“MIGRAVISAS” is deeply committed to complying with Spanish and European data protection regulations and guarantees full compliance with the obligations set forth, as well as the implementation of security measures stipulated in the General Data Protection Regulation (GDPR) (EU) 2016/679 of April 27, and the Organic Law 3/2018 of December 5, on Personal Data Protection and Guarantee of Digital Rights (LOPD and GDD, hereinafter LOPD).
In accordance with these regulations, we inform you that using our website may require you to provide certain personal data through contact forms or by sending emails, and such data will be processed by “MIGRAVISAS,” the Data Controller, as detailed in the legal notice.
Collection and Processing of Personal Data
Personal data is any information related to an individual: name, email, address, phone number, ID number… Additionally, when a user visits our website, certain technical information, such as the IP address assigned by their Internet service provider, is automatically stored.
“MIGRAVISAS,” as the Data Controller, is obliged to inform users about the collection of personal data that may occur, whether through email or by filling out forms on the website.
Only the data necessary to perform the contracted service or to adequately respond to the user’s request for information will be collected. The collected data is identifying and corresponds to a reasonable minimum required to carry out the activity. In particular, no specially protected data is collected at any time. Under no circumstances will the data be used for purposes other than those for which they were collected.
Contact Forms/Email
Purpose: To respond to your request for information made through our contact form(s).
Legitimacy: The legal basis for this processing is the user’s consent, which can be revoked at any time.
Data Transfer: Personal data will be processed through servers managed by Profesional Hosting, which will act as the Data Processor.
Minors
Only individuals over the age of 14 can provide personal data on this website. According to LOPD and GDD, for individuals under 14, parental or guardian consent is required for us to process their personal data.
Furthermore, only individuals over the age of 18 can contract our services. For individuals under 18, parental or legal guardian consent is required to provide the offered services unless the minor is emancipated.
Security Measures
Users of the “MIGRAVISAS” website are informed that technical and organizational security measures have been adopted to prevent loss, misuse, alteration, unauthorized access, and theft of data, thus ensuring the confidentiality, integrity, and quality of the information contained therein, in accordance with current data protection regulations. The personal data collected in the forms are processed solely by “MIGRAVISAS” staff or designated Data Processors.
The “MIGRAVISAS” website also features SSL encryption, allowing users to securely send their personal data through the website’s contact forms.
Accuracy of Data
The user declares that all data provided is accurate and correct and agrees to keep it updated. The user is responsible for the accuracy of their data and will be solely responsible for any conflicts or disputes arising from false data. It is important that, to keep personal data updated, the user informs “MIGRAVISAS” of any modifications.
Data Transfer
“MIGRAVISAS” will not transfer or communicate your data to any third party, except in cases legally required or when the provision of a service involves a contractual relationship with a Data Processor. Thus, the user agrees that some of the collected personal data may be provided to these Data Processors (payment platforms, management companies, intermediaries, etc.), when necessary for the effective provision of a contracted service or purchased product. The user also agrees that, in case of service provision, these may be, wholly or partially, subcontracted to other individuals or companies, which will be considered Data Processors, with whom a confidentiality agreement has been made or who adhere to their privacy policies established on their respective websites. The user may refuse the transfer of their data to the Data Processors by written request through any of the previously mentioned means.
Additionally, where necessary, customer data may be transferred to certain agencies to comply with a legal obligation: Spanish Tax Agency, banking entities, Labor Inspection, etc.
Exercise of User Rights
LOPD and GDPR grant individuals the possibility to exercise a series of rights related to the processing of their personal data. To do this, the user must contact us, providing documentation proving their identity (ID or passport), via email at bo@migravisas.com, or by written communication to the address listed in our Legal Notice. This communication should include the following information: name and surname of the user, the purpose of the request, address, and supporting data.
The exercise of rights must be carried out by the user themselves. However, they may be executed by an authorized person as a legal representative of the user, providing documentation that proves such representation.
The user may request the exercise of the following rights:
Right to request access to personal data.
Right to request correction (if incorrect) or deletion.
Right to request restriction of processing, in which case “MIGRAVISAS” will only retain the data for the exercise or defense of claims.
Right to object to processing: “MIGRAVISAS” will stop processing your data unless for legitimate reasons or for the exercise or defense of possible claims.
Right to data portability: if you want your data to be processed by another company, “MIGRAVISAS” will facilitate the portability of your data in an exportable format.
If consent was given for a specific purpose, the user has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. We commit to fulfilling all these rights within the legal maximum period (1 month).
If a user believes there is an issue with how “MIGRAVISAS” is handling their data, they can direct their complaints to the Security Officer or the relevant data protection authority, with the Spanish Data Protection Agency being the relevant authority in Spain.
Data Retention
Personal data of users who use the contact form or send us an email requesting information will be processed for the time strictly necessary to respond to the information request or until the consent given is withdrawn.
Personal data of clients will be processed until the contractual relationship ends. The retention period for personal data will be the minimum necessary and may be kept for:
4 years: Law on Infringements and Sanctions in the Social Order (obligations regarding affiliation, registration, contributions, payment of salaries…); Arts. 66 and following of the General Tax Law (accounting books…)
5 years: Art. 1964 Civil Code (personal actions without a special deadline)
6 years: Art. 30 Commercial Code (accounting books, invoices…)
10 years: Art. 25 Law on Prevention of Money Laundering and Terrorism Financing.
Indefinite: disaggregated and anonymized data.
Social Networks
“MIGRAVISAS” has profiles on some of the major Internet social networks (Facebook, YouTube), recognizing in all cases as the Data Controller for the data of its followers, fans, subscribers, commentators, and other user profiles (hereinafter, followers) published by “MIGRAVISAS.”
The purpose of data processing by “MIGRAVISAS,” when not prohibited by law, will be to inform its followers about its activities and offers, through any means allowed by the social network, as well as providing personalized customer service. The legal basis for this processing is the consent of the data subject, which can be revoked at any time.
Under no circumstances will “MIGRAVISAS” extract data from social networks unless express and specific consent is obtained from the user for this purpose (e.g., for conducting a contest).
Confidentiality
The information provided by the client will be considered confidential and cannot be used for purposes other than those described herein. “MIGRAVISAS” is committed to not disclosing or revealing information about the user’s intentions, the reasons for the requested advice, or the duration of the engagement.