OUR PRIVACY POLICY

Who are we? We are AUDITORIO DE TENERIFE, S.A.U. and we process your data as Controller of Processing. This means we are in charge of how to use and safeguard your personal information. 

What do we use your information for? We use the information you have given us online or via any other means to answer your queries and suggestions, provide the services or products requested, register you as user, send you personalised messages you have subscribed to and process online shopping. 

Why do we have them?  We are legitimised to process your information for different reasons. When you fill in a form or send us an email with a query or suggestion, we have a legitimate interest to manage the website processing to deal with it. When you register on our website or make a purchase, we must fulfil the contract you have accepted with us in the same way we have the legal obligation of issuing an invoice that includes your details. We are also legitimised by your consent when you authorize us to send you our newsletter and personalised offers. 

Who do we share your data with? We only share data with companies that collaborate to deal with the requests received and provide our services, bank entities and organizations bound by law. In no case do we sell your data to third parties. 

What are your rights? You have the right of access, to rectification or to erasure of your personal data. You also have the right to restrict processing data you have previously allowed us to use, to transfer them and not to be part of automated individualised decisions. 

What principles do we apply in personal data processing? In processing personal data, we apply the following principles to safeguard greater protection: 

  • Principle of lawfulness, fairness, and transparency:We shall always ask for your consent to process your personal data for one or several specific aims we shall previously inform you about in an absolutely transparent way. 
  • Principle of data minimisation:We shall only request data that are strictly necessary in relation to the purpose they are required for. The minimum possible. 
  • Principle of storage limitation: the data will be kept for no longer than necessary for the purpose of processing. Depending on the purpose we shall inform you about how long we shall hold them. In the case of subscriptions, we shall periodically review our lists and erase records that have been inactive for a considerable time.  
  • Principle of integrity and confidentiality: Your data will be processed in such a way as to ensure appropriate security of your personal information and confidentiality. We take every necessary precaution to prevent unauthorised access or misuse by third parties of our users’ data. 

In this privacy policy you will find detailed information about the use we make of the personal data of our customers, suppliers and users and in general, of everyone who has contact with us, regardless of the means used to communicate (online form, by telephone or email or in person).

We like to be transparent about what we do with your personal data and that you understand what the uses we make of them involve, or the rights you have regarding your data. That is why our Privacy Policy, Legal Notice and Cookies Policy are always updated. You can check this information on this website. 

If you have any doubts or wish to have more information about our privacy policy, please continue reading this document. 

AUDITORIO DE TENERIFE, S.A.U., is committed to complying at all times with the legislation in force regarding personal data processing. Through the following privacy policy AUDITORIO DE TENERIFE, S.A.U., in accordance with the requirements included in the GDPR and in LOPDGDD [Organic Law on Personal Data Protection and Digital Rights Safeguarding], informs users and individuals whose data we process that:

 

1. WHO IS THE CONTROLLER OF YOUR DATA?

AUDITORIO DE TENERIFE, S.A.U. is the controller of your data:

Identity

AUDITORIO DE TENERIFE, S.A.U. - A38543252

Address

Avenida De La Constitución, 1, 38003 - Santa Cruz De Tenerife

Telephone

922568600 ext.152

Website

auditoriodetenerife.com

e-mail

This email address is being protected from spambots. You need JavaScript enabled to view it.

Data Protection Officer

AIXA CORPORE S.L.

DPO Contact

This email address is being protected from spambots. You need JavaScript enabled to view it.

 

AUDITORIO DE TENERIFE, S.A.U. informs users that the data provided by surfing our website, by different data collection forms, by using the website or sending electronic mails, are going to be processed by AUDITORIO DE TENERIFE, S.A.U. and that the said processing is included in the Record of Processing Activities managed by AUDITORIO DE TENERIFE, S.A.U. in compliance with that established in the GDPR.

2. WHAT ARE YOUR PERSONAL DATA USED FOR?

On auditoriodetenerife.com, we process data of both users of our website and third parties who have a relationship with us. With the aim of letting you know the processing of your data, we have differentiated the purpose of the data, the type of data and the legal basis depending on the classification of the person whose data we process. Below we classify the people whose data we process by the type of relationship they have with AUDITORIO DE TENERIFE, S.A.U.

2.1 Website users

What data do we collect of our website users?

