This privacy policy applies to the processing of personal data of users ofhttps://ports40.eshttps://estudiamostufactura.es/https://pinatapum.com/, hereinafter referred to as the WEBSITE, owned by Puertos del Estado, hereinafter referred to as the TREATMENT CONTROLLER.

This policy is an integral part of the Legal Notice accessible at all times from the WEBSITE.


Applicable regulations

Our Privacy Policy has been designed in accordance with REGULATION (EU) 2016/679 of the EUROPEAN PARLIAMENT and of the COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter GDPR EU 2016/679, and as far as it does not contradict the aforementioned Regulation, by the provisions of the Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, hereinafter LOPDGDD 3/2018.

By providing us with your data, the user declares to have read and understood this Privacy Policy, giving their unequivocal and express consent to the processing of their personal data in accordance with the purposes and terms expressed herein.


Basic information on data protection

BASIC INFORMATION ON DATA PROTECTION
Responsible State Ports
Purpose To send communications regarding the Ports 4.0 program to the user or owners of the data.
Legitimation Consent of the interested party.
Addressees Administrations and public bodies for compliance with legal provisions directly enforceable to State Ports.
Rights You have the right to access, rectify and delete the data, as well as other rights, indicated in the additional information, which can be exercised by contacting the address of the data controller info@ports40.es.
Additional Information Additional and detailed information on Data Protection can be found in the attached clauses at https://ports40.es/politica-de-privacidad.


Additional information on data protection

The data controller is:

  • Identity: Puertos del Estado
  • TAX IDENTIFICATION NUMBER: Q-2867022-B
  • Postal address: Avenida del Partenón, 10 – 28042 Madrid (Spain)
  • Phone: (+34) 915245500
  • E-mail: info@ports40.es


Data Protection Officer

The TREATMENT CONTROLLER has designated a data protection delegate, Organismo Público Puertos del Estado, to whom any consultation or request regarding the protection of personal data can be made by e-mail to dpo@puertos.es.

Purposes and legal basis for processing

  1. a) In general

The TREATMENT CONTROLLER processes the personal data provided by its users for the following purposes:

  • PurposeTo respond to requests of various kinds made by the latter. Depending on the nature of the request, the purpose will pursue the management of:
  • inquiries and requests for proposals
  • description of ideas and projects submitted through the website
  • participation in blogs, through comments
  • subscription to exclusive State Ports content related to the ports 4.0 program.
  • surveys
  • sending of electronic communications of an informative nature related to the ports 4.0 program, in accordance with your interests.
  • Legal basis that legitimizes this treatment: The consent of the data subject, which may be withdrawn at any time.
  1. b) Electronic forms WEBSITE

The TREATMENT CONTROLLER processes the personal data provided by users through the electronic forms for the collection of personal data on the WEBSITE for the purposes identified below:

In relation to the “Contact Form” and other queries (those that can be addressed through the e-mail accounts listed on the WEBSITE):

PurposeContact with the interested party, respond to requests for information received and answer the queries raised, as well as send informative electronic communications related to the ports 4.0 program, according to their interests, provided that the person concerned has consented to the processing of their personal data for this purpose.

  • Legal basis that legitimizes this treatment: The consent of the data subject, which may be withdrawn at any time.

In connection with the “Register Form – Create your user”:

PurposePurpose: To allow the data subject to create a user account to register on the website. In the event that the user registers on the website through the social login, the TREATMENT CONTROLLER will only access the user’s personal data for which he/she has given his/her consent during the configuration of the access of the social network in question. Any information provided in connection with such social applications could be accessed by members of the corresponding social network, so such interactions will be governed by the privacy policies of the entities providing the services. The TREATMENT CONTROLLER has no control over or responsibility for such entities or their use of user information.

  • Legal basis that legitimizes this treatment: The consent of the data subject, which may be withdrawn at any time.

In connection with the “Access Form”:

Purpose: Allows the registered user to access the private area of the website.

  • Legal basis that legitimizes this treatment: The consent of the data subject, which may be withdrawn at any time.

In the event that the user registers on the website through the social login, the TREATMENT CONTROLLER will only access the user’s personal data for which he/she has given his/her consent during the configuration of the social network access in question.

