“Saying you don’t care about privacy because you have nothing to hide, is like saying you don’t care about free speech because you have nothing to say.”
All holders have the following rights regarding the use of our personal data by third parties, known as ARCOPOL or SOPLAR rights:
- Access: That we may request information about the personal data being processed.
- Rectification: That updated and truthful data be processed.
- Deletion (oblivion): To have our data and even links to our data deleted.
- Opposition: That we may refuse treatment with which we disagree.
- Portability: That we can request a copy of all our data in full.
- Limitation of processing: That the data may not be processed, for additional, unauthorized purposes.
- Not be subject to automated individual decisions, including profiling: Not to have decisions made without human intervention, such as through the use of artificial intelligence.
The exercise of a right is not exclusive for the exercise of the rest of them. The ideal is to indicate in the same request, which one of these six we ask to attend (one or more). For this purpose, or We would like to remind you of the ways in which you can exercise these rights, both professionally and personally:
Professional or work environment:
If our company has a Data Protection Delegate (DPO), we will communicate our requests through this channel or, failing that, to the Head of the HR Department. Sometimes, depending on internal procedures, it may be established that it will only be communicated to the HR Department, regardless of whether there is a DPO.
Personal scope:
If we want to exercise our rights to a company, entity, body or administration (public and private), which processes our data for different reasons (because we are a client, consumer, provider, student, patient, etc.), we can consult the registry of Delegates of the page of the Spanish Agency for Data Protection, to find out if the company in question has a DPO and what are their contact details.
If we couldn’t find a DPO, we will have the option to review the Privacy Policy published on the website of the company or entity, in which we should find a section related to the exercise of rights and / or a contact address.
IMPORTANT NOTE: Our requests for the exercise of rights will have to be answered within a maximum period of 30 calendar days. In the event that, by none of these means, we receive adequate attention to our request, we may file a complaint with the supervisory authority on data protection in our country, which will intervene to protect the rights it deems that correspond to us.
*Date of shipment: November 04, 2025