By means of the present statement Expres de Vea SL, with address in Santa Cristina de Vea s / nº, 36682 A Estrada, Pontevedra and telephone 986 58 64 83, informs consumers and users of the website www.expresdevea.com its policy protection of personal data, so that users determine freely and voluntarily if they wish to provide Expres de Vea SL, the personal data required for the provision of services or, where appropriate, sale of products, offer of budgets that previously have requested by any means and for answering queries, on the occasion of the subscription, registration or completion of any online data form. Expres de Vea S.L., reserves the right to modify this Privacy Policy to keep it adapted to the current legislation on data protection. In such cases, Express de Vea S.L., will announce on this Web site the changes introduced with reasonable anticipation to its implementation.
The visit to this website does not imply that the user is obliged to provide any information about it. In the event that the user provides some information of a personal nature, the data collected on this website will be treated fairly and tender with subjection at all times to the principles and rights contained in Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (RGPD) and in the current Spanish regulations on the protection of personal data.
THE RIGHT OF INFORMATION
In accordance with the regulations on data protection, we inform you that the data provided by you will become part of the treatment of the Expres de Vea S.L. WEB PAGE, being the only recipient of the information provided. The purpose of the treatment will be the management, maintenance of the information provided through the website, maintenance of its user status, user management, management of services / products offered through www.expresdevea.com, the management of queries, the sending of information relating to articles, activities, news, organized events, promotions, events, invitations, training, related to the passenger transport sector carried out by our Company or in collaboration with it, its member associations or in collaboration with them or by collaborating third parties, published in social media, as well as the periodic postal and / or electronic submission of our advertising information, expressly consenting to it. The person in charge of the treatment is EXPRES DE VEA SL, who has his domicile in Santa Cristina de Vea s / nº, 36682 A Estrada, Pontevedra, being able to exercise his rights established in the articles 15 to 22 of the RGPD of the European Union, sending a writing to the previous address, personally at our headquarters accrediting your identity or through electronic life crediting your personality, at info@expresdevea.com.
At the moment of proceeding with the collection of the data, the voluntary or obligatory nature of the data object of collection will be indicated. The refusal to provide the data classified as mandatory will imply the impossibility of providing the requested service or, where appropriate, the contracted product. The user who provides their data must keep them updated and communicate to the data controller any change in their data. The user who provides personal data about another person, should the same, if applicable, inform the owner of the data of the provisions of this Privacy Policy.
Informed consent
Consequently, users who provide personal data on this website unambiguously consent to the incorporation of the same to the treatment system MANAGEMENT OF THE WEB PAGE of which is responsible for the purposes specifically determined above.
THE PRINCIPLE OF DATA QUALITY
The personal data provided by users will be accurate and updated so that they respond truthfully to the current situation of the affected. Therefore, the user must respond to the truthfulness and certainty of the personal data provided and communicate any changes that may occur in the future. Expres de Vea SL, will proceed to the cancellation of the personal data collected when they cease to be necessary or pertinent for the purpose for which they were collected or registered. The cancellation will result in the blocking of the data, being kept only at the disposal of the Public Administrations, Judges and Courts, for the attention of the possible responsibilities born of the treatment, during the term of prescription of these. Once the aforementioned deadline has been reached, theRESTRICTION OF YOUR PERSONAL DATA.
THE TEMPORARY PERIOD OR PERIOD OF CONSERVATION OF DATA
In accordance with the provisions of article 5.1.e) of the RGPD, the data must be maintained in a way that allows the identification of the interested for no longer than necessary for the purposes of processing personal data. After that time, they can only be kept for longer times with the purposes of archiving in the public interest, scientific or historical research purposes or statistical purposes, being sometimes precise, in order to safeguard the principle of minimization, proceed to the pseudonymization of the data (RGPD article 89.1), and without prejudice to the application of the appropriate technical and organizational measures imposed by the RGPD to protect the rights of the affected party or interested party.
Personal data must be kept for the periods indicated in the applicable provisions or if this is foreseen in the contractual relations between the person responsible for the treatment and the person concerned or affected, as long as it serves legitimate purposes derived from the fulfillment of the contract.
With respect to the aforementioned period of storage of your personal data, we inform you that these will be preserved while are necessary or relevant for the final for which they would have been collected or registered. Therefore, it will be canceled when these are no longer necessary to fulfill the legitimate purposes described above. The cancellation will lead to the blocking of data, which can only be kept to make them available, upon request, from public administrations, judges and courts, for the attention of possible responsibilities arising from the treatment, during the prescription period of these. Only when the period for which responsibility can be demanded has expired shall total and definitive suppression of blocked personal data be made.
