1.- Who is responsible for the processing of your data?
The company controller for processing your data is FINNOVATING LAB GROUP, S.L. (hereinafter, “FINNOVATING”), holder of Tax. I.D. number B-87488011, with professional address at C/Princesa 27-14.3, 28008, Madrid, Spain as governor of the web domain www.sandboxspain.com (hereinafter, “Website”).
2.- Why is FINNOVATING legitimized to process your data?
FINNOVATING, as manager of the Website, is entitled to process your data in order to provide its services.
FINNOVATING is also entitled to process your data based on the consent requested from the User or on a legitimate interest, if applicable.
FINNOVATING takes the protection of your privacy and personal data very seriously. Therefore, your personal information is kept secure and treated with the utmost care.
In this sense, the legitimation bases applied by FINNOVATING for the treatment of the Users’ data are:
(i) The contractual execution.
(ii) The Users’ consent to the processing of their personal data for the purposes specified in each case.
The User data processed by FINNOVATING is exclusively identification data. In no case do we process special categories of personal data.
our personal data collected by FINNOVATING may be used for the following purposes, according to the consent given in the corresponding form:
3.1 The provision of Services through the Website managed by FINNOVATING.
In order to provide the service selected by the User, FINNOVATING will need to process personal data obtained from the information the User provided through the Website.
3.2 The sending of commercial communications and/or newsletters by FINNOVATING:
This purpose will be the sending, by email or other equivalent electronic communication means, information and commercial communications, depending on what the User has requested, related to the content of the Website and that will be provided for by FINNOVATING.
3.3 Statistical and personalisation purposes:
In order to provide the Services, the User’s data may be used for commercial, personalisation, operational and statistical purposes, and for activities that are part of FINNOVATING’s corporate purpose, as well as for the extraction and storage of data and marketing studies to adapt the content offered to the User, and to improve the quality, operation and navigation of the Website.
3.4 FINNOVATING informs the User that, if he/she has expressly consented, FINNOVATING may transfer his/her personally identifiable data (such as name, e-mail address or company) to companies participating in events organised by FINNOVATING, such as exhibitors, sponsors, seminar organisers, “media partners”, among others, so that they may contact the User (by letter, telephone, e-mail, SMS/MMS, or other means of communication) to offer their products and services that may be of interest to the User.
The User guarantees the accuracy of the personal data supplied and undertakes to communicate to FINNOVATING any changes in said data. The User shall be responsible, in any event, for the veracity of the data supplied, and FINNOVATING reserves the right to exclude from the Services any Users who has provided false data, without prejudice to any other legal action that may be taken.
FINNOVATING will preserve the User’s personal data only for as long as it is necessary to fulfill the purposes for which it was collected, or until the User expresses his/her wish to unsubscribe from the Website’s Services, that were for the purpose of receiving information and notifications regarding the project subject of the Website, the Regulatory Sandbox. Subsequently, if necessary, FINNOVATING will keep the information blocked for the legally established periods.
6.- Recipient of personal data
The personal data collected will be used by FINNOVATING for the final purpose of being able to send notifications or contact those interested in receiving additional information, through the personal data provided by the Users on the Website, regarding the project object of the Website (Regulatory Sandbox) whose consulting and advisory services are offered by FINNOVATING.
In addition, User data may be shared with FINNOVATING’s partners who offer products and services on the company’s website, with sellers and service providers, who support the Website, and with authorities, as well as in response to mandatory legal requests.
In any case, FINNOVATING imposes strict restrictions on the way in which such external partners may share the data provided to them, such restrictions shall be in accordance with the applicable regulations, and they shall be committed to comply with due diligence in accordance with the processing contracts signed in accordance with article 28 of the General Data Protection Regulation.
7.- Social networks
FINNOVATING has a profile on some of the main social networks on the Internet and a specific one dedicated to the content of the Website. FINNOVATING manages this social network profile and recognizes itself as being responsible for the processing of data published (for example, photos uploaded by FINNOVATING in which images of people appear) or data sent privately by users through the private messaging systems of the different networks.
Purpose and legitimacy: The processing that FINNOVATING will carry out with the data within the Website’s social network profile will be, at most, that which the social network allows for this type of profiles. Therefore, FINNOVATING may, where the law does not prohibit it, inform its followers by any means permitted by the social network about its activities, events, offers, as well as provide personalised customer service.
The transfer of personal data to a country or international organisation outside the European Union may be done under the condition that the protection afforded by the General Data Protection Regulation is not undermined. For this purpose, it shall be necessary for the European Commission to issue an adequacy decision or for the third State to have provided adequate safeguards, and provided, in this case, that the data subject has enforceable rights and effective legal remedies. In the absence of both requirements, the transfer of data shall be subject to prior authorisation by the Spanish Data Protection Agency or, where appropriate, by the economic data protection authorities.
In case that the Data Controller intends to transfer personal data to a third country or international organisation, at the time the personal data are obtained, the User shall be informed about the third country or international organisation to which the data are intended to be transferred, as well as about the existence or absence of an adequacy decision by the Commission.
Part of our potential Data Processors may be located outside the European Economic Area (EEA). Therefore, in this case, we will sign the European Union standard contractual clauses to protect our Users.
8.- User’s rights regarding their data
Users are entitled to:
- Access their personal data;
- Request the rectification of any inaccurate data;
- Request the deletion of their data;
- Request that the processing of their data be limited;
- Oppose the processing of their data
- Request the portability of their data.
- Not be subjected to automated individual decisions.
The User can exercise all these rights at the following email address: firstname.lastname@example.org under the reference “RGPD-www.sandboxspain.com”, indicating:
- Name, surname(s) of the User and copy of ID card. In cases where representation is permitted, it will also be necessary to identify by the same way the person representing the User, as well as the document certifying the representation. The photocopy of the ID card may be substituted by any other legally valid method that proves their identity.
- Request with the specific reasons for the request or information to which access is sought.
- Address for notification purposes.
- Date and signature of the applicant.
- Any document that accredits the request being made.
The User may also send their request by ordinary mail to the following address:
FINNOVATING LAB GROUP, S.L.
Calle Princesa 27-14.3, 28008, Madrid, Spain.
Without prejudice to any other administrative and/or judicial actions which may be at their disposal, Users shall be entitled to file a claim before the Supervisory Authority, in particular in the Member State where they have their usual residence or their workplace or in the place where any alleged infringement has taken place, if they consider that their personal data has not been processed in accordance with applicable regulations and/or if they have been prevented from exercising any of their rights. The Supervisory Authority receiving the claim shall inform the claimant of the situation and its result.
9.- Data security and preservation
The protection of the privacy and personal data of its clients and visitors is very important to FINNOVATING. FINNOVATING uses all its best efforts to prevent your data from being used inadequately. Only authorized personnel have access to your data.
FINNOVATING keeps personal data protection security levels as provided by applicable regulations and has implemented all technical means at its disposal to prevent any loss, misuse, alteration, unauthorized access to and/or theft of the data provided by the Users through the Website, without prejudice to informing Users that security measures on the Internet are not unbreakable.
FINNOVATING undertakes to comply with its duty to maintain the secrecy and confidentiality of personal data as provided by applicable law, as well as to provide them with secure processing in international data transfers and assignments, where appropriate.
Furthermore, in accordance with the provisions of current legislation, a record of processing activities is kept which specifies, according to its purposes, the processing activities carried out and the other circumstances established in the General Data Protection Regulation.
The conditions offered by these websites may not be the same as those offered by FINNOVATING through this Website.
12.- General inquiries