Privacy Policy

PRIVACY POLICY www.coastlawfirm.com

In accordance with the provisions of current legislation on data protection European Regulation 2016/679 (RGPD) and the Organic Law 3/2018 on the protection of personal data and guarantee of digital rights (LOPDGDD), we hereby inform you of the processing of your data for the following profiles:

  • Processing of data WEB USERS AND CONTACTS
  • Processing of CUSTOMER data
  • Processing of SUPPLIERS data
  • Processing of SOCIAL NETWORKS data
  • Processing of NEWSLETTERS data
  • Data processing CURRICULUM
  • Data processing BLOG

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

Coast Law Firm INTERNATIONAL LAWYERS XXXXX with CIF XXXXXXXXX and registered office in XXXXXXXXXXXXXXX, ALICANTE telephone XXXXXXXX email XXXXXXXXX

1. Processing of WEB USERS AND CONTACTS data

For what purpose will we process your personal data?

Your data will be used to respond to your requests for information, comments or suggestions, through the contact section or the e-mail address that appears on our website and to maintain communication with the interested party (contact form / e-mails sent to the e-mail addresses that appear on the website).

What is the legitimacy for the processing of your personal data?

Your consent which you give us by ticking the box I have read and accept this privacy policy in accordance with Article 6.1.a) of the GDPR.
Request for pre-contractual measures (request for specific information about a product or service) in accordance with Article 6.1. b) of the GDPR.

How long will we keep your personal data?

The data provided will be retained until you request us to delete it or revoke your consent to its processing, at which point it will be blocked exclusively for the purpose of retaining it for the purpose of meeting any liabilities arising from the processing of your personal data for a maximum of 3 years.

Will we pass on your personal data?

Your personal data will not be disclosed unless we are legally obliged to do so.

International data transfers

No international data transfers will be made.

2. Processing of CUSTOMER data

For what purpose will we process your personal data?

Your data will be used to manage the relationship as a customer of our company, as well as the economic management derived from this relationship.

What is the legitimacy for the processing of your personal data?

  • The communication and processing of your data is necessary for the contractual performance Article 6.1 b) of the RGPD
  • Compliance with legal obligations applicable to our activity arising from commercial and tax legislation. Article 6.1 (c) of the GDPR

How long will we keep your personal data?

The personal data you provide to us will be retained for as long as our contractual or business relationship continues. However, from the date of termination of our contractual or business relationship your data may be retained:

Four Years for tax purposes: accounting books and other obligatory record books according to the applicable tax regulations (IRPF, VAT, IS, etc.). Articles 66 to 70 of the General Tax Law. Six years for commercial purposes: tickets, invoices, contracts, bank documents, etc.). Art. 30 Commercial Code.

Will we transfer your personal data?

To public registers, tax authorities, other public administration bodies for the fulfilment of legal obligations, banks, savings banks and rural banks or other financial institutions for the management of collections and payments.

Your data will not be passed on to other third parties except by legal obligation.

International data transfers

No international data transfers will be made.

3. Processing of data SUPPLIERS

For what purpose will we process your personal data?

Your data will be used to manage the relationship as a supplier of our company, as well as the economic management derived from this relationship.

What is the legitimacy for the processing of your personal data?

  • The communication and processing of your data is necessary for the contractual performance Article 6.1 b) of the RGPD
  • Compliance with legal obligations applicable to our activity arising from commercial and tax legislation. Article 6.1 (c) of the GDPR

How long will we keep your personal data?

The personal data you provide to us will be retained for as long as our contractual or business relationship continues. However, from the date of termination of our contractual or business relationship your data may be retained:

Four Years for tax purposes: accounting books and other obligatory record books according to the applicable tax regulations (IRPF, VAT, IS, etc.). Articles 66 to 70 of the General Tax Law. Six years for commercial purposes: tickets, invoices, contracts, bank documents, etc.). Art. 30 Commercial Code.

Will we transfer your personal data?

To public registers, tax authorities, other public administration bodies for the fulfilment of legal obligations, banks, savings banks and rural banks or other financial institutions for the management of collections and payments.

Your data will not be passed on to other third parties except by legal obligation.

International data transfers

No international data transfers will be carried out.

4. Data processing SOCIAL NETWORKS

For what purposes will we process your personal data?

