The purpose of the following statement from, “Aplicaciones en Informática Avanzada, SL” (hereinafter “AIA”), is to inform its web users, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (General Data Protection Regulation) and other applicable regulations of personal data protection policy, that they have the right to expressly, freely and voluntarily decide to provide personal data requested by AIA when they ask for information of its various computer services and other science and artificial intelligence projects.
Unless otherwise specifically stated, a web or print form must be filled in with true, accurate, complete, and up to date data. Failure to provide data required, “AIA” has the right to, depending on the case, not to proceed with the user´s registration, or deny the service requested. Users/interested parties data provided will be processed in compliance with the information detailed below.
Personal data processing.
Identity of the responsible entity: “Aplicaciones en Informática Avanzada, SL”, domiciled in Av. de la Torre Blanca, 57, Edif. Creapolis, 08172, Sant Cugat del Vallès, Barcelona, Spain, with NIF number: B58569120, registered in the Mercantile Registry of Madrid, file: 37577, Page: 215, Section: 8, Registration Sheet: 669779, Registration: 3. Email contact info@aia.es.
Data Protection Officer: For any personal data related matters, such as queries, requests, suggestions, users can contact the Data Protection Officer designated by “AIA” by the following email info@aia.es, or by mail to “Aplicaciones en Informática Avanzada, SL”, Av. de la Torre Blanca, 57, Creapolis Building, 08172 Sant Cugat del Vallès, Barcelona, Spain.
Personal data collection purposes:
- Information requests response.
- business contacts maintenance.
- Services management, administration, information, and improvement.
- Products and services marketing communications.
Personal data shall be preserved during the commercial relationship, when the interested party does not request their deletion or data are necessary for treatment purposes. Data deletion will not proceed in case there is a legal provision that requires data retention in which case data will be blocked, and will be available only for public Administrations, Judges and Courts, for investigation of possible responsibilities arising from data treatment during the limitation period.
Currently, no automated decisions based on personal data are made, including profiles creation. In the event that such automated decisions were to be made in the future, prior consent will be required.
Legitimation of data processing:
Consent of any personal data processing must be explicitly and freely given. You will be informed in advance of any legal requirement so that you can provide a prior consent.
Consent may be withdrawn at any time as detailed in this document below.
Recipients and data transfers:
Data cannot be transferred to unauthorized third parties unless strictly necessary in compliance with the purposes or legal obligation.
Likewise, data cannot be transferred to countries outside the European Union unless it is strictly necessary for compliance with the purposes and previously and expressly authorized.
Rights of the interested parties:
All individuals who are subject of personal data processing can exercise at any time the rights listed below, either by mail to “Applications in Advanced Computing, S.L.”, Av. de la Torre Blanca, 57, Creapolis Building, 08172 Sant Cugat del Vallès, Barcelona, Spain; or by email to info@aia.es. The request must include name, surnames and the documentation proving the identity of the interested party or legal representative, as well as document proving the representation, an application request, notification address applicant´s signature date and documents accrediting the request. If the request does not meet the requirements, its correction will be required.
Rights of the interested parties:
The interested parties have the right of access, rectification, limitation, portability, opposition, and deletion.
Right of access:
The interested party will have the right to obtain confirmation from the controller of whether personal data is processed and, in such a case, the right of access to personal data and the following information:
a) the treatment purpose
b) personal data category
c) recipients or recipients category of personal data, in particular of third parties or international organizations
d) if possible, the estimated period of personal data retention or, otherwise the deadline criteria used.
e) the right to request rectification of personal data to the responsible person, or suppression or limitation of personal data processing related to the interested party, or oppose to such treatment
f) the right to file a claim with a supervisory authority
g) when personal data has not been obtained from the interested party, any information available about its origin
h) in case of automated decisions, including profiles creation, as referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the criteria applied shall be given as well as foreseen consequences of such treatment.
When personal data is transferred to a third country or to an international organization, the interested party shall have the right to be informed of the appropriate guarantees as under article 46 relating to the transfer. The controller will provide a copy of the personal data that is being processed. The responsible party may receive a reasonable fee based on the administrative costs incurred for any other copy requested by the interested party. When the interested party submits the application by electronic means, and unless the latter requests that it be provided otherwise, the information will be provided in an electronic format of common use.
Right of rectification:
The interested party shall have the right to obtain, without undue delay, the rectification of inaccurate personal data. For treatment purposes, the interested party shall have the right to complete incomplete personal data, including by means of an additional declaration.
