Contractor profile

PRIVACY AND COOKIES POLICY       

Sociedad Mercantil Estatal de Acción Cultural, S.A. (hereinafter, "AC/E") complies in the processing of the personal data of its interested parties with current legislation in Spain and the European Union, in particular, with Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free circulation of these data (hereinafter, "GDPR"). To do this, it adopts the technical and organizational measures necessary to guarantee the security of personal data and avoid the loss, misuse, alteration, unauthorized access, and theft of the personal data provided, taking into account the state of technology, the nature of the data and the risks to which they are exposed, all in accordance with current regulations.       

For more information on the processing of personal data carried out by AC/E, please visit the following link: Records of Processing Activities (document in Spanish).

Who is responsible for the processing of personal data?       
Sociedad Mercantil Estatal de Acción Cultural, S.A. - NIF: A-81553521       
Address: calle José Abascal 4, 4º B, 28003 Madrid       
Email:  info@accioncultural.es       
Phone: +34 917 004 000       
        
Data Protection Officer:       
Castañeda Abogados, S.L.       
dpo@castaneda-abogados.com       
+34 915 233 230       

What personal data do we collect and for what purpose?       
AC/E will only process personal data that are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed. In this sense, the interested parties may provide, through the different procedures established for this matter, their personal data to AC/E, which will process it for the following purposes as long as the interested parties have given their consent in a specific, informed, and unequivocal way:       
        
Contact       
AC/E will treat the personal data of the interested parties in order to manage, process, and respond to requests for information, suggestions, claims, and any other communications made through visits, forms, social networks, email, or telephone. For this purpose, AC/E may have access to identification data, contact data, and voices of the interested parties.       
        
Communications       
AC/E will process the personal data of the interested parties in order to manage communications in general within the scope of the company and, in particular, to provide information, catalogues, books, among others. For this purpose, AC/E may have access to identification data, contact data, commercial information, and economic and financial data of the interested parties.       
        
Event organization       
AC/E will process the personal data of the interested parties in order to process invitations to conferences, events, exhibitions, as well as providing information related to them. For this purpose, AC/E may have access to identification data, contact data, employment details, and commercial information of the interested parties.       
        
Staff pick       
AC/E will process the personal data of the interested parties in order to manage their application in the corresponding selection processes. For this purpose, AC/E may have access to identification data, personal characteristics data, academic and professional data, employment detail data as well as any other information contained in documents that the interested parties could send.       
        
Artists and performances of cultural works       
AC/E will process the personal data of the interested parties in order to manage relationships with artists and providers of works within the framework of AC/E's activity. For this purpose, AC/E may have access to identification data, personal characteristics data, academic and professional data, employment detail data, commercial information, economic, financial and insurance data and data on transactions of goods and services of the interested parties. .       
        
Contracts       
AC/E will process the personal data of the interested parties in order to manage the contractual relationship with third parties. For this purpose, AC/E may have access to identifying data, commercial information, and data on the transactions of goods and services of the interested parties.       
        
PICE       
AC/E will process the personal data of the interested parties in order to manage the participation of artists in the Programme for the Internationalization of Spanish Culture (PICE). For this purpose AC/E may have access to identification data, personal characteristics data, academic and professional data, employment detail data and economic, financial and insurance data of the interested parties.       
        
Safety       
AC/E will process the personal data of the interested parties in order to guarantee the security of the facilities through the implementation of a video surveillance system. For this purpose AC/E may have access to the image of the interested parties.       

Newsletter       
AC/E will process the personal data of the interested parties in order to manage the subscription to the AC/E newsletter. For this purpose, AC/E may have access to the identification and contact data of the interested parties.       
        
Photogallery and videos       
AC/E will process the personal data of the interested parties in order to inform web users about events, interviews and other current affairs. For this purpose, AC/E may have access to identifying data and the image of the interested parties.       
        
What is the legitimacy for the processing of personal data?       
The legal basis for the treatment or access to personal data of the interested parties will be the following:       
Consent: contact, communications, newsletter, personnel selection, event organization, photo gallery and videos.       
Execution of a contract: organization of events, artists, and provision of cultural works and PICE.       
Legitimate interest: security.       
In addition, in the case of a state trading company, AC/E may process personal data in the exercise of public powers that were conferred on it.       
        
