PRIVACY POLICY OF THE ENTITY

CONTACT DETAILS OF THE CONTROLLER

• Company name: ASOC. N.E.R NEW STYLE OF RELATIONS GROUP
• Tax Code: G95632006
• Registered office: Juan de Ajuriaguerra, 6-1º 48009 Bilbao (Bizkaia)
• Contact Telephone No: +34 665 738 115
• E-mail: info@nergroup.org

CONTACT DETAILS OF THE DATA PROTECTION OFFICER (D.P.O.)

Pursuant to Article 37 GDPR 2016/679 and Article 34 of LO 3/2018, no D.P.O. is required.

DUTY OF INFORMATION PURSUANT TO GDPR 679/2016 AND LO 3/2018

The user who agrees to put their data into the contact forms of this website, as set forth in this paragraph of this legal notice, EXPRESSLY DECLARES AND STATES THAT
The user expressly authorises ASOC. N.E.R NUEVO ESTILO DE RELACIONES GROUP with registered address at Juan de Ajuriaguerra, 6- 1º 48009 Bilbao (Bizkaia) to collect and process the personal data of the person signing, or acting as legal representative, guardian or curator, of a minor. The user also declares to have been duly informed of the table presented in relation to the right set out in Art. 13 of the GDPR.

Basic information on data protection of User data files

Controller	ASOC. N.E.R NUEVO ESTILO DE RELACIONES GROUP Juan de Ajuriaguerra, 6-1º 48009 Bilbao (Bizkaia)
Intended purpose	Management of the data entered in the data collection forms on the website. The register of Processing Activities can be requested via e-mail: info@nergroup.org
D.P.O. (Data Protection Officer)	Pursuant to Article 37 GDPR 2016/679 and LO 3/2018, no D.P.O. is required.
Legitimisation	Express consent of the data subject, which may be revoked at any time.
Recipients of data transfers	No data will be transferred unless it is necessary for the performance of the service requested. No data will be disclosed except by law.
Rights	Right to request access to personal data relating to the data subject, Right to request their rectification or erasure, Right to request the restriction of their processing, Right to object to the processing, Right to data portability; Right to opt-out of advertising
Additional information	A complaint may be lodged at any time with the Spanish Data Protection Agency at Calle Jorge Juan, 6. 28001 – Madrid
Data retention period	USER. For the duration of the user relationship It may be revoked at any time
Where to exercise your rights	Request our forms to exercise your rights at: info@nergroup.org

It is forbidden for minors under the age of 14 to enter data in our data collection forms, as this is contrary to Art. 8 GDPR. Should the consent of a minor be required, it must be given and therefore collect data from the person who has parental authority and/or guardianship of the minor.

This data protection policy may vary over time due to possible changes in legislation, jurisprudence or the criteria followed by the Spanish Data Protection Agency and/or the competent authority at any given time. For this reason, ASOC. N.E.R NUEVO ESTILO DE RELACIONES GROUP reserves the right to modify this legal notice in order to adapt it to new legislation or jurisprudence that is in force at the precise moment that the websites are accessed, as well as to practices in the sector. You are asked to review this legal notice regularly.

RIGHTS RECOGNISED BY EU REGULATION 2016/679 AND LO 3/2018

• Right to request access to personal data: you may ask ASOC. N.E.R NUEVO ESTILO DE RELACIONES GROUP whether your data is being processed.
• Right to request rectification, provided they are incorrectly collected; and or to request their erasure. Right to request the limitation of processing, in certain cases you may request to temporarily suspend the processing of the data or request that the data be kept for longer than necessary when appropriate.
• Right to object to processing: We will stop processing your data, except for legal reasons.
• Right to data portability: You can ask us at any time to forward your data to the company of your choice by express request.
• Right to opt-out of advertising, at any time you may inform us of your wish not to receive advertising from our company by sending us an e-mail.

