In accordance with current legislation on the protection of personal data, and in particular, with Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter, “GDPR” ) and the Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (hereinafter, “LOPDGDD”), the data subject is informed that the Data Controller shall be GASIB SOCIEDAD IBÉRICA DE GAS LICUADO S.L.U (hereinafter, GASIB) Tax ID: B01668110 with address at Calle Vía de los Poblados 1 E, 28033, Madrid.
The personal data provided at the time of contracting, as well as those provided in the future as a result of its development, will be incorporated into a register of processing owned by GASIB for the following purposes:
In the event that the personal data provided belong to a third party, the data subject guarantees that they haves informed said third party of this Privacy Policy and has obtained their authorisation to provide their data to GASIB for the aforementioned purposes. Likewise, they guarantee that the data provided are accurate and up to date, and shall be liable for any direct or indirect damage or harm that may be caused as a result of non-compliance with this obligation.
The personal data provided will be kept as long as the contractual relationship is maintained, the purpose for which they were collected persists, their deletion is not requested by the data subject, consent is not withdrawn if it has been given for a specific purpose and they should not be deleted because they are necessary for the fulfilment of a legal obligation or for the formulation, exercise and defence of claims.
If the data subject should revoke their consent or exercises the rights of cancellation or suppression, their data will be kept blocked at the disposal of the Public Administration, Judges and Courts, for the legally established periods to meet the possible liabilities arising from the processing of the same.
The personal data to be processed by GASIB for the provision of the contracted service have been mostly provided directly by the data subject during the contracting process, such as name, surname, address, contact details, payment method data. The data subject is responsible for their veracity and updating.
Likewise, GASIB may obtain information collected through the website or from the use of the contracted service, such as statistical or navigation data, or if applicable, liquefied petroleum gas (LPG) consumption data.
Likewise, if the data subject has accessed the website through their registration on social networks, GASIB may obtain the public information available on the Internet such as their user ID, name, gender, date of birth, “clicks” on “likes”, “tweets” made, number of followers, number of users followed and profile information such as their biography and location information (if declared by the user). In the case of Facebook, the CUSTOMER may select those permissions that they do not wish to provide from among those requeste.
GASIB will use a token authentication system (a coded security key provided by the social network) to identify or register the user and thus provide access to the private customer area.
In no case will data be collected from third parties outside the users themselves. The CUSTOMER’s data shall be those registered by them in the social network and the behavioural analyses and segmentations carried out on the basis of the comments or “tweets” shall be made completely automatically and without human intervention. The CUSTOMER is informed of the possibility of editing the information they want to share with GASIB, and shall be able to allow wider or restricted access to their information as they wish, as well as the possibility of revoking the consent granted at any time.
Likewise, geographic location data of the CUSTOMER’s device or terminal may be collected, as long as the CUSTOMER has given their consent to do so, with the aim of facilitating the
provision of services, carry out advertising actions and offer personalised information appropriate to their location. The CUSTOMER may at any time disable access to geolocation data or revoke the consent given for their geolocation, by configuring the settings of their device or terminal.
All data communications to be carried out by GASIB are necessary for the fulfilment of the indicated purposes, or are carried out to comply with a legal obligation, with respect to the following Companies and Public Bodies:
a) If necessary for the performance of any of the services requested, to companies of the Cepsa Group, which can be consulted at www.cepsa.com., for administrative and customer relationship management purposes, based on the legitimate interest of GASIB for this purpose. The legitimate interest for the aforementioned purpose of the assignment would consist of guaranteeing a better organisation and optimisation, as well as a unified management of the resources of the business group in those cases in which, internally, it is necessary for the effective execution of the activity carried out. For further information, please contact dpogasib@gasib.com
b) Public Administration and Administration of Justice.
c) Companies providing creditworthiness, solvency and fraud prevention services, for risk analysis and for the comparison or contrast of their data in order to verify the accuracy and veracity of the same and to companies providing Payment Services.
d) Insurance companies, reinsurance companies, guarantee funds, or any other third party that acts as guarantor of the risk of the transactions that the customer carries out with GASIB means of payment, if the issuer of the means of payment has agreements with the aforementioned companies and for the sole purpose of identifying its registration as a cardholder of a GASIB card or means of payment.
e) If applicable, to gas installation maintenance service providers.
f) Companies and entities collaborating with GASIB, for the organization, management, and/or promotion of contests, events, promotions or sweepstakes, in the event that the Participant has decided to register and/or take part in such contests, events, promotions or sweepstakes.
g) Contracted suppliers who will perform their functions as data processors.
The international transfer of the personal data of the data subjects is not foreseen. However, in the event of any international transfer, it will be carried out in accordance with the criteria and requirements of current legislation, through the adoption of appropriate legal safeguards, which may consist of the formalisation with the recipient of the data of (i) Standard Contractual Clauses approved by the European Commission to legitimise the international transfer of data to third countries or (ii) another valid legal instrument that ensures an adequate level of protection equivalent to that of the European Economic Area. Additional information about international transfers is available from our DPO at dpogasib@gasib.com
Customers may if applicable, exercise all the rights of access, rectification or deletion, limitation of processing, opposition, portability and to oppose automated individual decisions before GASIB SOCIEDAD IBÉRICA DE GAS LICUADO S.L.U.
Likewise, they may revoke their consent if they have given it for any specific purpose, and they may modify their preferences at any time.
Customers may exercise their rights at the following e-mail address: protecciondedatos@gasib.com, or at the registered office of GASIB SOCIEDAD IBÉRICA DE GAS LICUADO S.L.U. (Ref.: Data Protection-Legal Advice), at Calle Vía de los Poblados 1 E 28033-Madrid (Spain). Customers are informed that they can address any kind of complaint regarding personal data protection to the Spanish Data Protection Agency www.aepd.es, Spanish Supervisory Authority.