How long do we keep personal data?       
Personal data will be kept for the time necessary to fulfill the purpose for which they have been collected, and in particular:       
When the basis of legitimacy is the existence of a contractual relationship, AC/E will keep the personal data for the duration of said relationship and, once it's ended, for the time legally established for the defense or claim of responsibilities derived from the contracts.       
When the basis of legitimation is the consent of the interested party, AC/E will keep the personal data as long as it is not withdrawn.       
When the basis of legitimation is the legitimate interest of AC/E, AC/E will keep the personal data as long as said interest persists or prevails over the fundamental rights and freedoms of the interested party.       
When the basis of legitimation is the fulfillment of a mission in the public interest or in the exercise of public powers, as long as said interest persists.       
        
To which recipients will the personal data be communicated?       
To the extent that one of the main points of the activity carried out by AC/E is the promotion of cultural activities carried out by Spanish creators throughout the world, collaborating with foreign institutions, data on artists and collaborators may be transferred internationally to countries outside the European Economic Area. This transfer will take place whenever it will be necessary for the conclusion or execution of a contract, in the interest of the interested party.       
        
AC/E may only transfer personal data in the cases not included in the previous paragraph in the event that it has the specific, informed, and unequivocal consent of the interested parties, unless it is thus imposed by a legal obligation or for the defense of their rights and interests, as long as these prevail over the rights of the interested parties.       
        
We also inform you that third parties may process the personal data of the interested parties on behalf of AC/E for the provision of the services requested by it. These third parties are considered data processors and offer sufficient guarantees to apply appropriate technical and organizational measures for compliance with the GDPR.       
        
What are your rights when you provide us with your data?       
Right of access: the interested parties have the right to obtain confirmation about whether AC/E processes personal data that concerns them and, if so, to access them. You will also have the right to obtain a copy of the data.       
Right of rectification: the interested parties have the right to request the rectification of inaccurate personal data that concerns them.       
Right of deletion (including the right to be forgotten): the interested parties have the right to request the deletion of their data, in the online environment or permanently, among other reasons, when the data is no longer adequate, necessary, or relevant for the purposes for those who were collected.       
Right of opposition: the interested parties have the right to oppose the processing of their personal data, for reasons related to their particular situation. In this case, AC/E will cease to process said data, unless there are compelling legitimate reasons, or for the formulation, exercise, or defense of claims.       
Right to the limitation of the treatment: the interested parties, under the premise that certain conditions are met, may request the limitation of the processing of their data, in which case AC/E will only be able to process them, with the exception of their conservation, for the exercise or defense of claims, for the protection of the rights of third parties or for reasons of public interest.       
Right to data portability: The interested parties have the right to receive or, where appropriate, for AC/E to provide third parties with their personal data in a structured, commonly used, and machine-readable format, as long as this processing is based on the consent of the interested parties and is carried out by automated means.       

Interested parties may exercise their rights of access, rectification, deletion, opposition, limitation, and portability through postal mail to the address José Abascal 4, 4º B, 28003 Madrid or by email to info@accioncultural.es, providing a photocopy of the DNI or identity document.       
        
AC/E undertakes to respond to all requests within the term established in current regulations.       
        
Likewise, interested parties may file a claim with the Spanish Data Protection Agency (AEPD), whose contact details are offered through the website www.aepd.es       

IP addresses, links and cookies       
Due to the communication protocols existing on the Internet, when interested parties visit our website, AC/E automatically receives the IP (Internet Protocol) address that has been assigned to their computer by their Access Provider. The registration of said IP address serves only exclusively internal purposes, such as the statistics of access to this website. As a general rule, the IP address for the same user is different from one Internet connection to another, so it is not possible to track the browsing habits through the web by a certain user.       
        
This website contains links to other web pages. The user must be aware that AC/E is not responsible for the privacy practices or the content of these other websites. We recommend that interested parties be aware that by using one of these links they are leaving our website and that they carefully read the privacy policies of those other websites that collect personal data.       
        
AC/E may use cookies when a user browses its sites and web pages in order to optimize navigation through it. You have more information about cookies in our cookie policy.