Aditional information

CONTROLLER

Identity: KLEMARK ESPECTÁCULOS TEATRALES S.A.
Tax ID: A-87755617
Postal Address: AV/ LANDABARRI 3, 4ª PLANTA 48940 – LEIOA – BIZKAIA
Data Protection Officer (DPO) contact: rgpd-klemark@klemark.com

PURPOSE

We process the information provided for the following purposes:

Data processed to provide the contracted service.
Financial, economic, accounting and administration management.
Management and maintenance of legal proceedings.
Sending of business information related to the existing contract purpose.
Sending of business information related to products and services.
Management and development of fraud prevention and control activities.
Ethical Channel https://www.klemark.com/integridad-conducta/ To deal with the communications received through the different means or channels that the company makes available to the caller, such as the e-mail address provided on the company’s website, telephone channel (24/7), as well as the web platform managed by the contracted data processor, guaranteeing both the absolute confidentiality of the caller and the non-adoption of any reprisals for reporting in good faith.
Management of business exclusions. Database with minimum data to avoid sending commercial communications to those persons who have not consented or have revoked their consent.

LEGAL BASIS

Contract execution
Legitimate interest
Prior consent
Public interest (Ethical Channel): Within the framework of the communications channel (ethical channel) it is based on the existence of a public interest, in the terms established in Article 6.1.e) of the General Data Protection Regulation, to detect and prevent complaints and the consequent prevention of damage and risks of liability of CLECE and defined in Article 24 of Organic Law 3/2018.

STORAGE TERMS:

For mercantile purposes: Accounting and tax documentation: 6 years – Art. 30 of the Code of Commerce.
For tax purposes: 4 years – Articles 66 to 70 General Tax Act.
Royal Decree 1619/2012, of 30 November, which approves the Regulations governing invoicing obligations: 5 years
Justified storage period: 10 years according to the requirements of the competent authorities
Ethical Channel: The data will be stored in the system only for the time necessary to investigate the reported facts. In any case, three months after the data have been entered, they must be deleted from the system. However, they may be dealt with outside the system to investigate the facts for as long as necessary to bring them to a conclusion. Once the investigation of the communication has been completed and the appropriate actions have been taken, if necessary, the data of those complaints that have been processed will be duly blocked in order to comply with the corresponding legal obligations in each case. In the event that it is decided not to act on the complaint lodged, the information may be retained in an anonymised form in the system.

RECIPIENTS

The data may be disclosed to:

Public Administrations with competences in this area.
Financial institutions in relation to the management of payments and collections arising from contractual relations.
Bodies of the Social Security Administration, the tax administration and the Judges and Courts.
Law enforcement agencies.
Bodies of the Social Security Administration, the tax administration and the Judges and Courts.
Insurance companies and insurance and reinsurance brokers, for the management of claims and/or accidents, including the processing of special personal data.
Service providers, in some cases contracted to perform services on our behalf. In these cases, where necessary, the corresponding data processing contracts are concluded in accordance with data protection regulations.

EXERCISE OF RIGHTS

Data subjects have the right to obtain confirmation as to whether the company is processing their personal data.

You have the right to request:

Access to your personal data.
The rectification of inaccurate data.
Deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
The limitation of the processing of your data, in which case we will only keep them for the exercise or defence of claims.
The opposition to the processing of your data, under certain circumstances and for reasons related to your particular situation. The company will stop processing the data, except for compelling legitimate reasons or the exercise or defence of possible claims.

The rights under Regulation (EU) 2016/679 may be exercised directly or through a legal or voluntary representative.

You may request to exercise your rights by computer means through the contact email of the Data Protection Officer or by sending your request to the aforementioned Controller’s address.

If you wish to obtain information about your rights, please visit https://www.aepd.es/es/derechos-y-deberes/conoce-tus-derechos

In the event of an unsatisfactory exercise of your rights, you may file a complaint with the Spanish Data Protection Agency.