Any information provided in connection with such social applications may be accessed by members of the relevant social network, such interactions will be governed by the privacy policies of the entities providing the services.

The TREATMENT CONTROLLER has no control over or responsibility for such entities or their use of user information.

When the data requested in the electronic forms are necessary, the TREATMENT CONTROLLER will indicate such mandatory nature at the time of data collection from users and failure to provide them will mean that the corresponding request cannot be met.

What kind of data do we process?

For the purposes set out in the previous section, all user data is processed, which can be divided into the following sources and categories:

  1. a) Data provided directly by the user: data provided directly by the user, either at the time of requesting the service through the completion of electronic forms for collecting personal data or through various means such as, for example, requests for information or complaints filed. The user is responsible for its accuracy and updating.
  1. b) Data obtained from sources other than the user himself: data obtained from sources other than the user, either by having his consent or by any other legal authorization (legitimate interest, compliance with a legal obligation…).
  1. c) Data derived from the development of the commercial relationship: data provided indirectly by the user derived from the relationship established and the maintenance of this activity. This category includes traffic data, navigation data through the public website or access to the private area or others of a similar nature.

Commercial profiling

The TREATMENT CONTROLLER may carry out the elaboration of commercial profiles based on the information provided by the users. However, no automated decisions will be taken based on such profiles that produce legal effects or significantly affect the user.

The processing of data for this purpose is based on the following grounds of legitimacy:

  • Consent of the data subject (Art. 6.1.a RGPD): when the user has given his explicit consent for the elaboration of the commercial profile.
  • Execution of a contract or pre-contractual measures (Art. 6.1.b RGPD): when the profiling is necessary for the provision of a service requested by the user.
  • Legitimate interest of the Data Controller (Art. 6.1.f RGPD): when the profiling is justified by a legitimate interest of the Data Controller, provided that such interest does not override the rights and freedoms of the data subject.

The user may at any time exercise their rights of access, rectification, deletion, opposition and others recognized in the current regulations, through the means indicated in this Privacy Policy.

Registration of processing activities

We inform you that the personal data obtained from the user as a result of the completion of the electronic forms existing on the WEBSITE are part of the Registry of Processing Activities (RAT) of the TREATMENT CONTROLLER, which will be updated periodically in accordance with the provisions of the RGPD EU 2016/679 and the LOPDGDD 3/2018.

Addressees

The personal data of the interested parties will be communicated to the recipients indicated below:

  1. a) In general:
  • The TREATMENT CONTROLLER’S suppliers as processors, in the framework of the corresponding provision of services (lawyers, advisors, consultants and IT service providers – website hosting and e-mail service).
  • The competent authorities and agencies, to the extent necessary to comply with legal obligations directly enforceable against Puertos del Estado.
  • UTE IMSOMNIA KPMG as data processor.
  1. b) In relation to the “Contact Form” and other queries(those that can be addressed through the e-mail accounts that appear on the WEBSITE), with the “Register Form – Create your user” and with the “Login Form”:
  • No data will be transferred to third parties, unless legally required.

International data transfers to third countries

  • Google LLC, owner of the Google Analytics 4 service and the Gmail email service, on the basis of the EU-US Data Privacy Framework Adequacy Decision.

Conservation periods

Personal data will be kept:

  1. a) In general:
  • The data will be kept for as long as you do not request its deletion, and, in any case, for the years necessary to comply with legal obligations.
  • In the specific case of curricula received, the data will be kept for a maximum period of three years, unless otherwise indicated by the interested party.
  1. b) In relation to the “Contact Form” and other queries(those that can be addressed through the e-mail accounts that appear on the WEBSITE), with the “Register Form – Create your user” and with the “Login Form”:
  • The personal data will be kept until the end of the relationship between the TREATMENT CONTROLLER and the user, unless the user previously requests the deletion of the data, or until the data subject withdraws the consent given at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

For this purpose, the data subject is reminded that he/she must inform the CONTROLLER OF THE PROCESSING as the recipient to whom he/she communicates personal data, of any rectification or deletion of the data of his/her representatives, authorized persons and other contact persons.