THE PRINCIPLE OF DATA SECURITY
Expres de Vea SL has adopted all the technical and organizational measures necessary to guarantee the security of the personal data and to avoid its alteration, loss, treatment or unauthorized access. The level of security adopted is in line with the nature of the personal data supplied.
In accordance with the provisions of Article 32 of the RGPD, Expres de Vea SL, as responsible for the treatment, taking into account the state of the art, the costs of application, and the nature, scope, context and purposes of the treatment, as well as risks of varying probability and severity for the rights and freedoms of natural persons, will apply appropriate technical and organizational measures to guarantee a level of security appropriate to the risk , which in its case will include, among others:
Pseudonymization and encryption of personal data;
The ability to guarantee the confidentiality, integrity, availability and permanent resilience of the treatment systems and services;
The ability to restore availability and access to personal data quickly in case of physical or technical incident;
A verification process, evaluation and regular assessment of the effectiveness of technical and organizational measures to ensure the safety of the treatment.
When evaluating the adequacy of the level of security, the risks presented by data processing, particularly as a result of destruction, will be taken into account. or accidental or unlawful alteration of personal data transmitted, conserved or otherwise processed, or unauthorized communication or access to said data by third parties.
Expres de Vea SL will take measures to ensure that any person acting under the authority of the responsible of the treatment or data controller and have access to personal data may only process such data following the instructions of the person responsible, unless it is required to do so under Union or Member State law.
THE RIGHT TO CANCELLATION AND SUPPRESSION
In compliance with the legal provision contemplated in the article 17 of the RGPD of the European Union, the interested party or the affected party shall have the right to obtain without undue delay from the data controller the deletion of the personal data that concerns him, which shall be obliged to remove the personal data without undue delay when any of the The following circumstances:
Personal data are no longer necessary in relation to the purposes for which they were collected or otherwise treated;
The interested party withdraws the consent on which the treatment is based in accordance with Article 6, paragraph 1, letter a) , or Article 9, paragraph 2, letter a), and this is not based on another legal basis;
The interested party opposes the treatment in accordance with Article 21, part 1, and other legitimate reasons for the treatment do not prevail, or the interested party opposes the treatment according to article 21, paragraph 2;
The personal data have been treated unlawfully;
The personal data must be deleted for the fulfillment of an established legal obligation in the law of the Union or of the Member States which applies to the data controller;
personal data have been obtained in connection with the offer of services of the information society mentioned in Article 8, paragraph 1.
When Expres de Vea SL as responsible for the processing has made the personal data public and is obliged, by virtue of the provisions above, to delete such data, taking into account the available technology and the cost of its application, will adopt reasonable measures, including technical measures, with aims to inform those responsible who are processing personal data of the request of the deletion interested of any link to such personal data, or any copy or replica of them.
THE RIGHT TO THE LIMITATION OF TREATMENT
In relation to the provisions of Article 18 of the RGPD of the European Union the interested or affected shall have the right to obtain from Expres de Vea SL as data controller the limitation of the processing of the data when any of the following conditions is met:
The interested party challenges the accuracy of the personal data, for a period that allows the responsible party to verify the accuracy of the same;
the treatment is unlawful and the interested party opposes the deletion of personal data and requests instead the limitation of its use;
the person responsible no longer needs the personal data for the purposes of the treatment, but the interested party you need them for the formulation, the exercise or the defense of claims; The interested party has opposed the treatment under article 21, paragraph 1 of the RGPD, while it is verified whether the legitimate reasons of the responsible party prevail over those of the interested party or affected party in question.
When the processing of personal data has been limited by virtue of previously established, said data may only be subject to treatment, with the exception of its conservation, with the consent of the interested party or for the formulation, exercise or defense of claims, or with a view to the protection of the rights of another individual or legal or for reasons of important public interest of the Union or of a particular Member State.
Any interested party that has obtained the limitation of the treatment in accordance with the above will be informed by Expres de Vea SL as responsible for the treatment before the lifting of said limitation .
SENDING OF INFORMATIONAL COMMUNICATIONS
Regarding the sending of communication is informative life e-mail or other equivalent electronic communication means, given that the user’s email address is a personal data when it allows to identify you, by collecting it in the online data form the user expressly authorizes Expres de Vea SL, your treatment for sending commercial or promotional communications concerning the products or services provided by this company. These communications will be preceded by the word advertising at the beginning of the message and will clearly identify Expres de Vea SL. However, you can revoke your consent at any time to receive informative communications with the simple notification to our email address (info@expresdevea.com), at the postal address Santa Cristina de Vea s / nº, 36682 A Estrada, Pontevedra or by calling 986 58 64 83.
On the website of the AEPD you can find a series of models that will help you in the exercise of your rights.
