Privacy Policy
Data Protection Policy
- Who is the data controller for your personal data?
FIDAMC is the data controller responsible for data processing related to the various processes involving the management of users, customers, prospects, partners, and suppliers. Its registered office is located at AVDA RITA LEVI MONTALCINI 29, 28906 GETAFE (province of MADRID), and its Tax Identification Number (CIF) is G84812296.
For the purposes of our data protection policy, our contact phone number is 916 24 46 09 and our contact email address is cfa@fidamc.es
We also wish to inform you that, with regard to the processing of data related to the management of Users, Customers, and Suppliers, there are no entities that are joint controllers.
We would also like to inform you that our organization has appointed a Data Protection Officer (DPO) in accordance with current regulations. You may contact our DPO at the following email address: dpo@fidamc.es.
- What kind of information do we have about you, and how did we obtain it?
The categories of personal data that CFA CÁDIZ processes regarding its customers and suppliers are:
- Identification Information
- Mailing or email addresses
- Business Information
- Economic and Transaction Data
- Professional Information
- Image
- Lifestyle data, social profiles.
- Education and Curriculum Data.
- Information on special categories contained on the Terms and Conditions page.
We have obtained all of the above-mentioned data either directly from you through the submission of a commercial offer, contractual proposal, etc., or through your company, which provided us with your identification details and other information necessary to fulfill the purpose of the contractual relationship between the parties. It is your obligation—or that of your company—to provide us with updated information in the event of any changes.
- How long will we retain your data?
Personal data relating to individuals associated with prospective customers, customers, and suppliers that CFA CÁDIZcollects through various contact forms and/or information collection forms will be retained until the data subject requests its deletion. Data provided by our customers and suppliers will be retained for as long as the business relationship between the parties continues, while complying in all cases with the minimum legal retention periods applicable to each matter.
In any case, CFA CÁDIZ will retain your personal data for as long as is reasonably necessary, taking into account our need to respond to any questions that may arise, resolve issues, make improvements, launch new services, and comply with the requirements of applicable law. This means that we may retain your personal data for a reasonable period of time even after you have stopped using our products or this website. After this period, your personal data will be deleted from all CFA CÁDIZ systems .
With regard to the CFA CÁDIZ Rules, the personal data provided will be processed for the time necessary to determine whether to initiate an investigation into the reported facts; that is, within a maximum period of three months from receipt of the report, except in particularly complex cases, in which case this period may be extended by an additional three months. If the aforementioned period elapses without any investigative proceedings having been initiated, the data will be anonymized and the report will subsequently be deleted from the system.
- For what purpose and on what legal basis do we process your data?
At CFA CÁDIZ,we processthe data provided to us by interested parties in order to manage various activities arising from specific procedures related to sales, after-sales service, supplier management, candidate management, service quality, etc. Accordingly, we will use your data to carry out some of the following actions based on the respective legal basis:
| PURPOSE OF DATA PROCESSING | LEGAL BASIS |
| Accounting, tax, and administrative management, and customer billing | (Pre)contractual Performance; Regulatory Obligation |
| Surveillance and Access Control for Facilities | Performance of a mission in the public interest or in the exercise of public authority by the data subject |
| Administrative, Accounting, and Tax Management of Suppliers | (Pre)contractual Performance; Regulatory Obligation |
| Log of visitors to the facilities for access control and security purposes. | Legitimate interest of the data controller |
| Tax, accounting, and administrative management involving professional associates, commission agents, etc. | (Pre)contractual Performance; Regulatory Obligation |
| Handling requests for information received through web forms or social media | Consent of the Data Subject |
| Management of Data Subjects' Data Protection Rights | Regulatory Requirement |
| Receipt and processing of unsolicited applications. | Consent of the Data Subject |
| Manage the recruitment process by collecting resumes, reviewing and sorting them, coordinating job interviews, and, when appropriate, finalizing employment contracts with the selected candidates. | (Pre)Contract Performance |
| Management of reports regarding conduct, actions, or events that may constitute violations of both the entity’s internal policies and external laws and regulations, in accordance with Law 2/2023 on Whistleblower Protection. | Regulatory Requirement |
With regard to the legal basis referred to, you are required to provide your personal data; if you do not provide your personal data, we will be unable to perform your contract or comply with legal obligations or those imposed by public authorities.
We will not create marketing profiles based on the information you provide, and consequently, we will not make automated decisions about you based on a marketing profile.
- To whom will your data be disclosed?
CFA CÁDIZ will never share your personal data with any third-party company that intends to use it for direct marketing purposes, unless you have expressly authorized us to do so.
We hereby inform you that we may disclose your personal data to public administration bodies and competent authorities in cases where CFA CÁDIZ receives a legal request from such authorities or in cases where, acting in good faith, we believe that such action is reasonably necessary to comply with a judicial proceeding; to respond to any claim or legal action; or to protect the rights of CFA CÁDIZ, its customers, and the general public.
We also inform you that the data processed by the Whistleblower Channel may be disclosed to public agencies or institutions, judges, and courts when necessary for the adoption of disciplinary measures, or to the Public Prosecutor’s Office when the matter falls within its jurisdiction—while preserving the confidentiality of the data—and to the Independent Whistleblower Protection Authority.
