By means of this notice, “Meteosim, S.L.” (hereinafter, “Meteosim”) hereby informs users of the www.meteosim.com website, in compliance with EU Regulation 2016/679, of the European Parliament and of the Council, dated 27 April 2016 (General Data Protection Regulation) and other applicable standards, of its personal data protection policy in order that users may decide expressly, freely and voluntarily, whether to provide “Meteosim” with the personal details they are asked for, due to a request for information or because they are hiring the meteorological services that are provided.
Unless specifically informed to the contrary, it is necessary to fill in all the required details on the form or equivalent, in a true, accurate, complete and up-to-date manner. Otherwise, “Meteosim” may, depending on the case, decide not to register the user, or may refuse to provide the particular service requested. All the data provided by the user/interested party will be processed in accordance with the characteristics detailed below.
Information Regarding the Processing of Personal Data
Identification of the controller
“Meteosim, S.L.”, whose registered offices are at C/Baldiri Reixac 10-12, 08028, Barcelona, and whose tax identification number is: B63225817. The company is listed in the Companies Register of Barcelona in volume 36339, folio 206, page B279106, 1st entry. Contact email: email@example.com.
Purpose of the processing
All the data provided will be processed for the following purposes:
- To respond to requests made by the interested party.
- For the provision and management of the meteorological services that are hired.
- To maintain the relationship which may be established.
- For the management, administration, provision and improvement of the services that may be hired, and to provide relevant information.
- Business communications related to our products and services.
The personal data provided will be retained as long as the business relationship continues, the interested party does not request its deletion or while it is necessary to be kept for the purposes of the processing. The destruction of data will not take place when there is a legal provision requiring it to be conserved, in which case the data will be blocked, and shall only be available to public authorities, judges and courts, in order to consider the potential liabilities arising from the processing, during their statutes of limitation.
Currently, automated decisions, including the development of profiles, on the basis of your personal data, are not conducted. In the event that in the future such automated decisions were to be performed, consent shall be sought in advance.
Legitimacy of the processing
You have previously and expressly consented to all processing of your personal data. You are informed in advance of all the points which are required by law in order to provide your prior, informed consent.
You may withdraw consent at any time as detailed below.
Data recipients, assignments and transfers
Your data will not be disclosed unless it is strictly necessary to achieve with the aforementioned objectives or due to a legal obligation.
Moreover, your data will not be transferred to countries outside the European Union unless it is essential for achieving the objectives and you provide us with prior and express authorisation.
Rights of interested parties
You can exercise the rights listed below at any time, via post to “Meteosim”, C/Baldiri Reixac, 10-12, 08028, Barcelona or by sending an email to firstname.lastname@example.org. The request should include name(s), surname(s) and documentation that certifies the interested party’s identity or that of their legal representative, as well as a document establishing said representation, details of the specific request, an address for notification purposes, date of the request, signature of the requester and supporting documents for the request being made. If the request does not meet the specified requirements, it will need to be rectified.
The rights of interested parties are: access, rectification, limitation, portability, objection and erasure; and their definitions are as follows:
Right of access:
The interested party is entitled to obtain confirmation from the controller as to whether their personal data is being processed, and if it is, the right of access to that personal data and the following information:
- a) Purposes of the processing.
- b) The categories of personal data that is being processed.
- c) The recipients or categories of recipients to whom the personal data was communicated or will be communicated, in particular concerning recipients belonging to third-parties or international organisations.
- d) Where possible, the period of conservation of the personal data or, if not, the criteria used to determine this period.
- e) The existence of the right to request that the controller rectify or erase the interested party’s personal data or restrict the processing of the said data, or the right to object to such processing.
- f) The right to lodge a complaint with a supervisory authority.
- g) When personal data has not been obtained from the data subject, any information available concerning its origin.
- h) the existence of automated decisions, including profiling, referred to in paragraphs 1 and 4 of article 22, and at least in such cases, meaningful information about the applied logic, and the importance and the foreseeable consequences of such processing for the interested party.
When personal data is transferred to a third country or to an international organisation, the interested party shall have the right to be informed of the appropriate guarantees in accordance with article 46 concerning the transfer of data. The data controller shall provide a copy of the personal data being processed. The controller may receive a reasonable fee to cover administrative costs for any other copies requested by the interested party. When the interested party submits their request by electronic means, and unless they request otherwise, the information shall be provided electronically in a commonly used format.
Right of rectification:
The interested party shall have the right to have any inaccurate personal data concerning them rectified by the data controller, without undue delay. Taking into account the purposes of the processing, the data subject shall have the right to complete any incomplete personal details, including by means of an additional statement.
Right of erasure:
The interested party shall have the right to obtain confirmation of the erasure of personal data concerning them without undue delay, from the data controller, who shall be obliged to erase the said personal data, without undue delay, when any of the following circumstances arise:
- a) If the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
- b) If the interested party withdraws their consent to the processing in accordance with Article 6, paragraph 1, point a), or Article 9, paragraph 2, point a), and if the data processing is not justified by any other legal principle.
