Privacy Policy

XABIER DÍAZ Personal Data Protection Policy

In compliance with current regulations on data protection, Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR), Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD, Law 3/2018 of December 5, we inform you of the Personal Data Protection Policy, with regard to the processing of personal data, which is detailed below.

Responsible for the processing of personal data

The data controller is the legal entity that determines the purposes and means of processing personal data. In other words, the controller decides how and for what purposes personal data is processed.

For the purposes of this Data Protection Policy, the person responsible for processing personal data is:

Company name: XABIER DÍAZ CARRO
NIF: 32646098J
Registered office: Sabaxáns Nº 80 (Bastavales) 15280 – Brión (A Coruña)
Email: comunicacion@Xabier Díaz.com
Telephone: 623033524
Activity: Musician and composer.

What personal data do we process and how do we protect it?

Personal data is any information about an identified or identifiable natural person.

For the purposes established in this Privacy Policy, the person responsible collects and processes the personal data explained in each type of processing, and which will depend on the different services you request or the contractual relationship you maintain with our entity.

Our organization is committed to treating you with complete confidentiality and applying appropriate security measures, physical, technical and organizational, to protect your personal data.

You guarantee and are responsible, in any case, for the veracity, accuracy, validity and authenticity of the personal data provided and undertake to keep them duly updated.

“Client” data processing

What type of personal data do we process?

Identification data: name, ID, address, telephone number, email address.
Financial details: bank account, credit card details.
Academic and professional data: profession, position, experience, qualifications.
Data relating to transactions: products and services supplied.

For what purpose do we process your personal data?

We process the personal data that you provide us for the management of the company’s customer data, to maintain the commercial relationship, accounting, administrative and billing management, as well as tax obligations.

The purpose of advertising and commercial prospecting has also been foreseen, for which the express consent of the interested party is requested.

The personal data provided will be kept as long as the commercial relationship is maintained. If you decide to cancel your personal data, it may be kept in our databases for the periods provided by law in order to comply with tax and accounting obligations, and will be deleted once said legal periods or those that are applicable have expired.

What is the legitimacy for the processing of your data?

The legal basis for the processing of your data is the execution of a contract, as well as the fulfillment of a legal obligation of the person responsible.

Communication of offers and promotions that may be of interest to you is based on the express consent requested.

To which recipients will your data be communicated?

Your personal data will not be transferred to any entity, except those that are necessary to public organizations due to legal obligation.

Nor have international transfers of personal data been planned.

Data processing of “Contacts and potential clients”

What type of personal data do we process?

Identification data: name, address, telephone number, email address.

For what purpose do we process your personal data?

We process the personal data that you provide us in the contact form for the management of data of commercial contacts and potential clients.

The purpose of advertising and commercial prospecting has also been foreseen, for which the express consent of the interested party is requested.

The personal data provided will be kept as long as the commercial relationship is maintained. If you decide to cancel your personal data, it will be deleted from our contact database.

What is the legitimacy for the processing of your data?

The legal basis for the processing of your data is the express consent requested.

To which recipients will your data be communicated?

Your personal data will not be transferred to any entity.

Nor have international transfers of personal data been planned.

“Suppliers” data processing

What type of personal data do we process?

Identification data: name, ID, address, telephone number, email address.
Financial details: bank account.
Academic and professional data: profession, position, qualifications.
Data related to transactions: products and services delivered.

For what purpose do we process your personal data?

We process personal data provided to us by the management of data from the company’s suppliers, to maintain the commercial relationship, accounting, administrative and payment management, as well as tax obligations.

What is the legitimacy for the processing of your data?

The legal basis for the processing of your data is the execution of a contract, as well as the fulfillment of a legal obligation of the person responsible.

To which recipients will your data be communicated?

Your personal data will not be transferred to any entity, except those that are necessary to public organizations due to legal obligation.

Nor have international transfers of personal data been planned.

