1

ADDITIONAL INFORMATION ON PERSONAL DATA PROTECTION

Who is the data controller responsible for your personal data?

The processing of the personal data collected via this website and any collected as a result of the management of your requests, queries or complaints shall be the responsibility of CETAQUA Centro tecnológico del Agua, Fundación Privada (hereinafter, “CETAQUA”), with a registered address at Carretera d’Esplugues 75, Cornellà de Llobregat 08940 (Barcelona) and assigned tax identification number G-64386626. If you have any questions about how your personal information is processed, you may contact the CETAQUA Data Protection Officer via the following means of contact:

What is the purpose of processing your personal data?  How long are they processed?

The personal data collected will be processed for the following main purpose:

  • To manage requests, queries or complaints you send via the website for the purposes of internal processing and, as applicable, to respond to you.

Your personal data will be processed for the main purposes as long as necessary to manage the request, query or complaint and will be processed throughout the contractual relationship if related to a contract you have signed with the company.

Likewise, if you grant consent by ticking the corresponding boxes, your personal data will be processed for the following additional purposes:

  • To send commercial communications related to Fundación Centro Gallego de Investigaciones del Agua, Fundación Privada and Centro Andaluz de Investigaciones del Agua, Fundación Privada activities as well as to send you information on events, webinars, conferences and other dissemination activities organized by CETAQUA and the aforementioned foundations.

Your personal data will be processed for the additional purposes until you ask us to stop doing so. Of course, you may at any time ask that we stop processing your data for the additional purposes. To do so, simply send us a request as indicated in the section of this document entitled “What are your rights?”.

In any case, your personal data will be blocked and saved when the indicated periods end throughout the period during which any liabilities may derive in relation to the performance of the contract or any other purpose. When such liabilities expire, your personal data will be definitively deleted.

What is the legal basis for processing your data?

The legal basis for processing your personal data for the main purposes is consent.

The legal basis for processing your personal data for the additional purposes is the consent you grant, as applicable, by ticking the corresponding boxes.

What security measures have been implemented to protect your personal data?

Your personal data will be processed under absolute confidentiality. Likewise, the proper technical and organizational measures have been implemented to guarantee their security and to prevent their destruction, loss, illegal access or illegal alteration. Criteria were taken into account when determining these measures such as the scope, context and purposes of processing, the state of technology and the existing risks.

Do any other entities have access to your personal data to help CETAQUA with any of its tasks?

CETAQUA relies on several providers who assist it with the performance of different tasks relating to the processing of your personal data.

Moreover, CETAQUA contracts the services of Microsoft Ireland Operations Limited to store different types of information in Microsoft Azure possibly including your personal data. Microsoft Ireland Operations Limited may subcontract some of these tasks with Microsoft Corporation, with a registered address in the USA. However, any international data transfer to Microsoft Corporation is legal as sufficient guarantees have been established to protect your personal data. To this end, Microsoft Corporation (i) operates under Privacy Shield and (ii) the Spanish Data Protection Agency believes transfers to said entity are legal given certain conditions.

Are your personal data assigned to third parties?

Your personal data will be communicated to third parties if necessary to comply with any legal obligations.

What are your rights?

You have the following data protection rights:

2

You may exercise these rights by sending a communication to CETAQUA either by email at the address info@cetaqua.com or regular mail to the address Carretera d’Esplugues 75, Cornellà de Llobregat 08940, with the reference “Protección de datos” (Data protection). The request must include a copy of your national identity document or other equivalent form of identification as well as the minimum content established by applicable regulations. If the request does not meet these requirements, CETAQUA may ask for correction. Exercising these rights is free of cost; however, a fee may be charged when the requests are ungrounded, excessive or repetitive.