1. Data Controller’s details for exercising rights




2. Applicant’s details








(1) The address where notifications in relation to the exercising of this right are to be sent must be provided. (2) Optional (3) Channel by means of which information about delivery or availability of the notification is to be received (e-mail and/or mobile telephone number).

3. Details of legal representative










(1) The address where notifications in relation to the exercising of this right are to be sent must be provided. (2) Optional (3) Channel by means of which information about delivery or availability of the notification is to be received (e-mail and/or mobile telephone number).

4. Relationship with data controller:




5. Application to exercise the right to restricted processing


The applicant, of legal age, assigned the VAT No. stated in the “applicant’s details” section, attaching a photocopy thereof, hereby REQUESTS: 1. To deal with the exercising of the right to restricted processing of the data stated in this section in accordance with the provisions established in Article 18 of General Data Protection Regulation (GDPR), Regulation (EU) 2016/679. 2. To permit restricted processing of the aforementioned personal details within the legally established deadline from the date of reception of this application. 3. To notify whether the objection to processing application is allowed or disallowed via the following channels:

6. Observationss

,
DATA PROTECTION

Data Controller: Navantia, S.A. S.M.E.
Purpose: To process and manage your application for the right to access in regard to data protection.
Legal basis:Processing of the data included in this form is based on the grounds of article 6.1.c) of the GDPR: legal obligation.
Transferees: Where applicable, the data will be transmitted to the Spanish Data Protection Agency, Courts and Tribunals through legal obligations.
Rights: To access, rectify and erase data, and other rights, by writing to Navantia, S.A. – calle Velázquez 132 – 28006 MADRID, stating the subject: Ref. Data Protection.
Additional Information: Check ANNEX - ADDITIONAL DATA PROTECTION INFORMATION.

ANNEX - ADDITIONAL DATA PROTECTION INFORMATION

Data Controller

  • Identity: Navantia, S.A. S.M.E. – VAT No.: A84076397
  • Postal Address: C/ Velázquez, 132 – 28006 (Madrid)
  • Telephone: 913 35 84 00
  • Contact: [email protected]
  • Data Protection Officer: [email protected]

Purpose of processing:

Purpose:The data compiled through the form, and any other attached documents, will be processed with the purpose of dealing with and managing your application for access in regard to data protection.
Conservation period: The personal details shall be kept for the time necessary to fulfil the purpose they were collected for, and to determine any possible liabilities that could stem from the aforementioned purpose and from data processing.

Legal Basis:

The legal grounds for processing the supplied data, both through forms and in attached documents, are based on Article 6.1. c) of the GDPR: processing necessary for compliance with any applicable legal obligations applicable to the data controller.
  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
  • Law 3/2018 of 5th December, on Personal Data Protection and Guarantee of Digital Rights.

Transferees:

Depending on the application submitted, communications are envisaged as necessary for proper management of the application, providing that some of the legally provided for provisions are met invalid data protection regulations, and the Spanish Data Protection Agency, the Courts and Tribunals through legal obligations. No international data transfers are envisaged.

Rights

Data subjects have the right to:
  • To obtain confirmation about if Navantia S.A. S.M.E. is processing their personal data.
  • To access their personal data, and to request rectification of any incorrect data, or request erasure thereof when, among other reasons, the data are not necessary for the purposes they were compiled.
  • To request under certain circumstances
    • To request restricted processing of their data, in which case they will only be kept by Navantia S.A.S.M.E. for exercising or defending against claims.
    • To state objection to the processing of their data, in which case Navantia S.A.S.M.E. will stop processing their details, unless it is specifically required to for exercising or defending against claims. Also including data processing for automated, individual decision-making.
    • Portability of data so that they are provided to the data subject or another data controller, in a standard, structured manner that is machine readable.
These rights may be exercised, where applicable, before Navantia S.A. S.M.E. at: C/Velázquez, 132, – 28006 Madrid, with the subject matter: Ref. Data Protection. If, when exercising these rights, you feel that you have not been properly attended, you may file a claim before the Spanish Data Protection Agency at: C/Jorge Juan, 6 - 28001 MADRID (Madrid) – On-line Service: sedeagpd.gob.es, whereas beforehand you may file a claim before the Data Protection Officer: [email protected].

INFORMATION ABOUT THE PROCEDURE

  1. This form is to be used by data subjects who wish to request restricted processing of his or her personal data by the data controller when any of the following situations are met:
    • The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
    • The data controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims.
  2. The data subject of the processed data must directly address Navantia, S.A. S.M.E.
  3. He or she must identify himself or herself properly. To do so, the data subject must attach a copy of his or her ID Card, Passport or Driving License (showing a photograph of the data subject) or an equivalent document accrediting identity considered to be legally valid. If the right is being exercised through a legal representative, the representative’s ID Card and a document accrediting representation must also be attached.
  4. Once the application form has been filled in, the date and time must be stated.
  5. The exercising of the right to restricted processing will be free. Nevertheless, in the event of groundless, excessive or repetitive requests by the same data subject within a short period of time, the Data Controller may refuse to act on the application, or charge administrative costs.
  6. Replies must be made within the deadline of one month from reception of the application. There may be a delay of a further two months depending on the complexity and number of requests or applications. In these cases, data subjects will be informed about the causes of delays.
  7. Data Subjects may contact the Data Protection Officer at: [email protected], before filing claims before the Spanish Data Protection Agency concerning any matters related to the processing of their personal data and exercising their rights in accordance with the General Data Protection Regulation.
  8. Data Subjects have the right to file claims before the controlling authority if they believe that their requests to exercise a right have not been suitably dealt with, providing that the deadline pertaining to the data controller has elapsed. These claims must include a copy of the information received from the data controller, which may be any of the following documents:
    1. Refusal by the data controller to allow objection to processing of the personal data.
    2. Copy of the access application form stamped by the data controller.
    3. Copy of the access application form stamped by the post office or copy of the receipt if the letter is sent by registered post.
    4. Any other means of proof provided by the data controller stating proof of reception.