Rights relating to privacity

Address: Calle Fernán Caballero, 7 – 11500 El Puerto de Santa María (Cádiz)

Telephone: 917283880

Email address for requests relating to personal data: rgpd@nordesgin.com.

GRUPO OSBORNE S.A. processes the data provided to respond to requests from people to exercise the rights established by the European General Data Protection Regulation.

The legal basis for processing the data is compliance with a legal obligation applicable to parties responsible for processing data, as set down in article 6.1.c) of the European General Data Protection Regulation.

Ø  Personal data are only assigned to the OSBORNE Group company to which the request by the person relates, and as necessary for compliance with legal obligations and to support services related to this data processing and its purpose.

Ø  In the event that provision of the services requires data to be shared with service providers inside and outside the European Union to assist with this processing, adhesion to the European Union-United States Privacy Shield or adequate compliance with guarantees of the confidentiality and security of the data processing is required.

Ø  Provision of the services involved in this processing requires the use of the Salesforce IT customer-management platform, which is subject to Binding Corporate Rules that enable personal data to be exported to Salesforce group entities located outside the European Economic Area that have been approved by the data protection authorities of France, Holland and Bavaria, Germany. The Salesforce platform is signed up to the US Privacy Shield platform. OSBORNE and Salesforce have signed standard contractual terms and conditions on the basis approved by the European Commission (https://eur-lex.europa.eu/legal-content/ES/TXT/PDF/?uri=CELEX:32010D0087&from=ES).

Ø  We keep the data for one year after the end of the process of exercising rights and once any final ruling is handed down by the control authorities.

Ø  Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them

Ø Interested parties are entitled to access their personal data and request the rectification of any inaccurate data, or deletion of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

Ø Under certain circumstances, interested parties may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

Ø Under certain circumstances, interested parties may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

Ø Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

Ø Interested parties may exercise their rights by sending an email to rgpd@nordesgin.com.

Ø If you are dissatisfied with the exercise of your rights, you can file a complaint with the competent Data Protection Agency, at the postal or electronic address given on its website, www.agpd.es.