Data subjects’ rights

Esteve Cruanyes informs its Users that they may exercise their rights of access,
rectification, restriction, erasure, portability and objection to processing their personal data, and the right not to be subject to automated decisions, including profiling, before the Data Controller, and also withdraw the consent given.

• Right of Access: This is users’ right to obtain confirmation about whether their data are being processed and, if so, the specific personal data being processed and the statutory information about the processing (purposes, legal basis, storage periods, disclosures, origin of the data, etc.).

• Right of Rectification: This is the data subject’s right to correction of inaccurate or incomplete data. In the case of the website, any such correction can only be made for the information that is under the website’s control, for example, deleting comments published on the website itself, images or web content that contain the user’s personal data.

• Right to Restriction of Processing: This is the right to restrict the purposes of the processing originally intended by the Data Controller in certain cases.

• Right of Erasure: This is the user’s right to erase personal data, except as provided in the GDPR itself (freedom of expression and information, storage periods, formulation, submission or defence of complaints, etc.).

• Right to Portability: The right to receive the personal data that the user has provided, in a structured, commonly used and machine-readable format, and to transmit them to another data controller when the processing is based on consent or performance of a contract and is carried out by automated means.

• Right of objection: This is the user’s right to prevent or stop processing of personal data by the website when the processing is based on legitimate interest or the public interest or when it is for direct marketing purposes.

• Right not to not subject to automated decision-making, including profiling: When the processing is not necessary for concluding or performing a contract, nor is it sanctioned by European Union Law or by any law of the Member States nor is it based on consent, users are entitled not to be subject to a decision based solely on automated processing, including profiling, when this has legal effects or significantly affects them in a similar manner.

• Right to withdraw consent: Users are entitled to withdraw their consent to any processing based on such consent, at any time and without charge.