Marina Coruña

Contact us

Calculate berth rate

Privacy policy

Data Controllers

  • Data Controller: FIGRUPO MARINAS S.L.
  • NIF: B15997794
  • Address: Paseo Marítimo Alcalde Francisco Vázquez, S/N, 15001, A Coruña
  • E-mail for the exercise of rights: marina@marinacoruna.es
  • Data Protection Officer: NorQuality Consultores, S.L.
  • E-mail: protecciondedatos@norquality.es

Purposes and legal bases

Completing the basic information on data protection provided through each of the data collection channels, the following additional information is provided regarding the purposes, legal bases and other information relating to the following files or processing activities:

  • Customers: Personal data will be processed for the purpose of providing the contracted service or product, as well as for the management of invoicing, collections, payments, delivery or shipment of products, accounting, tax and administrative management, including the maintenance of the commercial relationship. The lawfulness of the processing is based on Art. 6.1.b. GDPR: “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”.
  • Potential customers: Personal data will be processed to present quotations/offers for products or services and to respond to requests for information in accordance with the customer’s requirements. The lawfulness of the processing is based on Art. 6.1.a. GDPR: “the data subject has given consent to the processing of his or her personal data for one or more specific purposes”.
  • Professional contacts: Data will be processed for the maintenance of the professional or commercial relationship between our organisation and the entity (natural or legal person) to which the affected persons belong. This includes identifying the contact person, managing communications necessary for the development of the relationship, coordinating activities, handling enquiries, as well as their professional contact details through the means provided. The lawfulness of the processing is based on Art. 6.1.f. GDPR: “processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child”, in accordance with the provisions implementing Art. 19 of the LOPDGDD.
  • Suppliers: Data will be processed for the proper management and monitoring of suppliers and the provision of contracted services, purchased products or receipts, shipments and enquiries. Management of commercial reports, delivery notes and payment of supplier invoices. Accounting, tax and administrative management. Maintenance of the commercial relationship. The lawfulness of the processing is based on Art. 6.1.b. GDPR: “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”.
  • Applications: Where CVs are received, they will be reviewed to determine whether the profile matches any of our job positions.

The lawfulness of the processing is based on Art. 6.1.a. GDPR: “the data subject has given consent to the processing of his or her personal data for one or more specific purposes”.

  • Contact: Contact details will be used to manage your request or enquiry. The lawfulness of the processing is based on Art. 6.1.a. GDPR: “the data subject has given consent to the processing of his or her personal data for one or more specific purposes”.
  • Video surveillance: Personal data will be processed for the purpose of preserving the security of premises, property and persons. The lawfulness of the processing is based on Art. 6.1.f. GDPR: “processing is necessary for the purposes of the legitimate interests pursued by the controller” and on Art. 22.1 of the LOPDGDD: “Natural or legal persons, public or private, may process images through camera or video camera systems for the purpose of preserving the security of persons and property, as well as their facilities”.
  • Website users: Personal data collected as a result of visiting our website will be processed for the following purposes:
    • Contact section for submitting enquiries, complaints, suggestions or claims
    • Analysis of browsing habits through analytical cookies (see Cookie Policy published on the website).

The lawfulness of the processing, where your data is received as a result of using the contact form or sending CVs, is based on Art. 6.1.a. GDPR: “the data subject has given consent to the processing of his or her personal data for one or more specific purposes”.

  • Social media: Data will be processed for the dissemination of the activities/events organised by the company, to showcase our services/products and/or employees in the performance of their activities through the public social media profiles associated with FIGRUPO MARINAS S.L.

The lawfulness of the processing is based on Art. 6.1.a GDPR: “the data subject has given consent to the processing of his or her personal data for one or more specific purposes”.

  • Rights Management: Personal data will be processed for the management, analysis and response to data protection rights exercised by data subjects within the framework of the applicable regulations. The lawfulness of the processing is based on Art. 6.1.c. GDPR: “processing is necessary for compliance with a legal obligation to which the controller is subject”.
  • Regulation 2016/679 of the European Parliament and of the Council.
  • Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights.
  • Data transfers or disclosures.

For the management of certain services offered by the entity, it is necessary to allow certain data to be accessed by third-party service providers contracted for this purpose. In this regard, the entity enters into the respective necessary data processing agreements and has provided precise instructions to the different service providers or data processors in order to ensure the security and integrity of the data to which they have access in connection with the provision of the contracted service.

Except in the above cases, your personal data will not be disclosed to third parties, except where legally provided for.

Data retention period

Completing the basic information on data protection provided through each of the data collection channels, the following additional information is provided regarding the purposes and legal bases of the following files or processing activities:

  • Customers: data will be retained until the end of the contractual relationship and will remain, duly blocked, for the limitation periods applicable to any liabilities that may arise (6 years).
  • Potential customers: data will be retained for 1 year.
  • Suppliers: data will be retained for as long as necessary to fulfil the purpose for which it was collected.
  • Professional contacts: data will be retained until the end of the professional relationship with the data subject.
  • Personnel: data will be retained for the legally established retention periods.
  • Applications: data will be retained for 1 year.
  • Video surveillance: data will be retained for 30 days.
  • Website users: data will be retained while their request is being managed (contact).
  • Social media: data will be retained while the consent given by the data subject remains valid, without prejudice to their right to withdraw it at any time.
  • Rights management: data will be retained for as long as necessary to fulfil the purpose for which it was collected and to determine any potential liabilities that may arise from such purpose and from the processing of the data.

