Your rights under the General Data Protection Regulation
Last Updated: January 2024
Colagminia is committed to complying with the General Data Protection Regulation (GDPR), the European Union regulation on data protection and privacy. This page explains how we process personal data in accordance with GDPR requirements and outlines your rights as a data subject.
For the purposes of GDPR, Colagminia acts as the data controller for personal information collected through our website and services. Our contact details are:
Colagminia
Calle Gran Via 28
28013 Madrid, Spain
Email: [email protected]
We process personal data under the following legal bases:
As a data subject, you have the following rights:
You have the right to request access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
You have the right to request correction of any incomplete or inaccurate personal data we hold about you.
You have the right to request deletion of your personal data where there is no compelling reason for us to continue processing it. This right is also known as the "right to be forgotten."
You have the right to request the restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to request the transfer of your personal data to you or to a third party in a structured, commonly used, machine-readable format.
You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis for processing.
Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. The retention period may vary depending on the context of the data and our legal obligations. When personal data is no longer needed, we will securely delete or anonymize it.
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.
We have implemented appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. We will also notify affected individuals directly when the breach is likely to result in a high risk to their rights and freedoms.
To exercise any of your rights under GDPR, please contact us at:
Email: [email protected]
We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Spain, the relevant authority is the Agencia Española de Protección de Datos (AEPD).
We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.