DATA PROCESSING OF POTENTIAL CLIENTS

Data Controller Information: 

Identity: LGV Enterprise Solutions – NIF: B19759554  

Postal Address: Calle Ciega 11 3A 

Phone: 637557560

At LGV Enterprise Solutions, we process the information you provide to offer the requested service or send the required information. The provided data will be retained as long as you do not request the cessation of processing. Data will not be shared with third parties unless there is a legal obligation. You have the right to obtain information about whether LGV Enterprise Solutions is processing your personal data, and you can exercise your rights of access, rectification, deletion, portability, opposition, and limitation of processing before LGV Enterprise Solutions at Calle Ciega 11 3A or at the email address clientes@atomicamente.com, sufficiently identifying yourself in your request electronically or through a duly signed request. However, if the data controller has reasonable doubts regarding the identity of the person making the request, they may request additional information necessary to confirm identity. Additionally, especially if you believe you have not fully satisfied your rights, you may file a complaint with the national supervisory authority by contacting the Spanish Data Protection Agency, C/ Jorge Juan, 6 – 28001 Madrid.

 

GENERAL INFORMATION OF INTEREST

Article 5.1.f of the General Data Protection Regulation (GDPR) requires the establishment of appropriate security guarantees against unauthorized or unlawful processing, loss of personal data, destruction, or accidental damage. This implies the implementation of technical and organizational measures aimed at ensuring the integrity and confidentiality of personal data and the ability to demonstrate, as stated in Article 5.2, that these measures have been implemented ( proactive responsibility).

Furthermore, visible, accessible, and simple mechanisms for exercising rights should be established, and internal procedures must be defined to ensure effective handling of requests received.

 

EXERCISING RIGHTS

The data controller will inform all employees about the procedure for addressing the rights of data subjects, clearly defining the mechanisms through which rights can be exercised (electronic means, reference to the Data Protection Officer if applicable, postal address, etc.) and considering the following:

• Upon presenting their national identity document or passport, data subjects may exercise their rights of access, rectification, deletion, opposition, portability, and limitation of processing. Exercising these rights is free of charge.
• The data controller must respond to data subjects without undue delay and in a concise, transparent, intelligible manner, using clear and simple language, and retain proof of compliance with the obligation to respond to requests for the exercise of rights. 
• If the request is made electronically, information will be provided through these means whenever possible, unless the data subject requests otherwise.
• Requests must be responded to within 1 month of receipt, which may be extended by an additional two months considering the complexity or number of requests, but in such cases, the data subject must be informed of the extension within one month of receiving the request, stating the reasons for the delay.

 

RIGHT OF ACCESS: Under the right of access, Under the right of access, data subjects will be provided with a copy of their personal data along with the purpose for which it was collected, the identity of the data recipients, the planned retention periods or the criteria used to determine them, the existence of the right to request rectification or deletion of personal data, as well as the limitation or opposition to processing, the right to lodge a complaint with the Spanish Data Protection Agency, and if the data has not been obtained from the data subject, any available information about its origin. The right to obtain a copy of the data cannot negatively affect the rights and freedoms of other data subjects.

• Form for exercising the right of access.

 

RIGHT OF RECTIFICATION Under the right of rectification, inaccurate or incomplete data concerning the data subjects will be modified according to the purposes of processing. The data subject must indicate in the request which data is being referred to and the correction to be made, providing supporting documentation for the inaccuracy or incompleteness of the data being processed when necessary. If the data has been communicated by the controller to other controllers, they must notify them of the rectification unless it is impossible or requires a disproportionate effort, providing the data subject with information about such recipients if requested.

• Form for exercising the right of rectification.

 

RIGHT OF DELETION Under the right of deletion, data concerning the data subjects will be deleted when they express their opposition to processing and there is no legal basis preventing it, if they are no longer necessary for the purposes for which they were collected, if consent is withdrawn and there is no other legal basis legitimizing the processing, or if it is unlawful. If the deletion arises from the exercise of the data subject’s right to object to processing for marketing purposes, the identifying data of the data subject may be retained to prevent future processing. If the data has been communicated by the controller to other controllers, they must notify them of the deletion unless it is impossible or requires a disproportionate effort, providing the data subject with information about such recipients if requested.

• Form for exercising the right of deletion.

 

RIGHT OF OPPOSITION Under the right of opposition, when data subjects express their opposition to the processing of their personal data before the controller, the controller will cease processing unless a legal obligation prevents it. When processing is based on a task carried out in the public interest or legitimate interests of the controller, upon a request to exercise the right of opposition, the controller will stop processing the data unless compelling legitimate grounds for the processing override the interests, rights, and freedoms of the data subject or are necessary for the formulation, exercise, or defense of claims. If the data subject opposes processing for direct marketing purposes, personal data will cease to be processed for these purposes.

• Form for exercising the right of opposition.

 

RIGHT OF PORTABILITY Under the right of portability, if processing is carried out by automated means and is based on consent or carried out within the framework of a contract, data subjects may request to receive a copy of their personal data in a structured, commonly used, and machine-readable format. They also have the right to request that their data be transmitted directly to a new controller, whose identity must be communicated, when technically feasible.

• Form for exercising the right of data portability.

 

RIGHT TO LIMIT PROCESSING Under the right to limit processing, data subjects may request the suspension of processing their data to contest its accuracy while the controller performs necessary verifications, or if processing is based on the legitimate interest of the controller or compliance with a public interest task, while verifying whether these grounds prevail over the interests, rights, and freedoms of the data subject. The data subject may also request the retention of data if they believe the processing is unlawful and, instead of deletion, seek limitation of processing, or if they no longer need the data for the purposes for which they were collected but require it for the formulation, exercise, or defense of claims. The circumstance that the processing of the data subject’s data is limited must be clearly noted in the controller’s systems. If the data has been communicated by the controller to other controllers, they must notify them of the limitation of processing unless it is impossible or requires a disproportionate effort, providing the data subject with information about such recipients if requested. 

• Form for exercising the right to limit processing.

 

If the request of the data subject is not addressed, the data controller will inform them without undue delay and no later than one month from the receipt of the request, of the reasons for not acting and the possibility of filing a complaint with the Spanish Data Protection Agency and taking legal action.