Privacy Policy and Data Protection

Data controller and of your contact / Data Protection Officer (DPO / DPD):
> Identity: PROPHYL CENTER, S.A.
> Address / C.P: Ctra.Nacional II, Km.644 Torre d'Ara Plant 14/08302 Mataro (Barcelona)
> Phone: 937989379
> E-mail: lopd@ototap.es


Purposes of treatment

The entity shall treat the information we provide interested persons with the following purposes:
> Manage attention, visit and meeting at our facilities, as well as the management and implementation of services / products contracted.
> Manage any request, suggestion or request about our professional services we formulate interested persons.
> Informative and commercial communications: Processing of data in order to inform you about activities, interesting articles and general information related to our business and services / products contracted.
> Manage data provided by the candidates for a job through the Curriculum Vitae (CV) for the purpose of recruitment and selection process.
For the success and development of your care and management of the above purposes, the consent holder the processing of data for the above purposes, all under the strictest compliance Data Protection and politics that we will detailing . At any time you can exercise your rights (see specific section).


Criteria data retention

> Management services / products contracted with Entity: The personal data provided in contracts, offers and / or proposed services as well as those of other persons whose intervention is necessary, will be kept for the time in force contracted services. At the end of the service / s contract / s, the personal data will be stored in the cases that may arise responsibilities with the Company and / or compliance with other regulatory frameworks that are applicable to the Bank or a regulation having the force of law requiring the preservation of these. The personal data will be maintained so as to allow the identification and exercise of the rights of those affected and, under the legal and organizational technical measures necessary to ensure the confidentiality and integrity of these.
> Management Curriculum Vitae: Entity, as a rule, keeps your resume for a maximum period of one year; It concluded that deadline will automatically proceed to its destruction, in compliance with the principle of data quality.
> Others: the rest of the data and information provided by the user for any measured shall be retained for as long as necessary to fulfill the purpose for which they were collected.


Legitimation

The legal basis which enables the Bank to treat the personal data of users, customers, prospects under the following headings:
> Consent of the persons concerned for the processing and management of any request for information or questions about our services and products.
> Consent given by candidates for jobs with recruitment and selection purposes.
> The framework for the provision and / or contracting of services / products with the entity.
> The legitimate interest to send you information, commercial and / or promotional offers communications related to the activity of the Company and products / services contracted through email or any other means.


Recipients

No personal data are transferred to third parties, unless otherwise provided.


Origin

The personal data are obtained directly from interested persons and our partners. The categories of personal data that gives us our collaborators are:
> Identification data.
> Postal or electronic addresses.
> Provided data and / or condoned by the interested parties related to and necessary for the management and performance of the service / product requested.


Rights

Suppression Law and Access, Rectification: interested persons are entitled to obtain confirmation of whether the entity are processing personal data concerning them, or not. Interested persons are entitled to access your personal data and to request the correction of inaccurate data or request its deletion when, among other reasons, the data are no longer needed for the purposes for which they were collected.

The right to limitation and Opposition: under certain circumstances, interested parties may request the limitation of processing of data, in which case only retain for the exercise or defense of claims. Under certain circumstances, for reasons relating to their particular situation, interested parties may oppose the processing of their data. The entity shall discontinue processing the data in this case, except for compelling legitimate grounds, or for the exercise or defense of any claims.

Such rights may be exercised on our Channel Data Protection, see specific section.


Channel Data Protection / DataProtect - line

The Bank has implemented a Data Protection Canal, contemplating the highest commitment, rigor and professionalism in security, experience, independence and knowledge in the treatment of communications.

Channel Data Protection has been implemented through a web platform, developed and managed by an independent external expert, to provide them and guarantee our previous commitments.

Through Channel Data Protection, you communicate and process the exercise of their rights (see above) and report any evidence or knowledge that I had of possible violations (breaches) safety and / or possible violations or irregularities on regulations data Protection or the present policy of the entity.

Data Access Channel Data Protection are listed at the beginning of this policy.


Care and Support

Interested persons may communicate to the Bank any questions about the processing of their personal data or interpretation of our policy by contacting the Manager / Chief Data Protection Officer (DPO / DPD) in the direction thereof indicated at the beginning of this policy.