  • Data of users who fill in any of the forms available: the personal data AUDITORIO DE TENERIFE, S.A.U. requests include:
  • Identification details: name and surname, telephone number, postal and electronic address 
  • Data relating to the request 
  • Data of users who subscribe to our newsletter / wish to receive advertising messages and information:
  • Identification details: Name and surname, electronic address. 
  • Data of users who register on our platform: 
  • Identification details: Name and surname, postal and electronic address, telephone number, invoicing address.
  • Data of users who surf our website: Data provided by the cookies and, where applicable, by website analytic systems that comply with EU legislation regarding personal data use and processing.

With what purposes shall we process your personal data?

When the user accepts our privacy policy, he/she authorises us to use the personal data provided for the following processing:

  • Send them information and provide the service they may request by the different forms available on our website 
  • Organize, communicate, and hold events or the like.
  • Prepare statistical studies to assess the success of campaigns/ways through which users have learned about a service provided by AUDITORIO DE TENERIFE, S.A.U. The data are collected for statistical purposes only and are used internally by AUDITORIO DE TENERIFE, S.A.U.
  • Send you the newsletter if you are a subscriber with the events, activities, and promotions of AUDITORIO DE TENERIFE, S.A.U. and of topics you may be interested in. 
  • Improve the understanding of our audiences by making customer segments and profiles, follow their activity on our website, and measure the response to our direct marketing activity. 
  • Send you messages about offers, activities and promotions of AUDITORIO DE TENERIFE, S.A.U. and of the areas that may interest you using conventional or electronic means if you have checked the box to receive information. 
  • Accepting the privacy policy and the Legal Notice includes the permission of the ticket buyer or subscribers to send them information about their subscription programme, concert, or event they bought the tickets for. 
  • The user’s consent to be sent Auditorio de Tenerife’s newsletter permits the reception of any type of message including those that have no commercial or promotional purposes such as messages regarding changes, cancellations or refunds of your tickets/subscriptions, thank you messages after the event, surveys to learn about your opinion, or services, contents, programmes and advantages regarding your subscription programme.

How do we obtain your data?

We obtain you data by:

  • The form the website user fills in for the purposes included in it. The form requires the acceptance of the current present privacy policy by ticking the appropriate box.
  • The surfing data are obtained from the different cookies users accept when they access auditoriodetenerife.com for the first time.

Why are we legitimised to process your data?

The user’s explicit consent (article 6.1.a. GDPR) stated by filling in any of the different forms, ticking the send newsletter box and/or receive advertising messages / information on offers, activities and promotions of AUDITORIO DE TENERIFE, S.A.U. and of areas that they may have an interest in legitimises AUDITORIO DE TENERIFE, S.A.U. to process the data. The user can revoke consent at any time although if he/she revokes consent, this does not affect the data processing carried out before revocation. General Data Protection Regulation (GDPR)

The legitimate interest to make surfing profiles and detect preferences by installing cookies. 

Performing a contract or adopting precontractual measures when the customer makes a request via any of the forms available on our website or requests information about the services provided by AUDITORIO DE TENERIFE, S.A.U.

2.2 Suppliers

What data do we collect from our suppliers?

  • Supplier’s identification details: the personal information AUDITORIO DE TENERIFE, S.A.U. requests include:
  • Identification details: name and surname, telephone number, postal and electronic address 
  • Employment and professional data 
  • Activities and business 

How do we obtain your data?

We obtain your data by:

  • The contract that binds us, accepting the budget presented, receiving the supplier’s invoices and signing the Processor contract if necessary for the service provided.

With what purposes shall use your personal data?

To manage information relating to the data of the companies that supply us with goods and services as well as of their representatives. 

Continuation of the contractual relationship with our suppliers. 

To manage the payments and collection in relation to the contracts that bind us. 

Why are we legitimised to process your data?

In the performance of a precontract/contract to send you information and manage the service rendered, it being impossible to be done otherwise. 

In legitimate interest to manage the data relating to the representatives of AUDITORIO DE TENERIFE, S.A.U. suppliers.

2.3 Customers

What data do we collect from our customers?