“Employee” data processing

What type of personal data do we process?

Identification data: name, ID, date of birth, address, telephone number, email address, signature, image.
Personal characteristics data: Sex, marital status, nationality, age, date and place of birth and family data.
Data on social circumstances: licenses and permits.
Economic-financial data: bank account, payroll data, tax deductions, other withholdings (if applicable).
Academic and professional data: profession, position, experience, qualifications.
Presence control data.

For what purpose do we process your personal data?

We process the personal data that you provide us for the management of the employment relationship, payroll management, administrative and payment management, compliance with the company’s tax and labor obligations, access control, training and development management. professional, and the prevention of occupational risks.

The personal data provided will be kept as long as the employment relationship is maintained. If once the employment relationship has ended you decide to cancel your personal data, these will be kept until the legal deadlines defined by accounting, tax and labor regulations have expired, and once said deadlines have elapsed, your data will be deleted from our system.

What is the legitimacy for the processing of your data?

The legal basis for the processing of your data is the fulfillment of an employment contract, as well as the fulfillment of a legal obligation of the person responsible.

To which recipients will your data be communicated?

The necessary transfers are made to public organizations due to legal obligation: Tax Agency, Social Security, Mutual Fund, etc.

Data transfers are also made for legitimate purposes related to the company’s activity:

It will be necessary to communicate the bank details (NIF, name and surname and account number) to the financial entities in charge of intervening in the payroll payment operation.
The personal identification and contact data of some employees could be delivered to travel agencies in charge of managing trips abroad, for the processing of visas, hotel reservations and plane tickets.
Likewise, in cases in which it is necessary to justify personnel expenses in some aid, training activity or project financed with public funds, the payroll data could be communicated to the public administrations responsible for the evaluation of said aid and/or projects, in compliance with current legislation.
The photograph of an employee could be used within a publication or Web page with the purpose of disseminating a certain event or performance related to the company’s activities, for which the express consent of the interested party is requested.

No international transfers of personal data are planned.

Data processing of “Employment candidates”

What type of personal data do we process?

Identification data: name, ID, date of birth, address, telephone, email address, image.
Personal characteristics data: Sex, marital status, nationality, age, date and place of birth.
Academic and professional data: profession, position, experience, qualifications.
For what purpose do we process your personal data?

We process the personal data that you provide us for the management of the company’s selection processes.

The personal data provided will be kept as long as the interested party has not withdrawn consent in order to continue saving their curriculum vitae for future selection processes. If you decide to cancel your personal data, it will be deleted from our database of job candidates.

What is the legitimacy for the processing of your data?

The legal basis for the processing of your data is the express consent requested.

To which recipients will your data be communicated?

No transfers will be made.

No international transfers of personal data are planned.

“Subscriber” data processing

What type of personal data do we process?

Identification data: name, email, professional sector, location, language.

For what purpose do we process your personal data?

The data provided by the interested party will be processed by the entity for the sole purpose of managing the distribution list for sending bulletins, newsletters, publications and any other information about the products, services and activities of the entity, sent by any means included. electronic media.

What is the legitimacy for the processing of your data?

The legal basis for the processing of your data is the express consent requested.

To which recipients will your data be communicated?

No transfers will be made. No international transfers of personal data are planned.

Data processing of “Contest participants”

What type of personal data do we process?

Identification data: name, email, professional sector, location, language.

For what purpose do we process your personal data?

The data provided by the interested party will be processed by the entity for the sole purpose of managing draws and contests, the awarding and delivery of the prize.

What is the legitimacy for the processing of your data?

The legal basis for the processing of your data is the express consent requested.

To which recipients will your data be communicated?

No transfers will be made. No international transfers of personal data are planned.

“Consumer” data processing

What type of personal data do we process?

Identification data: name, ID, address, telephone number, email address.
Data relating to transactions: products and services supplied.

For what purpose do we process your personal data?

