Through this notice, “Casino Prado Suburense” (hereinafter “Casino Prado”) informs users of the Website www.penyaescacscp.com, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council , of 27 April 2016 (General Data Protection Regulation) and Organic Law 3/18 of 5 December on the Protection of Personal Data and the guarantee of digital rights and other applicable regulations, of its protection policy of personal data in order for them to decide expressly, freely and voluntarily, to provide "Casino Prado" with the personal data requested, motivated by the request for information or the contracting of the various services 'offer in the field of the organization of activities related to the practice of the sport of chess.

Unless specifically stated otherwise, it is considered necessary to complete all the required data in the analogous form or form in a true, accurate, complete and up-to-date manner. Otherwise, "Casino Prado" may, depending on the case, not proceed with the registration of the user, or deny the specific service requested. All data provided by the user / interested party will be processed according to the characteristics detailed below.

Information relating to the processing of personal data

Identification of the person in charge: “Casino Prado Suburense”, with address at C / Francesc Gumà, 6-14 08870 Sitges, with NIF number: G08448573. Contact email casino@casinoprado.cat.

Purpose of treatment:

All data provided will be processed for the following purposes:

• Respond to requests made by the interested party.

• Maintaining the relationship that can be established.

• Management, administration, information, provision and improvement of the services that are decided to contract.

• Commercial communications relating to our products and services.

The personal data provided will be kept as long as the business relationship is maintained, the data subject does not request its deletion or is necessary for the purposes of processing. Data will not be destroyed when there is a legal provision requiring its retention, in which case the data will be blocked, retaining only at the disposal of public administrations, judges and courts, for the attention of the possible responsibilities arising from the treatment, during the period of prescription of these.

No automated decisions are currently made, including profiling, based on your personal data. In the event that these automated decisions are to be made in the future, prior consent will be sought.

Legitimation of treatment:

Any processing carried out on your personal data has been consented to by you in advance and expressly. You will be informed in advance of all the details required by law so that you can give informed consent.

You may revoke this consent at any time as set forth below in this document.

Recipients, assignments and data transfers:

Your data will not be transferred unless it is essential for the fulfillment of the aforementioned purposes or legal obligation.

Your data will not be transferred to countries outside the European Union unless it is essential for the fulfillment of the purposes and you authorize us in advance and expressly.

"Casino Prado" uses the WhatsApp application to communicate with its members, in order to inform them of activities, workshops and other events. The company that manages the WhatsApp application is headquartered in the United States of America, which is considered an international data transfer to a country that does not comply with European data protection regulations. For this reason, it is necessary that you expressly authorize us to use this communication channel by checking the corresponding box on the forms where your consent is requested. We encourage you to check the WhatsApp Privacy Policy before continuing. If you wish to use the WhatsApp application to communicate with us, we inform you that "Casino Prado" is only responsible and guarantees the confidentiality, security and treatment of data, in accordance with current legislation, regarding data. that collects directly from the user, having no control or responsibility regarding the treatments and subsequent uses that WhatsApp may make of the data provided by this channel

Rights of interested parties:

You can exercise the rights detailed below at any time by post to “Casino Prado”, C / Francesc Gumà, 6-14 08870 Sitges; or by email at casino@casinoprado.cat. The application must contain the name, surname and documentation proving the identity of the interested party or their legal representative, as well as a document accrediting the representation, the request specifying the application, address to the effect of notifications, date and signature of the applicant and documents accrediting the request made. If the application does not meet the specified requirements, its amendment will be required.

The rights of the interested parties are: access, rectification, limitation, portability, opposition and deletion; and its definition is:

Right of access:

The data subject will have the right to obtain confirmation from the controller whether or not personal data concerning him or her are being processed and, if so, the right to access personal data and the following information:

1. a) the purposes of the treatment

2. b) the categories of personal data that are processed

3. c) the recipients or categories of recipients to whom personal data have been or will be communicated, in particular recipients in third countries or international organizations

4. d) if possible, the expected period of retention of personal data or, if not possible, the criteria used to determine this period.

5. i) the existence of the right to request from the controller the rectification or deletion of personal data or the limitation of the processing of personal data relating to the data subject, or to oppose such processing

6. f) the right to lodge a complaint with a supervisory authority

7. g) when personal data have not been obtained from the data subject, any available information on their origin

8. (h) the existence of automated decisions, including profiling, referred to in Article 22 (1) and (4) and, at least in such cases, significant information on the logic applied, as well as the importance and the intended consequences of this treatment for the person concerned.

When personal data are transferred to a third country or to an international organization, the data subject shall have the right to be informed of the appropriate safeguards under Article 46 relating to the transfer. The controller will provide a copy of the personal data subject to processing. The person responsible may receive a reasonable fee based on administrative costs for any other copy requested by the interested party. When the interested party submits the application by electronic means, and unless the latter requests that it be provided in another way, the information will be provided in a commonly used electronic format.

Right of rectification:

The data subject will have the right to obtain without undue delay from the data controller the rectification of inaccurate personal data concerning him. Depending on the purposes of the processing, the data subject will be entitled to complete personal data that are incomplete, even by means of an additional declaration.