  • Data of customers who fill in any of the forms available on auditoriodetenerife.com or at AUDITORIO DE TENERIFE, S.A.U. premises
  • Identification details: Name and surname, telephone number, postal and electronic address
  • Data relating to your request
  • Data of customers who register on our platform:
  • Identification details: Name and surname, postal and electronic address, telephone number, invoicing address.
  • Data of customers who make a booking or order at our premises in person:
  • Identification details: Name and surname, postal and electronic address, telephone number, invoicing address
  • Data of our customers obtained through our contracts and budgets
  • Data of customers who shop online or in person:
  • Identification details: Treatment, name, surname, postal and electronic address, telephone number, invoicing address.
  • Transaction data: Products bought/ services rendered and payment method 
  • Data of customers who make a purchase:
  • Identification details: Treatment, name, surname, postal and electronic address, telephone number, invoicing address.
  • Transaction information: Products bought / services rendered and payment method, receipt when buying at the premises.

How do we obtain your data?

If you are an online customer, we obtain your data by:

  • The form website users fill in to carry out an online purchase on our e-commerce. The form requires accepting the present privacy policy by ticking the indicated box. 
  • The surfing data is obtained from the different cookies the customer accepts to access auditoriodetenerife.com for the first time

If you are an in-person customer, we may obtain your data by:

  • The customer registration form.
  • Accepting the budget presented.
  • The signed contract

With what purposes are we going to process your personal data?

  • To carry out your on-line purchase through our platform.
  • To generate and manage documents relating to your requests and purchases.
  • To give you information about offers, products and services related to your purchase.

Why are we legitimised to process your data?

In the performance of a precontract/contract to send you information and manage the service rendered or the product supplied, it being impossible to be done otherwise. 

In the user’s consent to receive the newsletter and advertising messages of offers, activities and promotions of AUDITORIO DE TENERIFE, S.A.U. and areas you may be interested in and to manage our blog. The user may revoke the consent given at any time. 

In legitimate interest to send information about exclusive promotions, latest news, and personalised information suitable to your profile and to send customer satisfaction surveys on the products and services purchased. 

2.4 Job applications and candidates.

What data do we collect from applicants?

  • Data of candidates requested by AUDITORIO DE TENERIFE, S.A.U.:
  • Identification details: name and surname, telephone number, postal and electronic address
  • Academic and work information 
  • Information included by the candidate as attached documents

How do we obtain your data?

We obtain your data by:

  • Receiving your CV in our premises.

With what purposes are we going to process your personal data?

The personal information candidates give us are only used in the selection processes that are open or are going to be performed when the information provided is for our job bank.

Why are we legitimised to process your data?

In the user’s consent when he/she uploads their information and CV to AUDITORIO DE TENERIFE, S.A.U. website to take part in active selection processes or in future processes that may be done as long as you do not object to your details being processed. 

2. 5 Social Networks contacts 

What data do we collect?

  • Identification details on the Social Network: AUDITORIO DE TENERIFE, S.A.U. will not request information other than that included by you in your user’s profile.

With what purposes are we going to process your personal data?

To answer and manage your queries or requests. 

To be in contact with you while you remain a part of our community of followers. 

Why are we legitimised to process your data?

In the performance of a precontract/contract that binds you with the corresponding social network and in agreement with its privacy policies:

Facebook http://www.facebook.com/policy.php?ref=pf

Instagram https://help.instagram.com/155833707900388

Twitter http://twitter.com/privacy

LinkedIn http://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

Pinterest https://about.pinterest.com/es/privacy-policy

Youtube https://policies.google.com/privacy?hl=es&gl=es

WhatsApp: https://www.whatsapp.com/legal/updates/privacy-policy/?lang=en

auditoriodetenerife.com also collects information of website users that have not been directly provided by them through cookies and, where applicable, by website analytical systems that comply with EU legislation on using and processing personal data. You can learn more about it in our Cookies Policy. 

3. HOW LONG DO WE KEEP YOUR DATA FOR?

3.1 Website users

Data whose processing is based on the website user’s consent will be kept for as long as they are relevant to the purposes they were collected for and consent is not revoked. 

Data whose processing is based on legitimate interest will be kept for as long as the reason why they were collected is valid while we always ensure the appropriate safeguard and observing the rights and freedoms of the data subjects.

Data whose processing is based on the performance of a contract or on adopting pre-contractual measures will be kept for as long as the contractual relationship is in force as well as for as long after that as required by legal obligation.   