We process the personal data that you provide us for the management of consumer data of the company’s products, in order to be able to provide them with after-sales services and management of incidents and complaints.

The personal data provided will be kept as long as the commercial relationship is maintained. If you decide to cancel your personal data, it will be deleted from our contact database.

What is the legitimacy for the processing of your data?

The legal basis for the processing of your data is the execution of a contract.

To which recipients will your data be communicated?

Your personal data will not be transferred to any entity.

Nor have international transfers of personal data been planned.

What are your rights when you provide us with your data?

In accordance with applicable data protection regulations, you have a series of rights in relation to the processing of your personal data. The exercise of these rights will be free of charge for you, except in cases where manifestly unfounded or excessive requests are made, especially because they are repetitive.

These rights are the following:

Right to information : You have the right to be informed in a concise, transparent, intelligible and easily accessible manner, with clear and simple language, about the use and processing of your personal data.
Right of access : You have the right to ask us at any time to confirm whether we are processing your personal data, to provide you with access to it and information about its processing and to obtain a copy of said data. The copy of your personal data that we provide to you will be free of charge, although the request for additional copies may be subject to a reasonable charge based on administrative costs. For our part, we may ask you to prove your identity or require more information that is necessary to process your request.
Right to rectification : You have the right to request the rectification of inaccurate, outdated or incomplete personal data concerning you. You may also request that incomplete personal data be completed, including by means of an additional declaration.
Right to deletion : You have the right to request the deletion of your personal data when, among other reasons, the data is no longer necessary for the purposes for which it was collected. However, this right is not absolute, so our organization may continue to keep them duly blocked in the cases provided for by the applicable regulations.
Right to limit processing : You have the right to request that we limit the processing of your personal data, which means that we may continue storing it, but not continue processing it if any of the following conditions are met:
- that you challenge the accuracy of the data, during a period that allows the person responsible to verify its accuracy;
- the processing is unlawful and you oppose the deletion of the data and request instead the limitation of its use;
- our entity no longer needs the data for the purposes of the processing, but you need it for the formulation, exercise or defense of claims;
- You have opposed the processing, while it is verified whether the legitimate reasons of our entity prevail over yours.
Right to data portability : You have the right to have your data transmitted to another data controller in a structured, commonly used and machine-readable format. This right applies when the processing of your personal data is based on consent or the execution of a contract and said processing is carried out by automated means.
Right to object : This right allows you to object to the processing of your personal data, including profiling. We will not be able to comply with your right only when we process your data in the event that we prove legitimate reasons for the processing or for the formulation, exercise or defense of claims.
Right not to be subject to automated decisions, including profiling : This right allows you not to be subject to a decision based solely on automated processing, including profiling, that produce – said decisions – legal effects or affect you in a similar way. Unless such decision is necessary for the conclusion or performance of a contract, is authorized by law or is based on consent.
Right to withdraw consent : In cases where we have obtained your consent for the processing of your personal data in relation to certain activities (for example, for the purpose of sending you commercial communications), you may withdraw your consent at any time. In this way, we will stop carrying out that specific activity for which you had previously consented, unless there is another reason that justifies the continuity of the processing of your data for these purposes, in which case, we will notify you of this situation.
Right to file a claim with a supervisory authority : You have the right to file a claim with the Spanish Data Protection Agency, C/ Jorge Juan, 6, 28001 Madrid, 901 100 099 – 912 663 517 ( www.agpd.es ), or at the electronic address: https://sedeagpd.gob.es/sede-electronica-web/vistas/formQuejasSugerencias/seleccionarQuejaSugerencia.jsf

You may exercise the rights indicated above by sending a communication to our Customer Service Department, or by email to comunicacion@xabierdiaz.com , accompanying a document proving your identity and providing the necessary details to process your request.

Interested parties can obtain additional information about their rights on the website of the Spanish Data Protection Agency, www.agpd.es.