Profiling and international data transfers

No automated profiles will be created. The company uses tools such as Microsoft 365, which may involve potential international transfers of data outside the European Economic Area. These transfers are always carried out on the basis of adequacy decisions that entail a level of data protection equivalent to that guaranteed by Community legislation.

In the absence of an adequacy decision, transfers will be carried out through the signing of Standard Contractual Clauses approved by the European Commission, which guarantee an adequate level of protection of personal data.

Likewise, the company will implement appropriate technical and organisational measures to guarantee the security of the personal data transferred, with the aim of ensuring its confidentiality, integrity and availability, minimising the potential risks that may arise from processing in those third countries.

Withdrawal of consent

In those cases where the processing of personal data is based on consent, the interested Parties are informed of their right to withdraw their consent at any time, easily and free of charge, by means of a written communication addressed to the address of the data controller or through marina@marinacoruna.es. Withdrawal of consent shall not affect the lawfulness of processing based on consent prior to its withdrawal.

Rights of data subjects

Data protection legislation grants a series of rights to data subjects or data owners. These rights are as follows:

  • Right of access: right to obtain information as to whether their own data are being processed, the purpose of the processing being carried out, the categories of data processed, the recipients or categories of recipients, the retention period and the source of such data.
  • Right to rectification: right to obtain the rectification of inaccurate or incomplete personal data.
  • Right to object: right to object to a particular processing activity based on the consent given.
  • Right to erasure: right to obtain the erasure of data in the following cases:
    • When the data are no longer necessary for the purpose for which they were collected
    • When the data subject withdraws consent
    • When the data subject objects to the processing
    • When they must be erased in compliance with a legal obligation
    • When the data have been obtained in connection with an information society service pursuant to Art. 8 para. 1 of the European Data Protection Regulation.
  • Right to restriction: right to obtain restriction of the processing of data where one of the following circumstances applies:
    • When the data subject contests the accuracy of the personal data, for a period enabling the company to verify their accuracy.
    • When the processing is unlawful and the data subject opposes the erasure of the data.
    • When the company no longer needs the data for the purposes for which they were collected, but the data subject needs them for the establishment, exercise or defence of claims.
    • When the data subject has objected to processing while it is being verified whether the legitimate grounds of the company override those of the data subject.
  • Right to data portability: right, where processing is carried out by automated means, for the data subject to receive their personal data in a structured, commonly used, machine-readable and interoperable format, and to transmit them to another data controller, provided that the processing is based on consent or within the framework of the performance of a contract.
    • This right, by its very nature, cannot apply where the processing is necessary for compliance with a task carried out in the public interest or in the exercise of official authority vested in the controller.
  • Right not to be subject to automated individual decision-making: right not to be subject to a decision based solely on the processing of personal data, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them.

This right shall not apply where:

  • It is necessary for entering into or performing a contract between you and the controller
  • The processing of your data is based on your prior consent

*In these first two cases, the controller must guarantee the data subjects’ right to obtain human intervention, to express their point of view and to contest the decision.

  • It is authorised by Union or Member State law and appropriate measures are established to safeguard the rights and freedoms and legitimate interests of the data subject.

*In turn, these exceptions shall not apply to special categories of data (Art. 9.1), unless Art. 9.2(a) or (g) applies and the appropriate measures referred to in the preceding paragraph have been taken.

Data subjects may exercise the aforementioned rights by contacting the entity in writing, sent to marina@marinacoruna.es, indicating in the Subject line the right they wish to exercise, or, if preferred, by sending their request to the company’s postal address, which is Paseo Marítimo Alcalde Francisco Vázquez, S/N, 15001, A Coruña. The entity will process your request as soon as possible and taking into account the deadlines established in data protection regulations.

FIGRUPO MARINAS S.L. has appointed a Data Protection Officer who can be contacted at protecciondedatos@norquality.es.

If you consider that your rights have not been duly addressed, you have the right to lodge a complaint with the Spanish Data Protection Agency www.aepd.es

Security

The security measures adopted by the entity are those required in accordance with Article 32 of the GDPR. In this regard, the entity, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons, has established appropriate technical and organisational measures to ensure a level of security appropriate to the existing risk.

In any event, the entity has implemented sufficient mechanisms to:

  • Guarantee the ongoing confidentiality, integrity, availability and resilience of processing systems and services.
  • Restore the availability of and access to personal data quickly in the event of a physical or technical incident.
  • Regularly verify, evaluate and assess the effectiveness of the technical and organisational measures implemented to ensure the security of the processing.
  • Pseudonymise and encrypt personal data, where applicable.
  • Limit and control access to personal data.

Cookies

A cookie is a file or device that is downloaded onto users’ terminal equipment for the purpose of storing data that may be updated and retrieved by the entity responsible for its installation. In other words, it is a file that is downloaded onto your computer when you access certain websites. For more information, please consult our Cookie Policy.