2. Collection, purpose and processing of data
BCT has the duty to inform users of its website about the collection of personal data that may be carried out, either by sending e-mail or by completing the forms included on the website. In this sense, BCT will be considered responsible for the data collected by the means described above. In turn, BCT informs users that the purpose of the processing of the data collected includes: The attention of requests made by users, the inclusion in the contact agenda, the provision of services and the management of the commercial relationship. The operations, management and technical procedures that are carried out in an automated or non-automated manner and that enable the collection, storage, modification, transfer and other actions on personal data, are considered to be the processing of personal data. All personal data collected through the BCT website, and therefore considered as personal data processing, will be included in the files declared to the Spanish Data Protection Agency by BCT.
3. Communication of information to third parties
BCT informs users that their personal data will not be transferred to third party organisations, with the exception that such transfer of data is covered by a legal obligation or when the provision of a service implies the need for a contractual relationship with a data processor. In the latter case, the transfer of data to the third party will only be carried out when BCT has the express consent of the user.
4. User rights
Organic Law 15/1999 of 13 December 1999 on the Protection of Personal Data grants interested parties the possibility of exercising a series of rights related to the processing of their personal data. Insofar as the user's data are processed by BCT. Users may exercise their rights of access, rectification, cancellation and opposition in accordance with the provisions of current legislation on personal data protection. In order to exercise these rights, the user must write to the following address: BasqueQ Events, C/Huertas de la Villa, Bilbao 48004 or the address that is substituted in the General Data Protection Register, providing proof of identity (ID card or passport). Said communication must include the following information: Name and surname of the user, the request, address and accrediting data. The exercise of rights must be carried out by the user himself. However, they may be executed by an authorised person as the authorised person's legal representative. In this case, documentation must be provided that accredits this representation of the interested party.