Data protection
Exercise your GDPR rights
As a data subject, the EU General Data Protection Regulation (2016/679) grants you seven rights over your personal data. Fill out this form and our data protection team will respond within the legal deadline.
Your rights as a data subject
Right of access (art. 15)
Confirm whether we process your data and obtain a copy, with information on purposes, retention and recipients.
Right of rectification (art. 16)
Correct inaccurate or incomplete personal data we hold about you.
Right of erasure (art. 17)
Ask us to delete your data when it is no longer necessary or you withdraw consent (also known as the «right to be forgotten»).
Right to object (art. 21)
Object to processing based on legitimate interest or to direct marketing, including profiling.
Restriction of processing (art. 18)
Ask us to «pause» processing while we review accuracy, lawfulness or your objection.
Data portability (art. 20)
Receive your data in a structured, commonly used format to transfer it to another controller.
Withdraw consent (art. 7.3)
Withdraw at any time a consent you previously gave, without affecting the lawfulness of prior processing.
Before you submit your request
- Response deadline: we will respond within a maximum of 1 month from receipt of the request (art. 12.3 GDPR). For especially complex cases we may extend by 2 additional months, notifying you within the first month.
- Free of charge: exercising these rights is free (art. 12.5 GDPR). Only in manifestly unfounded or excessive cases may we charge a reasonable fee or refuse to act.
- Identity verification: if we have reasonable doubts about your identity we may request additional documentation (ID card / passport) under art. 12.6 GDPR. Providing your ID number in the form is optional but speeds up processing.
- Complaint to the supervisory authority: if you believe we have not handled your request properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
Request form
Fields marked with * are required.