Privacy Policy
NEXXUS-IBERIA SGEIC, S.A, (hereinafter NEXXUS IBERIA) is especially sensitive to the protection of personal data of the Users of the services of this Web site.
By means of this Privacy Policy (hereinafter, the Policy) NEXXUS IBERIA informs the USERS of the website: https:// www.
nexxus-iberia.com, of the uses to which the personal data collected on the Web site are put, so that they can decide, freely and voluntarily, if they wish to provide the requested information.
NEXXUS IBERIA, reserves the right to modify this Policy in order to adapt it to new legislation, jurisprudential criteria, industry practices, or interests of the entity.
Any modification in it will be announced with due notice, so that you are fully aware of its contents.
PERSON IN CHARGE OF THE TREATMENT
The person responsible for the processing of personal data is;
NEXXUS-IBERIA SGEIC S.A, CIF A-87527149, with registered office at Serrano, No. 165, Madrid, 28002, Spain.
Phone: (+34)91 5990385.
E-mail: info@nexxus-iberia.com
Data Protection Officer (DPO) contact details: protecciondedatos@
PURPOSE OF TREATMENT
The purpose of the treatment by NEXXUS IBERIA is to manage the information provided on our Web Site, as well as to contact us, the maintenance and management of the professional, commercial, and/or contractual relationship that, where appropriate, is established with NEXXUS IBERIA (hereinafter the “Service/s“).
LEGITIMACY
The legal basis for the processing of your personal data by NEXXUS IBERIA. is based:
i) in the consent of the USER to the treatment described in this Privacy Policy and
ii) in compliance with the provision of the NEXXUS IBERIA Services requested by the USER, in accordance with articles 6.1.
a) and
b) of the General Personal Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.
c) On the basis of a legitimate interest for security and access control purposes in accordance with Article 6.1 f) of the General Personal Data Protection Regulation, assessing the proportionality and relevance of such interest against the rights of data subjects, as well as for the transmission of data within the corporate group for internal administrative purposes.
CONSERVATION PERIOD
The personal data provided will be kept for the corresponding period of time to comply with legal obligations, or their deletion is requested by the interested party and he/she is legitimized to do so.
Even if deletion is requested, they will be kept blocked for the necessary time, and limiting their processing, only for one of these assumptions: to comply with legal/contractual obligations of any kind to which we are subject and/or during the legal periods provided for the prescription of any liabilities on our part and/or the exercise or defense of claims arising from the relationship with the owner of the data.
DATA ACCURACY
On the other hand, in order that the data contained in our files, computer and/or paper, always correspond to reality, we will try to keep them updated.
So that, for these purposes, the User must make the changes, directly, when so enabled or by communicating, by reliable means, to the corresponding area or department of the data controller.
TARGET
The personal data you provide to the Data Controller may be disclosed to the following categories of recipients:
- Third parties to whom the company is obliged to transmit information, such as public authorities, in order to comply with the requirements of such authorities and the regulations of Law 24/1988, of July 28, 1988, on the Securities Market.
- When you have given your consent to communicate your personal data to companies of the Nexxus Capital Group, parent company located in Mexico, in order to improve the quality of the products or services offered to you.
You can always withdraw the consent given or exercise your right of opposition. - For internal administrative and IT reasons, personal data will be transmitted within the Nexxus Group Entities in order to be able to properly manage your contractual relationship with NEXXUS IBERIA.
INTERNATIONAL TRANSFERS OF PERSONAL DATA.
USERS are informed that International Transfers of personal data are made to the company located in Mexico, based on the Commission Implementing Decision ( EU) 2021/914 of June 4, 2021, on Standard Contractual Clauses for transfers of personal data to third countries in accordance with the GDPR 2016/679 of the European Parliament and of the Council.
SECURITY MEASURES
Finally, it is informed that NEXXUS IBERIA will adopt the legally required technical and organizational measures in its information system, in order to guarantee the security and confidentiality of the stored data, thus avoiding its alteration, loss, unauthorized processing or access; taking into account the state of the art, the costs of application, and the nature, scope, context and purposes of the processing, as well as risks of varying probability and severity associated with each of the treatments.
EXERCISE OF DATA PROTECTION RIGHTS.
More information about exercising your data protection rights is provided below:
What are my rights?
Who can exercise these rights against the data controller?
How and where can I exercise these rights?
Additional information
WHAT ARE YOUR DATA PROTECTION RIGHTS AND HOW CAN YOU EXERCISE THEM?
You may exercise your rights of access, rectification, deletion, limitation, portability or, where appropriate, opposition.
to these effects, as well as withdraw your consent at any time, , in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter “GDPR”) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
You should write to NEXXUS-IBERIA SGEIC S.A., Calle Serrano en el N.º 165, Madrid, 28002, Spain.
You can also send it to the e-mail address of our Data Protection Delegate: dpo@inffirm.com.
In the letter you must specify which of these rights you are requesting to be satisfied and, in turn, you must show or, in case of mailing, attach a photocopy of your ID card or equivalent identification document.
In case of acting through a representative, legal or voluntary, you must also provide a document proving the representation and identification document of the same.
Likewise, in case you consider your right to personal data protection has been violated, you may also, in case you consider your right to personal data protection has been violated, you may file a complaint with our Data Protection Delegate dpo@inffirm.com or, where appropriate, with the Spanish Data Protection Agency (www.aepd.es).
Right of access
You have the right to know:
- Whether or not we are processing personal data concerning you.
- The origin of your data, if not provided by you.
- The purposes of the processing of your data.
- The categories of data involved.
