Information regarding the processing of personal data

1. Data controller

OneAlpha Business Network SL
C/ Ramón Gómez de la Serna 16, 28810 Villalbilla, Madrid

2. What data we collect

In order to process your requests and to send you marketing materials, you agree to provide us with a minimum amount of personal data, such as: address, telephone number.

• email address
• first and last name
• telephone number

3. Purpose of processing

The personal data provided with your consent will be collected and processed by us for one of the following purposes:

• to fulfil your request
• to send you marketing materials (e.g. updates regarding the products developed, offers, other communications related to the provision of our services, etc.)
• to improve our products and services
• to make business decisions
• to comply with various legal provisions
• to observe and defend our legal rights

4. Legal basis

We process your personal data on the following legal grounds: consent (art. 6(1)(a) GDPR), performance of a contract (art. 6(1)(b)), legal obligations (art. 6(1)(c)) and legitimate interest (art. 6(1)(f)).

5. To whom we may disclose your data

The personal data you provide is processed by our company:

• In order to fulfil orders, your data may be transmitted to payment/banking service providers, marketing service providers or courier service providers (where applicable).
• Your data will also be transmitted to accounting service providers in order to comply with legal obligations regarding accounting documents.
• Where we are subject to a legal obligation or where it is necessary to defend a legitimate interest, we may also disclose certain personal data to public authorities.
• We ensure that access to your data by third-party private legal entities takes place in accordance with the legal provisions on data protection and confidentiality of information, on the basis of contracts concluded with them.
• Personal data will not be communicated to third parties and will not be processed outside the EU territory.

6. Storage period

The personal data you provide will be processed for the duration of our contractual relationship / your subscription to the newsletter, and where legal provisions require us to retain data for a specific period, for the duration of that period (e.g. accounting records are kept for a period of 10 years pursuant to accounting law).
If the personal data is no longer required for us to comply with our contractual obligations or legal provisions, this data will be periodically deleted.

7. Rights of data subjects

As a data subject, under certain conditions, you have the following rights:

• right of access to data – under art. 15 GDPR, you have the right to obtain from us confirmation of the processing of personal data concerning you, as well as the right to access that data; you may also obtain a copy of the personal data provided to us and which is the subject of processing; for any additional copies you request, we are entitled to charge a reasonable fee based on administrative costs; if you submit your request in electronic form and unless you request otherwise, the information will be provided to you in a commonly used electronic format;
• right to rectification – you have the right to obtain the rectification of inaccurate personal data, as well as the right to obtain the completion of personal data that is incomplete;
• right to erasure – you have the right to obtain the erasure of personal data concerning you, without undue delay, and we have the obligation to erase such data when: (i) the personal data is no longer necessary for the purposes for which it was collected or processed; (ii) you withdraw the consent on which processing is based and there is no other legal ground for processing; (iii) you object to processing and there are no overriding legitimate grounds for processing; (iv) the personal data has been unlawfully processed; (v) the personal data must be erased in order to comply with a legal obligation incumbent on us under EU or national law;
• right to restriction of processing – under art. 18 GDPR you have the right to obtain restriction of the processing of your data;
• right to data portability – you have the right to receive your personal data, as provided to us, in a structured, commonly used and machine-readable format, and to transmit such data to another controller, under certain conditions;
• right to object – you have the right to object, on grounds related to your particular situation, at any time, to the processing of your personal data, including the creation of profiles based on those provisions;
• right not to be subject to a decision based solely on automated processing, including profiling;
• right to lodge a complaint under art. 77 GDPR with the competent supervisory authority for the protection of personal data;
• right to withdraw consent at any time, without affecting the lawfulness of processing of personal data carried out by us based on consent before its withdrawal.

8. Contact for GDPR requests

contact@nexusgbn.com