BASIC INFORMATION
Who is the personal data controller?- Company name: Compañía Española de Petróleos S.A
- Registered office: Paseo de la Castellana 259 A, 28046 de Madrid
- Email: dpo@cepsa.es
More details in the Additional Information section.
For what purpose will your personal data be processed??
1.- Provision of the Newsletter service
More details in the Additional Information section.ADDITIONAL INFORMATION
1. WHO IS THE DATA CONTROLLER?
Compañía Española de Petróleos S.A, with its registered address at Torre Cepsa, Paseo de la Castellana 259 A, 28046, Madrid, and with Tax ID No. A28003119 (hereinafter, “CEPSA”).
2. WHICH DATA ARE PROCESSED, FOR WHAT PURPOSE, AND ON WHAT LAWFUL BASIS?
Subscription to the Newsletter on the lawful basis of executing the contract by means of the identifying and contact data that you provide us, with the exclusive purpose of sending you a compilation of news regarding current events of CEPSA and its "Planet Energy” content portal.
3. HOW LONG ARE PERSONAL DATA STORED FOR?
We will store the data you provide while the contractual relationship related to the Newsletter remains in force, or until you exercise your right to object in order to stop receiving it.
If you revoke your consent or exercise your rights of cancellation or removal, your data shall be kept blocked and available to the Courts or competent public bodies, particularly the Spanish Data Protection Agency (AEPD), within the time limits legally established to meet the possible liabilities arising from personal data processing. Once this time limit has expired, they will be fully deleted.
4. WHAT IS THE PERSONAL DATA SOURCE
The personal data that CEPSA will process to send the Newsletter have been provided by the Data Subject themselves, such as email address. The Data Subject is responsible for truthfulness of the data and ensuring they are up to date.
5. ARE YOUR DATA COMMUNICATED TO THIRD PARTIES? DO ANY INTERNATIONAL TRANSFERS TAKE PLACE?
We will not share your personal data with third parties unless we are required to do so by law or you have given prior consent. We inform you that if third-party providers hired to manage the Newsletter access your personal data, they will do so in their capacity as data processors with all the legal safeguards required by applicable regulations.
No international transfers of data subjects’ personal data are foreseen. However, in the event of any international transfers, they will be carried out in compliance with the criteria and requirements of the regulations in force, through the adoption of appropriate legal safeguards, which may consist of the formalization with the recipient of the data of (i) Standard Contractual Clauses approved by the European Commission to legitimize the international transfer of data to third countries or (ii) in another valid legal instrument that allows guaranteeing an adequate level of protection equivalent to that of the European Economic Area.
If you wish, you may obtain additional information on international transfers by contacting our DPO at dpo@cepsa.com.
6. WHAT ARE YOUR RIGHTS?
You are hereby reminded that, as a data subject, you can exercise, in respect of CEPSA, where applicable, your right to access, rectify or erase data, to restrict data processing, to object, to data portability, and to object to automated individual decision-making. Data Subjects may withdraw their consent if they granted it for any specific purpose and may modify their preferences at all times.
Data Subjects may exercise their rights by sending an email to derechos.arco@cepsa.com or at CEPSA’s registered office: 259 A Paseo de la Castellana - Torre Cepsa, 28046, Madrid, Spain.
Data Subjects are informed that they can direct any complaint regarding the protection of their personal data to the Spanish Data Protection Agency www.aepd.es Spain's Supervisory Authority.