The party responsible for processing your personal data is the Deloitte global network, including its member firms and the other related entities, the structure of which is at www.deloitte.com, who will act as independent Data Controllers.
Should you wish to contact the entities in the Deloitte global network, including its member firms and the other related entities, you may do so at the following email address: LOPD@deloitte.es
Which categories of personal data will be processed?
For the purposes set out below, the Deloitte global network, including its member firms and the other related entities, will process different types of personal data of the client and/or user, which are included, as appropriate, in the following categories:
|
Category |
Personal information |
|
Identification data |
Name, surname(s), Spanish national identity card number |
|
Contact details |
Corporate or personal email, corporate or personal telephone number, corporate or personal address, fax number |
|
Data on personal characteristics |
Gender, nationality, date of birth |
|
Professional data |
Department, company, function, position, employer identification number, other company data |
The Deloitte global network, including its member firms and the other related entities, will process your personal data for the following purposes and, at all times in accordance with the following legal bases:
1. Remittance of marketing communications by the Deloitte global network, including its member firms and the other related entities.
Provided you authorise us to do so, we will send you, by any means, announcements of events, publications, news and promotions of the services and activities of the entities composing the Deloitte global network, including its member firms and the other related entities. The entities composing the aforementioned network may be consulted at www.deloitte.com
These marketing actions may be performed by any means, either physically or electronically (email, fax, sms, social media, mobile applications, etc.).
In order to perform this processing, we will process your identification data (name, surname(s), Spanish national identity card number), as well as your contact details (corporate or personal email, corporate or personal telephone number, corporate or personal address, fax number), data on personal characteristics (gender, nationality, date of birth) and professional data (Department, company, function, position, employer identification number, other company data).
2. Remittance of marketing communications on products and/or services similar to those your employer or the legal entity you represent has engaged.
Based on its legitimate interest, the Deloitte global network, including its member firms and the other related entities, will process your personal data in order to send you marketing communications about Deloitte products and/or services that are similar to those your employer or the legal entity you represent has engaged.
Pursuant to the applicable data protection legislation, the Deloitte global network, including its member firms and the other related entities, has created what is known as a “legitimate interest assessment”. This is an internal analysis that enables it to be confirmed that the legitimate interest of the Deloitte global network, including its member firms and the other related entities, does not jeopardise the interests of the data subjects in relation to the protection of their personal data. In short, to ensure that your privacy is not jeopardised.
As a result of this assessment, the Deloitte global network, including its member firms and the other related entities, considers that its interest in carrying out this processing for the following purposes prevails in order: (i) to be able to maintain a relationship with you by means of the purchase of new products and the engagement of new services; (ii) to ascertain your interests in relation to the products we may make available to you; and (iii) to improve the conditions of use of the platforms of the Deloitte global network, including its member firms and the other related entities. All this will enable us to send you communications about products and services tailored as closely as possible to your likes and preferences. Thus, as a client and/or user, you will receive mainly marketing information on products that might interest you.
You have the right to obtain additional information with respect to this processing activity and to the content of this legitimate interest, and you also have the right to oppose your data being used for this purpose, which you can exercise by contacting the Data Protection Officer of the Deloitte global network, including its member firms and the other related entities, at the following email address: LOPD@deloitte.es
For the remittance of the aforementioned marketing communications, and on the basis of the legitimate interest that the applicable data protection legislation grants the Deloitte global network, including its member firms and the other related entities, we will only process your identification data (name and surname(s)) and your contact details (corporate email and corporate telephone number).
How long will we keep your personal data?
The Deloitte global network, including its member firms and the other related entities, will process your data from their collection until the purpose for which they were collected comes to an end, or, in the case of processing for which you have given your consent, until you withdraw such consent.
In any case, once the data cease to be required, the Deloitte global network, including its member firms and the other related entities, will keep your personal data duly blocked. As prescribed by law, your personal data will only be kept (i) for the periods determined in each case by the applicable legislation, and (ii) for the statute of limitations period of any actions that might arise as a result of the relationship held with the data subject, or (iii) to make them available to the competent authorities.
Once these time periods have elapsed, the Deloitte global network, including its member firms and the other related entities, will delete them.
How do we obtain your personal data?
The personal data processed by the Deloitte global network, including its member firms and the other related entities, are obtained as follows:
To whom will we communicate your data?
As a general rule, your personal data will only be processed by the Deloitte global network, including its member firms and the other related entities. However, on certain occasions, your personal data may be communicated to those third parties to which the Deloitte global network, including its member firms and the other related entities, is legally obliged to provide them, such as public bodies and authorities, the tax authorities, courts and tribunals and law enforcement.
In addition to the aforementioned data communications, the Deloitte global network, including its member firms and the other related entities, will be able to work with third-party service providers that may have access to your personal data and will process the aforementioned data for and on behalf of the Deloitte global network, including its member firms and the other related entities, as a result of their service provision.
The Deloitte global network, including its member firms and the other related entities, adheres to strict rules as regards the selection of service providers in order to comply with its data protection obligations, and undertakes to enter into the related data processing agreement with them whereby they accept, inter alia, the following obligations: to apply appropriate technical and organisational measures, to process the personal data for the agreed-upon purposes and solely according to the documented instructions of the Deloitte global network, including its member firms and the other related entities, and to delete or return the data when the service provision ends.
Are international data transfers taking place?
Should your personal data be transferred across international borders as a result of the processing thereof, such transfers will be carried out in accordance with the provisions of the applicable personal data protection legislation and, in particular, sufficient guarantees will be adopted to enable it to be accredited that those receiving the data will provide an equivalent level of security to that of the European Union.
What rights do you have when you provide us with your personal data?
The client and/or user has the right of access and right to rectification, object, erasure, restriction of processing, personal data portability and withdrawal of consent given at any time, in a free and accessible way.
These rights can be exercised at any time by sending an email to LOPD@deloitte.es , attaching a copy of your Spanish national identity card number and indicating “D.P.” as reference.
Lastly, should you consider it necessary, you can contact the Spanish Data Protection Agency, at Jorge Juan street, 6, 28001, Madrid, or through this link www.aepd.es, to safeguard your rights.