2. Data Controller
3. Purposes and legal basis for the processing of personal data
The legitimate purpose and valid legal basis for the processing of the personal data are the following:
1. Management of contact requests: personal details collected in the forms (e.g. first and last name, telephone number, email) and other data the user may voluntarily provide in the forms. The legal basis is the need to process the personal data to handle the contact requests and answer information requests.
2. Compliance with legal obligations: personal details collected in the forms (e.g. first and last name, telephone number, email) and other data about the user to which we may have access. The legal basis is compliance with legal obligations.
3. Website IT security: personal data to which we may have access, including IP address and browsing data. Legal basis is Canary Home Invest's legitimate interest to manage the website’s security.
4. Disclosure and international transfers of personal data
Personal data may be disclosed to the competent authorities in the exercise of their functions.
If any of our service or IT system providers are located outside the European Economic Area, Canary Home Invest will adopt all measures under the applicable regulations to ensure the integrity, confidentiality, and appropriate handling of the data.
5. Storage of personal data
Personal data will be stored for the time it takes to fulfill the purposes of the processing (e.g. contact or information request management or if a contractual agreement is entered into with the users, for as long as the contract is in force) and, after that, for as long as necessary to keep evidence that Canary Home Invest has fulfilled our legal and regulatory requirements (e.g. until any liability deriving from the data protection laws expires).
6. 3rd party data
7. Cookies policy
8. Data protection rights
The data subjects may exercise their right of access, right to rectification, erasure, objection, restriction, data portability, not to be subject to automated individual decisions and withdrawal of consent, by sending a request, including proof of identity and stating clearly which right they wish to exercise, by email to email@example.com.
Users also have the right to file a complaint before the competent data protection authority, which in Spain is the Spanish Data Protection Agency.