Pursuant to the EU GDPR 2016/679 and the Spanish Data Protection Act 3/2018
The data subject may exercise the following rights before the DATA CONTROLLER:
Right of Access: allows the data subject to know and obtain information about their personal data subject to processing.
Right to Rectification: allows the data subject to rectify errors, modify inaccurate or incomplete data, and guarantee the accuracy of the information being processed.
Right to Erasure: allows the data subject to request the erasure of the data being processed when it is no longer necessary.
Right to Object: the data subject has the right not to have their personal data processed or for it to be no longer processed, except for legitimate reasons or for the exercise or defence of possible claims, in which case it will be kept encrypted for the corresponding period of time while legal obligations continue.
Right to Restriction: in certain circumstances, the data subject may request the restriction of the processing of their data, in which case the data will only be kept for the purpose of exercising or defending claims.
Right to data Portability: the data subject may ask to receive the data concerning them and which they have provided to the Data Controller, and, whenever technically possible, ask for it to be sent to another Data Controller of their choice in a structured, commonly used and machine-readable format.
Right to Withdraw the consent initially given and to Lodge a Complaint with the Data Protection Authority. www.aepd.es
To exercise their rights, the data subject should contact the Data Controller at the address shown in the first box, accompanied by a copy of their identity document.