The Owner hereby informs you of its Privacy Policy regarding the processing and protection of the personal data of users that may be collected while browsing the Website: https://caesasl.com.
In this regard, the Owner guarantees compliance with the regulations in force on the protection of personal data, reflected in Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR).
Use of the Website implies acceptance of this Privacy Policy as well as the conditions included in the Legal Notice.
Identity of the Data Controller
- Controller:
- CARLOS EDUARDO SANCHEZ SL.
- Tax ID:
- B30861843
- Address:
- C/ Loma Negra nº4, 30394, Murcia — Spain.
- Email:
- seguros@caesasl.com
- Website:
- https://caesasl.com
Principles applied to data processing
When processing your personal data, the Owner will apply the following principles, which comply with the requirements of the new European data protection regulation (GDPR):
- Principle of lawfulness, fairness and transparency: The Owner will always require consent for the processing of personal data, which may be for one or more specific purposes about which the Owner will inform the User in advance with absolute transparency.
- Data minimisation principle: The Owner will request only the data strictly necessary for the purpose or purposes for which they are requested.
- Storage limitation principle: The Owner will retain the personal data collected for the time strictly necessary for the purpose or purposes of the processing. The Owner will inform the User of the corresponding retention period based on the purpose. In the case of subscriptions, the Owner will periodically review the lists and delete those records inactive for a considerable time.
- Integrity and confidentiality principle: The personal data collected will be processed in such a way that its security, confidentiality and integrity are guaranteed. The Owner takes the necessary precautions to prevent unauthorised access or improper use of users' data by third parties.
Collection of personal data
You do not need to provide any personal data to browse the Website.
The cases in which you do provide your personal data are the following:
- When completing and submitting the contact form.
- When submitting your application through the Work with us form (including the attached CV).
- When signing up to a subscription form or newsletter managed by the Owner (where applicable, through MailPoet).
Rights
The Owner informs you that you have the following rights regarding your personal data:
- Request access to the stored data.
- Request rectification or erasure.
- Request the restriction of its processing.
- Object to processing.
- Request the portability of your data.
The exercise of these rights is personal and therefore must be exercised directly by the data subject, requesting them directly from the Owner. This means that any client, subscriber or collaborator who has provided their data at any time may contact the Owner and request information on the data stored and how it was obtained, request its rectification, request the portability of their personal data, object to processing, limit its use or request the erasure of that data from the Owner's files.
To exercise your rights, you must send your request together with a photocopy of your National ID or equivalent to the email address: seguros@caesasl.com.
The exercise of these rights does not include any data that the Owner is required to retain for administrative, legal or security purposes.
You have the right to effective judicial protection and to lodge a complaint with the supervisory authority — in this case, the Spanish Data Protection Agency — if you consider that the processing of personal data concerning you infringes the Regulation.
Purpose of processing personal data
When you connect to the Website to send an email to the Owner, subscribe to its newsletter or submit your application, you are providing personal information for which the Owner is responsible. This information may include personal data such as your IP address, first and last name, postal address, email address, phone number, and other information. By providing this information, you consent to your information being collected, used, managed and stored by CARLOS EDUARDO SANCHEZ SL. only as described on the pages:
There are other purposes for which the Owner processes personal data:
- To ensure compliance with the conditions set out in the Legal Notice page and applicable law. This may include the development of tools and algorithms that help the Website guarantee the confidentiality of the personal data it collects.
- To support and improve the services offered on this Website.
- To manage social networks. The Owner has a presence on social networks. If you become a follower on the Owner's social networks, the processing of personal data will be governed by this section, as well as by the terms of use, privacy policies and access regulations of the respective social network that you have previously accepted.
You can consult the privacy policies of the main social networks at these links:
The Owner will process your personal data in order to properly manage your presence on the social network, inform you of its activities, and any other purpose permitted by the regulations of the social networks.
Under no circumstances will the Owner use the profiles of followers on social networks to send advertising on an individual basis.
Security of personal data
To protect your personal data, the Owner takes all reasonable precautions and follows industry best practices to prevent its loss, misuse, improper access, disclosure, alteration or destruction.
Your data may be added to a mailing list, of which the Owner is responsible for management and processing. The security of your data is guaranteed, as the Owner takes all necessary security measures and guarantees that the personal data will only be used for the stated purposes.
The Owner informs the User that their personal data will not be transferred to third-party organisations, with the exception that such transfer of data is supported by a legal obligation or when the provision of a service implies the need for a contractual relationship with a data processor. In the latter case, the transfer of data to the third party will only take place when the Owner has the express consent of the User.
However, in some cases collaborations with other professionals may be carried out; in these cases, consent will be required from the User informing them of the identity of the collaborator and the purpose of the collaboration. It will always be carried out with the strictest security standards.
Content from other websites
The pages of this Website may include embedded content (for example, videos, images, articles, etc.). Embedded content from other websites behaves exactly the same way as if you had visited the other website.
These Websites may collect data about you, use cookies, embed additional third-party tracking code, and monitor your interaction using that code.