Right of deletion:

The data subject will have the right to obtain without undue delay from the data controller the deletion of personal data concerning him / her, who will be obliged to delete the personal data without undue delay when any of the following circumstances apply:

1. a) personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed

2. (b) the data subject withdraws the consent on which the treatment is based in accordance with Article 6 (1) (a) or Article 9 (2) (a) and does not rely on another legal basis

3. (c) the data subject opposes the processing in accordance with Article 21 (1) and no other legitimate reasons prevail for the processing, or the data subject opposes the processing in accordance with Article 21 (2).

4. d) the personal data has been processed illegally

5. (i) personal data must be deleted in order to comply with a legal obligation laid down in Union or Member State law applicable to the controller;

6. (f) personal data have been obtained in connection with the provision of information society services referred to in Article 8 (1)

When the controller has made public the personal data of which the data subject has exercised his right of deletion, the controller must take, taking into account the available technology and the cost of its application, reasonable measures to communicate to third parties that are processing this information from the data deletion request, as well as any link to this data or any copy or replica of this data.

This right will be limited by other rights such as the right to freedom of expression and information, by the fulfillment of a legal obligation, or when there are reasons of public interest.

Right to limit treatment:

The data subject will have the right to obtain from the controller the limitation of the processing of data when one of the following conditions is met:

1. a) the data subject challenges the accuracy of the personal data, within a period that allows the person responsible to verify the accuracy of the same

2. b) the processing is illegal and the data subject opposes the deletion of personal data and requests instead the limitation of its use

3. c) the controller no longer needs personal data for the purposes of processing, but the data subject needs them for the formulation, exercise or defense of claims

4. (d) the data subject has objected to the treatment pursuant to Article 21 (1) while verifying whether the legitimate reasons of the controller prevail over those of the data subject

Where the processing of personal data has been limited in accordance with paragraph 1, such data may only be processed, with the exception of their retention, with the consent of the data subject or for the formulation, the exercise or the defense of claims, or with the intention of protecting the rights of another natural or legal person or for reasons of overriding public interest in the Union or in a particular Member State.

Any interested party who has obtained the limitation of the treatment in accordance with section 1 shall be informed by the person in charge before the lifting of this limitation.

Right of opposition:

The data subject shall have the right to object at any time, for reasons related to his or her particular situation, to the processing of personal data concerning him or her subject to processing based on the provisions of Article 6 (1). , letters i) or), including profiling on the basis of these provisions.

The data controller will stop processing personal data, unless he proves compelling legitimate reasons for the processing that prevail over the interests, rights and freedoms of the data subject, or for the formulation, exercise or defense of claims.

When the purpose of the processing of personal data is the direct marketing, the data subject will have the right to object at all times to the processing of personal data concerning him, including the elaboration of profiles insofar as it is related to the quoted marketing.

When the data subject objects to the processing for direct marketing purposes, personal data will no longer be processed for these purposes.

Where personal data are processed for the purpose of scientific or historical research or statistical purposes in accordance with Article 89 (1), the data subject shall have the right, for reasons related to his or her particular situation, to object to the processing of data. personnel concerned, unless necessary for the fulfillment of a mission carried out for reasons of public interest.

Data portability right:

  The data subject will have the right to receive the personal data that affect him / her, which he / she has provided to a data controller, in a structured format, commonly used and machine readable, and to transmit them to another data controller. the person responsible for providing it, when:

1. (a) the processing is based on consent in accordance with Article 6 (1) (a) or Article 9 (2) (a) or on a contract in accordance with Article 6 (1); letter b), i

2. b) the treatment is carried out by automated means.

2. In exercising its right to data portability in accordance with paragraph 1, the data subject shall have the right to have personal data transmitted directly from controller to controller whenever technically possible.

The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. Such right shall not apply to the treatment necessary for the performance of a task performed in the public interest or in the exercise of public powers conferred on the controller.

The controller shall communicate any rectification or deletion of personal data or limitation of processing carried out in accordance with Article 16, Article 17 (1) and Article 18 to each of the recipients to whom the data have been communicated. unless it is impossible or requires a disproportionate effort. The person in charge will inform the interested party about these recipients, if the latter so requests.

Revocation of consent: The interested party, who at the time had given consent to process their personal data, may also withdraw it with equal ease. Withdrawal of consent will not entail the illegality of the treatment previously performed.

The interested party will have the right to submit a complaint to the competent Control Authority.

When personal data are subsequently processed for different purposes, the controller will inform the data subject of such an end.

Security measures: The Data Controller states that he has taken the necessary technical and organizational measures to ensure the security of the data and to prevent its alteration, loss, treatment or unauthorized access, taking into account the state of the data. technology, the nature of the data stored and the risks to which they are exposed, whether they come from human action or from the physical or natural environment.

The Web www.penyaescacscp.com contains links to other Web pages that may be of interest to users. "Casino Prado" does not assume any responsibility for these links, without any guarantee can be given in compliance with appropriate privacy policies, so the user accesses the content of these Web pages in the conditions of use that pay attention to them and under their sole responsibility.

If you have any questions, concerns or recommendations regarding our Privacy Policy, you can email us at the following address: casino@casinoprado.cat.

“Casino Prado Suburense”
All rights reserved