In accordance with the applicable legal framework on the protection of personal data, all holders have the following rights, known as ARCO-POL or SOPLAR rights:
– Access: maintain the control over the processing of our data and the access without restriction to our information
– Rectification: guarantee that the data processed, is at any time updated and truthful.
– Erasure (oblivion): ask at any time the deletion of our data and even links to them.
– Object: refuse certain treatments based on an explicit consent.
– Portability: That we can export all our data in full.
– Restriction of processing:: avoid the processing of our data for unauthorized purposes.
– Not be subject to automated individual decision-making, including profiling: prevent that decisions are not made without human intervention, such as through the use of programs equipped with artificial intelligence.
The exercise of a right is not exclusive for the exercise of the rest of them. The ideal is to indicate in the same request, which one of these six we ask to attend (one or more).
In today’s TIP we want to remind you of the ways to exercise these rights, both professionally and personally:
Professional or work environment:
If our company has a Data Protection Delegate (DPO), we will communicate our requests through this channel or, failing that, to the Head of the HR Department. Sometimes, depending on internal procedures, it may be established that it will only be communicated to the HR Department, regardless of whether there is a DPO.
Personal scope:
If we want to exercise our rights to a company, entity, body or administration (public and private), which processes our data for different reasons (because we are a client, consumer, provider, student, patient, etc.), we can consult the registry of Delegates of the page of the Spanish Agency for Data Protection, to find out if the company in question has a DPO and what are their contact details.
If we couldn’t find a DPO, we will have the option to review the Privacy Policy published on the website of the company or entity, in which we should find a section related to the exercise of rights and / or a contact address.
Formal claim:
Our requests for the exercise of rights will have to be answered within a maximum period of 30 calendar days. In the event that, by none of these means, we receive an adequate attention to our request, we may file a claim with the Spanish Agency for Data Protection, who will intervene to protect the rights that it deems that correspond to us.