Extensive Privacy Policy Statement
WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?
Company Name: NOVARTWEB AZPILICUETA RODRIGUEZ ANA MARIA AND LIZCANO ANGULO JOSE MANUEL SI
C.I.F./N.I.F.: E71508055
Registered Office: Arcadio María Larraona St. 1, 2ª Plant, 31008Pamplona(Navarre)
Phone: 747434545
E-mail address: digital@novartweb.com
Hereafter, the responsible entity will be referred to as NOVARTWEB
FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?
In accordance with Regulation (EU) 679/2016 and Organic Law 3/2018 of December 5th on personal data protection and digital rights guarantees, we inform you that we process the personal data you provide us, as well as those generated during our relationship, for the following purposes:
- To address the requests you submit to us
- Provide you with information about NOVARTWEB products, with your consent, through the sending of commercial communications via email or any other equivalent electronic communication means (such as SMS) that you have provided to us.
- Allow your participation in raffles and/or commercial promotions.
- Sending communications through any means you have provided, related to the activities developed by the entity and that may be of interest to you.
- Responding to inquiries, complaints, and suggestions, as well as carrying out various communication actions.
- The accounting, tax, and administrative management of the entity.
- The purchase and sale of the products offered on the website, enabling payment, delivery, and any other associated operations.
How long will we retain your data?
We will retain the personal data provided as long as the individual or their legal representative does not request its deletion, and as long as it is necessary or relevant for the purposes for which it was collected or recorded, including compliance with applicable retention periods.
The retention of data will be subject to the legal obligation that NOVARTWEB has to retain it. Once these periods have elapsed, we will destroy or delete the data, ensuring that the information on the media is not recoverable.
Legitimization
The legal basis for processing your data is the consent given by the data subject. This is obtained explicitly and unequivocally through the completion and, where applicable, submission of documents and forms, either on paper or electronically, where your data are collected. In all the entity's documents used for data collection for various purposes, there are information clauses in compliance with data protection regulations, and consent is expressly given through the signature by the data subject or by submitting the forms available on the website.
Legitimization also occurs when the processing is necessary for the performance of a contract, or the provision of a service offered to the data subjects, in which they are a party, or for the implementation of precontractual measures at their request (Article 6.1.a and b GDPR).
NOVARTWEB is also legitimated to process your data to comply with the legal obligations it is subject to and for the fulfillment of legitimate interests, provided that these do not prevail over the interests or fundamental rights of the data subjects.
Regardless of the basis for legitimacy, you may revoke consent at any time.
To which recipients will your data be communicated?
Your data will not be transferred to any entity without your consent, except for the transfers that are legally provided for. In this regard, your express consent will be requested for the transfer of your data to any other entity.
Due to the management of the authorized purposes, we will share your data with entities or individuals directly related to NOVARTWEB and the services we offer. Additionally, your personal information will be available to public administrations, judges, and courts to address any potential liabilities arising from the processing and whenever these disclosures are legally supported.
We may also share your data with companies that provide us with consulting, IT maintenance, marketing, training, or auditing services. These entities only have access to the personal information necessary to perform these services, and they are required by a "data processing agreement" to maintain confidentiality, not use the information for other purposes, and adopt measures that ensure its integrity and availability.
No international data transfers are planned outside of the European Union space or to entities that do not meet the data protection standards set by EU Regulation 679/2016.
What is the source of your data?
NOVARTWEB receives personal data from the data subject or from publicly available sources.
What categories of data does NOVARTWEB process?
NOVARTWEB will process the data you provide, which can fall into the following categories:
- Identification and contact data
- Academic and professional data
- Employment details data
- Economic, financial, and insurance data
- Commercial information
What are your rights?
Any person has the right to obtain confirmation about whether NOVARTWEB is processing personal data that concerns them or not.
Data subjects have the right to access their personal data and obtain a copy of the processed data, update the information, correct inaccurate data, or request its deletion if, for example, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. (Company) will stop processing the data, except for compelling legitimate grounds, or the exercise or defense of possible claims.
Also, under certain circumstances as provided in Article 18 of the GDPR, data subjects may request the limitation of the processing of their data, in which case NOVARTWEB will only process them, with the exception of storage, with the data subject's consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a particular Member State.
In the event it is applicable, as a result of exercising the right to erasure or objection to the processing of personal data in the online environment, data subjects have the right to be forgotten according to the jurisprudence of the Court of Justice of the EU.
By virtue of the right to data portability, data subjects have the right to obtain their personal data in a structured, commonly used, and machine-readable format and to transmit those data to another controller.
Each data subject has the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect them, except for the exceptions provided in Article 22.1 of the GDPR.
The data subject has the right to the erasure of their data due to the cessation of the purpose that motivated the processing or collection, due to the revocation of consent when it is the basis for the processing, or for the rest of the reasons contained in Article 17 of the GDPR. The erasure will be carried out by performing a high-level deletion of the data contained in automated systems and the physical destruction of non-automated media.
How can these rights be exercised?
By sending a written request to the addresses listed in the header, indicating the right being requested. On occasion, and for the purpose of verifying the identity of the requesting person, we may request the presentation or a copy of their ID card or other equivalent document that identifies them.
What avenues for complaints are available?
If you believe that your rights have not been properly addressed, you have the right to file a complaint with the Spanish Data Protection Agency, whose contact details are:
Telephone: 901 100 099, 91.266.35.17
Postal Address: C/ Jorge Juan, 6 Madrid.
LAST UPDATED: 06/26/2024