Once the relationship is terminated, to the extent that the personal data of the data subjects are relevant for the purposes of the TREATMENT CONTROLLER’s liability towards users, such data will be kept, duly blocked, at the disposal of the judicial authorities or the competent public administrations, for the enforcement of the liabilities arising from the processing for the statute of limitations period thereof.

Rights of interested parties

Users of the WEBSITE may exercise before the CONTROLLER OF THE PROCESSING, to the extent applicable, the following rights: access to personal data, rectification, erasure (right to be forgotten), limitation of processing, data portability, opposition to processing and not to be subject to automated individual decisions and, when the processing is based on consent, the right to withdraw it at any time.

Users may exercise these rights by means of a written and signed request sent to the postal address of the TREATMENT CONTROLLER located at Avenida del Partenón, 10 – 28042 Madrid (Spain) or through the e-mail address info@ports40.esmailto:info@observanzaconsulting.com, attaching, in both cases the interested party, a legally valid proof of identity, such as a photocopy of the DNI/NIE or equivalent document, and clearly indicating the right he/she wishes to exercise.

Users will also have the right to file a complaint before the competent Control Authority (Spanish Data Protection Agency) if they observe that the processing does not comply with the regulations in force or if they consider that their rights regarding the protection of their personal data have been violated, especially when they have not obtained satisfaction in the exercise of their rights, through the WEB page https://www.aepd.es.

Attention to the rights of the interested parties

These rights will be met by the TREATMENT CONTROLLER within 1 month, which may be extended to 2 months if the complexity of the request or the number of requests received so requires. All this without prejudice to the duty to retain certain data under the legal terms and until the possible liabilities arising from a possible treatment, or, where appropriate, a contractual relationship.

In addition to the above, and in relation to data protection regulations, Users who so request, have the possibility to organize the destination of their data after their death.

Sending commercial communications

In compliance with the provisions of the Second Final Provision of Law 9/2014, of May 9, on Telecommunications, which amends Law 34/2002, of July 11, on information society services and electronic commerce, commercial communications made by electronic means must be clearly identifiable as such, and the natural or legal person on behalf of whom they are made must also be clearly identifiable, without prejudice to the provisions of the regulations issued by the Autonomous Communities with exclusive powers on consumption.

The data used or provided in the informative and/or promotional communications are processed by the CONTROLLER OF THE PROCESSING, for purposes consisting of sending electronic communications related to the ports 4.0 program, such as publications, activities, events or social and professional events of Puertos del Estado in relation to the ports 4.0 program; the monitoring and optimization of marketing campaigns carried out through technologies for this purpose; and profiling for commercial purposes using contact data and preferences.

The user, who provides his contact details to the PROVIDER by clicking on the “SEND” button of the electronic forms for collecting personal data existing on the website and affirmatively checks the two existing consent boxes, “I agree to the processing of my data according to the purposes indicated in the basic data protection information” and “I consent to receive electronic informative communications”, you expressly authorize and give your express, free and unequivocal consent to the PROVIDER to process your personal data for the purpose of sending you electronic communications of an informative nature related to the ports 4.0.

The legal basis that legitimizes this treatment is the consent of the person concerned, which may be revoked at any time.

The data provided will be kept for as long as the relationship with the data subject is maintained or for the years necessary to comply with legal obligations.

In compliance with the provisions of Articles 21 and 22 of Law 34/2002, of July 11, 2002, on information society services and electronic commerce, the user may oppose the processing of his/her data and revoke the consent given to receive electronic informative communications by simply notifying the PROVIDER of his/her will through a simple and free procedure, consisting of sending an e-mail to the e-mail address info@ports40.esmailto:info@allsquad.es, indicating “UNSEND” or “DO NOT SEND” in the subject line of the message.

Social Networking Policy

The TREATMENT CONTROLLER has profiles in the following Internet social networks:

In these cases Puertos del Estado is considered RESPONSIBLE FOR THE TREATMENT of the data of its users, including followers, subscribers or simply people who make comments or queries through these channels.

Any personal information collected through these applications may be used by third party users of the applications, and their interactions are subject to the privacy policies of the companies providing the applications.

