General Data Protection Regulation (GDPR) – PRIVACY POLICY

General Data Protection Regulation (GDPR) – PRIVACY POLICY

Version: 1

Date: 25/01/2024

Identification of the Data Controller

ASOCIACIÓN ESTUDIANTIL JUNIOR EMPRESA PRODOX (hereinafter, PRODOX)
NIF: G56501406
Address: Plaza San Martín 1, 28013, Madrid
Contact: prodox.team@gmail.com

Who is responsible for processing your data?

This Privacy Policy applies to all personal data provided by individuals interacting with PRODOX, including those interested in its activities and services through its websites or other communication channels. The purpose of this policy is to provide transparency regarding how PRODOX processes personal data in compliance with applicable data protection regulations.


Users may contact PRODOX using the details provided above.

What is the purpose and legal basis for processing your data?

PRODOX maintains a Record of Processing Activities, detailing each type of data processing carried out under its responsibility.

Processing Activity

Processing Activity

Purpose

Purpose

Legal Basis (GDPR)

Legal Basis (GDPR)

Event Management

Registration and management of event attendees.

Art. 6.1(a): The individual has given consent for their personal data to be processed for one or more specific purposes.

Art. 6.1(f): Processing is necessary for the legitimate interests pursued by PRODOX concerning commercial promotion.

Contact Database Management

Managing contact data (related to clients, suppliers, institutions, public administrations, and general entities).

Art. 6.1(f): Processing is necessary for the legitimate interests pursued by PRODOX.

Website User Management

Handling inquiries and contact requests received via the website.

Art. 6.1(f): Processing is necessary for legitimate interests related to managing requests and commercial promotion.

Consumer & Customer Support

Managing consumers who purchase products from the online store.

Art. 6.1(b): Processing is necessary for the performance of a contract in which the individual is a party or to take pre-contractual steps at their request.


Art. 6.1(f): Processing is necessary for the legitimate interests pursued by PRODOX for advertising and promotional purposes.

If additional details regarding the Record of Processing Activities are required, users may contact PRODOX through the identified communication channels.

How long do we retain your personal data?

PRODOX will retain users' personal data for as long as the relationship with the organization remains active. Afterward, data will be preserved in accordance with applicable archiving and documentation regulations. If a user exercises their right to deletion, their data will be erased based on the specific right

invoked.

Who has access to your personal data?

PRODOX may disclose or share personal data with public administrations to fulfill legal obligations, as required by the applicable laws.

What are your rights as a data subject?

Users have the following rights under GDPR:


  1. Right of Access – To know what personal data is being processed.

  2. Right of Rectification – To request corrections of any inaccurate personal data.

  3. Right to Erasure (Right to be Forgotten) – To request deletion of personal data, when legally possible.

  4. Right to Restriction of Processing – To request a temporary suspension of data processing if accuracy, legality, or necessity is questioned. In such cases, data will only be retained for legal claims or defense.

  5. Right to Object – To object to data processing when based on legitimate interests. PRODOX will cease processing unless compelling legitimate grounds exist or data is needed for legal claims.

  6. Right to Data Portability – When processing is based on consent, users can request the transfer of their personal data to another provider.


These rights may be exercised free of charge by the data subject or their representative by submitting a written request to prodox.team@gmail.com.


Additionally, individuals have the right to withdraw consent at any time, without affecting the lawfulness of prior data processing. PRODOX may continue processing data as permitted by applicable law.


If users believe their rights are not being upheld, they may file a complaint with the relevant Data Protection Authority in their country.

Opting Out of Commercial Communications

Users have the right to withdraw consent for commercial communications at any time by notifying PRODOX. This can be done by:


  • Clicking the unsubscribe link in any commercial email received.

  • Sending an email request to prodox.team@gmail.com requesting removal from the mailing list.

What security measures do we have in place?

PRODOX is committed to maintaining the confidentiality and security of personal data and has implemented appropriate technical and organizational measures to:


  • Prevent alteration, loss, unauthorized access, or unauthorized processing of personal data.

  • Ensure security based on the state of technology, the nature of stored data, and the risks involved.


These measures comply with applicable data protection regulations and are regularly reviewed for effectiveness.

Third-Party Links

The PRODOX website may include hyperlinks to third-party sites not operated or controlled by PRODOX. Therefore, PRODOX does not guarantee nor assume responsibility for:


  • The legality, reliability, usefulness, accuracy, or timeliness of third-party content.

  • Privacy policies of external websites.


Users are encouraged to review the privacy policies of third-party websites before providing personal information, as their data protection standards may differ from those of PRODOX.

Modifications to the Privacy Policy

PRODOX may update this Privacy Policy in compliance with new legal or regulatory requirements. Any modifications will be communicated to affected users, ensuring transparency regarding changes in data processing.


