1. Who will process your data?
The data controller is “Sociedad Estatal Correos y Telégrafos, S.A., S.M.E” (hereinafter “Correos”) with TIN A-83052407 and registered office at Vía Dublín 7 (Campo de las Naciones), 28070 Madrid, Spain.
To ensure the proper management of said processing, Correos has designated a Data Protection Officer (DPD or DPO) who you can write to at the following e-mail address: firstname.lastname@example.org
2. Why and for what will your data be processed?
The user’s personal data will be processed to send at the user’s request to the e mail address indicated by him/her information on any activity related to Correos Lab such as: entrepreneurship competitions, offers of space and coworking centers, chats, training and other events related to entrepreneurship, counseling services and start-up accelerators.
The products and services about which Correos sends information may be its own products and services as well as the products and services of the rest of Grupo Correos’ companies or of other collaborating companies whose sector is related to Correos Lab’s activity (such as business centers, real estate companies, training companies etc.)
The content of the information provided may be generic or personalized. The latter will involve the prior processing of your data in order to profile and characterize you, determine your tastes, preferences and needs and, on the basis of these, identify the services and products that may be of interest to you.
You may request deregistration from the sending of said information easily and free of charge at any time.
3. What data will be processed?
Only the data provided in the registration form will be processed to send the aforementioned information. Additionally, if you are a customer of any of Correos’ services, information like the historical log of products and services contracted from Correos, the type of service and its features may be used to personalize the information’s content.
4. Will your data be communicated to third parties?
In general terms, it is not foreseen that your data will be communicated to third parties other than Correos to send the information, except where it is legally required. Nonetheless, it may be necessary to provide your name and surname to manage certain events offered by third party companies in order to manage attendance at said events.
5. How long will your data be processed?
The personal data resulting from the application for the sending of information will be held for as long as deregistration is not requested. At that time, it will be blocked and remain available only to judges, the courts, the state prosecution service or the competent public administrations during the statute of limitations of the actions which may arise and, once the blockage period has elapsed, it will be completely deleted. As an example, a three-year statute of limitations period will be applied to the most common cases according to data protection legislation.
6. What are your rights?
To the extent by which they are recognized by the data protection legislation which applies from time to time, the user may exercise the following rights concerning the processing of his/her data:
a) Right of access: if you exercise this right, you are entitled to know what kind of data we are processing and the characteristics of the processing we are carrying out.
b) Right to rectification: if you exercise this right, you are entitled to request the modification of your data if it is inexact or untruthful.
c) Right to data portability: if you exercise this right, you are entitled to obtain a copy of the data being processed in an interoperable format.
d) Right to restrict data processing: if you exercise this right, you are entitled to restrict the processing of your data in the cases set forth by the Law.
e) Right to object: if you exercise this right, you are entitled to object to the processing of your data and request the sending of marketing communications to be stopped.
f) Right to erasure: if you exercise this right, you are entitled to request the erasure of your data when its processing is no longer necessary.
g) Right to withdraw the consent granted.
You may exercise your rights through any of the following channels, indicating the right you wish to exercise and attaching a copy of your National Identity Card or equivalent document, along with any other documents you may deem appropriate:
You can find a series of forms that will help you exercise your rights on the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD) website. We likewise inform you that you are entitled to file a claim before the control authority (the AEPD in Spain) should you consider that your rights have been infringed.