exclusively related to:
– Identification data necessary to fulfil the services you have requested such as providing an invoice, carrying out an inspection or requesting specialist services. Data such as name, surname, address, telephone, fax, e-mail etc.
– Fiscal data if required by law in order to provide the requested services such as tax code, VAT number.
OWNER AND PERSON RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA (13.1 a, b)
The person responsible for the processing of personal data is Guida Mara, whom the interested party may contact at any time to exercise the rights referred to in Article 13.2 letters b, c, d., using the telephone and email address indicated in the footer of the site or in the “contacts” section of the menu.
PURPOSES AND METHODS OF PERSONAL DATA PROCESSING (13.1 c)
The purposes of the processing of personal data are as follows:
- to deal with all requests for services or enquiries received;
- fulfilment of legal obligations related to the contractual relationship;
- organisational management of the contractual relationship;
- communications concerning the contractual relationship;
- if explicitly requested, inclusion in a contact list for future updates and communications.
Personal data will be processed in paper, computerised and telematic form as necessary and entered into the relevant databases that can only be accessed by the Data Controller and any authorised persons. With regard to data processed in electronic form, it is emphasised that all appropriate security measures have been taken to protect the rights, freedoms and legitimate interests of the data subject as per Article 22.3 of the GDPR.
POSSIBLE ADDRESSES OF PERSONAL DATA (13.1 e, f)
In relation to the purposes indicated in points 1, 2 and 3 of the previous paragraph, the data may be communicated to the following subjects or categories of subjects indicated below:
- Recognised firms of accountants relating to the business support profession when the communication is required by law, or is in the interest of the subject (natural or legal person);
- Recognised solicitors’ firms related to the profession of business assistance when the communication is required by law, regularly assigned to this form of processing in full compliance with the measures in force, or when the communication is in the interest of the subject.
The data owner also states that he does not intend to transfer the data to a third country outside the EU or to an international organisation outside the EU.
PERIOD OF RETENTION OF PERSONAL DATA (13.2 a)
At the end of the performance, provision of the service or response, personal data will be retained solely for historical or statistical purposes, in accordance with the law, regulations, EU legislation and codes of ethics and good conduct subscribed to pursuant to Article 40 of the GDPR, for a period as per applicable law (usually 10 years), or, if not subject to any law, for a period not exceeding five years. Beyond that period, personal data will be kept anonymously, or will be destroyed.
RIGHTS OF THE PERSONS CONCERNED (13.2 b)
In relation to the aforementioned processing operations, the data subject has the right to request access to and rectification or erasure of his/her personal data or restriction of the processing concerning him/her or to object to its processing, as well as the right to data portability.
RIGHT OF WITHDRAWAL OF CONSENT (13.2 c)
Where the processing is based on consent, the controller shall inform the data subject that he or she has the right to withdraw it at any time without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.
RIGHT TO COMPLAIN (13.2 d)
The data controller informs the data subject of his right to lodge a complaint with a supervisory authority, in which case he will have to ask for information using one of the systems indicated above to contact him.
MANDATORY OR OPTIONAL NATURE OF PROVIDING DATA (13.2 e)
The provision of data and its processing are mandatory in relation to the purposes relating to tax obligations; it follows that any refusal to provide data for such purposes may make it impossible for the data controller to continue the professional relationships and legal obligations. The provision of data and its processing is optional in other cases, without any consequences.
WHETHER THERE IS AN AUTOMATED DECISION-MAKING PROCESS (13.2 f)
The owner informs the interested party that there is no automated decision-making process on this site, so in particular there is no profiling system.