In this sense, the TREATMENT CONTROLLER could use these profiles to inform its users of news that it considers appropriate for the purpose of the services offered, or perhaps it could also share information or news articles published by other users of social networks, over which Puerto del Estado has no control.

In no case shall the TREATMENT CONTROLLER use personal information of users without their consent to have relationships other than those expected in the social networks mentioned, requesting, if necessary, the user’s own consent.

Accuracy of the data provided by the interested parties

The user is responsible for the information provided by filling out the electronic forms that are made available on the WEBSITE or by sending e-mails to the various accounts under the Internet domain ports40.es is true, responding for the accuracy of all data communicated and keep it updated to reflect a real situation, being responsible for false or inaccurate information provided and the damage, inconvenience and problems that may cause the TREATMENT CONTROLLER or third parties.

The user guarantees that the data provided are true, accurate, complete and updated, being responsible for any damage or prejudice, direct or indirect, that could be caused as a result of the breach of such obligation.

In the event that the data provided belong to a third party, the user guarantees that he/she has informed said third party of the aspects contained in this document and obtained his/her authorization to provide his/her data to Puertos del Estado for the aforementioned purposes.

IP Addresses

The website servers may automatically detect the IP address and domain name used by the user.

An IP address is a number automatically assigned to a computer when it connects to the Internet. All this information is recorded in a server activity file that allows the subsequent processing of the data in order to obtain only statistical measurements that allow to know the number of page impressions, the number of visits made to web services, the order of visits, the access point, etc.

In order to offer information or services of interest based on the User’s location, Puertos del Estado may access data relating to the geolocation of the User’s device, in those cases in which the User’s configuration to that effect so permits.

For the purposes of technical security and system diagnostics, in an anonymized or aggregated form, Puertos del Estado may record the IP address (Internet access identification number of the device, which allows devices, systems and servers to recognize and communicate with each other). This information may also be used for web performance analysis purposes.

Safety measures

The TREATMENT CONTROLLER guarantees that it has implemented on the WEBSITE the appropriate technical and organizational policies to apply the security measures established by the RGPD EU 2016/679 and the LOPDGDD 3/2018 in order to protect the rights and freedoms of users and has communicated the appropriate information to them so that they can exercise them.

In order to protect individual rights, especially in relation to automated processing and in order to be transparent with users, the CONTROLLER has established a policy that covers all such processing, the purposes of such processing, the legitimacy of such processing and also the tools available to users to enable them to exercise their rights.

The WEBSITE is created with the WordPress content management system using the Avada builder and has an SSL encryption certificate enabled for the entire domain and the ReCaptcha system to detect and thwart bot attempts allowing the user to securely submit their personal data through the existing electronic forms.

The WEBSITE is hosted on the servers of Telefónica de España, offered to the TREATMENT CONTROLLER, being the assigned IP address of Spanish range.

All information will be kept and managed with due confidentiality, applying the necessary computer security measures to prevent access or misuse of your data, its manipulation, deterioration or loss.

However, the user must bear in mind that the security of computer systems is never absolute. When personal data is provided over the Internet, such information could be collected without your consent and processed by unauthorized third parties. The TREATMENT CONTROLLER declines any responsibility for the consequences of such acts for the User, if he/she voluntarily published the information.

Acceptance and consent

The user declares to have been informed of the conditions on personal data protection, accepting and consenting to the automated processing of the same by the TREATMENT CONTROLLER in the manner and for the purposes indicated in this Privacy Policy. Certain services provided on the WEBSITE may contain special conditions with specific provisions on personal data protection.

Changes to this privacy policy

THE TREATMENT CONTROLLER reserves the right to modify this Privacy Policy to adapt it to new legislation, jurisprudence, interpretation of the Spanish Data Protection Agency, as well as industry practices.

In such cases, the TREATMENT CONTROLLER will announce on the websites the changes introduced reasonably in advance of their implementation.

This privacy policy may be supplemented by the Legal Notice, Cookies Policy and General Conditions of Contract, if any, are collected for certain services, if such access involves any specialty in the protection of personal data.