Privacy Policy

The companies pertaining to Grupo GVC GAESCO (GVC Gaesco Holding SL, GVC Gaesco Beka, S.V., S.A., GVC Gaesco Gestión, SGIIC, S.A., GVC Gaesco Pensiones, SGFP, S.A., and GVC Gaesco Correduría de Seguros S.A.) are committed to protecting the personal information shared as it is essential to ensure and protect the privacy and confidentiality of your personal data in accordance with the General Data Protection Regulation (EU Regulation 2016/679).

This declaration establishes our privacy and data protection policy with regard to the information provided to us and thus we are able to guarantee that i) you may request the cancellation of your personal data, at any time, provided these comply with the legal requirements of data protection and conservation, ii) we undertake to comply with the obligation of secrecy of personal data collected, the duty to keep and not to disclose data to third parties without the express consent of the user, (iii) we have taken the necessary technical and organisational measures, taking into account the state of the art, the costs of implementation, and the nature, scope, context and purposes of processing data, as well as quantifiable and subjective risk variables on the rights and freedoms of persons, to ensure a level of security appropriate to the risk identified, and to ensure the pseudonymisation and encryption of personal data as well as the ability to ensure the continued confidentiality, integrity, availability and resilience of processing systems and services.

 

Intended purpose of collecting, processing and use of personal data

The collection and use of personal data, with the exception of the cases described in the following section "data processing for web access purposes", are only possible if you voluntarily provide us with your personal data. This applies to the following situations and purposes:

 

Contracting and opening of account "the Contract"

The personal data provided during the process of opening an account or customer registration will be collected, processed and used for the purpose of managing the subsequent execution of the Contract, and for the purpose of maintaining the contractual relationship, management, administration, provision, expansion and improvement of services, as well as sending technical and operational information related to the Contract, by any means, including email and / or equivalent means. In this sense, we inform you that your personal data together with the result of possible satisfaction surveys will be used to evaluate your opinion and study your particular profile, with the sole purpose of improving the services provided by us and thus adapt and design our commercial offers.

No health data will be transferred to third parties, except by legal obligation or the pursuit of a legitimate interest of the company, a third party or yourself.

 

Transfer of contract data

For the management of the purposes inherent to the development and fulfillment of the present Contract we will have to communicate your personal data, necessary to provide the corresponding service, to the various suppliers of the products and services who will be obliged to use the data, only and exclusively, to fulfil the Contract, and in virtue of the contracts signed with third parties referred to.

 

Retention period of contract data

Personal data provided during the contract process will be kept as long as the commercial relationship between the parties is maintained and for a maximum period of five (5) years.

 

Legitimacy of personal data processing

The legal basis for the processing of your personal data is, in reference with the aforementioned intentions, the execution of the Contract subscribed (Royal Legislative Decree 1/2007, of 16 November, approving the consolidated text of the General Law for the Defence of Consumers and Users and other complementary laws).

 

Newsletter and publicity

Your express and explicit consent is required. Therefore, if you wish to receive our newsletter, you must register, and provide us with an assigned and valid e-mail address, which allows us to verify that you are the applicant and the owner of the same. By accepting the Privacy Policy regarding sending communications, the User expressly consents, through this affirmative action, to the incorporation of their personal contact data to our systems and for said purpose.

 

Política de privacidad para el envío de comunicaciones GVC GAESCO HOLDING, S.L.

Política de privacidad para el envío de comunicaciones GVC GAESCO BEKA S.V.

Política de privacidad para el envío de comunicaciones GVC GAESCO CORREDURÍA DE SEGUROS, S.A.

Política de privacidad para el envío de comunicaciones GVC GAESCO PENSIONES, S.G.F.P., S.A.

Política de privacidad para el envío de comunicaciones GVC GAESCO GESTIÓN, S.G.I.I.C., S.A

 

Retention period of data provided

The data incorporated for the aforementioned reason shall be retained as long as the user does not exercise his/her rights to withdraw or revoke the consent given.

 

Legitimacy for the treatment of data:

The legal basis for the processing of your personal data, in relation to the above-mentioned purposes, is the consent given by the User by accepting the Privacy Policy for Sending Communications.

 

Automated decisions

The companies pertaining to Grupo GVC GAESCO, in the case of having obtained the express and explicit consent of the user, will make automated decisions, including the development of profiles, in order to inform on products and services according to the User’s circumstances and the market.

 

Purposes other than those mentioned

Where treatment of personal data is planned for a purpose other than that for which they were collected, the User will be informed beforehand regarding the purpose and any additional information pertaining to the use, so that the User can express his/her explicit consent or not.

