1. Data protection
Criteria Caixa, S.A., Sole Shareholder Company, is committed to complying with current legislation, including the General Data Protection Regulation (hereinafter, GDPR) and regulations related to the protection of personal data, as one of its priority objectives.
We hereby inform you that your personal data will be included in a database owned by Criteria Caixa, S.A., Sole Shareholder Company, with registered offices at Palma, Plaza Weyler, no. 3, registered in the Trade Register of Palma de Mallorca, volume 2,733, page 82, sheet PM-82,742, inscription 2nd, and with tax ID A-63379135.
We hereby inform you that your personal data will not be transferred, sold, leased, or made available in any other way to third parties, with the exception of companies required for the processing of data, and service providers of Criteria Caixa, S.A., Sole Shareholder Company, that carry out activities for the company but, under no circumstances, do so for their own purposes.
2. Purpose of data processing
Your personal data will be processed confidentially by Criteria Caixa, S.A., Sole Shareholder Company, for the following purposes:
- Where applicable, to manage and respond to your inquiries or incidents, and to send you any necessary information to solve theses issues.
- Where applicable, process your request of access to the “Investors private area”.
- Send you notices of updates about the information contained in the “Investors” section, if you have authorized us.
We hereby inform you that sometimes it may be necessary to process your personal data in order to fulfill certain legal obligations, or in relation to the contractual relationship that we maintain with you.
Furthermore, when you are requested to complete a form in which you provide personal information, we will duly inform you about this information, the purpose of collecting it, and for how long it will be stored. In these cases, we will request your consent to process your personal data, whenever appropriate.
3. Storage periods
Your personal data will be storaged during the time period indicated in the table below, notwithstanding its storage, maintenance, and blockage in order to make this information available to the competent authorities for any relevant purposes.
| Processing | How do we determine the storage period of your data? |
|---|---|
| To manage and respond to your inquiries or incidents, as well as to send you any necessary information to solve these issues. | We store your data in order to respond to any inquiries or incidents that you send to us while Criteria Caixa, S.A., Sole Shareholder Company, has an obligation regarding the response that we have given you. |
| Process your request of access to the “Investor private area”. | We store your data in order to process your request and while Criteria Caixa, S.A., Sole Shareholder Company, has an obligation in this regard. |
| Send you notices of updates about the information contained in the “Investors” section, if you have authorized us. | We store your data while you do not withdraw your consent to treatment. |
4. Exercising rights and claims before the competent authority related to data protection
You are granted a set of rights by the current legislation regarding the processing of your personal data by Criteria Caixa, S.A., Sole Shareholder Company.
Thus, Criteria Caixa, S.A., Sole Shareholder Company, hereby informs you that you may exercise your rights to access, rectify, delete, or restrict the processing or transfer of your data, as well as to withdraw your consent to any or all processing of your data, by sending an email to dpo@criteria.com or a written request with the reference “Personal Data” to Avda. Diagonal, 621, 08028 (Barcelona).
Likewise, if you do not wish to exercise a specific right, but need to make an inquiry or suggestion related to the processing of your personal data, you can also contact us through the same address provided for exercising rights.
Furthermore, Criteria Caixa, S.A., Sole Shareholder Company, hereby informs you that you have the right to file a claim to the Spanish Data Protection Agency (AEPD), the competent authority on the subject of data protection.
5. Confidentiality and Security in data processing
Any information received by Criteria Caixa, S.A., Sole Shareholder Company, via its current website will be processed with the utmost care and confidentiality.
Likewise, Criteria Caixa, S.A., Sole Shareholder Company, hereby declares and guarantees that it has adopted all possible technical measures to prevent the loss, misuse, alteration, unauthorized access, or theft of the data provided by users, notwithstanding the fact that internet security measures never offer complete security.