Legal Warning

1. Data controller

Corporate name: IMAWEB 2000, S.L. (IMAWEB)

TIC: B82740838

Address: Paseo de la Castellana 257 - 6º Dcha, Edificio Castellana Hall

(28046) Madrid – Spain

Telephone: 91 562 83 80

Email: ima@imaweb.es

Registered at Madrid’s Mercantile Register, in Volume 15,616, Folio 112, Section 8, Sheet M-262949, Entry 1, with fiscal identification number B-82740838.

2. Purpose

Imaweb processes the information furnished by the interested parties with the purpose of:

• Managing and controlling the portfolio of customers.
• Maintaining the relationship with the customer for invoicing and collection purposes.
• Managing the delivery of information requested to us.
• Providing the interested individuals with product and service offers they are interested in, as well as information on upcoming events or relevant news.

In case you did not agree to this purpose we shall not be able to inform you on our news and events.

3. Data storage

The data needed for the management of the relationship with the customer and for invoicing and collection of the services shall be stored for as long as the contract s valid. Once said relationship ends, where appropriate, the data may be stored during the time provided for by the legislation in force and until the eventual liabilities derived from the contract expire.

The data for the delivery of business correspondence of our products or services shall be stored indefinitely until, where appropriate, you request us to delete them.

We shall not store your personal data for any other purpose for more time than is necessary and shall only store the personal data needed in relation to said purpose. Furthermore, we must keep certain information in accordance with the law or during the time that is reasonably necessary to comply with regulatory requirements, settle disputes, prevent fraud and abuse or enforce our terms and conditions.

4. Legitimacy

The legal basis for the processing of your data is the execution of the rendering of the corresponding service.

The prospective offer of products and services to customers is based on satisfaction of the lawful business interest which entails being able to offer our customers the hiring of other products or services and thus obtain their loyalty. Said lawful interest is acknowledged by the legal regulations in force (General Data Protection Regulation), which explicitly allows for the processing of personal data on said legal basis with direct marketing purposes.

The basis for the delivery of business communications to users who are not customers is the consent that has been requested, which may be revoked at any time. Withdrawal of said consent shall by no means affect the execution of the contract, but the data processing with that purpose conducted beforehand shall not cease to be lawful due to the fact that the consent has been revoked.

Nevertheless, we remind you that you are entitled to oppose to said processing of your data, and you can do so by any of the means described in this Policy.

5. Addressees

The data shall be communicated to the following entities:

• The financial entities through which the management of collection and payment is performed.
• The competent administrative authorities in the cases foreseen by Law and for the purposes defined therein.

6. International data transfers

They shall not be performed.

7. Automated decisions

We shall not create a “commercial profile”, based on the information furnished. No automated decisions shall be made based on said profile.

8. Data source

We inform you that the data is obtained through you and we do not obtain them from other sources.

9. Rights

• Any person is entitled to obtain confirmation of whether IMAWEB is processing personal data concerning them and the following information: processing purposes, the categories of the processed data; the addressees or the categories of addressees to whom they have been communicated or shall be communicated; should it be possible, the storage term foreseen for the personal data or, should it not be possible, the criteria used to determine said term.
• The interested parties are entitled to both access their personal data and to request rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes they were collected.
• The interested parties may request the deletion of the personal data concerning them when one of the following circumstances applies: that they are no longer necessary in relation to the purposes they were collected or processed for; that you withdraw the consent and the processing is not based on another legal standing; that you oppose to the processing and no other lawful reasons for processing prevail; that they have been processed unlawfully.
• Under certain circumstances, the interested parties may request restrictions to the processing of their data, in which case we shall only store them for the exercise or defence of claims.
• Under certain circumstances and due to reasons related to their particular situation, the interested parties may oppose to the processing of their data. IMAWEB shall cease to process the data, unless there are compelling legitimate grounds, or due to the exercise or defence of possible claims.
• The interested parties are entitled to portability, which implies that the personal data of the interested party are directly transferred from a data controller to the other, without them being previously and necessarily transferred to the interested party, provided this is technically possible.
• The interested parties are entitled to withdraw their consent at any time.

Exercise of the rights: The exercise of the rights shall be conducted in writing by attaching a photocopy of your ID document and sending it to the following email address ima@imaweb.es

Reclamation right before the Controlling Authority: In case your rights have not been respected, you may file a claim in writing addressed to the Spanish Data Protection Agency domiciled at Jorge Juan, 6 28001 - Madrid, or you may use the electronic address: sedeagpd.gob.es. In both cases, you must attach the pertinent documentation.

You may also find further information in the Guía para el Ciudadano edited by the Spanish Data Protection Agency.