- The recipients or categories of recipients to whom the personal data have been or will be disclosed.
- If possible, the expected retention period of the personal data (or, if not possible, the criteria used to determine this period).
- The right to file a complaint with a supervisory authority.
- If we make automated decisions – including profiling – using your personal data.
Right of rectification
- You have the right to have your personal data rectified:
- Completing them, if they are incomplete.
- Updating or rectifying them, if for any reason they are no longer in accordance with the current reality or are inaccurate.
- By exercising your right to rectification, we will ensure that all your personal data is accurate and complete.
Right to suppression
- You have the right to have your personal data deleted when any of the following conditions apply:
- Such data are no longer necessary for the purposes for which they were collected or processed.
- You withdraw the consent on which we base the processing of your data and it cannot be based on any other basis of legitimacy.
- You have successfully exercised your right to object to the processing of your data.
- Personal data have been processed unlawfully.
Right to limitation of processing
- You have the right to obtain the limitation of the processing of your personal data (i.e. that we keep it without using it for the intended purposes).
Right of opposition
- You will have the right to ask us to stop using your personal data, for example, where you believe that the personal data we hold about you may be incorrect or you believe that we no longer need to use it.
Right of portability
When the processing of your data is based on consent or is necessary for the performance of a contract or pre-contract and is carried out by automated means, you have the right to the portability of your data, i.e. to have them delivered to you in a structured, commonly used and machine-readable format, even to forward them to a new controller, which is why NEXXUS-IBERIA.
will facilitate the portability of your data to the new data controller.
b) Who can exercise these rights before NEXXUS IBERIA?
You, as the data subject or holder of the personal data, acting on your own behalf and in your own right.
Through another person acting, duly accredited, as a legal or voluntary representative (a person that you have freely and voluntarily granted powers of attorney for this purpose).
c) How and where can I exercise these rights?
By Postal Mail
You may submit your letter by sending it to the following postal address: NEXXUS-IBERIA SGEIC S.A, Calle Serrano en el N.º 165, Madrid, 28002, Spain.
By e-mail:
To the following e-mail: info@nexxus-iberia.com
You can also contact our Data Protection Officer at protecciondedatos@abogadoslopezbelda.com.
In both cases, you must:
- Provide sufficient data and information to meet the request. For this purpose, you may use the model forms made available by the Spanish Data Protection Agency https://www.aepd.es/es/derechos-y-deberes/conoce-tus-derechos.
- Sign the form by handwriting or, if applicable, and if you have a recognized digital certificate, sign it electronically.
- Attach a photocopy of ID card, passport, NIE or other equivalent identification document. In case of acting on behalf of a third party, a copy of his/her ID card or equivalent identification document must also be included, as well as the document accrediting the representation of the interested party.
- Send the form and documents proving your identity by any of the above-mentioned means.
- d) Supplementary information
NEXXUS IBERIA, will analyze whether or not the request is in accordance with the law. It shall inform the petitioner of the decision adopted, proceeding accordingly: if it is upheld, it shall adopt the appropriate measures according to the right exercised; if it is rejected, it shall indicate the system of appeals provided for by law. In case of manifestly unfounded or excessive requests (e.g. repetitive nature) NEXXUS IBERIA may: (i) Charge a royalty proportional to the administrative costs incurred (ii) Refusal to act.
III. ADDITIONAL INFORMATION DATA PROTECTION
INVERTER TREATMENT
Your data is processed by NEXXUS IBERIA as data controller.
Your personal data will be used for the purpose of maintaining relations of any kind with our customers as a result of the contractual relationship that we maintain, especially with regard to economic, administrative and fiscal management, quality, and personalized attention necessary to comply with the contractual relationship.
The lawfulness of the processing is based on Article 6.1.b) of the GDPR: the processing is necessary for the performance of a contract to which the data subject is party or for the application at his request of pre-contractual measures and 6.1c) the processing is necessary for compliance with a legal obligation applicable to the controller.
Your personal data will be kept for the duration of the established relationship and once it has ended, it will be kept in accordance with the legal retention periods for economic and fiscal matters, which, depending on the type of document, can range from a minimum of 4 years to a maximum of 10 years.
SOCIAL NETWORKS
NEXXUS IBERIA has different profiles in social networks to publicize its activities and interact with users. Users of these social networks who voluntarily decide to follow NEXXUS IBERIA, express their consent to the processing of their personal data relating to their profile to interact in the social network. NEXXUS IBERIA does not collect data from social networks for purposes other than those mentioned. The use of social networks involves an international transfer of data for the provision of the service. This communication is made on the basis of the adoption by the social network of standard contractual clauses, in accordance with European Commission Decision 2010/87. You can stop following NEXXUS IBERIA at any time.
The user must respect the rights of third parties, especially the rights of privacy and data protection, as well as intellectual and industrial property regulations, in all information published on the NEXXUS IBERIA website. The publication of information that in any way violates morals, public order, fundamental rights, public freedoms, with special attention to the honor, privacy or image of third parties and, in general, human rights, is prohibited. The user shall be solely responsible for the information he/she publishes.
We recommend you review the privacy settings of the social network and attach a link to the different privacy policies:
LinkedIn: https://es.linkedin.com/legal/privacy-policy
The personal data that we process as a result of the reception and/or exchange of e-mails, will be processed in order to attend and respond to your request for information or consultation, to maintain commercial or professional contacts and relationships that occur as a result of this, or for the maintenance of a contractual relationship, if any.
Calle Serrano, 165
Madrid, 28002
Spain
T. +34 91 599 0385