We would like to inform you that your personal data or the personal data of third parties provided by you or your company will not be transferred or disclosed to third parties unless required by law, and the company is solely responsible for its processing and safekeeping.
CFA CÁDIZ may provide your personal data to third parties (e.g., Internet service providers who help us manage our website or perform the contracted services, IT support and maintenance companies, logistics companies, tax and accounting firms, etc.). In any case, these third parties must maintain, at all times, the same security standards as CFA CÁDIZ with regard to your personal data and, when necessary, will be bound by legal obligations to keep your personal data private and secure, and to use the information solely in accordance with specific instructions from CFA CÁDIZ.
We would like to inform you that our organization does not transfer data internationally in connection with the management of Users, Customers, and/or Suppliers.
- What are your rights as an affected party or interested party?
Any person has the right to obtain confirmation as to whether or not CFA CÁDIZ is processing personal data concerning them.
Specifically, data subjects may request the right to access their personal data, as well as to receive it in a commonly used and machine-readable format if the processing is carried out electronically (right to data portability).
In addition, interested individuals may request the right to correct inaccurate data or, where applicable, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In addition, under certain circumstances, data subjects may request the restriction of the processing of their data; or, under certain circumstances and for reasons related to their particular situation, data subjects may exercise their right to object to the processing of their data. CFA CÁDIZ will cease processing the data, except for compelling legitimate grounds, or for the exercise or defense of potential claims, or in cases covered by the exceptions established in applicable regulations.
We also inform you that you have the right to withdraw your consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to its withdrawal.
Users are also informed that they may exercise the aforementioned rights at any time by contacting us in writing using the contact information provided in Section 1, “Data Controller,” of this CFA CÁDIZ Data Protection and Privacy Policy. In any case, the organization reserves the right to request supporting documentation from the requesting individual for the purpose of verifying their identity, and only in those cases where such verification cannot be performed by other means.
You also have the right to file a complaint with the Spanish Data Protection Agency, particularly if you have not received a satisfactory resolution regarding the exercise of your rights.
Spanish Data Protection Agency.
6 Jorge Juan St. – 28001 – Madrid
Phone: 901100099 / 912663517
- Data Protection for Website Users.
In accordance with Regulation (EU) 2016/679, CFA CÁDIZ hereby informs you that the personal data of website users (such as the data you provide through completed forms and the metadata associated with those forms: date, time of submission, IP address from which the form was sent, etc.) will be processed by FIDAMC for the purposes specified in each data collection form on our website. Such processing of your data is based on your consent. By clicking the “SUBMIT” button, the User consents to the processing of their data by CFA CÁDIZ.
We also wish to inform you that, unless required by law or with your express consent, FIDAMC will not share your information with third parties.
Likewise, the User is hereby informed that at any time they may exercise their rights to access, correct, or delete their data, as well as any other rights recognized in this document and governed by Regulation (EU) 2016/679, by contacting us in writing using the contact information provided in Section 1, “Data Controller.”
Furthermore, in accordance with the provisions of Law 34/2002 of July 11 on Information Society Services and Electronic Commerce, CFA CÁDIZ undertakes not to send advertising via email without first obtaining the recipient’s express consent. Users may opt out of receiving advertising by checking the corresponding box.
- Additional Information About Our Privacy Policy
8.1 Security Measures
CFA CÁDIZ adheres to the security standards required by current European and Spanish data protection regulations, taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of the processing described, as well as the risks—varying in likelihood and severity—to your rights and freedoms as an individual.
8.2 Processing of Children's Data
Under EU Regulation 2016/679 and the LOPDGDD 3/2018, minors over the age of 14 may give their consent to the use of information society services, such as registering for a forum, filling out a contact form, etc. However, it is CFA CÁDIZ’s responsibility to verify the accuracy of the age provided by the minor.
For the processing of data pertaining to children under 14 years of age, such data collection will always be carried out with the express consent of their parents or legal guardians.
8.3 Changes to Our Data Protection and Privacy Policy
From time to time, CFA CÁDIZ may make changes and corrections to this section of the Data Protection Policy for Customers, Suppliers, and Users. Please check this section regularly to see if any changes have been made and how they may affect you.
8.4 Why is it necessary to accept this Data Protection and Privacy Policy?
This section provides you, in an easily accessible manner, with all the necessary information so that you can understand the types of data that CFA CÁDIZ maintains about its users, potential customers, customers, and/or suppliers; the purposes for which the data is processed; the rights granted to you as a data subject under data protection regulations; and how to exercise those rights. Therefore, by intentionally submitting your personal data through our contact channels and/or by entering into a business relationship with our company, we consider that you acknowledge and accept the processing of your personal data as described in this policy. This personal information will only be used for the purposes for which you have provided it to us or as permitted by applicable national or regional regulations.
In any case, we must warn you that your refusal to provide us with certain requested information could hinder the progress of the contractual relationship between the parties, with potentially serious consequences regarding the provision of the various services set forth in the commercial contract entered into with the contracting party.
If you have any questions regarding this section of the Data Protection Policy for Users, Prospective Customers, Customers, and Suppliers of CFA CÁDIZ, please contact the company using the address provided in Section 1, “Data Controller,” and we will be happy to assist you and answer any additional questions you may have.
- Applicable Law
This Data Protection Policy shall at all times be governed by the provisions of Spanish and European legislation regarding the protection of personal data and privacy.
