In accordance with the provisions of EU Regulation 2016/679, of the European Parliament and of the Council of April 27, 2016 (GDPR) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, ASOCIACION PARA LA CERTIFICACION ESPAÑOLA FORESTAL, PEFC ESPAÑA informs you that, by accepting this Privacy Policy, you give your express, informed, free, and unequivocal consent for the data you provide, and for which security measures are applied, to be processed by ASOCIACION PARA LA CERTIFICACION ESPAÑOLA FORESTAL, PEFC ESPAÑA, as the data controller.
The personal data that we may collect directly from the interested party through the website will be treated confidentially and will be incorporated into the corresponding processing activity owned by ASOCIACION PARA LA CERTIFICACION ESPAÑOLA FORESTAL, PEFC ESPAÑA.

Who is responsible for this website?

Company Name: ASOCIACION PARA LA CERTIFICACION ESPAÑOLA FORESTAL, PEFC ESPAÑA
CIF (Tax ID): G82338849
Address: Glorieta QUEVEDO, 8, 2nd RIGHT, Postal Code 28015 Madrid
Phone: 915910088
Email: pefc @ pefc.es
Domain name: https://www.pefc.es

What data is collected on this website?

For the purposes established in this Privacy Policy, ASOCIACION PARA LA CERTIFICACION ESPAÑOLA FORESTAL, PEFC ESPAÑA collects and processes the following personal data, depending on the different products or services requested on this website:

Identifying data: name, surname.
Contact details: postal address, email address, mobile phone number.
Contractual data: data from contractual operations, ID number, purchased products and services, financial transactions, payment data.
Navigation data: IP address, device type and identification, browser type, domain through which you access the Website, browsing data, activity on the Website.

On what legal basis are these data processed?

We process your personal data based on the following legal grounds:

The execution of a contract with ASOCIACION PARA LA CERTIFICACION ESPAÑOLA FORESTAL, PEFC ESPAÑA, for the hiring of services and/or products and to manage the requested services.
The legitimate interest of the data controller to protect users of the ASOCIACION PARA LA CERTIFICACION ESPAÑOLA FORESTAL, PEFC ESPAÑA website from abuse and fraud in the use of our services.

For what purposes will we process your data?

On this website, we will request your personal data so that you can create an account in our system and access its functionalities.

In the case of being an applicant entity, we will process your data to carry out the corresponding management related to the certificate in question.

Retention period of personal data

The personal data provided will be kept for as long as necessary, taking into account the reasons for which the data processing is needed, as well as the legal obligations to retain data for a certain period, such as labor, tax, or fraud prevention legislation that require the retention of personal data for a specified period or until the data subject withdraws consent.
Subsequently, the data will be deleted in accordance with the data protection regulations, which involves its blocking, being available only at the request of Courts and Tribunals, the Public Prosecutor's Office, or competent Public Authorities during the statute of limitations period for any actions that may arise, after which they will be completely deleted.

Customer data: The retention period of personal data will vary depending on the service contracted by the customer. In any case, it will be kept to the minimum necessary, and may be kept for up to:

4 years: Articles 66 et seq. of the General Tax Law (accounting books…).
5 years: Article 1964 of the Civil Code (personal actions without special deadline).
6 years: Article 30 of the Commercial Code (accounting books, invoices…).
10 years: Article 25 of the Law on the Prevention of Money Laundering and Financing of Terrorism. Subscriber or registration data: From the moment the user gives their consent until it is withdrawn.

What are your rights regarding the use of your data?

Any person has the right to obtain confirmation from ASOCIACION PARA LA CERTIFICACION ESPAÑOLA FORESTAL, PEFC ESPAÑA as to whether or not we are processing personal data concerning them.
Interested parties have the right to:

Request access to personal data concerning the data subject.
Request rectification or deletion.
Request cancellation.
Request limitation of processing.
Oppose the processing.
Request data portability.
If you have given your consent for a specific purpose, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal.
If you feel that your rights regarding the protection of your personal data have been violated, especially if you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the Data Protection Authority. To exercise these rights, you can write to pefc @ pefc.es. Forms can also be submitted in person or sent by mail to the contact addresses of the data controller indicated above.
If action is taken through legal representation, you must also provide your ID card and proof of representation of the representative. It will be necessary to provide a photocopy of the ID card or equivalent document proving identity and valid in law, in cases where the data controller has doubts about your identity.

Notification and declaration of breaches

At ASOCIACION PARA LA CERTIFICACION ESPAÑOLA FORESTAL, PEFC ESPAÑA, we take appropriate security measures according to the risk level to protect personal information against loss, misuse, unauthorized access, disclosure, alteration, and destruction, taking into account the risks involved in processing and the nature of personal information; however, if ASOCIACION PARA LA CERTIFICACION ESPAÑOLA FORESTAL, PEFC ESPAÑA determines that personal data being processed has been misused, exposed due to a security breach, or acquired incorrectly by a third party, ASOCIACION PARA LA CERTIFICACION ESPAÑOLA FORESTAL, PEFC ESPAÑA will act immediately in accordance with the GDPR and competent data protection authorities.

All of them will have signed a service provision contract that obliges them to maintain the same level of privacy applied to the processing carried out on this website in accordance with current data protection regulations.

Secrecy and security of data

ASOCIACION PARA LA CERTIFICACION ESPAÑOLA FORESTAL, PEFC ESPAÑA undertakes to use and process user personal data, respecting their confidentiality, according to the purpose thereof; as well as to comply with its obligation to keep them and adopt all measures to prevent alteration, loss, processing or unauthorized access, in accordance with current data protection regulations. ASOCIACION PARA LA CERTIFICACION ESPAÑOLA FORESTAL, PEFC ESPAÑA cannot guarantee the absolute invulnerability of the Internet, and therefore, the violation of data through fraudulent access by third parties. With regard to the confidentiality of processing, ASOCIACION PARA LA CERTIFICACION ESPAÑOLA FORESTAL, PEFC ESPAÑA will ensure that anyone authorized by ASOCIACION PARA LA CERTIFICACION ESPAÑOLA FORESTAL, PEFC ESPAÑA to process customer data (including its staff, collaborators, and service providers) is under the appropriate obligation of confidentiality (whether a contractual or legal duty).

Accuracy and truthfulness of data

As a user, you are solely responsible for the accuracy and correctness of the data you submit to us, indemnifying ASOCIACION PARA LA CERTIFICACION ESPAÑOLA FORESTAL, PEFC ESPAÑA from any liability in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity, and authenticity of the personal data provided, and undertake to keep it duly updated.

Personal data of third parties

In the event that the personal data provided belong to a third party, as a user, you guarantee that you have informed said third party of this Privacy Policy and have obtained their authorization to provide their data to ASOCIACION PARA LA CERTIFICACION ESPAÑOLA FORESTAL, PEFC ESPAÑA for the purposes indicated. Similarly, you guarantee that the provided data is accurate and up-to-date, and you are responsible for any direct or indirect damage or harm that may arise from the breach of this obligation.

Changes in the privacy policy

ASOCIACION PARA LA CERTIFICACION ESPAÑOLA FORESTAL, PEFC ESPAÑA reserves the right to modify this policy to adapt it to legislative or jurisprudential developments, as well as industry practices. In such cases, changes will be announced on this page with reasonable notice before implementation.

Additional information on data protection

If you need additional information on data protection, you can email us at pefc @ pefc.es or send a communication addressed to Glorieta QUEVEDO, 8, 2nd RIGHT, Postal Code 28015 Madrid, depending on the type of relationship you have with our entity.