Data controller
TEDRA HOLDING SPAIN SL — TEDRA GLOBAL SOLUTIONS SL
Privacy policy under the GDPR and Spanish Act 3/2018 (LOPD-GDD)
This privacy policy has been drafted following the principles of lawfulness, fairness and transparency of the General Data Protection Regulation. It is reviewed periodically.
Who is the data controller?
The controller is TEDRA HOLDING SPAIN S.L., Tax ID B24698391, registered office at C/ La Cepeda, 10, León, email administracion@tedra.com .
As this entity belongs to a corporate group, under Recital 48 of the GDPR your personal data may also be processed by TEDRA GLOBAL SOLUTIONS S.L., Tax ID B27436351, email administracion@tedra.com , a group company. Data sharing between both entities is based on the controller’s legitimate interest for internal administrative purposes.
Has a Data Protection Officer been appointed?
Yes. TEDRA GLOBAL SOLUTIONS S.L. has appointed Prodafor Consultoría as its Data Protection Officer, email prodafor@prodafor.es .
What data do we process?
Following the principles of data minimisation and privacy by default, we only request the data necessary for the purpose for which it is collected. During browsing we collect your IP or device ID. If you make an enquiry through the contact form, we process your identifying data (name, surname, email and phone). Social media followers must be at least 14 years old.
For what purpose?
- Managing enquiries made through the website.
- Managing user browsing (cookie processing), under the Cookie policy .
- Social media: sharing information about the entity’s activities and projects.
- Website monitoring to prevent and detect misuse.
On what legal basis?
The legal basis may be one or more of: the consent given by ticking the corresponding box in the contact form; the performance of a contract or pre-contractual measures (art. 6.1.b GDPR); compliance with legal obligations (art. 6.1.c GDPR); and legitimate interest (e.g. satisfaction surveys). Consent may be withdrawn at any time by writing to dpo@tedra.com , with no retroactive effect.
Will we send you commercial communications?
Only with your express consent, or if you become a client and one of the LSSICE scenarios applies. Consent may be withdrawn at any time via dpo@tedra.com .
How long will we keep your data?
For as long as necessary to fulfil the purpose and determine any resulting liabilities. For web forms, the maximum retention period is 1 year. Once erasure is requested, data is kept blocked during the legal limitation periods.
Who will we share your data with?
Data will not be shared with third parties except where necessary for the purpose or required by law. It may be shared with our hosting and technology service providers.
What are your rights?
You may exercise your rights of access, rectification, objection, portability, erasure (“right to be forgotten”), restriction of processing and not to be subject to automated decisions, under the GDPR (EU 2016/679) and the LOPD-GDD (LO 3/2018), by writing to dpo@tedra.com . You also have the right to lodge a complaint with the Spanish Data Protection Agency.