CEITA Policies

This right provides the interested party with the ability to request information about what personal data is being processed and the justification for such treatment by CEITA S.L. 

This right provides the interested party with the ability to obtain access to their personal data that is being processed by CEITA S.L. This request provides the right of the interested party to view or consult their own personal data, as well as to request copies of their personal data.

This right provides the interested party with the ability to request modifications of their personal data in the event that the interested party believes that these personal data are not updated or are not accurate. 

This right provides the interested party with the ability to withdraw a consent previously granted to process their data for a specific purpose. The request then requires CEITA S.L. to stop processing the personal data on which the consent provided above was based. 

This right provides the data subject with the ability to object to the processing of their personal data while a legal dispute is ongoing in court. 

This right provides the interested party with the ability to oppose a decision based on automatic processing. Using this right, the client can request his application to be reviewed manually, as he or she believes that the automatic treatment of his loan cannot be considered the unique situation of the client.

Also known as the right to delete, this right provides the data subject with the ability to delete their data. This generally applies to situations where the relationship with a customer has ended. It is important to note that this is not an absolute right, and that it depends on the retention schedule and retention period in accordance with other applicable laws.

This right provides the interested party with the ability to request the transfer of their personal data. As part of said request, the interested party may request that their personal data be returned (to him or her) or transferred to another controller. In doing so, personal data must be provided or transferred in a machine-readable electronic format.