The IP address obtained via the cookies will be kept for one year with the aim of proving the user’s consent. 

As for the time cookies are kept, please see the section Cookies policy on our website for further information. 

3.2 Suppliers

Data whose processing is based on legitimate interest will be kept for as long as the reason why they were collected applies, at all times ensuring the appropriate safeguards and observing the data subject’s rights and liberties. 

Data that are processed in relation to a contract, and if part of the processing is legitimised by a legal obligation, will be kept for as long as the contractual relationship is in force. Once this relationship ends, or in the case of the processing being connected to a legal obligation, the time provided for by law will apply, and data processing cannot be revoked by the data subject except in the cases where they can be blocked as legally provided for. 

3.3 Customers

Data whose processing is based on customer consent will be kept for as long as they are relevant to the purpose they were collected for and consent is not revoked. 

Data whose processing is based on legitimate interest will be kept for as long as the reason why they were collected applies, at all times ensuring the appropriate safeguards and observing the data subject’s rights and liberties. 

Data that are processed in relation to a contract, and if part of the processing is legitimised by a legal obligation, will be kept for as long as the contractual relationship is in force. Once this relationship ends, in the case of the processing being connected to a legal obligation, the time provided for by law will apply, and data processing cannot be revoked by the data subject except in the cases where they can be blocked as legally provided for.

3.4 Job applications and candidates 

Data whose processing is based on the job applicants and candidates will be kept for as long as the selection process applied for remains open. In the case of not applying for a specific position but for possible future positions the information will be kept for one year. 

3.5 Social Networks Contacts 

The data processed from the contacts on social networks will be kept for as long as the user and AUDITORIO DE TENERIFE, S.A.U. keep their connection on the social network. As data processing does not directly depend on AUDITORIO DE TENERIFE, S.A.U. our ability to see or dismiss your data is restricted. We will process your information for as long as the social network user maintains his/her connection with AUDITORIO DE TENERIFE, S.A.U. as a 'friend', clicks 'like', 'follow' or similar buttons.

To rectify your data, restrict information or the publications you share, AUDITORIO DE TENERIFE, S.A.U. will not be responsible for carrying out such rectifications. The Social Network user must do it themselves by setting up their profile in agreement with the privacy policy of the Social Network.

Regardless of the legitimation that allowed the information to be collected, the data can be processed for scientific, historical research or statistical purposes while implementing the appropriate safeguards and observing the rights and liberties of the data subject. 

4. ADDITIONAL INFORMATION ON DATA PROCESSING

Only people aged over 14 can provide information via our website and e-mail. If you are under this age you must have your parents’ or legal tutors’ consent. 

The User guarantees all the data he/she gives to AUDITORIO DE TENERIFE, S.A.U. is authentic and updated and declares that he/she is over 14 years old and is solely responsible for false or inaccurate statements he/she may make.  

The personal information processed by AUDITORIO DE TENERIFE, S.A.U. can be compulsory or voluntary. Through the website forms, we shall not ask for information of special categories in order to safeguard your privacy. If in order to provide a service, special category information must be collected, it would be requested through other means. The information we request via the form is: 

  • Identification details: name and surname, telephone number, postal and electronic address
  • Information regarding your request
  • Information of users who subscribe to our newsletter / wish to receive information, advertising messages and privacy policy and legal notice information
  • Information of users who register on our platform:

Voluntary information refers to that which users are not obliged to provide in order to contact us. 

Fields marked with an asterisk (*) or the word (required) in our forms must be filled in and failure to do so means the service cannot be rendered or your request answered.

In the event of you providing third party information, you state that you have their consent to do so and commit yourself to convey the information in this clause to them, freeing AUDITORIO DE TENERIFE, S.A.U. of any kind of obligation. Nonetheless, AUDITORIO DE TENERIFE, S.A.U. can make verifications to confirm the third party has been informed by adopting the measures established in the data protection regulations. 

5. WHO SHALL WE TRANSFER YOUR DATA TO?

We shall not transfer your information to third parties unless there is a legal obligation or if it were necessary to answer your request.

