AERNNOVA appreciates your visit to our website and your interest in our Company, in our products and services. Your privacy is important to AERNNOVA and we want you to feel comfortable visiting our website. The protection of your privacy in the processing of your personal data is a fundamental concern to which we pay special attention during our processes. The personal data collected during your visit to our website are processed by AERNNOVA in accordance with the legal provisions in force for the countries in which the websites are maintained.
I.- Who is responsible for the processing of your data?
The User may contact the AAC Privacy Office through the e-mail address firstname.lastname@example.org in case of any doubt or need regarding data protection.
II.- For what purpose do we treat your personal data?
In compliance with the provisions of the General European Regulation of Data Protection 2016/679 as well as in any applicable national legislation, we inform you that in AAC we treat the data you provide us for the following purposes:
- Manage the data of Users who contact AAC through the different forms of the web that are available to them. Also, your data will be processed in order to manage the queries that you send us through the channels enabled for this purpose on our website and we can contact Users by phone or electronically if necessary.
- Attend to your questions and requests.
- Perform a quality control on our services.
- Conduct satisfaction surveys and statistical purposes.
- Communicate your data to any company in the Group, provided that you have consented to it, as well as when there is a legal obligation.
III.- What is the legitimation for the treatment of your data?
The legal basis for the treatment of your data is the execution of the contract for the provision of services in which the interested party is a party or for the application at the latter’s request of pre-contractual measures (such as the request for information to a specific Department, the communication of a denunciation of the Code of Ethics through the channel authorized for this purpose, etc.).
The processing of your data for the purposes mentioned above is based on the consent you have given us. However, you can withdraw the consent at any time, without in any case, this conditions the relationship that binds you to AAC. You can withdraw this consent by sending an email to email@example.com.
AAC, at the time of registration, will collect and process the personal data essential for the provision of the services enabled on the website. The User knows and accepts that the non-completion of certain personal data will prevent AAC from providing all those services linked to such data. Under no circumstances will AAC cede, exploit these data or use them for any other purpose than that expressly indicated herein. During the registration process, the User will be informed of the non-mandatory nature of the collection of some of the data for the provision of AAC services.
IV.- Typology of data treated
In the framework of the provision of services and conditioned to the purposes agreed by you, AAC will treat the following categories of data:
- Identifying and contact data, for example, but not limited to: name, surname, telephone number or email.
- Data of commercial information, which you provide us, for example, but not limited to: department to which your inquiry is addressed, questions about your preferences, etc.
V.- How long will we keep your data?
AAC will keep your data for the duration of your contractual relationship and after it, for the time necessary to comply with the legal obligations in each case correspond to each type of data (except, in both cases, that the treatment was based on the consent of the User and it is revoked, in which case they will be kept until such revocation is received). Therefore, the data will not be kept longer than necessary for the purposes described above.
VI.- Who has access to your personal data?
In these cases, the transfers are based on the authorization of the Directorate of the Spanish Control Authority, in model clauses approved by the Commission or, as the case may be, on the Privacy Shield. For more information about the above guarantees or the fact that they have been provided, you can contact AAC through the means established in section I.
In addition to the access that third-party providers may have to personal data, AAC’s responsibility as treatment managers, national or international, within the framework of providing a service to the data controller, AAC may assign the User’s personal data to the different companies of its Group, as mentioned in section II, provided that it had requested the consent of the User and that the latter had granted it.
In addition to the foregoing, AAC may make transfers or communications of personal data to meet its obligations to the Public Administrations in cases that are required in accordance with the legislation in force at any time and, if applicable, to other agencies such as Forces and State Security Agencies and Judicial Authorities.
VII.- What are your rights when you provide us with your information?
AAC informs the User about the possibility that it assists him to exercise the rights of access, rectification, opposition, deletion, portability and limitation of the treatment as well as to reject the automated processing of personal data collected by AAC.
These rights may be exercised free of charge by the User and, where appropriate, by the person representing them, by means of a written and signed request addressed to the following address: Leonardo da Vinci 13, Parque Tecnológico de Álava, 01510, Miñano Mayor, Álava, Spain. Said request must contain in the subject the reference “Data protection / [Name of the company of the AAC group]” and must include the following information: name and surname of the User, address for the purposes of notifications, photocopy of the National Identity Document or Passport, and request in which the request is specified. In the case of representation, it must be proved by a reliable document. Likewise, the User may exercise the aforementioned rights through the email firstname.lastname@example.org.
In addition to the foregoing rights, the User shall have the right to withdraw the consent granted at any time through the procedure described above, without such withdrawal of consent affecting the lawfulness of the treatment prior to its withdrawal. AAC may continue to treat the User’s data to the extent permitted by applicable law.
AAC reminds the User that he has the right to file a claim with the relevant Control Authority.
VIII.- What security measures are implemented?
AAC is committed to fulfilling its obligation of secrecy of personal data and its duty to keep them, and will take the necessary measures to prevent alteration, loss, or unauthorized access, in accordance with the provisions of the applicable regulations.
AAC has implemented the security measures of technical and organizational nature necessary to ensure the security of your personal data and prevent their alteration, loss and treatment and/or unauthorized access, taking into account the state of the technology, the nature of the stored data and the risks to which they are exposed, whether they come from human action or from the physical or natural environment, in accordance with the provisions of the applicable regulations.
AAC is concerned about privacy, in order to strengthen the confidentiality and integrity of information in their organization, continuously maintains the supervision, control and evaluation of their processes to ensure respect for privacy and security of information, according to international standards.
The AAC website may include hyperlinks to other sites that are not operated or controlled by AAC. Therefore, AAC does not guarantee, nor is responsible for the legality, reliability, usefulness, veracity and timeliness of the contents of such websites or their privacy practices. Please, before providing your personal information to these non-AAC websites, please note that compliance with data protection may differ from ours.