We use social networks to inform about our activities and interact with our followers. By becoming a follower of ours, you consent to the processing of the personal data available on your profile, exclusively for this purpose and only in the environment of each social network in accordance with their policies of use and privacy. Your personal data will be used for the purpose of managing the list of people who like our page. And thus be able to receive information directly related to the services we provide, events, activities and promotions of our organisation, always through the chosen social network and interact with us.

How long will we keep your personal data?

The data provided in the corresponding social network will remain accessible to us as long as you keep the “follow” or “like” button active and as soon as you want to stop following us, all you have to do is “click” on the “unfollow” or “no longer like” button.

What is the legitimacy for the processing of your personal data?

Communications via social networks are in any case subject to the consent of the interested party and are completely voluntary, being subject to the conditions established in the privacy and data protection policies of each social network.

Is there any obligation to provide such personal data?

There is no obligation to provide data beyond those necessary for registration on each social network.

What are the consequences of not doing so?

Impossibility of communication and follow-up through social networks.

How did I obtain your personal data?

The data obtained were not provided directly by you.

What are your rights when you provide me with your personal data?

Please note that we have access to the personal data that appears on your profile as a result of the mutual monitoring carried out on our social network accounts exclusively therefore the exercise of the rights over your personal data we understand that you should make them to the social network itself. I will respond to your requests within the framework and with the limitations derived from the operating rules established by each social network.

5. NEWSLETTER data processing

For what purpose will we process your personal data?

We will use your e-mail address to send you information about sector news, services, activities, promotions and offers. In the event that you have subscribed to the Newsletter or have accepted the sending of promotional information, we inform you that we monitor our campaigns and mailings by analysing the activity of the recipients of these (opening of the mails sent, clicking on the links contained in the mails, etc.).

What is the legitimacy for the processing of your personal data?

Processing carried out on the basis of the data subject’s consent Art. 6.1.a) of the GDPR.

How long will we keep your personal data?

The data provided will be kept until you request us to delete them or withdraw your consent to their processing, at which point they will be blocked for the sole purpose of retaining them for the purpose of meeting any liabilities arising from the processing of your personal data for a maximum of 3 years.

Will we pass on your personal data?

Your data will not be passed on to third parties except by legal obligation.

International data transfers

We use tools that are located in the USA to send our newsletters. Prior to contracting these tools, we will ensure that we have the “Standard Contractual Clauses” and “Data Processing Addendum” corresponding to their services.

HOW DID I OBTAIN YOUR PERSONAL DATA?

The data obtained were not provided directly by you.

6. Processing of CURRICULUM VITAE data

For what purpose do we process your personal data?

For the purpose of personnel selection and filling vacant positions in our company, as well as for inclusion in the employment exchange if you give us your consent.

What is the legal basis for the processing of your personal data?

The processing is necessary for the establishment of pre-contractual measures. Article 6.1.b of the Data Protection Regulation (GDPR)

If you wish us to store your CV for the purpose of future recruitment or to include you in our job vacancies, you must give us your consent in accordance with Article 6.1.a of the Data Protection Regulation (GDPR). You must tick the check box on the form where you give us your consent to retain your data.

How long will I keep your personal data?

Once the selection of the vacant position in our company has been completed, your CV will be destroyed, guaranteeing total respect for the confidentiality of your data both in the processing and in its subsequent destruction. Establishing the due security measures indicated in article 32 of the data protection regulation (RGPD).

If you give us your consent, your CV will be kept for a maximum period of 2 years. Once this period has elapsed, it will be destroyed, guaranteeing total respect for the confidentiality of your data both in the processing and in its subsequent destruction. Establishing the due security measures indicated in article 32 of the data protection regulation (RGPD).

In this sense, after the aforementioned period, and if you wish to continue participating in the selection processes developed by the company, we ask you to send us your CV again and we will proceed to ask you again for your consent for its conservation.

The interested party may at any time request the revocation of consent for its processing. Once the revocation of consent has been exercised, the data may be duly blocked until the expiry of the statute of limitations for liabilities arising from the processing of data for a maximum of 3 years.

How did I obtain your personal data?

The data obtained were not provided by you when you sent me your curriculum vitae.

To which recipients will your personal data be communicated?

Your data will not be passed on to any other third party unless legally obliged to do so.

Transfer of data to third countries

There will be no International Data Transfers to other countries.

7. Data processing BLOG

For what purpose do we process your personal data?

