Likewise, We inform you that this Policy complies with the Regulation (EU) 2016/679 of THE European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter, “GDPR”), as well as with Spanish Act 3/2018 of 5 December of Protection of Personal Data and the Guarantee of Digital Rights, and with all applicable and in force regulations regarding data protection.
What Does Personal Data Mean?
Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly.
Who processes the personal data? Who is the personal data controller?
passports-services.com will be the controller of the personal data that we collect, which belongs to , with Tax ID and registered office in . Please note that the personal data will be collected and processed when you browse our website, buy our services and/or contact us for any reason, among others.
Do we need to appoint a Data Protection Officer (“DPO”)?
According to GDPR, appointing a DPO is not always mandatory, just in a few cases. In passports-services.com case, according, among others, to the type of service that we offer, a DPO is not required.
What do we use your personal data for?
When you complete our forms in order to contract our services, we process your Data for the following purposes:
To manage the commercial relationship we maintain and provide you correctly our services;
To attend to your information requests;
To provide you with customer services during the provision of the service;
To send you communications regarding the service contracted;
For administrative purposes related to the processing and management of our services, such as accountancy and billing tasks, verification of your payment information;
For the billing of the services contracted;
To comply with legal obligations;
To comply with applicable legal or governmental requirements;
To improve our website according to business decisions and/or users suggestions;
To protect, investigate and deter against fraudulent, unauthorized or illegal activity on or through our website.
Which are the legal basis that justify the data processing?
The legal basis will depend on the reason we collect and process your personal data. We will process data according to the following legal basis: contract execution, to comply with legal obligations and consent when information request are sent without having contracted the services previously. We will also process your data according to our legitimate interest to enhance Users experience while browsing through our website, to determine if fraudulent activity is being carried out so that we can detect it rapidly and guarantee the preservation of security and integrity of our website.
What type of personal data we process?
We collect the following categories of personal data:
Personal data that you must provide in your application to obtain a passport or renew it, among others: name and surname, postal address, email, date and place of birth, gender and occupation.
Information and/or personal data that you provide to us when you contact us by post or email for further information about Us and/or our services. E.g: email.
Data on how you use our website and information on the location of your device. Eg: your web browser type.
Please note that in all cases, we only process Data which is strictly necessary for the fulfillment of the purposes described above.
In the event that you provide us with Data of third parties while contracting our services, you confirm Us that you have obtained their express consent, not being passports-services.com in any event responsible for breaching this requirement by a customer.
If you wish to contract our services and you are a minor (age according to your country’s laws and regulations) or you are contracting them on their behalf, please do not send Us or introduce any type of Data from the minor through our website without obtaining the express consent and participation of your/his/her parents or legal guardians. The parents or legal guardians will be considered as direct responsibles for any acts performed by or on behalf of the minors. Therefore, we cannot be held responsible to this regard.
Therefore, if you are an adult under the laws of your country and you provide us personal data of a minor, you guarantee to us that you are one of their parents or legal guardians. We reserve the right to request the documentation we deem appropriate to confirm the family relationship between you and the minor.
How long do we keep your personal data?
The Data will be stored depending on the purposes for which has been collected:
If you maintain a commercial relationship with Us, so that we can provide you an excellent service, this includes communications in order to inform you about the service contracted and customer service, we will keep your Data until this relationship ends, and once terminated, We will store them until we comply with all legal obligations.
If you have filled in our “Contact” form requesting for information, the Data which you have provided us with by means of the form, will be stored until your consent is withdrawn.
Who Do We Share Personal Data With?
Your data can be communicated to public bodies in order to comply with our legal obligations and to administrative or judicial authorities if required by virtue of applicable law and regulations. As well, we can communicate your data to our suppliers and partners if it is necessary for the provision of the service.
Who Do We Share Personal Data With? Do we transfer data outside the EU?
The third parties mentioned above may have their headquarters outside the country in which you reside (including, but not limited to the United States) and the European Economic Area (EEA), so the disclosure of your Data to them, may involve an international transfer of Data. In this sense, we inform you that we only transfer personal data to recipients who offer an adequate level of data protection (such as the United States that has Privacy Shield) or, failing that, we will apply the appropriate technical and organizational measures required by law, in order to ensure that your personal data is properly secured and that your individual rights and freedoms are guaranteed.
How do we protect your personal data?
Your trust is very important to us. For that reason, your personal data is stored confidentially and securely in our data systems. We have established the appropriate policies and have taken the appropriate technical and organizational measures to safeguard and protect your personal data against illegal or unauthorized access, loss or accidental destruction, damage, use, and illegal or unauthorized disclosure.
Likewise, we have taken reasonable precautions to guarantee that all our staff, as well as the suppliers or collaborators who have access to their personal data, have received adequate training regarding Data processing.
What Rights Do You Have and How Can You Exercise Them?
Regarding privacy, there are several rights that all data subject have, which are: (i) rights of access; (ii) rectification; (iii) to erasure; (iv) restriction of the processing; (v) to object; (vi) data portability, and; (vii) the right to not be object of automated individual decision-making. Moreover, you can exercises the above mentioned rights by writing us by means of our “Contact” section.
We will respond to your data protection rights request within one (1) month since the receipt of your request. Occasionally, it may take us longer than a month to respond to the request, and we may respond within the period of two (2) months. In this case, we will notify you, within the first month, of this event and keep you updated.
We would like to inform you that, if you are not satisfied with our response to your request, you have the right to lodge a complaint before the corresponding supervisory authority.
Do you have the right to withdraw your consent?
Yes, at any time you can withdraw your consent regarding the processing of one or more purposes for which are being processed by writing us by means of our “Contact” section.
What does acceptance of this Policy entail?