HOW TO REQUEST RIGHTS

ASOC. N.E.R. NEW STYLE RELATIONSHIPS GROUP will inform all its employees about the procedure for dealing with the rights of the data subjects; we have defined a protocol to be able to respond to all exercises of rights. Send your request to exercise your rights to info@nergroup.org or by post to the address provided in accordance with Art. 10 of the Law on Information Society Services and Electronic Commerce (LSSI) – EC. In exercising these rights, you are requested to always bear in mind the following:

• Personal data subjects may exercise the rights recognised in Regulation 679/2016 and LO 3/2018 of 5 December. The exercise of rights is free of charge.
• The controller shall respond to data subjects without undue delay and in a concise, transparent, intelligible manner, in clear and plain language, and keep proof of compliance with the duty to respond to requests for the exercise of rights made.
• If the application is submitted by electronic means, the information shall be provided by electronic means where possible, unless the data subject requests otherwise.
• Requests must be answered within 1 month of receipt, which may be extended by a further two months taking into account the complexity or number of requests, but in that case the person concerned must be informed of the extension within one month of receipt of the request, stating the reasons for the delay.

BASIC PRINCIPLES GOVERNING OUR PRIVACY POLICY

This legal notice is governed by the PRINCIPLE OF TRANSPARENCY, and is written so that it can be understood by everyone who connects to this website. Should you have any questions regarding its complexity, please do not hesitate to contact us for clarification.

CONFIDENTIALITY

All data provided by means of e-mail or electronic forms will be treated in accordance with prevailing legislation on personal data protection, and in any case will be treated as confidential by ASOC. N.E.R. NEW STYLE RELATIONSHIPS GROUP which manages such information, as signed in the confidentiality contracts that our entity regulates with its employees.

INFORMATION ON THE WILLINGNESS TO LEAVE DATA AND ITS CONSEQUENCES

Willingness

Users of the websites are informed that the answers to the questions posed in the data collection forms contained in this website are voluntary, although refusal to provide the requested data may result in the impossibility of accessing the services that require it.

Consequence

Through the implementation of the forms included in the different websites, relating to services provided by ASOC. N.E.R NUEVO ESTILO DE RELACIONES GROUP, the Users accept the inclusion and treatment of the data they provide in a personal data file owned by ASOC. N.E.R. NUEVO ESTILO DE RELACIONES GROUP, being able to exercise the pertinent rights according to the following clause.

The Register of Data Processing Activities may be requested via the entity’s postal address or e-mail.

INFORMATION ON THE DATA RETAINED

The data held are merely those collected in the forms on the website, such as contact details (basic data), like name, surname, e-mail, telephone number. This information is received by ASOC. N.E.R NEW STYLE OF RELATIONSHIPS GROUP and is never sold, transferred or leased to other companies, except in the logical case for the provision of the service.

FOR HOW LONG

• Data collected for the delivery of our newsletter: From the moment of subscription to the moment the user requests cancellation of the service by sending an e-mail.
• User data uploaded to pages and social networks: From the time the user gives their consent until they inform us of their wish not to remain on the site.

The user may, in any case, at any time revoke his/her consent to the processing of his/her data

WHAT PURPOSE IS DATA HELD FOR

The sole purpose of processing your data is to provide you with the service requested from our company and, if you have consented to receiving commercial communications, to be able to send you news about the products we sell and their prices.

INFORMATION ABOUT THE INFORMATION DISTRIBUTION LIST

If you have agreed to receive advertising via e-mail, ASOC. N.E.R NUEVO ESTILO DE RELACIONES GROUP may send you an e-mail notifying you of improvements, new features or offers that occur on this website. You may unsubscribe at any time by sending an e-mail to info@nergroup.org.

Controller	ASOC. N.E.R NUEVO ESTILO DE RELACIONES GROUP Juan de Ajuriaguerra, 6-1º 48009 Bilbao (Bizkaia)
Intended purpose	Sending of advertising, provided that the user has agreed. Management of the data entered in the data collection forms on the website. The register of Processing Activities may be requested via e-mail: info@nergroup.org
D.P.O. (Data Protection Officer)	Pursuant to Article 37 GDPR 2016/679 and LO 3/2018, no D.P.O. is required.
Legitimisation	Express consent of the data subject, which may be revoked at any time.
Recipients of data transfers	No data will be transferred unless it is necessary for the performance of the service requested.
Rights	Right to request access to personal data relating to the data subject, Right to request their rectification or erasure, Right to request the restriction of their processing, Right to object to the processing, Right to data portability; Right to opt-out of advertising
Additional information	A complaint may be lodged at any time with the Spanish Data Protection Agency at Calle Jorge Juan, 6. 28001 – Madrid
Data retention period	USER: In accordance with the cookies policy.
Where to exercise your rights	Request our forms to exercise your rights at: info@nergroup.org

Law 10/2010 of 28 April, on the prevention of money laundering and financing of terrorism.