To comment news on our blog, the user must provide the data requested as it is necessary for the management of this. Your e-mail address will not be published. Your data will be used to send you an email with the comments made to the entry you have commented on and/or to notify you of new blog entries, if you choose this option.

What is the legitimacy for the processing of your personal data?

On the basis of the data subject’s consent Art. 6.1.a) GDPR

How long will I keep your personal data?

Your personal data will be kept for the duration of the relationship established or for as long as you revoke the consent given to us, and after the end of the relationship, they may be kept duly “blocked” on the basis of the statute of limitations for possible liabilities arising from the processing of your personal data for a maximum of 3 years.

How did I obtain your personal data?

The data obtained were not provided by you when you filled in the form.

To which recipients will your personal data be communicated?

Your data will not be passed on to any other third party unless legally obliged to do so.

Transfer of Data to Third Countries

There will be no International Data Transfers to other countries.

HOW DID I OBTAIN YOUR PERSONAL DATA?

The data obtained is not provided directly by you.

WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE ME WITH YOUR PERSONAL DATA?

Any data subject may request the exercise of the following rights:

  • Right of access: the data subject shall have the right to obtain confirmation as to whether or not personal data concerning him/her are being processed.
  • Right of rectification: The data subject shall have the right to obtain rectification of inaccurate or incomplete personal data concerning him or her.
  • Right of erasure: The data subject shall have the right to obtain the erasure of personal data concerning him or her where the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
  • Right of restriction: You may request the restriction of the processing of your personal data, in which case we will only retain them for the purpose of exercising or defending claims.
  • Right to data portability: Whereby you may request that your automated personal data be assigned or transferred to any other company you indicate to us in a structured, intelligible and automated format.
  • Right to withdraw consent: You will have the right to withdraw consent at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal.
  • Right to object: The data subject shall have the right to object to the processing of his or her data.

HOW CAN YOU EXERCISE THESE RIGHTS?

We provide you with the forms where you can exercise these rights if you request them. You can send us an e-mail to info@grupozz.es indicating the right you wish to exercise and we will send you the corresponding form.

The exercise of rights may be carried out by means of a communication addressed to the e-mail info@grupozz.es

WHO CAN EXERCISE THE RIGHTS?

The rights of the data subjects are very personal, therefore, they will be exercised by the owner of the data, duly accrediting his or her identity. They may also be exercised through legal representation by providing duly accredited representation of the third party.

WHAT IS OUR OBLIGATION WHEN EXERCISING ANY OF THE RIGHTS?

The data controller must reply to the request addressed to it in any case, regardless of whether or not personal data of the data subject or interested party are included in its processing.

In the event that the request does not meet the specified requirements, the data controller must request that these be rectified.

The data controller shall respond to requests within one month of receipt of the request. This period may be extended by a further two months if necessary, taking into account the complexity and number of requests. The controller shall inform the data subject of any such extension within one month of receipt of the request, stating the reasons for the delay.

RIGHT TO COMPLAIN TO THE SUPERVISORY AUTHORITY

You may request the protection of rights that have not been duly attended to from the Spanish Data Protection Agency. Either through the electronic headquarters of its website (www.agpd.es), or by writing to its postal address (C/ Jorge Juan, 6, 28001-Madrid).

OBLIGATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

Users, by ticking the corresponding boxes and entering data in the fields of the contact forms, or by sending an e-mail requesting information, expressly and freely and unequivocally accept that their data are necessary for the provider to deal with their request. The User guarantees that the personal data provided are truthful and is responsible for communicating any changes to them.

WHAT INFORMATION DO WE COLLECT?

In general, you can use the Website without providing any personal information.

There are channels on our website where you can contact us. When you request information from us, you guarantee the authenticity, accuracy and truthfulness of all the information you provide us with, undertaking to keep the personal information you provide us with up to date so that it corresponds, at all times, to your real situation. The User shall be solely responsible for any false or inaccurate statements and for any damages that they may cause.

WHAT MEASURES DO WE TAKE TO KEEP YOUR INFORMATION SECURE?

We take reasonable technical and physical measures to protect the information we collect through the Website.

CHANGES TO THIS PRIVACY NOTICE.

Coast Law Firm INTERNATIONAL LAWYERS reserves the right to modify its Data Protection Policy in accordance with applicable law from time to time. Any changes to this policy will be posted on the website.