Privacy Policy

1. INTRODUCTION

This Privacy Policy governs the processing of personal data provided by users and individuals interested in the services offered by DATA CENTER EUSKADI, S.L., trading under the name ATLANTIC DATA INFRASTRUCTURE (hereinafter, “aDi”), in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights.

The purpose of this Privacy Policy is to inform users about how aDi collects, processes, and protects personal data. Its content is addressed to:

  • Individuals requesting information related to any of aDi’s services.
  • Data subjects whose personal data are collected through the various forms on the website.
  • Holders of contracts entered into with aDi.
  • It also governs the processing of personal data previously provided through different means of contact with aDi by reference to this Privacy Policy, insofar as it does not contradict what was expressly accepted at the time the data were provided, which shall be respected in all cases.

2. DATA CONTROLLER

  • Identity: DATA CENTER EUSKADI, S.L.
  • NIF: B-72497209
  • Contact address: Plaza Pío Baroja, 3, 1º – Bilbao, 48001
  • E-mail: rgpd@adi-dc.com

3. PURPOSES OF PERSONAL DATA PROCESSING

aDi processes the personal data collected for the provision of services and for sending electronic communications related to its activities and services.

4. SOURCE OF DATA

The personal data collected comes directly from the information provided by the individuals concerned or from aDi’s information systems.

aDi obtains its data from:

  • Information provided through the various web forms made available by aDi to request information.
  • The information provided through the various contracts that you may sign with aDi.

In general, the categories of personal data that we will process are:

  • Identification data
  • Contact details
  • Academic data
  • Professional data
  • Financial data
  • Employment-related data

5. ACCURACY AND TRUTHFULNESS OF THE DATA PROVIDED

Users and persons interested in the activities and services of aDi guarantee and are responsible, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated.

6. CONSERVACIÓN

Personal data provided by users and individuals interested in aDi’s services will be retained for as long as necessary to fulfill the purposes for which they were collected, in order to maintain the relationship or connection between the data subject and aDi, without prejudice to the data subject’s right to object to certain processing activities (including the withdrawal of consent where required) and/or to request the erasure of their data.

If any of these circumstances arise, the personal data will be placed in a blocked status, during which access will be restricted exclusively to the following purposes:

  • To address potential liabilities related to the processing of personal data.
  • To comply with requests from public authorities, courts, tribunals, and the Public Prosecutor’s Office.

Once the blocking period has ended, the personal data will be permanently deleted.

  • Where personal data have been provided through any of the contracts entered into with aDi, the blocking period shall be six (6) years from the end of the contractual relationship or, where applicable, from the date on which the right to object to processing or the right to erasure becomes effective.
  • Where personal data have been provided through the various forms available on the aDi website, the retention period shall generally be two (2) years, without prejudice to any specific retention period that may be established for a particular processing activity.

In all cases, personal data will be retained for the legally required periods necessary to comply with any legal obligations applicable to aDi.

7. LAWFUL BASIS FOR THE PROCESSING OF PERSONAL DATA

The lawful basis for processing personal data shall be determined in accordance with Article 6 of the General Data Protection Regulation (GDPR), applicable to ordinary personal data, or, where appropriate, Article 9 of the GDPR, applicable to special categories of personal data. The data subject will be informed, in each case, of the lawful basis or bases relied upon for each service provided, which may include:

  • Processing necessary for the performance of a contract or legal relationship to which the data subject is a party.
  • Processing necessary for compliance with a legal obligation.
  • Processing based on aDi’s legitimate interest.
  • Processing based on the explicit consent granted by the data subject.

8. RECIPIENTS

During the processing of personal data, aDi will not disclose such data to third parties except where required by law or with the consent of the data subject. Where consent is required, it will be requested from the data subject, who will be informed of the consequences of not providing it, including, in particular, the impossibility of providing the relevant service.

The provision of aDi’s services may require communications to IT service providers or other service providers acting as data processors. These providers are subject to confidentiality and data security obligations and may be located outside the European Union under the framework of the United States–European Union agreement known as the “Privacy Shield,” information on which is available at: https://www.privacyshield.gov.

9. RIGHTS

You have the following rights:

  • The right to request access to your personal data.
  • The right to request rectification or erasure of your personal data.
  • The right to request restriction of processing.
  • The right to request data portability.
  • The right to object to processing.
  • The right to withdraw any consent given.

The rights of access, rectification, erasure, restriction of processing, objection to processing, and data portability may be exercised before the Data Controller by any legally permitted means, enclosing a copy of an official document proving your identity, by contacting rgpd@adi-dc.com, in accordance with the terms established by applicable law.