Flow hereby informs the users of its website about the its policy with respect to the processing and protection of users’ and clients’ personal data, which may be collected via browsing or by the contracting of services through its website.
To this effect, Flow guarantees full compliance with the regulations in force for the protection of personal data, in accordance with Organic Law 15/1999 of 13 December, on the Protection of Personal Data and Royal Decree 1720/2007 of 21 December, approving the Regulations for the implementation of the Data Protection Law.
Collection, Intended Purpose and Processing of Data
Flow has a duty to inform users of its website about any possible collection of personal data that could take place, either through the transmission of emails or the completion of any forms included on the website. In this regard, Flow shall be considered as the controller of data collected by the aforementioned means.
In turn, Flow also informs users about the intended purpose for the processing of personal data: The processing of requests sent by users, inclusion in the list of contacts, service provision, management of business relationships and other purposes.
Automated or non-automated technical operations, management actions or procedures that facilitate collection, storage, modification, transfer and other actions involving personal data, are considered as processing of personal data.
All personal data collected via Flow’s website, which is therefore considered as processing of personal data, shall be incorporated into the files declared to the Spanish Agency for Data Protection by Flow.
Communication of Information to Third Parties
Flow hereby notifies users that their personal data will not be transferred to third party organisations unless such transfer of data is justified by a legal obligation or when the provision of a service makes it necessary to establish a contractual relationship with a data processor. In this latter case, Flow will transfer data to the third party after having received express consent from the user.
Organic Law 15/1999 of 13 December on the Protection of Personal Data grants interested parties the option to exercise a series of rights relating to the processing of their personal data.
This applies to the extent that the user’s data are subject to processing by Flow. Users shall be able to exercise rights of access, rectification, cancellation and opposition in accordance with the provisions of current legislation in force for the protection of personal data.
In order to exercise these rights, the user will have to send a written notice, providing documentation that proves their identity (ID card or passport), to the following address: Flow, c/ Villarías nº 10 Dpto 707 48001 Bilbao, Bizcaia or to any address that replaces it in the General Data Protection Registry. Said notice must contain the following information: The user’s forename and surname, the request application, their address and supporting details.
The rights must be exercised by the user in question. However, these rights can also be exercised by an authorised person, such as a legal representative of the authorised party. In that case, documentation that substantiates the representation of the interested party must be provided.