The companies pertaining to Grupo GVC GAESCO (GVC Gaesco Holding SL, GVC Gaesco Beka, S.V., S.A., GVC Gaesco Gestión, SGIIC, S.A., GVC Gaesco Pensiones, SGFP, S.A., and GVC Gaesco Correduría de Seguros S.A.) are committed to protecting the personal information shared as it is essential to ensure and protect the privacy and confidentiality of your personal data in accordance with the General Data Protection Regulation (EU Regulation 2016/679).
This declaration establishes our privacy and data protection policy with regard to the information provided to us and thus we are able to guarantee that i) you may request the cancellation of your personal data, at any time, provided these comply with the legal requirements of data protection and conservation, ii) we undertake to comply with the obligation of secrecy of personal data collected, the duty to keep and not to disclose data to third parties without the express consent of the user, (iii) we have taken the necessary technical and organisational measures, taking into account the state of the art, the costs of implementation, and the nature, scope, context and purposes of processing data, as well as quantifiable and subjective risk variables on the rights and freedoms of persons, to ensure a level of security appropriate to the risk identified, and to ensure the pseudonymisation and encryption of personal data as well as the ability to ensure the continued confidentiality, integrity, availability and resilience of processing systems and services.
Intended purpose of collecting, processing and use of personal data
The collection and use of personal data, with the exception of the cases described in the following section "data processing for web access purposes", are only possible if you voluntarily provide us with your personal data. This applies to the following situations and purposes:
Contracting and opening of account "the Contract"
The personal data provided during the process of opening an account or customer registration will be collected, processed and used for the purpose of managing the subsequent execution of the Contract, and for the purpose of maintaining the contractual relationship, management, administration, provision, expansion and improvement of services, as well as sending technical and operational information related to the Contract, by any means, including email and / or equivalent means. In this sense, we inform you that your personal data together with the result of possible satisfaction surveys will be used to evaluate your opinion and study your particular profile, with the sole purpose of improving the services provided by us and thus adapt and design our commercial offers.
No health data will be transferred to third parties, except by legal obligation or the pursuit of a legitimate interest of the company, a third party or yourself.
Transfer of contract data
For the management of the purposes inherent to the development and fulfillment of the present Contract we will have to communicate your personal data, necessary to provide the corresponding service, to the various suppliers of the products and services who will be obliged to use the data, only and exclusively, to fulfil the Contract, and in virtue of the contracts signed with third parties referred to.
Retention period of contract data
Personal data provided during the contract process will be kept as long as the commercial relationship between the parties is maintained and for a maximum period of five (5) years.
Legitimacy of personal data processing
The legal basis for the processing of your personal data is, in reference with the aforementioned intentions, the execution of the Contract subscribed (Royal Legislative Decree 1/2007, of 16 November, approving the consolidated text of the General Law for the Defence of Consumers and Users and other complementary laws).
Newsletter and publicity
Política de privacidad para el envío de comunicaciones GVC GAESCO HOLDING, S.L.
Retention period of data provided
The data incorporated for the aforementioned reason shall be retained as long as the user does not exercise his/her rights to withdraw or revoke the consent given.
Legitimacy for the treatment of data:
The companies pertaining to Grupo GVC GAESCO, in the case of having obtained the express and explicit consent of the user, will make automated decisions, including the development of profiles, in order to inform on products and services according to the User’s circumstances and the market.
Purposes other than those mentioned
Where treatment of personal data is planned for a purpose other than that for which they were collected, the User will be informed beforehand regarding the purpose and any additional information pertaining to the use, so that the User can express his/her explicit consent or not.
Treatment of data to allow the use of the web site
When visiting any of our web sites, we gather the necessary data to access these (data use). This includes the User’s IP address, data on the visit time, topic of interest, as well as possible identification data (for example, login data when registering in a private area). The data is used to provide and design services based on each individual users’ needs and are eliminated as soon as these are not required.
If you visit our web sites, the information may be stored as Cookies downloaded to your PC. Cookies are text files that are sent from a web server to your navigator and are stored in your personal computer. Cookies provide information on when a web site is repeatedly visited. In this manner we can ensure better functionality of the site and also avoid having to repeatedly login. For more information on the Cookies used please refer to our Policy on Cookies.
Use of profiles with pseudonyms for advertising and market research
Data collection by third party providers / social networks
Our web site contains links to social network operators (for example, Facebook, XING, Google Plus, LinkedIn, Twitter, etc.). These networks are operated exclusively by third parties. If you follow the links, information can be transmitted to these. In order to know the purpose and scope of the collection of your data by social networks and thereof use, as well as your rights and how to protect your privacy, we encourage users to read the content of privacy statements published on the operators’ websites.
Communication of data to third parties
Data will not be communicated to third parties unless specific and explicit consent by the User is given, or by obligation or legal decision or the pursuit of a legitimate interest of the company, a third party or yourself. However, your data may be communicated to other entities of the corporate group pertaining to Grupo GVC Gaesco (GVC GAESCO HOLDING, S.L., GVC GAESCO BEKA S.V., S.A., GVC GAESCO CORREDURÍA DE SEGUROS, S.A., GVC GAESCO PENSIONES, S.G.F.P., S.A. and GVC GAESCO GESTIÓN, S.G.I.I.C., S.A.) for the correct execution of the purposes described in the section “Intended purpose of collecting, processing and use of personal data”.
The companies within Grupo GVC GAESCO have implemented the technical means and organizational measures necessary, taking into account the state of the art, the costs of implementation, and the nature, scope, context and purposes of processing data, as well as quantifiable and subjective risk variables on the rights and freedoms of persons, to ensure a level of security appropriate to the risk identified, and to ensure the pseudonymisation and encryption of personal data as well as the ability to ensure the continued confidentiality, integrity, availability and resilience of processing systems and services.
All our employees, collaborators and all persons involved in the processing of personal data are obliged to comply with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 relative to the protection of individuals with regard to the processing of personal data and on the free movement of such data, as well as other relevant laws for the protection of data and the confidential handling of personal data.
To protect our users' personal information we use a Secure Socket Layer (SSL) transmission method. The SSL encryption guarantees the encrypted transmission and data.
Exercising your rights
We inform you that you have the right, free of charge and to the extent that legal requirements are met, to obtain confirmation as to whether or not Grupo GVC GAESCO companies process personal data concerning you. The interested parties have the right to access their personal data, as well as request the rectification or inaccurate data or, where appropriate, request deletion when, among other reasons, the data is no longer necessary for the purposes for which they were collected. The interested parties can request limitation of the processing of their data, in which case these will be kept for the exercise or defence of claims, or compelling legitimate grounds.
Under certain circumstances and for reasons related to their particular situation, interested Parties may object to the processing of their data. Grupo GVC GAESCO shall cease to process the data, except on compelling legitimate grounds or for the exercise or defence of possible claims.
In all the communications whose purpose is the remission of publicity, interested parties will be able to exercise their right of opposition. To the extent of the given consent for data protection, the interested party may withdraw consent at any time.
To exercise the mentioned rights, the User may send an explicit request to the following address: DPO - Grupo GVC Gaesco C/ Doctor Ferrán 3-5, Barcelona. 08034 (Spain). Additional information on Data Protection is available and detailed in our web page (www.grupo.gvcgaesco.es.)
Claims with the data protection authority
Users can submit claims regarding the processing of personal data with the Spanish Data Protection Authority (www.agpd.es).
Last updated May 2018