Cookie Policy
For this Website to function correctly, it may need to use cookies, which is information stored in your web browser. You can consult the details in the Cookie Policy.
Legal basis for data processing
As an insurance intermediary subject to industry regulations, the Owner uses different legal bases depending on the specific purpose of the processing (art. 6 GDPR):
- Consent of the data subject (art. 6.1.a GDPR): for sending commercial communications, managing applications in selection processes and subscriptions to newsletters.
- Performance of a contract or pre-contractual measures (art. 6.1.b GDPR): for the preparation of quotes, insurance studies, contracting of policies and management of claims, within the framework of Law 50/1980 on Insurance Contracts.
- Legal obligation applicable to the controller (art. 6.1.c GDPR): to comply with Law 10/2010 on the prevention of money laundering and terrorist financing, Law 7/2020 on Insurance Distribution, the General Tax Law (Law 58/2003) and other applicable tax, commercial and insurance regulations.
- Legitimate interest of the controller (art. 6.1.f GDPR): to ensure the security of the Website, prevent fraud and maintain a minimum record of communications received (server logs).
Categories of personal data
The categories of personal data processed by the Owner are:
- Identification data: first and last name, ID/NIE, postal address, email, phone.
- Professional or curricular data (only in applications to "Work with us"): education, experience and attached CV.
- Financial data (only when contracting policies or quotes): payment method, bank details for the direct debit of premiums.
- Browsing data: IP address, browser, operating system, pages visited (anonymised whenever possible).
- The Owner does not process special categories of data (racial origin, ideology, religion, health, etc.) except when contracting a specific insurance product requires it (e.g. health or life insurance), in which case additional explicit consent will be requested.
Data retention periods
The Owner will retain your personal data for the time strictly necessary to fulfil the purpose for which it was collected and the legal obligations derived therefrom. As a guideline:
- Contact forms:
- 1 year from the last contact, unless a contractual relationship begins.
- Quote requests:
- 2 years from the request (pre-contractual relationship; art. 1964 Civil Code for personal actions).
- Applications (CV):
- 1 year from receipt, unless the candidate previously requests its deletion.
- Policy contracts:
- For the duration of the contract and a minimum of 10 years from its termination (art. 23 Law 50/1980 and Law 10/2010 anti-money laundering).
- Tax and commercial documentation:
- 6 years (art. 30 Commercial Code) or the applicable tax limitation period.
- Prevention of money laundering:
- 10 years from the end of the business relationship (art. 25 Law 10/2010).
- Server logs and technical data:
- Up to 12 months, for security purposes.
Once the indicated periods have elapsed, the data will be blocked for the time it may be necessary for the exercise or defence of claims, and will be definitively deleted with all the appropriate technical guarantees.
Data Protection Officer (DPO)
Although the Owner is not obliged to appoint a Data Protection Officer under the terms of art. 37 GDPR, it has designated a single point of contact for all matters relating to the protection of personal data. You can send your queries, exercise your rights or submit internal complaints by writing to: seguros@caesasl.com indicating "Data Protection" in the subject line.
Recipients of personal data
- MailPoet is a product of Wysija SARL, a company registered in the Marseille Commercial Registry with number B 538 230 186 and registered office at 6 rue Dieudé, 13006, Marseille (France). More information at https://www.mailpoet.com. MailPoet processes the data for the purpose of providing the Owner with email and marketing solutions.
- Google Analytics is a web analytics service provided by Google, Inc., a Delaware company with its main office at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the Owner analyse how Users use the Website. The information generated by the cookie regarding the use of the Website (including the IP address) will be directly transmitted and stored by Google on servers in the United States. More information at https://analytics.google.com.
You can consult how Google manages privacy with regard to the use of cookies and other information on the Google Privacy Policy page.
You can also see a list of the types of cookies used by Google and its collaborators and all the information relating to the use they make of advertising cookies at:
Web Browsing
When browsing the Website, non-identifying data may be collected, which may include IP address, geolocation, a record of how the services and sites are used, browsing habits and other data that cannot be used to identify you.
The Website may use the following third-party analytics services:
- Google Analytics.
The Owner uses the information obtained to obtain statistical data, analyse trends, manage the site, study browsing patterns and to collect demographic information.
The Owner is not responsible for the processing of personal data carried out by the web pages that you may access through the various links contained in the Website.
Accuracy and truthfulness of personal data
You undertake that the data provided to the Owner is correct, complete, accurate and up to date, as well as to keep it duly updated.
As a User of the Website, you are solely responsible for the truthfulness and correctness of the data submitted to the Website, releasing the Owner from any liability in this regard.
Acceptance and consent
As a User of the Website, you declare that you have been informed of the conditions on the protection of personal data, accept and consent to its processing by the Owner in the manner and for the purposes indicated in this Privacy Policy.
To contact the Owner, subscribe to a newsletter or post comments on this Website, you must accept this Privacy Policy.
Changes to the Privacy Policy
The Owner reserves the right to modify this Privacy Policy to adapt it to legislative or jurisprudential developments, as well as to industry practices.
These policies will remain in force until they are modified by others duly published.