PRIVACY AND DATA PROTECTION POLICY
GENERAL PROVISIONS:
For the purposes envisaged in Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, in Spanish Constitutional Act 3/2018 of 5 December on Personal Data Protection and Digital Rights Guarantee and in the other domestic regulations in force, CICAE – Asociación de Colegios Privados e Independientes hereby states that it fully complies with the prevailing personal data protection legislation and with the confidentiality commitments typical of its activity.
CICAE – Asociación de Colegios Privados e Independientes hereby states that it keeps personal data files owned by CICAE – Asociación de Colegios Privados e Independientes for its own management, communication and information purposes. That system is described in the corresponding Record of Processing Activities, which users can access to check their data situation.
SECURITY MEASURES AND LEVELS
CICAE – Asociación de Colegios Privados e Independientes has adopted the necessary measures to maintain the security level, as required in article 32 of the GDPR, based on the nature of the personal data processed and the processing circumstances, with the aim of avoiding, as far as possible and always depending on the state of the art, their alteration, loss or unauthorised processing or access, thus ensuring their confidentiality, integrity and availability.
SCOPE OF APPLICATION:
The security measures that CICAE – Asociación de Colegios Privados e Independientes has described in the Record of Processing Activities will be applied to all the the information system’s assets processing the personal data to comply with the prevailing data protection legislation.
All the staff hired by CICAE – Asociación de Colegios Privados e Independientes and its Data Processors are obligated to comply with the aforementioned regulations, paying special attention to their functions and obligations, including the duty of secrecy, which will be duly determined by CICAE – Asociación de Colegios Privados e Independientes.
DATA COLLECTION:
By accepting these terms and conditions, essential user data are collected to provide the services, which will be requested personally through forms or the website. When the data are collected, users will be duly informed of their rights.
To enable the information in our processing system to always be updated and not include errors, we ask our clients and users to notify us, as soon as possible, of any modifications and changes to their personal data.
PURPOSE: EXERCISING USER RIGHTS:
To exercise the right of access, objection, rectification, cancellation or erasure, revocation of consent, restriction of processing and portability, users must write to CICAE – Asociación de Colegios Privados e Independientes, Av. del General Perón, 22, 2º D, 28020 Madrid, Spain. Nevertheless, other means can be used which recognise the identity of the client exercising any of the aforementioned rights.
CONSENT:
Users provide their consent so that CICAE – Asociación de Colegios Privados e Independientes can use their personal data to correctly provide the services arranged.
By completing the form included on the website or sending emails or other communications to CICAE – Asociación de Colegios Privados e Independientes, users expressly consent to the inclusion of their personal data in the aforementioned processing system owned by CICAE – Asociación de Colegios Privados e Independientes.
When requesting that information, clients or users will be notified of the information recipient, the purpose for which their data are collected, the identity and address of CICAE – Asociación de Colegios Privados e Independientes and the users’ powers to exercise their right of access, objection, rectification, cancellation or erasure, revocation of consent, restriction of processing and portability and can file at a claim at the AEPD (Spanish Data Protection Agency).
THIRD-PARTY ASSIGNMENT:
CICAE – Asociación de Colegios Privados e Independientes does not assign personal data without the data subjects’ express consent, which must be provided each time; such data can only be assigned for the stated purpose and always with the users’ or clients’ consent.
CONFIDENTIALITY AND PROFESSIONAL SECRECY:
The data collected in all the private communications between CICAE – Asociación de Colegios Privados e Independientes and the clients or users shall be processed in a strictly confidential way. CICAE – Asociación de Colegios Privados e Independientes undertakes its obligation to maintain the secrecy of the personal data and its duty to keep them and adopt all the necessary measures to avoid their alteration, loss or unauthorised processing or access, in accordance with that established in the regulations in force.
Moreover, any type of information which the parties share with each other, which they agree is confidential or which simply refers to the content of that information is considered to be confidential. Viewing data on the Internet does not mean direct access to such data, unless the data subject provides express consent each time.
We recommend clients not to provide third parties with the identification, password or reference numbers provided to the former by CICAE – Asociación de Colegios Privados e Independientes. Likewise, to maintain professional secrecy in all the communications between CICAE – Asociación de Colegios Privados e Independientes and the clients, clients/users must not disclose confidential information to third parties.
AMENDMENTS TO THE SECURITY AND DATA PROTECTION POLICY:
CICAE – Asociación de Colegios Privados e Independientes reserves the right to amend its security and data protection policy so that it conforms to the legislative or case law developments and those arising from the standard codes existing on the matter, or due to strategic corporate decisions, effective from the date on which that amendment is published on the website of CICAE – Asociación de Colegios Privados e Independientes.
CONTACT ADDRESS:
This website is managed by CICAE – Asociación de Colegios Privados e Independientes, with tax number (CIF) G86050580.
The information processing system created is located at the registered office of CICAE – Asociación de Colegios Privados e Independientes, which is hereby established for the purposes of this Legal Notice at Av. del General Perón, 22, 2º D, 28020 Madrid, Spain, under the supervision and control of CICAE – Asociación de Colegios Privados e Independientes, which is liable for adopting the technical and organisational security measures to protect the confidentiality and integrity of the information, pursuant to Data Protection Regulation (EU) 2016/679 of 27 April 2016, Spanish Constitutional Act 3/2018 of 5 December on Personal Data Protection and Digital Rights Guarantee, other domestic regulations in force and the other applicable legislation.
Pursuant to Act 34/2002 on the Information Society and Electronic Commerce Services, CICAE – Asociación de Colegios Privados e Independientes hereby states that the broad sense of this Act includes the provision of information through this medium among those services. In any case, Data Protection Regulation (EU) 2016/679 of 27 April 2016, Spanish Constitutional Act 3/2018 of 5 December on Personal Data Protection and Digital Rights Guarantee, other domestic regulations in force and their implementing regulations, in particular, shall be applicable to the obtainment of personal data, the information provided to the data subjects and the creation and storage of personal data files.