Privacy Policy
Introduction
This Privacy Policy has been developed taking into account the provisions of Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), as well as Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, hereinafter, the GDPR.
The purpose of this Privacy Policy is to inform the owners of personal data, from whom information is being collected, about the specific aspects related to the processing of their data, including, among other things, the purposes of the processing, contact information for exercising their rights, data retention periods, and security measures.
Data Controller
In terms of data protection, ACTIVA NORTE GESTIÓN INMOBILIARIA, S.L., should be considered the Data Controller in relation to the processing operations identified in this policy, specifically in the Data Processing section.
Below are the identification details of the owner of this website:
Data Controller: ACTIVA NORTE GESTIÓN INMOBILIARIA, S.L.
Postal address: Carretera General Santander-Oviedo s/n, 39500 Cabezón de la Sal, Cantabria, Spain
Email address: INFO@ACTIVANORTE.COM
Data Processing
The personal data requested, if any, will consist solely of that which is strictly necessary to identify and address the request made by the data subject, hereinafter referred to as the interested party. Furthermore, personal data will be collected for specific, explicit, and legitimate purposes, and will not be further processed in a manner incompatible with those purposes.
The data collected from each interested party will be adequate, relevant, and not excessive in relation to the corresponding purposes for each case, and will be updated whenever necessary.
The data subject will be informed, prior to the collection of their data, of the general details in this policy so that they can give express, precise, and unequivocal consent for the processing of their data, in accordance with the following aspects.
Purposes of Processing
The explicit purposes for which each of the processing operations or forms on this website are carried out are as follows:
- Contact forms with any of our offices: In accordance with the current regulations on data protection, the personal data voluntarily provided by you through this web form will be processed by ACTIVA NORTE GESTIÓN INMOBILIARIA S.L. as the data controller, for the purpose of addressing your request, inquiry, complaint, or suggestion, without any data communications or transfers occurring, and will be retained for the time necessary to address your request. The legal basis will be the consent of the interested party. You can exercise your rights of access, rectification, restriction of processing, erasure, portability, and objection to the processing of your personal data by writing to BARRIO LA TEJA 216 LOCAL 3-A, 39530, PUENTE SAN MIGUEL (CANTABRIA) or by sending an email to info@activanorte.com. For more information, you can consult our privacy policy at www.activanorte.com
We inform you of your right to withdraw, at any time, the consent given to process your data, without affecting the lawfulness of processing based on consent before its withdrawal. Finally, we remind you of your right to file a complaint with the Spanish Data Protection Agency. - Request for any service through the forms (property valuation (customized or online) as well as the forms located in the property listings: In accordance with the current regulations on data protection, personal data voluntarily provided by the user through this form will be processed by ACTIVA NORTE GESTIÓN INMOBILIARIA S.L. as the data controller, for the purpose of registering you for the selected service and will be kept as long as necessary to provide you with the indicated service, regardless of the legally established periods. No data transfers or communications are foreseen except those necessary to provide you with the service, such as financial entities. The legal basis will be the consent of the interested party. You can exercise your rights of access, rectification, limitation of processing, deletion, portability and opposition to the processing of your personal data by writing to BARRIO LA TEJA 216 LOCAL 3-A, 39530, PUENTE SAN MIGUEL (CANTABRIA) or by sending an email to info@activanorte.com. For more information, you can consult our privacy policy at www.activanorte.com
We inform you of your right to withdraw, at any time, the consent given to process your data, without affecting the lawfulness of the processing based on the consent prior to its withdrawal. Finally, we remind you of your right to file a complaint with the Spanish Data Protection Agency.
However, the personal data of the interested party will be processed with the exclusive purpose of providing an effective response and attending to the requests made by the user, specified along with the option, service, form or data collection system that the owner uses.
Legitimation
As a general rule, prior to the processing of personal data, the Data Controller obtains express and unequivocal consent from the data subject, through the incorporation of informed consent clauses in the different information collection systems.
However, in case the consent of the interested party is not required, the legitimate basis of the processing on which the Data Controller relies is the existence of a specific law or regulation that authorizes or requires the processing of the data of the interested party.
Recipients
As a general rule, the Data Controller does not proceed with the transfer or communication of data to third parties, except those legally required. However, if necessary, such data transfers or communications are informed to the interested party through informed consent clauses contained in the different means of collecting personal data.
