Rights

In accordance with Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights, and subsequent amendments, and with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, and the corrigendum to the European Data Protection Regulation published in the OJEU on 4 March 2021, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, GRUPO TASVALOR, S.A. has a Customer Service Department to which data subjects may apply to exercise their rights of access, rectification, erasure ("right to be forgotten"), objection, portability, restriction of processing, and the right to object to automated decisions (including profiling).

Such requests must be submitted, in person or through an accredited representative, in writing to the Customer Service Department at the following address:

Electronic communications must meet the requirements of Law 59/2003 of 19 December on electronic signatures.

GRUPO TASVALOR, S.A. will resolve the requests received within the legally established period from their submission to the Customer Service Department, provided they are made in accordance with GRUPO TASVALOR, S.A.'s Procedure for handling requests to exercise data subjects' rights (in Spanish).

If the applicant disagrees with GRUPO TASVALOR, S.A.'s decision, they may apply to the Inspection Sub-Directorate of the Spanish Data Protection Agency, whose details are listed below:

To preserve the trust of data subjects and offer them an adequate level of protection that resolves requests or complaints as satisfactorily as possible, the Board of Directors of GRUPO TASVALOR, S.A. has approved the current Procedure for handling requests to exercise data subjects' rights.

Download the Procedure (PDF, in Spanish)

List of legal provisions regulating the protection of data subjects' personal data, ordered by date of publication in the Official State Gazette:

• Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (Official State Gazette no. 294, 06/12/2018).
• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official State Gazette no. 119, 04/05/2016).
• Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (Official State Gazette no. 166, 12/07/2002).
• Royal Decree-Law 14/1999 of 17 September on electronic signatures (Official State Gazette no. 224, 18/09/1999).
• Law 3/1991 of 10 January on Unfair Competition (Official State Gazette no. 10, 11/01/1991).