Privacy Policy
Scope of the Privacy Policy
This policy applies to users who provide personal data to CORTIJO SOCIAL MEDIA through the website www.guerraysociedad3.com, as well as to all individuals who provide their personal data through the various means enabled by CORTIJO SOCIAL MEDIA. This website does not collect personal data from users without their knowledge, nor are such data transferred to third parties.
The personal data provided will be treated with absolute confidentiality, in a fair and transparent manner. CORTIJO SOCIAL MEDIA is committed to maintaining secrecy and taking necessary measures to prevent alteration, loss, unauthorized processing, or access. For this purpose, CORTIJO SOCIAL MEDIA has implemented the strictest procedures and security measures necessary to protect personal data, considering the state of technology, the nature of the data stored, and the risks to which they are exposed.
Who is responsible for processing your personal data?
The entity responsible for processing personal data is CORTIJO SOCIAL MEDIA, S.A., with VAT number B90143066, and registered office at c/ Imagen 6, 2nd Floor A and B, 41003, Seville. Email: info@cortijosocialmedia.com
Who is the Data Protection Officer and what is their role?
We inform the interested parties that we have a Data Protection Officer, who can be contacted to resolve any doubts related to the processing of personal data at the following email address: info@cortijosocialmedia.com
What types of personal data do we process?
The personal data collected through various forms, both paper and electronic, contracts, and other documents provided by CORTIJO SOCIAL MEDIA include:
– Identifying data (name, surname, email address, postal address, etc.).
– Professional, academic, and training data (qualifications, training courses).
– Economic-financial data (bank account numbers, credit/debit card numbers).
– Personal characteristics, social circumstances.
Generally, unless specified otherwise in the form or document where the data are collected, these data are mandatory for their intended purpose. The absence of mandatory data will prevent us from addressing the request of the interested party. The user is responsible for the accuracy of the communicated data and must request their modification through the specified means when necessary to ensure correct processing.
Why do we process your personal data? How long do we keep your personal data?
The personal data provided by the interested party will be processed for the following purposes:
1. Receiving communications and managing information requests: When a query or exercise of data protection rights is made using any of the enabled communication means (website, postal mail, email, phone), the data provided in the request will be processed to address it and provide a response. Personal data will be retained as long as necessary to fulfill the purpose for which they were collected and to determine possible liabilities that may arise from that purpose and data processing.
2. Sending newsletters: When the user expressly consents, their personal data will be processed for sending updates, offers, products, activities, services, and the latest news from CORTIJO SOCIAL MEDIA. Sending this information will involve the use of conventional and electronic means (web, telephone, or paper format). Personal data of individuals interested in receiving corporate information will be kept in the system indefinitely unless the interested party requests their deletion.
3. Congress registration: To formalize and manage Congress registration through this website, and manage the contractual relationship with attendees, CORTIJO SOCIAL MEDIA will process their personal data. The data collected during the process are mandatory. Failure to provide them will prevent completing the process. After the purchase, the data will be retained as long as necessary to fulfill the purpose for which they were collected and to determine possible liabilities that may arise from that purpose and data processing.
What allows us to process your personal data?
The processing of your personal data for the following processes: receiving communications and managing information requests, and Congress registration, respond to the legitimate interest of CORTIJO SOCIAL MEDIA, according to Article 6.1.f) of the General Data Protection Regulation (GDPR).
The legal basis for processing your data derived from contracting and purchasing online tickets and season passes is the execution of the service contract, according to Article 6.1.b) of the GDPR.
The data processing we perform for the following activities: sending newsletters is based on the free consent of the interested party, according to Article 6.1.a) of the GDPR. Consent must be expressed explicitly through the enabled means. This consent can be revoked at any time, by expressing it through the indicated means for exercising rights.
Finally, Article 21.2 of the Spanish Law on Information Society Services (LSSI) allows service providers to send commercial communications via email, provided that the data was obtained legally and used to send commercial communications regarding products or services of their own company, similar to those initially contracted with the client.
Do we disclose or share your personal data with third parties?
Your personal data may be disclosed or shared with authorities, judicial bodies, and public agencies to the extent that such communication is mandatory or necessary to fulfill a legal obligation.
Your data may be shared occasionally with service providers and third parties necessary for managing and executing a procedure requiring a provider's involvement.
CORTIJO SOCIAL MEDIA does not conduct nor plans to conduct international data transfers to third parties. If such transfers occur, they will be carried out in compliance with legal provisions, recommendations, and instructions established by the applicable regulations and the Supervisory Authority.
What rights do I have concerning my personal data?
According to current data protection regulations, we inform the interested party that they have the following rights:
– Right of access: The right to contact the data controller to know if your data is being processed and its purpose, and to obtain a copy of it.
– Right of rectification: The right to correct inaccurate or incomplete personal data without undue delay from the data controller.
– Right of portability: The right to request the delivery of personal data in a structured, commonly used, machine-readable, and interoperable format, and to transmit it to another controller, provided that the processing is based on consent or the execution of a contract.
– Right of erasure: The right to request the deletion of your personal data in the following cases:
> When they are no longer necessary for the purpose they were collected.
> When based on consent.
> When you have exercised your right to object.
> When data have been processed unlawfully.
> When data must be deleted due to a legal obligation.
> When obtained in connection with the offer of information society services.
– Right to object: The right of the interested party to object to the controller processing their data in the following cases:
> When based on legitimate interest or public interest, including profiling.
> When aimed at direct marketing.
– Right to restrict the processing of personal data: The right to request the limitation of data processing, either by suspending data processing or retaining data for another purpose.
– Right not to be subject to automated decisions: The right to ensure that you are not subject to a decision based solely on the automated processing of your data, including profiling, that produces legal effects on you or significantly affects you similarly.
You can exercise your rights of access, rectification, erasure, and data portability, and restriction, objection to processing, and not be subject to decisions based solely on the automated processing of your data, where appropriate, at the following address: c/ Imagen 6, 2nd Floor A and B, 41003 Seville, or at the email address: info@cortijosocialmedia.com. Additionally, the interested party can exercise their rights as affected individuals under the terms provided by the regulations, as well as file a complaint with the Spanish Data Protection Agency (www.aepd.es).
