The purpose of this document is to notify you that your personal details are processed in accordance with Personal Data Protection laws, in particular, those of Regulation (EU) 679/2016 of the European Parliament and Council of 27 April 2016, relating to the protection of individuals with regards to the processing of personal data and free circulation of those data (General Data Protection Regulation (GDPR)).
The data controller is Aena SME, S.A.
The following types of data are processed:
The personal data that you have provided to us or that you will provide to us at the time you begin your relationship with Aena SME, S.A., in your capacity as shareholder/investor in the latter, and those that may be collected or generated in the course of said relationship, will be processed by Aena SME, S.A. for the purposes detailed below:
Your personal data are treated on the basis that they are necessary for the correct execution of your contract with Aena, as well as for the fulfilment of legal obligations deriving from the regulations on listed companies and transparency. In such cases, we inform you of the obligation to provide mandatory data, for the development of the contract, or data required to comply with relevant legal obligations. Otherwise, the contract cannot be executed or signed, or Aena cannot comply with its legal obligations.
Your data will be stored for as long as you remain a shareholder and/or investor. They are subsequently stored for as long as claims and obligations may arise as a result of the processing of your data for the purpose for which they were collected.
It is anticipated that the following parties will receive your data::
Likewise, your data may be published on the transparency portal of the Aena website www.aena.es as required by applicable legislation.
Aena S.M.E., S.A., as the data controller, will adopt the technical and organisational measures required to guarantee the security of the personal data provided, preventing their unauthorised alteration, loss, manipulation or access.
Any data subject is entitled to receive confirmation as to whether or not his or her personal data are being processed. The General Data Protection Regulation also stipulates the following rights for the data subject:
Your requests will receive a response at the earliest possible opportunity, and in any case within one month from such time as the request is received. The aforementioned time period may be extended for another two months where necessary, in the event of possible complexities or a high volume of requests. Aena will notify the interested party of the extension within the first month from the time of the request
To exercise these rights, the data subject may contact us at the email address email@example.com or by writing to Calle Peonías, No. 12, 28042 Madrid, or using the Online Services Portal (https://serviciostelematicos.aena.es).
If you have any doubt, please email our Data Protection Officer at firstname.lastname@example.org
The interested party is also entitled to lodge a complaint with the Spanish Agency for Data Protection (AEPD), the control and oversight body for data protection in Spain.