Policy of Privacy

Use of your personal data

At CECA, we process your personal data solely for the specific purpose for which they were collected. Specifically, to manage the requested or contracted contracts/operations/activities.

We also process them to maintain the pre-existing relationship between the client/provider/collaborator and the entity.

The processing of your personal data for other purposes is not foreseen and cannot occur without prior legitimization for that.

Legitimization for the use of data

The processing will only be lawful if at least one of the following conditions is met:

  • the interested party has given their consent for the processing of their personal data for one or multiple specific purposes;
  • the processing is necessary for the execution of a contract in which the interested party is a party or for the application at their request of pre-contractual measures;
  • the processing is necessary for compliance with a legal obligation applicable to the data controller;
  • the processing is necessary to protect the vital interests of the interested party or of another person;
  • the processing is necessary for the fulfillment of a mission carried out in the public interest or in the exercise of public powers conferred to the data controller;
  • the processing is necessary for the satisfaction of legitimate interests pursued by the data controller or by a third party, provided that those interests do not override the interests or the fundamental rights and freedoms of the interested party requiring the protection of personal data, particularly when the interested party is a child.

Data Protection Officer of CECA

The Data Protection Officer of CECA is the Compliance Director. You can directly contact him through the following email address arcoceca@ceca.es

Rights concerning the use of your data

If you wish, you may exercise the rights provided for in the regulations regarding the use of your personal data. Specifically, we refer to the rights of access (access to the data CECA has about you), rectification (correction of data previously provided) and erasure of the data (deletion, as long as this is possible from a legal standpoint, of data held by the entity).

Likewise, you may request that the processing of your personal data be limited (with respect to the purposes for which they are being processed), request the portability of your data (sending them to another entity), as well as not to be subject to automated individual decisions (not being subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you).

You can exercise your rights by sending a written request to arcoceca@ceca.es and attaching a copy of your ID.

We attach forms that may facilitate the exercise of your rights:

Retention of personal data

We will retain your personal data during the duration of the relationship. Once the relationship has ended, CECA will keep your personal data blocked during the legal prescription periods of actions and, in general, for the 10 years required by anti-money laundering and terrorism financing regulations. After the legal prescription periods of actions have elapsed, we will destroy your data.

Communication of personal data

CECA will not transfer your personal data to third parties unless required by law or there is a prior agreement that legitimizes it.

Finally, we also inform you that you can withdraw your consent at any time, without affecting the lawfulness of the processing, by sending your request to the email address arcoceca@ceca.es. Please remember to attach to the request a copy of your ID or an equivalent document that proves your identity.