The latest update of this Privacy Policy was on 25/01/2024.

General Data Protection Regulation (GDPR) – PRIVACY POLICY

Version: 1

Date: 25/01/2024

Identification of the Data Controller

ASOCIACIÓN ESTUDIANTIL JUNIOR EMPRESA PRODOX (hereinafter, PRODOX)
NIF: G56501406
Address: Plaza San Martín 1, 28013, Madrid
Contact: prodox.team@gmail.com

Who is responsible for processing your data?

This Privacy Policy applies to all personal data provided by individuals interacting with PRODOX, including those interested in its activities and services through its websites or other communication channels. The purpose of this policy is to provide transparency regarding how PRODOX processes personal data in compliance with applicable data protection regulations.


Users may contact PRODOX using the details provided above.

What is the purpose and legal basis for processing your data?

PRODOX maintains a Record of Processing Activities, detailing each type of data processing carried out under its responsibility.

Processing Activity

Purpose

Legal Basis (GDPR)

Event Management

Registration and management of event attendees.

Art. 6.1(a): The individual has given consent for their personal data to be processed for one or more specific purposes.

Art. 6.1(f): Processing is necessary for the legitimate interests pursued by PRODOX concerning commercial promotion.

Contact Database Management

Managing contact data (related to clients, suppliers, institutions, public administrations, and general entities).

Art. 6.1(f): Processing is necessary for the legitimate interests pursued by PRODOX.

Website User Management

Handling inquiries and contact requests received via the website.

Art. 6.1(f): Processing is necessary for legitimate interests related to managing requests and commercial promotion.

Consumer & Customer Support

Managing consumers who purchase products from the online store.

Art. 6.1(b): Processing is necessary for the performance of a contract in which the individual is a party or to take pre-contractual steps at their request.


Art. 6.1(f): Processing is necessary for the legitimate interests pursued by PRODOX for advertising and promotional purposes.

If additional details regarding the Record of Processing Activities are required, users may contact PRODOX through the identified communication channels.

How long do we retain your personal data?

PRODOX will retain users' personal data for as long as the relationship with the organization remains active. Afterward, data will be preserved in accordance with applicable archiving and documentation regulations. If a user exercises their right to deletion, their data will be erased based on the specific right

invoked.

Who has access to your personal data?

PRODOX may disclose or share personal data with public administrations to fulfill legal obligations, as required by the applicable laws.

What are your rights as a data subject?

Users have the following rights under GDPR:


  1. Right of Access – To know what personal data is being processed.

  2. Right of Rectification – To request corrections of any inaccurate personal data.

  3. Right to Erasure (Right to be Forgotten) – To request deletion of personal data, when legally possible.

  4. Right to Restriction of Processing – To request a temporary suspension of data processing if accuracy, legality, or necessity is questioned. In such cases, data will only be retained for legal claims or defense.

  5. Right to Object – To object to data processing when based on legitimate interests. PRODOX will cease processing unless compelling legitimate grounds exist or data is needed for legal claims.

  6. Right to Data Portability – When processing is based on consent, users can request the transfer of their personal data to another provider.


These rights may be exercised free of charge by the data subject or their representative by submitting a written request to prodox.team@gmail.com.


Additionally, individuals have the right to withdraw consent at any time, without affecting the lawfulness of prior data processing. PRODOX may continue processing data as permitted by applicable law.


If users believe their rights are not being upheld, they may file a complaint with the relevant Data Protection Authority in their country.

Opting Out of Commercial Communications

Users have the right to withdraw consent for commercial communications at any time by notifying PRODOX. This can be done by:


  • Clicking the unsubscribe link in any commercial email received.

  • Sending an email request to prodox.team@gmail.com requesting removal from the mailing list.

What security measures do we have in place?

PRODOX is committed to maintaining the confidentiality and security of personal data and has implemented appropriate technical and organizational measures to:


  • Prevent alteration, loss, unauthorized access, or unauthorized processing of personal data.

  • Ensure security based on the state of technology, the nature of stored data, and the risks involved.


These measures comply with applicable data protection regulations and are regularly reviewed for effectiveness.

Third-Party Links

The PRODOX website may include hyperlinks to third-party sites not operated or controlled by PRODOX. Therefore, PRODOX does not guarantee nor assume responsibility for:


  • The legality, reliability, usefulness, accuracy, or timeliness of third-party content.

  • Privacy policies of external websites.


Users are encouraged to review the privacy policies of third-party websites before providing personal information, as their data protection standards may differ from those of PRODOX.

Modifications to the Privacy Policy

PRODOX may update this Privacy Policy in compliance with new legal or regulatory requirements. Any modifications will be communicated to affected users, ensuring transparency regarding changes in data processing.


The latest update of this Privacy Policy was on 25/01/2024.