 

Treatment of data to allow the use of the web site

When visiting any of our web sites, we gather the necessary data to access these (data use). This includes the User’s IP address, data on the visit time, topic of interest, as well as possible identification data (for example, login data when registering in a private area). The data is used to provide and design services based on each individual users’ needs and are eliminated as soon as these are not required.

 

Cookies

If you visit our web sites, the information may be stored as Cookies downloaded to your PC. Cookies are text files that are sent from a web server to your navigator and are stored in your personal computer. Cookies provide information on when a web site is repeatedly visited. In this manner we can ensure better functionality of the site and also avoid having to repeatedly login. For more information on the Cookies used please refer to our Policy on Cookies.

 

Use of profiles with pseudonyms for advertising and market research

For advertising, market research and to make the use of our websites as enjoyable as possible, the companies within Grupo GVC GAESCO use web tracking systems. In this regard, data about the use of our website in user profile pseudonyms are stored, allowing us to further develop our websites and tailor our content to your needs. In addition, usage profiles are used for so-called redirection. This allows GVC GAESCO BEKA companies to publish and include interesting offers on other websites visited. Profiles of pseudonym are not combined with personal data. You can oppose the creation of pseudonymous usage profiles. On one hand, you can prevent the setting of Cookies in your browser (see Cookie Policy). On the other hand, you can install in your browser certain complements to protect your privacy, which make tracking impossible.

 

Data collection by third party providers / social networks

Our web site contains links to social network operators (for example, Facebook, XING, Google Plus, LinkedIn, Twitter, etc.). These networks are operated exclusively by third parties. If you follow the links, information can be transmitted to these. In order to know the purpose and scope of the collection of your data by social networks and thereof use, as well as your rights and how to protect your privacy, we encourage users to read the content of privacy statements published on the operators’ websites.

 

Communication of data to third parties

Data will not be communicated to third parties unless specific and explicit consent by the User is given, or by obligation or legal decision or the pursuit of a legitimate interest of the company, a third party or yourself. However, your data may be communicated to other entities of the corporate group pertaining to Grupo GVC Gaesco (GVC GAESCO HOLDING, S.L., GVC GAESCO BEKA S.V., S.A., GVC GAESCO CORREDURÍA DE SEGUROS, S.A., GVC GAESCO PENSIONES, S.G.F.P., S.A. and GVC GAESCO GESTIÓN, S.G.I.I.C., S.A.) for the correct execution of the purposes described in the section “Intended purpose of collecting, processing and use of personal data”.

 

Data security

The companies within Grupo GVC GAESCO have implemented the technical means and organizational measures necessary, taking into account the state of the art, the costs of implementation, and the nature, scope, context and purposes of processing data, as well as quantifiable and subjective risk variables on the rights and freedoms of persons, to ensure a level of security appropriate to the risk identified, and to ensure the pseudonymisation and encryption of personal data as well as the ability to ensure the continued confidentiality, integrity, availability and resilience of processing systems and services.

All our employees, collaborators and all persons involved in the processing of personal data are obliged to comply with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 relative to the protection of individuals with regard to the processing of personal data and on the free movement of such data, as well as other relevant laws for the protection of data and the confidential handling of personal data.

 

To protect our users' personal information we use a Secure Socket Layer (SSL) transmission method. The SSL encryption guarantees the encrypted transmission and data.

 

Exercising your rights

We inform you that you have the right, free of charge and to the extent that legal requirements are met, to obtain confirmation as to whether or not Grupo GVC GAESCO companies process personal data concerning you. The interested parties have the right to access their personal data, as well as request the rectification or inaccurate data or, where appropriate, request deletion when, among other reasons, the data is no longer necessary for the purposes for which they were collected. The interested parties can request limitation of the processing of their data, in which case these will be kept for the exercise or defence of claims, or compelling legitimate grounds.

Under certain circumstances and for reasons related to their particular situation, interested Parties may object to the processing of their data. Grupo GVC GAESCO shall cease to process the data, except on compelling legitimate grounds or for the exercise or defence of possible claims.

In all the communications whose purpose is the remission of publicity, interested parties will be able to exercise their right of opposition. To the extent of the given consent for data protection, the interested party may withdraw consent at any time.

To exercise the mentioned rights, the User may send an explicit request to the following address: DPO - Grupo GVC Gaesco C/ Doctor Ferrán 3-5, Barcelona. 08034 (Spain). Additional information on Data Protection is available and detailed in our web page (www.grupo.gvcgaesco.es.)

 

Claims with the data protection authority

Users can submit claims regarding the processing of personal data with the Spanish Data Protection Authority (www.agpd.es).

 

Last updated May 2018

 

In the case of discrepancies between the existing versions of the Privacy Policy, the Spanish version will prevail.