Legal notice

1. DATA CONTROLLER

Who is responsible for processing your data?

  • Corporate name: CARTTECLAB, S.L.
  • Registered office: C/ CUARTA, 23, NAVE 1, 37188 CARBAJOSA DE LA SAGRADA, SALAMANCA, SPAIN
  • Spanish tax ID: B01918135
  • Telephone: +34 916574011
  • E-mail address: info@cartteclab.com

2. PURPOSE

Why do we process your personal data?

At CARTTECLAB, S.L., we process your data in order to:

  • Manage our commercial relationship and provide the contracted service.
  • Send commercial information related to our airport, hotel and retail sector.
  • Prepare a quotation tailored to your needs.
  • Manage email communications with interested parties.
  • Monitor security on the facilities (video surveillance).
  • Manage the company’s employees and human resources.

How long will we keep your data for?

The personal data you provide to us will be retained for as long as the business relationship remains in force. However, to be as transparent as possible, we would like to point out that the general calculations we work with are as follows:

  • Accounting, tax and employment: six (6) years.
  • Employment: ten (10) years.
  • Video surveillance: thirty (30) days, unless an offence and/or crime is recorded.
  • Furthermore, when it comes to sending commercial information, even if the relationship between the parties has been terminated, CARTTECLAB, S.L. will continue to retain your information for sending newsletters related to our products and services. You can always exercise your rights under current legislation by contacting us through the channel that is most convenient for you.

Notwithstanding the existence of these general deadlines, we will periodically review our systems to delete data that is no longer legally required.

3. LEGITIMACY

What is the legitimacy for the processing of your data?

Depending on the purposes for which our data is collected, we process your data with the following justifications:

  1. To manage the business relationship you have entered into and contracted with us.
    1. To perform a contract (enabled by Article 6(1)(b) GDPR)
    2. Consent from the data subject (covered by Article 6(1)(a) GDPR)
  2. Sending commercial communications
    1. Consent from the data subject (enabled by Article 6.1. GDPR and Article 21.1 LSSI-CE)
    2. Legitimate interest (enabled by Article 6.1.f GDPR and by Article 22.2 LSSI – EC)
  3. Prepare a quotation tailored to your needs.
    1. Performing a contract and/or managing a pre-contractual relationship (enabled by Article 6(1)(b) GDPR)
  4. Manage email communications with interested parties.
    1. Consent from the data subject (covered by Article 6(1)(a) GDPR)
    2. Legitimate interest (enabled by Article 6(1)(f) GDPR)
  5. Monitoring the security of the premises (video surveillance)
    1. Legitimate interest (enabled by Article 6(1)(f) GDPR)
  6. Managing the company’s employees and internal human resources
    1. Performing contracts (enabled by Article 6(1)(b) GDPR)

Furthermore, all data collected are necessary for providing services. However, data marked with an asterisk (*) are mandatory. If the mandatory data are not provided, CART TECHNOLOGY, S.L. will not be able to provide the contracted service.

4. RIGHTS OF INTERESTED PARTIES

What are my data protection rights?

You may exercise any of the following rights by notifying us in writing at C/ CUARTA, 23, NAVE 1, 37188 CARBAJOSA DE LA SAGRADA, SALAMANCA, SPAIN, or at the email address shown in the heading (info@cartteclab.com). In any case, according to the current regulations, the following rights are recognised:

  • The right to request access to personal data relating to those concerned.
  • The right to request correction or deletion.
  • The right to request limitation of data processing.
  • The right to object to data processing.
  • The right to portability.

You can use the following forms to exercise your rights more easily. You can download them by clicking here. You can also file a complaint with the Spanish Data Protection Agency (AEPD). For more information, see Section VII of this document.

5. INTENDED AUDIENCE

Who will your data be sent to?

Your data will not be passed on to third parties. We also inform you that your data will not be transferred internationally to any third country.

6. ORIGIN OF YOUR DATA

How do we obtain your data?

The personal data used by CARTTECLAB, S.L. comes from the data subject.

What categories of data do we process?

Personal data categories processed:

  • Identification data
    • Name
    • Surname(s)
    • ID / Passport or equivalent document
    • Postal address
    • Email address
    • Sex
    • Date of birth
    • Place of birth
  • Commercial information
  • Economic data
    • Bank account number
    • Credit card number
  • Video Surveillance
    • Image

CARTTECLAB, S.L. does not process specially protected data.

7. SUPERVISORY AUTHORITY

CARTTECLAB, S.L. makes every effort to comply with data protection regulations, as data is our most valuable asset. However, please be aware that, should you believe that your rights have been undermined, you may file a complaint with the Spanish Data Protection Agency (AEPD), located at C/ Jorge Juan, 6. 28001, Madrid, Spain. More information about the AEPD. http://www.agpd.es/