Those who may receive your information include: 

  • Entities belonging to the Institutions of the Cabildo Insular or the Canary Islands Government that are linked to the purchase of tickets.
  • Public Administrations and Organizations when the tax, work, Social Security or any applicable other office regulations require it. Companies that deal with data processing (fraud detection and prevention companies, technological services, customer services, advertising and marketing services) and, in general, other suppliers AUDITORIO DE TENERIFE, S.A.U. needs in order to provide its services, such as courier and transport services, etc.

International data transfers can also take place based on previous  transfers/communications for which AUDITORIO DE TENERIFE, S.A.U. will use the Standard Contract Clauses adopted by the European Commission and the EU-USA Privacy Shield as a safeguard of those transfers made to countries that do not have a European Commission adequacy decision.

In any case, third parties with whom we may share certain personal information will have previously proven they have adopted the appropriate technical and organisational measures for the proper safeguard of the information and it will only happen with third countries when there is a binding legal instrument in compliance with articles 46 and following of the GDPR. By accepting this privacy policy, you agree to a possible transfer of your data according to the safeguards indicated. 

In the event of failing to fulfil the requirements provided for in article 46, the data subject can grant consent to the international transfer or a contract in the interest of the data subject can be performed. Otherwise, an authorization from the Control Authority must be requested. 

We also inform you that some of the services rendered by and for AUDITORIO DE TENERIFE, S.A.U. may involve personal data transfers to EU non-member countries, in cloud services offered by some of the main international suppliers  (for example, Google, Microsoft). In these services, the above-mentioned fulfilment will be confirmed. 

In no case does AUDITORIO DE TENERIFE, S.A.U. sell customers data to third parties. 

6. WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?

Users can exercise the following rights before AUDITORIO DE TENERIFE, S.A.U.:

  • Access your personal information
  • Rectify it when inaccurate or incomplete 
  • Request the erasure of your data when, among other reasons, they are no longer needed for the purposes they were collected 
  • Restrict processing
  • Request the limitation of your data processing when one of the terms stipulated in the regulations apply
  • Request data portability in the cases stipulated in the regulations 
  • Not to be subject to automated decisions 
  • Revoke the consent granted 

In order to exercise his/her right, the user must send a letter indicating which right they wish to exercise enclosing a document that proves their identity plus provide their postal or electronic address for notification purposes. You can make this  request either via the post writing to AUDITORIO DE TENERIFE, S.A.U. Avenida De La Constitución, 1, 38003 - Santa Cruz De Tenerife, or by sending an email to This email address is being protected from spambots. You need JavaScript enabled to view it..

We inform you that AUDITORIO DE TENERIFE, S.A.U. has named a Data Protection Officer to whom you can ask anything regarding your personal data processing. You can contact the Data Protection Officer by writing to This email address is being protected from spambots. You need JavaScript enabled to view it. or Avenida De La Constitución, 1, 38003 - Santa Cruz De Tenerife.

AUDITORIO DE TENERIFE, S.A.U. must answer your request to exercise your rights within one month after receiving your request. If necessary, this deadline can be extended by two further months, taking into account the complexity and number of requests.  We shall inform you of any extension within one month after receiving your request indicating the reasons for the delay. 

Also, you have the right to claim to the competent Control Authority (Agencia Española de Protección de Datos) whenever you consider that AUDITORIO DE TENERIFE, S.A.U. has violated the rights you have under the data protection regulations www.aepd.es

7. IS MY INFORMATION SAFE?

AUDITORIO DE TENERIFE, S.A.U. has a contract in force with the company Hosting 1&1 to host its website. It is a European company that has the latest systems regarding safety measures. AUDITORIO DE TENERIFE, S.A.U. safeguards taking the appropriate measures to ensure the confidential processing of your information, taking into account it is confidential. 

AUDITORIO DE TENERIFE, S.A.U. is committed to keeping these data secret, processing them with utmost confidentiality and declares to have implemented in its information system the safety policies for the kind of data it manages in compliance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR)

All the data provided via our platform are gathered by means of a safe protocol. Our website has an SSL certificate that enables to establish a cyphered connection whenever a user visits our website and interchanges information with us. 

8. LINKS TO OTHER WEBSITES

If you choose to leave our website through a link to other websites that do not belong to us, AUDITORIO DE TENERIFE, S.A.U. will not be held responsible for the privacy policy of these websites or the cookies they may store in the user’s computer. 

 

Date: 02 October 2020

Version: V.1.0