Privacy Policy
PERSONAL DATA PROTECTION
Metropolitana de Aduanas y Transportes SA (MAITSA) complies with current legislation on personal data protection, respecting the privacy of users and the secrecy and security of personal data. All data belonging to our clients will be processed in accordance with the principles of lawfulness, fairness and transparency, purpose limitation and storage limitation, data minimisation, accuracy, integrity and confidentiality, among others, as well as respecting the remaining obligations and guarantees established in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, adopting the technical and organisational measures necessary to prevent the loss, misuse, alteration, unauthorised access to and theft of the personal data provided, taking into account the state of the art of technology, the nature of the data and the risks to which they are exposed.
BASIC DATA PROTECTION INFORMATION
| Data controller | Metropolitana de Aduanas y Transportes, S.A. |
| Purpose of the data processing | To maintain and manage the business relationship with clients and suppliers. |
| Legal basis for the data processing | The performance of the contracts or the consent of the data subjects. |
| Recipients of data transfers or disclosures | The data is shared with partner companies whose services are essential for the correct performance of the contract. To store our data we use the services of Amazon Web Services, headquartered in the United States, which involves carrying out international data transfers. |
| Rights of the data subjects | To access, rectify and erase the data, as well as other rights, as explained in the additional information. |
| Additional information | You can consult the additional and detailed information on Data Protection on our website: www.maitsa.com in the "Privacy Policy" section. |
ADDITIONAL DATA PROTECTION INFORMATION (PRIVACY POLICY)
1. DATA CONTROLLER
Who is the controller responsible for processing your data?
Identity: METROPOLITANA DE ADUANAS Y TRANSPORTES, S.A.
Postal address: C/ Margenat 4 • local 1 • 08017 Barcelona, Spain
Telephone: +34 93 317 97 16
Email address: lopd@maitsa.com
2. PERSONAL DATA
What is personal data and what data do we process?
Personal data consists of information that identifies or allows the identification of individuals, such as name, postal address, email address or telephone number, etc.
The personal data you provide us with is your basic identification data and contact details, i.e. first and last name, email address, postal address, national ID number, and additionally your banking details so that we can manage payments and collections.
At METROPOLITANA DE ADUANAS Y TRANSPORTES, S.A., we process the personal information provided to us by clients and suppliers at the time of contracting the service, as well as the information generated through its provision. Based on the principle of data minimisation, the data we process will be adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed, always respecting the wishes of the data subject.
3. PURPOSE OF THE PROCESSING
For what purpose do we process your data?
At METROPOLITANA DE ADUANAS Y TRANSPORTES, S.A. we process the information provided by our clients in order to provide the best possible service, to manage international transport bookings, and to contact you when necessary.
In addition, in order to offer you full satisfaction with our services and keep you up to date, we periodically send a Newsletter containing commercial information and advertising. If you do not wish to receive our messages, you can unsubscribe using the link provided at the bottom of each Newsletter or by writing to us at lopd@maitsa.com.
We do not use your data to create profiles or to make automated decisions.
How long do we keep your data?
In compliance with the principle of storage limitation, the data collected will be processed solely and exclusively for the time necessary and for the purposes for which it was collected on each occasion.
Therefore, the personal data you provide us with will be kept for as long as the business relationship lasts, for the minimum time necessary to comply with legal obligations, or until its deletion is requested.
We undertake to delete your data from our databases once the aforementioned retention period has elapsed, and to instruct the data processing companies whose services we use to delete from their databases all the information they may hold about you.
4. LEGAL BASIS
What is the legal basis for processing your data?
The legal basis for processing your data is the performance of the service provision contract and, subsidiarily, the consent you grant us by sending us your data through the contact form.
5. RECIPIENTS
Which recipients will your data be disclosed to?
The data is disclosed to official bodies in compliance with legal obligations and to partner companies whose services are essential for the correct provision of the service you have contracted with us (for example, land transport companies, shipping lines, insurers, etc.). The data is also disclosed to tax and employment advisory firms.
To store the data we use the services of AMAZON WEB SERVICES (AWS). AWS is a cloud-based virtual platform that offers companies database storage, content delivery and other services. AWS belongs to Amazon.com, INC, headquartered in Seattle, United States.
AWS holds a certification of compliance with the EU-US Privacy Shield and participates in the EU-US Privacy Framework, meaning the company complies with all European data protection standards. You can find out more about AWS's privacy policy at: https://aws.amazon.com/compliance/eu-data-protection/.
Contracting services from companies headquartered outside the European Union involves carrying out international data transfers; however, as your privacy is our priority, we always choose providers that adopt the best and most appropriate safeguards to protect your information.
6. RIGHTS
What are your rights when you provide us with your data?
All data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where applicable, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
Under certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain it for the exercise or defence of claims.
Under current legislation, you may request the restriction of your data when:
- You have exercised your right to rectification or objection and we are in the process of dealing with your request.
- The processing is unlawful, which would result in the deletion of the data, but you object to this.
- The data is no longer necessary for the processing and must be deleted, but you need it to formulate the exercise or defence of claims.
Data subjects may object to the processing of their data, in which case we will stop processing your data, except for compelling legitimate reasons or the defence of possible claims.
Likewise, data subjects have the right to request the portability of the data they have provided us with in order to transfer it to another controller. In this case, the data will be transmitted to another controller or to the data subject in a structured, commonly used and machine-readable format.
All data subjects who have given consent for a specific purpose have the right to withdraw this consent at any time.
You can exercise all your rights by writing to lopd@maitsa.com or by post to Metropolitana de Aduanas y Transportes, S.A., C/ Margenat 4 • local 1 • 08017 Barcelona, Spain, indicating your first and last name(s), the right you wish to exercise, the reason for the request, and enclosing a copy of your identity document.
Within one month of receiving your request to exercise your rights, we will inform you of the actions we have taken as a result of your request. In the case of particularly complex requests, we will contact you within a maximum period of two months.
In any case, you may lodge a complaint with the competent Data Protection Supervisory Authority:
Spanish Data Protection Agency (Agencia Española de Protección de Datos)
Address: Calle Jorge Juan, 6, 28001 Madrid, Spain
Telephone: +34 901 100 099 / +34 91 266 35 17
Website: www.agpd.es