Privacy Policy

DATA CONTROLLER DETAILS
Entity name: FUNDACIÓN CENTRO DE SERVICIOS Y PROMOCIÓN FORESTAL Y DE SU INDUSTRIA DE CASTILLA Y LEÓN (hereinafter CESEFOR). Address: Polígono Industrial Las Casas C/ C Parcela 4 – 42005 Soria. Telephone: 975212453 Email: cesefor@cesefor.com

1. Contact and feedback form.
 a. Purpose. The purpose of this form is to respond to your request for information made through the contact form.
 b. Legal basis. The legal basis for the processing of personal data is the express consent of the data subject.
 c. Recipients. Data will not be disclosed to third parties except where legally required.

2. User registration form
 a. Purpose.
  − To manage your user registration on our website.
  − To provide you with information about our activity.
 b. Legal basis. The legal basis for the processing of personal data is the performance of a contract and the express consent of the data subject.
 c. Recipients. Data will not be disclosed to third parties except where legally required.

3. Nemus Trucker APP
 a. Purpose.
  − To provide tracking of timber transport, the user being aware of the information they are sharing with their business entity.
 b. Legal basis. The legal basis for the processing of personal data is the performance of a contract and the consent of the data subject.
 c. Recipients. Data will not be disclosed to third parties except where legally required.

Please note that the use of this app involves access to the geolocation data of your device in the background; such data will be used solely for the purpose of tracing assets in timber transport, the user of this application being aware at all times of the purpose of its use.

4. Electronic newsletter
a. Purpose: To send you the periodic electronic newsletter with information about our activities.
b. Legal basis. The legal basis for the processing of personal data is the performance of a contract and the consent of the data subject.
c. Recipients. Data will not be disclosed to third parties except where legally required.

RIGHTS IN DATA PROCESSING
For all the data processing activities covered by this privacy policy, you may exercise the rights of access, rectification, erasure and objection, as well as other rights set out in the additional information.

ADDITIONAL INFORMATION ON DATA PROTECTION
The data that CESEFOR may collect through your use of and browsing on the website, through our forms, by email or in connection with the contractual relationship that binds you to CESEFOR constitute personal data. When completing each of the forms on our website, a number of mandatory data items will be required, whose fields are marked with the symbol *. If such fields are not completed, the purposes described for each of the forms cannot be carried out. On some occasions, we inform you that, by the mere use of and browsing on our Website, CESEFOR will store data relating to:
- IP address
- Browser version
- Operating system
- Duration of the visit or browsing on the Website .

CESEFOR reserves the right to modify or adapt this Privacy Policy at any time. We therefore recommend that you review it each time you access the Website.
Where the user has registered on the website and accesses their account or profile, upon doing so they will be informed if there have been substantial changes in relation to the processing of their personal data.

- For what purpose do we process your personal data?
The purpose of the processing of the data collected through the forms available on our website, by email or by virtue of the contractual relationship that binds you to CESEFOR, will be as described, in each case, in the basic information on data protection.

- For how long will we keep your personal data?
At CESEFOR we will keep your personal data for the periods set out in the box below:

- Website contact form: Your personal data will be processed for the time strictly necessary to deal with your request.
- User registration: Your personal data will be kept until you cancel your user account. After the cancellation of the user account, the data will remain blocked in our databases but kept until the expiry of the limitation period for possible legal liabilities. Your personal data used for sending information about our activity will be kept until you withdraw the consent given for that purpose.

- What is the legal basis for the processing of your data?
The legal basis for the processing of the data covered by this privacy policy is:
 1. Explicit consent of the data subject for the following data processing activities:
 − Processing of the data in the website contact forms.
 − Sending information about our activity.

- To which recipients will your data be disclosed?
As indicated in the basic information, data will not be disclosed to third parties except where legally required.

- What are your rights in relation to the processing of data?
As a data subject you have the right to obtain information about the existence of processing of your data, to access your personal data, to request the rectification of data that are inaccurate or, where applicable, to request their erasure, when, among other reasons, the data are no longer necessary for the purposes for which they were collected or you, as the data subject, withdraw the consent given.

CESEFOR will process and keep your data in accordance with the regulations in force, without prejudice to your right as data subject to request in any case the restriction of the processing of your data. In certain cases you may exercise your right to data portability, whereby the data will be delivered in a structured, commonly used and machine-readable format to you or to the new controller you designate. You will have the right to withdraw at any time the consent for any of the processing activities for which you have given it.

To exercise your rights, please contact us at the email address cesefor@cesefor. com .
You will have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) if you consider that the exercise of your rights has not been adequately dealt with. The maximum period for resolution will be one month from receipt of your request. Should any of your data change, we would be grateful if you would notify us in writing so that we can keep your data up to date.

This document is a translation provided for information purposes. In case of discrepancy, the Spanish version published by Fundación Cesefor prevails.