Policy of Privacy

Use of your personal data

At CECA, we process your personal data solely for the specific purpose for which they were collected. Specifically, to manage the requested or contracted contracts/operations/activities.

We also process them to maintain the pre-existing relationship between the client/provider/collaborator and the entity.

The processing of your personal data for other purposes is not foreseen and cannot occur without prior legitimization for that.

Legitimization for the use of data

The processing will only be lawful if at least one of the following conditions is met:

  • the interested party has given their consent for the processing of their personal data for one or multiple specific purposes;
  • the processing is necessary for the execution of a contract in which the interested party is a party or for the application at their request of pre-contractual measures;
  • the processing is necessary for compliance with a legal obligation applicable to the data controller;
  • the processing is necessary to protect the vital interests of the interested party or of another person;
  • the processing is necessary for the fulfillment of a mission carried out in the public interest or in the exercise of public powers conferred to the data controller;
  • the processing is necessary for the satisfaction of legitimate interests pursued by the data controller or by a third party, provided that those interests do not override the interests or the fundamental rights and freedoms of the interested party requiring the protection of personal data, particularly when the interested party is a child.

Data Protection Officer of CECA

The Data Protection Officer of CECA is the Compliance Director. You can directly contact him through the following email address arcoceca@ceca.es

Rights concerning the use of your data

If you wish, you may exercise the rights provided for in the regulations regarding the use of your personal data. Specifically, we refer to the rights of access (access to the data CECA has about you), rectification (correction of data previously provided) and erasure of the data (deletion, as long as this is possible from a legal standpoint, of data held by the entity).

Likewise, you may request that the processing of your personal data be limited (with respect to the purposes for which they are being processed), request the portability of your data (sending them to another entity), as well as not to be subject to automated individual decisions (not being subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you).

You can exercise your rights by sending a written request to arcoceca@ceca.es and attaching a copy of your ID.

We attach forms that may facilitate the exercise of your rights:

Retention of personal data

We will retain your personal data during the duration of the relationship. Once the relationship has ended, CECA will keep your personal data blocked during the legal prescription periods of actions and, in general, for the 10 years required by anti-money laundering and terrorism financing regulations. After the legal prescription periods of actions have elapsed, we will destroy your data.

Communication of personal data

CECA will not transfer your personal data to third parties unless required by law or there is a prior agreement that legitimizes it.

Third-party security services

Protection of forms against automated submissions. The forms on this website use Cloudflare Turnstile, a service provided by Cloudflare, Inc., which verifies that submissions are made by humans rather than automated programs. To do so, Cloudflare may process technical data such as IP address, browser or device information. The legal basis for this processing is CECA’s legitimate interest in ensuring the security of its forms and preventing fraudulent use. This service may involve international data transfers, which are carried out with the appropriate safeguards required by law. More information in the Cloudflare Turnstile privacy policy.

Use of Advertising Measurement Tools (Meta Pixel)

This website uses the Meta Pixel—a tool provided by Meta Platforms Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)—only if the user has consented to the use of marketing cookies.

Purpose: To measure the effectiveness of our advertising campaigns on Facebook and Instagram and, where applicable, to display advertisements on those platforms to individuals who have visited our website.

Data Processed: Online identifiers (cookies, IP address), browser and device information, pages visited, and actions taken on the website.

Legal Basis: The data subject’s consent (Art. 6(1)(a) of the GDPR), which may be withdrawn at any time via the cookie settings panel, without affecting the lawfulness of any processing that took place prior to such withdrawal.

Joint Controllership: In the collection and transmission of this data to Meta, [NAME OF ENTITY] and Meta Platforms Ireland Ltd. act as joint controllers, in accordance with Art. 26 of the GDPR. Meta assumes responsibility for addressing the rights of data subjects regarding the data it processes after receipt. You may review the agreement here: https://www.facebook.com/legal/controller_addendum

Subsequent Processing by Meta: Any processing carried out by Meta after receiving the data is the sole responsibility of Meta. Further information can be found in their privacy policy: https://www.facebook.com/privacy/policy

International Transfers: Meta may transfer data to Meta Platforms, Inc. in the United States. This entity participates in the EU-U.S. Data Privacy Framework and also utilizes standard contractual clauses approved by the European Commission.

Retention: Pixel cookies are retained for a maximum of 90 days from the date of the last visit, without prejudice to any retention periods applied by Meta in accordance with its own policy.

Finally, we also inform you that you can withdraw your consent at any time, without affecting the lawfulness of the processing, by sending your request to the email address arcoceca@ceca.es. Please remember to attach to the request a copy of your ID or an equivalent document that proves your identity.