Origin
As a general rule, personal data is always collected directly from the interested party. However, in certain exceptions, the data may be collected through third parties, entities or services different from the interested party. In this sense, this information will be conveyed to the interested party through the informed consent clauses contained in the different means of collecting information and within a reasonable period, once the data has been obtained, and at the latest within one month.
Retention periods
The information collected from the interested party will be kept as long as necessary to fulfill the purpose for which the personal data was collected, so that once the purpose is fulfilled, the data will be canceled. This cancellation will result in the blocking of the data, keeping it only available to Public Administrations, Judges and Courts, to address possible responsibilities arising from the processing, during the prescription period of these, after which it will be destroyed.
For informational purposes, below are the legal data retention periods in relation to different matters:
DOCUMENT Labor documentation or related to social security
PERIOD 4 years
LEGAL REF. Article 21 of Royal Legislative Decree 5/2000, of August 4, which approves the revised text of the Law on Infractions and Sanctions in the Social Order
DOCUMENT Accounting and tax documentation for commercial purposes
PERIOD 6 years
LEGAL REF. Art. 30 Commercial Code
DOCUMENT Accounting and tax documentation for tax purposes
PERIOD 4 years
LEGAL REF. Articles 66 to 70 General Tax Law
DOCUMENT Access control to buildings
PERIOD 1 month
LEGAL REF. Instruction 1/1996 of the AEPD
DOCUMENT Video surveillance
PERIOD 1 month
LEGAL REF. Instruction 1/2006 of the AEPD. Organic Law 4/1997
DOCUMENT Resumes of applicants and candidates
DEADLINE Until the completion of the initial selection process for those who do not pass the process. For resumes that have been added to the job pool, a maximum of 2 years if they have not been updated since submission.
Navigation Data
Regarding the navigation data that may be processed through the website, in case data subject to regulations are collected, it is recommended to consult the Cookie Policy published on our website.
Rights of Data Subjects
The data protection regulations grant a series of rights to the interested parties or data subjects, users of the website or users of the social network profiles of the Data Controller.
These rights that assist interested persons are as follows:
- Right of access: right to obtain information about whether your own data is being processed, the purpose of the processing being carried out, the categories of data being processed, the recipients or categories of recipients, the retention period, and the origin of said data.
- Right of rectification: right to obtain the rectification of inaccurate or incomplete personal data.
- Right of erasure: right to obtain the erasure of data in the following cases: When the data has been obtained by virtue of an information society service based on the provisions of art. 8 para. 1 of the European Data Protection Regulation.
-
- When they must be deleted in compliance with a legal obligation.
- When the interested party opposes the processing.
- When the owner of these withdraws consent.
- When the data is no longer necessary for the purpose for which it was collected.
- Right to object: right to oppose a specific processing based on the consent of the interested party.
- Right to restriction: right to obtain the restriction of processing of data when any of the following circumstances occur:
- When the interested party challenges the accuracy of the personal data, for a period that allows the entity to verify its accuracy.
- When the processing is lawful and the interested party opposes the erasure of the data.
- When the entity no longer needs the data for the purposes for which it was collected, but the interested party needs it for the formulation, exercise, or defense of claims.
- When the interested party has objected to the processing while it is verified whether the legitimate reasons of the entity prevail over those of the interested party.
- Right to portability: right to obtain the data in a structured format, of common use and machine readable, and to transmit it to another data controller when:
- The processing is based on consent.
- The processing is carried out by automated means.
- Right to file a complaint with the competent supervisory authority.
Interested parties may exercise the indicated rights by contacting the Data Controller, through a written request, sent to the following address: info@activanorte.com with the subject line indicating the right they wish to exercise.
In this regard, the Data Controller will attend to your request as soon as possible, taking into account the deadlines provided for in the data protection regulations.
Safety
The security measures adopted by the Data Controller are those required, in accordance with the provisions of Article 32 of the GDPR. In this sense, the Data Controller, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing, as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons, has established appropriate technical and organizational measures to ensure a level of security appropriate to the existing risk.
In any case, the Data Controller has implemented sufficient mechanisms to:
- Ensure permanent confidentiality, integrity, availability and resilience of processing systems and services.
- Restore the availability and access to personal data quickly, in case of a physical or technical incident.
- Regularly verify, evaluate and assess the effectiveness of technical and organizational measures implemented to ensure the security of the processing.
- Pseudonymize and encrypt personal data, where appropriate.