Article 39. Foundations and associations.

The Protectorate and the Board of Trustees, in the exercise of the functions attributed to them by Law 50/2002, of 26 December, on Foundations, and the staff with responsibilities in the management of foundations, shall ensure that they are not used for money laundering or to channel funds or resources to persons or entities linked to terrorist groups or organisations.

To this end, all foundations shall keep records for the period established in Article 25, identifying all individuals who contribute to or receive funds or resources from the foundation free of charge, in accordance with the terms of Articles 3 and 4 of this Law.

These registers shall be available to the Protectorate, the Commission for the Surveillance of Terrorist Financing Activities, the Commission for the Prevention of Money Laundering and Monetary Offences or their supporting bodies, as well as the administrative or judicial bodies responsible for the prevention or prosecution of money laundering or terrorism.

The provisions of the preceding paragraphs shall also apply to associations, and in such cases the governing body or general assembly, the members of the representative body that manages the interests of the association and the body responsible for verifying its constitution, in the exercise of the functions attributed to it by Article 34 of Organic Law 1/2002, of 22 March, regulating the Right of Association, shall comply with the provisions of this Article.

In view of the risks to which the sector is exposed, the other obligations set out in this Act may be extended by regulation to foundations and associations.

Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights

Article 34 Designation of a data protection officer

Data controllers and processors shall designate a data protection officer in the cases provided for in Article 37.1 of Regulation (EU) 2016/679 and in the case of the following entities:

a) Professional bodies and their general councils.

b) Educational centres offering education at any of the levels established in the legislation regulating the right to education, as well as public and private universities.

c) Entities operating electronic communication networks and providing electronic communication services in accordance with the provisions of their specific legislation, where they routinely and systematically process personal data on a large scale.

d) Information society service providers when they produce large-scale profiles of service users.

e) The institutions included in Article 1 of Law 10/2014 of 26 June 2014 on the organisation, supervision and solvency of credit institutions.

f) Financial credit institutions.

g) Insurance and reinsurance entities.

h) Investment services firms, regulated by Securities Market legislation.

(i) electricity distributors and traders and natural gas distributors and traders.

j) Entities responsible for common files for the evaluation of solvency and creditworthiness or common files for the management and prevention of fraud, including those responsible for files regulated by legislation on the prevention of money laundering and financing of terrorism.

k) Entities that carry out advertising and commercial prospecting activities, including commercial and market research activities, when they carry out processing based on the preferences of data subjects or carry out activities involving profiling of data subjects.

l) Health centres that are legally obliged to keep patient records.
An exception is made for health professionals who, although legally obliged to keep patient records, carry out their activity on an individual basis.

m) Entities in which the issuance of commercial reports that may relate to natural persons is one of their objects.

n) Operators that carry out gambling activities through electronic, computerised, on-line and interactive channels, in accordance with the regulations governing gambling.

ñ) Private security companies.

o) Sports federations when processing data of minors.

Data controllers or processors not included in the paragraph above may voluntarily designate a data protection officer, who shall be subject to the system established in Regulation (EU) 2016/679 and in this Organic Law.

Data controllers and processors shall notify the Spanish Data Protection Agency or, where appropriate, the regional data protection authorities, within ten days, of the designations, appointments and dismissals of the data protection officers, both in those cases in which they are obliged to designate them and in those in which their appointment is voluntary.

Within the scope of their respective competences, the Spanish Data Protection Agency and the regional data protection authorities shall keep an updated list of data protection officers, which shall be accessible by electronic means.

In fulfilling the obligations of this Article, controllers and processors may establish the full or part-time dedication of the data processor, among other criteria, depending on the volume of processing, the special category of data processed or the risks to the rights or freedoms of data subjects.