Privacy Policy
PRIVACY POLICY
In compliance with the provisions of the General Data Protection Regulation 2016/679 (GDPR) and the Spanish Organic Law 3/2018 on Data Protection and Digital Rights Guarantees (LOPDGDD), we hereby inform you:
DATA CONTROLLER
-
Identity: Jorge Rodríguez-Quintana Sández, with NIF 32834308Z, hereinafter referred to as the Data Controller.
-
Postal Address: Garcia Barbon 52, 2nd Floor, Left; 36201; VIGO – PONTEVEDRA (Spain)
-
Phone: +34 673 493 184
-
Email: info@rqpconsulting.com
PURPOSE OF DATA PROCESSING
The personal data you provide are processed for the purpose of handling and responding to contact requests, managing appointments, and/or addressing inquiries received via the contact channels provided on the website.
In accordance with the GDPR, a record of processing activities is maintained, detailing the processing activities carried out based on their purpose, and other circumstances required by the GDPR.
Personal data will not be used for any purposes other than those related to the services contracted or products acquired. No automated decisions will be made based on profiling.
PERSONAL DATA PROCESSED AND SOURCE
We process identifying personal data provided directly by the User through the contact form, email communications, or other functions available on the website.
Using the contact sections, completing forms, and using other functionalities of the portal is voluntary. However, some fields in the forms or functions may be required to properly manage your request. Refusing to provide such information may prevent the Data Controller from responding appropriately.
Users guarantee that the data provided are truthful, accurate, and complete. Any data found to be inaccurate, incomplete, or no longer necessary will be canceled, deleted, or blocked as per applicable law.
If personal data of third parties are provided, the User guarantees that they have been informed of this Privacy Policy and have consented to the data sharing. The User is responsible for the accuracy and updates of the data provided.
PRINCIPLES APPLICABLE TO DATA PROCESSING
Personal data processing will be subject to the following principles in accordance with Article 5 of the GDPR and Articles 4 and subsequent of LOPDGDD:
-
Lawfulness, Fairness, and Transparency: Consent will always be obtained with clear, transparent information.
-
Purpose Limitation: Data will only be collected for specified, legitimate purposes.
-
Data Minimization: Only the data strictly necessary for each purpose will be collected.
-
Accuracy: Data must be accurate and up to date.
-
Storage Limitation: Data will be kept only as long as necessary.
-
Integrity and Confidentiality: Data will be processed securely to ensure confidentiality.
-
Accountability: The Data Controller is responsible for compliance with all these principles.
DATA RETENTION PERIOD
Personal data will be kept as long as the user is registered for the service, the business relationship continues, or the user does not request deletion. Data may be retained to meet legal obligations or for the establishment, exercise, or defense of legal claims.
If the user withdraws consent or exercises rights of opposition or deletion, the data will be blocked and retained only to comply with legal obligations.
LEGAL BASIS FOR DATA PROCESSING
The legal bases for data processing include:
-
The consent given by the User by accepting this Policy and the relevant checkbox.
-
The User’s request for services under a contractual or pre-contractual relationship.
-
Legal obligations applicable to the Data Controller, including tax obligations.
Withdrawal of consent does not affect the provision of the service or execution of contracts.
DATA PROTECTION FOR MINORS
According to the GDPR and LOPDGDD, only individuals aged 14 or older can lawfully consent to personal data processing. Minors under 14 must provide parental or guardian consent.
LINKS POLICY
This website may include links to third-party websites, such as social networks where the Data Controller has a presence. These third-party sites are not reviewed or controlled by the Controller. No personal data is obtained from users via these platforms unless explicitly authorized.
The Controller is not responsible for the content or privacy practices of third-party websites. Users are advised to carefully review their privacy policies. If you wish to link to this website, prior written consent must be obtained from the Controller.
CONFIDENTIALITY AND SECURITY
The Controller commits to implementing the necessary technical and organizational measures to ensure an appropriate level of security based on the risk, in order to prevent unauthorized access, alteration, loss, or destruction of personal data.
Personal data will be treated as confidential and all parties with access will be bound by legal or contractual confidentiality obligations.
DATA DISCLOSURE AND RECIPIENTS
Your personal data may be disclosed in cases provided by law, to public administrations or service providers (e.g., web hosting companies), under data processing agreements that ensure data protection.
USER RIGHTS
The User has the following rights under the GDPR and LOPDGDD:
-
Right of Access: To know whether your data are being processed and to obtain detailed information.
-
Right of Rectification: To correct inaccurate or incomplete data.
-
Right of Erasure ("Right to be forgotten"): To delete data when no longer necessary or when consent is withdrawn.
-
Right to Restriction of Processing: To limit data processing under certain conditions.
-
Right to Data Portability: To receive data in a structured, commonly used format and transfer them to another controller.
-
Right to Object: To object to data processing based on legitimate interests or direct marketing.
-
Right not to be subject to automated decision-making: To avoid decisions based solely on automated processing, including profiling.
To exercise these rights, send a written request with a copy of your ID to:
-
Address: Garcia Barbon 52, 2nd Floor, Left; 36201; VIGO – PONTEVEDRA (Spain)
-
Email: info@rqpconsulting.com
You may also file a complaint with the Spanish Data Protection Agency (AEPD): www.agpd.es