Right of suppression:
The interested party shall have the right to obtain without undue delay from the data controller the deletion of its personal data, which shall be obliged to remove without undue delay when any of the following circumstances occurs: a) personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed b) the interested party withdraws the consent on which the treatment is based in accordance with article 6, paragraph 1, letter a), or article 9, paragraph 2, letter a), and this is not based on another legal basis c) the interested party opposes the treatment under Article 21, paragraph 1, and no other legitimate grounds for the treatment prevail, or the interested party opposes the treatment in accordance with Article 21, paragraph 2 d) personal data have been treated unlawfully e) the personal data must be deleted in compliance with a legal obligation established in the law of the Union or of the Member States that applies to the data controller f) personal data have been obtained in connection with the services of the information society mentioned in Article 8, paragraph 1.
When the responsible party has made public the personal data of which the interested party has exercised his right of withdrawal, the responsible person shall adopt, considering the available technology and the cost of its application, the reasonable measures to communicate to the third parties processing this information of the data deletion request, as well as any link, copy or replica of that data.
This right will be limited by other rights such as the right to freedom of speech and information, in compliance with any legal obligation, or when it is deemed to be in the public interest.
Right of limitation of treatment:
The interested party shall have the right to obtain from the controller the limitation of the data processing when any of the following conditions is met: a) the interested party challenges the accuracy of the personal data, during a period that allows the responsible to verify the accuracy of the same b) the treatment is unlawful and the interested party opposes the deletion of personal data and requests instead the limitation of its use.
c) the data processing officer no longer needs the personal data for purposes of the treatment, but the interested party needs them for claims requests, formulation or defense.
d) the interested party has opposed to the treatment in accordance with Article 21, paragraph 1, while the legitimate reasons of the data processing officer are checked to verify if they prevail over those of the interested party.
When the processing of personal data has been limited in accordance with section 1, such data may only be subject to processing, except for its conservation, with the consent of the interested party or for claim requests or defense, or for the protection of the rights of another natural or legal person or for important public interest reasons of the Union or of a specific Member State.
Any interested party that has obtained the limitation of the treatment according to section 1 will be informed by the responsible person before the lifting of such limitation.
Right of opposition:
The interested party shall always have the right to object at any time, for personal reasons, personal data subject to treatment based on the provisions of article 6, paragraph 1, letters e) or of), including the profiling on the basis of these provisions.
The data controller will stop personal data processing, unless he or she demonstrates compelling legitimate reasons for the treatment that prevails over the interests, rights and freedoms of the interested party, or for the formulation, exercise or defense of claims.
When the processing of personal data is aimed at direct marketing, the interested party shall have the right to object at all times to personal data processing, including the creation of profiles to the extent that it is related to said marketing.
When the interested party opposes data processing for direct marketing purposes, personal data will no longer be processed for said purposes.
When personal data are processed for scientific or historical research purposes or for statistical purposes in accordance with article 89, section 1, the interested party shall have the right, for reasons related to his / her particular situation, to oppose to personal data processing, unless it is strictly necessary to comply with it for reasons of public interest.
Right of data portability:
The interested party shall have the right to receive personal data provided to a data controller, in a structured format of common use and mechanical reading, and to transmit these data to another data processing controller without being prevented by the previous data controller. when:
a) Personal data processing is based on the consent according to article 6, paragraph 1, letter a), or article 9, paragraph 2, letter a), or in a contract according to article 6, paragraph 1, letter b) , Y
b) the data processing is carried out by automated means.
2. When exercising its right of data portability in accordance with section 1, the interested party shall have the right to have personal data transmitted directly from data controller to data controller when it is technically possible.
The exercise of the right mentioned in section 1 of this article shall be without prejudice to article 17. Such right shall not apply to the treatment necessary for the fulfillment of a mission carried out in the public interest or in the exercise of public powers conferred upon the responsible of the treatment.
The controller will communicate any rectification or deletion of personal data or limitation of the processing carried out in accordance with article 16, article 17, paragraph 1, and article 18 to each of the recipients to whom the personal data have been communicated, unless it is impossible or requires a disproportionate effort. The person in charge will inform the interested party about said addressees, if so requested.
Revocation of consent: The interested party, who at the time would have granted consent to process their personal data, may also withdraw it with equal ease. The withdrawal of consent will not lead to the illegality of the treatment previously carried out.
The interested party shall have the right to file a claim with the competent Control Authority.
In case personal data will be treated later for different purposes, the person in charge will inform the interested party of such end.
Security measures: The data processing Manager states that he has followed the necessary technical and organizational steps to guarantee the security of the data and to avoid its alteration, loss, treatment or unauthorized access, taking into account the state of the technology, the nature of the stored data and the risks to which they are exposed, whether they come from human action or from physical or natural environment.
The web site www.aia.es contains links to other Web pages that may be of interest to the interested party. “AIA” does not assume any responsibility for these links, and no guarantee can be given in compliance with appropriate privacy policies, so that the interested party accesses the content of the aforementioned web pages under the conditions of use set out in the same and under their exclusive responsibility.
For further questions, queries, or recommendations about our Data Privacy Policy, please contact us by email at the following address: info@aia.es
“Applications in Advanced Computing, S.L.”
All rights reserved.