- c) If the interested party objects to the processing in accordance with article 21, paragraph 1, and no other legitimate reasons for the processing take precedence, or the interested party objects to processing in accordance with article 21, paragraph 2.
- d) If the personal data has been processed illegally.
- e) If the personal data must be erased in order to comply with a legal obligation established in any law of the Union or the Member States that applies to the data processor.
- f) If the personal data has been obtained in connection with the offer of information society services mentioned in article 8, paragraph 1.
When the personal data regarding which the interested party has exercised their right of suppression is made public by the data controller, the latter, taking into account the technology available and the cost of its implementation, shall take all reasonable measures to inform any third parties who are processing that information of the request for the erasure of the data, as well as any links to the data or any copy or replica of the data in existence.
This law shall be restricted by other rights such as the right to freedom of expression and information, in order to comply with any legal obligation, or when there are reasons of public interest.
Right to restriction of processing:
The interested party is entitled to request that the data controller restrict the processing of data when any of the following conditions are applicable:
- a) The accuracy of the personal data is contested by the interested party, during a period of time enabling the controller to verify the accuracy of that personal data.
- b) The data processing is illegal, and the interested party objects to the erasure of their data and requests the restriction of its use instead.
- c) The controller no longer needs the data for the processing purposes, but the interested party needs it for the formulation, the exercising or the defence of claims.
- d) The interested party has objected to the processing in accordance with article 21, paragraph 1, while it is verified whether the controller’s legitimate reasons override those of the interested party.
When the processing of personal data has been restricted in accordance with paragraph 1, such data may only be subject to processing, for the purpose of its conservation, with the consent of the interested party; for preparing, making or defending claims; in order to protect the rights of another natural or legal person, or for reasons of important public interest of the Union or of a certain Member State.
Any interested party who has been granted a restriction of processing in accordance with paragraph 1 will be informed by the controller before such a restriction is lifted.
Right of objection:
The interested party is entitled to object at any time, on grounds relating to their particular situation, to their personal data being processed or being subject to profiling, in accordance with the provisions of article 6, paragraph 1, points e) and f).
The data controller shall stop processing personal data, unless it can provide proof of compelling legitimate reasons for the processing that take precedence over the interests, rights and freedoms of the interested party, or for preparing, making or defending a claim.
When the purpose of the processing is direct marketing, the interested party shall have the right to object to it at any time, including profiling, insofar as it is related to such marketing.
When the interested party is opposed to processing done for direct marketing purposes, their personal data will no longer be processed for those purposes.
When personal data is processed for scientific or historical research purposes or for statistical purposes in accordance with article 89, paragraph 1, the interested party shall have the right, for reasons related to their particular situation, to oppose the processing of any of their personal data, unless it is necessary for reasons of public interest.
Right of data portability:
The interested party shall have the right to receive any personal data that they have provided to the data controller, in a structured, commonly used format that is machine readable, and to transfer it to another data controller, without the original controller having any right to prevent it, when:
- a) The processing has been authorised by consent in accordance with article 6, paragraph 1, point a), or article 9, paragraph 2, point a), or by a contract pursuant to article 6, paragraph 1, point b), and;
- b) The processing is carried out digitally.
2. When exercising their right to the portability of the data in accordance with paragraph 1, the interested party shall have the right to have their personal data transferred directly from one data controller to another when it is technically possible.
The exercising of the right mentioned in paragraph 1 of the aforementioned article shall be without prejudice to the provisions of article 17. Such right shall not apply to the processing needed in cases of public interest or in the exercise of public powers conferred on the controller.
The controller shall report any rectification or erasure of the personal data or restriction of the processing made under article 16, article 17, paragraph 1 and article 18, to each of the recipients who have received the personal data, unless it is impossible or requires a disproportionate effort to do so. The data controller shall inform the interested party about such recipients, if requested to do so.
Withdrawal of consent
The interested party, who originally granted consent to process their personal data, can also withdraw their consent just as easily. The withdrawal of consent will not mean that any processing that may have been carried out previously will be considered illegal.
The interested party shall have the right to lodge a complaint with the relevant Supervisory Authority.
When personal data is to be processed further for different purposes, the data controller shall inform the person concerned of such a circumstance.
The controller has adopted the necessary technical and organisational measures to ensure the security of the data and prevent its alteration, loss or unauthorised processing or access, taking into account the latest technology, the nature of the data stored and the risks to which it is exposed, whether they originate from human action or from physical or natural sources.
The www.meteosim.com website contains links to other web pages which could be of interest to the party concerned. “Meteosim” assumes no responsibility for these links, since it cannot provide any guarantee of compliance with appropriate privacy policies. Therefore, interested-party access to the content of the aforementioned websites is entirely their own responsibility, and is understood to be in accordance with the conditions of use set out on those websites.
All rights reserved