PRIVACY POLICY
We provide you with this Privacy Policy in order to inform you in detail about how we process your personal data and protect your privacy and the information you provide to us.
If, in the future, we introduce changes to this Privacy Policy, we will inform you through this website or by other means so that you may be aware of the new privacy conditions adopted.
Below, in a question‑and‑answer format, we inform you of the conditions under which our organization processes your personal data:
WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?
Identity: OVER THE TOP NETWORKS IBÉRICA, S.L.U.
Tax ID (CIF): B-86588639.
Registered address: C/ Gran Vía de Don Diego López de Haro, 45 (48011) Bilbao – Spain.
Telephone: (+34) 93 802 3800
E-mail: ayuda@agiletv.com
WHO IS THE ENTITY'S DATA PROTECTION OFFICER (DPO) AND HOW CAN THEY HELP YOU?
The DPO is a legally established role whose main functions are to inform and advise the organization on its obligations regarding personal data protection and to supervise compliance.
In addition, the DPO acts as the contact point with the organization for any matter related to the processing of personal data. Therefore, if you wish, you may contact them:
Identity of the Data Protection Officer: Picón y Asociados Nuevas Tecnologías, S.L.
DPO contact e-mail: dpd@piconyasociados.es
FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?
We process the personal data you provide us for the following purposes:
a. Managing the client relationship and the billing and collection of services. Providing data for this purpose is mandatory for our clients; otherwise, the contract cannot be fulfilled.
b. Managing relationships with our suppliers, as well as billing and payment for services. For this purpose, suppliers must provide us with their data; otherwise, the contract cannot be executed.
c. Handling requests for information, suggestions, and complaints you may send us; contacting the sender; responding to your request or query; and performing follow-up. Providing data for this purpose is voluntary, but without it, we will be unable to respond. Therefore, communicating your data for these purposes is necessary for us to address such requests.
d. Sending commercial communications about our products or services. If you are our client, we will send such communications unless you indicate otherwise by marking the appropriate box when providing your data or later notifying us through any channel.
If you are not a client, we will only send commercial information if you expressly authorize us to do so. Providing authorization is voluntary; refusal simply means you will not receive commercial offers.
In relation to these communications, based on the information provided, we may create commercial profiles to offer products and services tailored to your interests. These profiling processes may involve automated decisions, based on an assessment of your preferences regarding contracted and viewed TV‑audiovisual services. Such automated processing will not have legal or similarly significant effects on you, and you may object to profiling at any time.
e. Communicating personal data to our partners/collaborators for sending commercial communications, including profiling. Such data communication will not occur unless you expressly authorize it. Authorization is entirely voluntary; refusal will only result in not receiving commercial offers from our partners.
f. If you send us your CV, we will process it to gather information on individuals who wish to intern and/or work with us and to carry out personnel selection processes.
g. If you become a friend or follower on our social media accounts, we will process your data to keep you informed about our activities and promotions through those channels. Providing data for this purpose is voluntary, but otherwise, you cannot be our friend or follower on the relevant platform. The categories of data processed include identification data.
h. Preventing fraud within the services provided by Agile or its partners, which may arise from the use of unauthorized IT mechanisms or similar activities.
i. Geolocation, to offer personalized services adapted to the user’s geographic location. If not accepted, we will be unable to provide geographically tailored content (e.g., regional TV channels).
HOW LONG WILL WE PROCESS YOUR DATA?
We only keep your data for the time necessary to fulfill the purpose for which they were collected, comply with legal obligations, and address any potential liabilities arising from that purpose.
Client and supplier management data will be kept while the contract is in force, and afterwards for the legally required period until potential liabilities expire.
Data used to respond to requests, queries, or complaints will be kept until definitively resolved, and then stored as communication history for one year unless deletion is requested earlier.
Data used for sending commercial communications (including profiling) will be kept indefinitely until you request deletion or opt out.
Potential client data will be deleted once it is confirmed that no contract will be formalized, unless potential liabilities arise.
Data communicated for partner commercial communications will be kept until you withdraw consent.
Data in CVs submitted for an open recruitment process will be kept until the process ends unless the applicant is hired. CVs kept for future processes will be stored for up to one year from the last update.
Data from social networks will be kept as long as you remain a follower.
Fraud prevention data will be kept as long as necessary according to relevant sectoral regulations.
Geolocation data will be kept until consent is withdrawn or a stable change in your usual geographic location is confirmed.
WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?
-
Execution of the subscription contract.
-
Legitimate interest for commercial offers to existing clients.
-
Consent for marketing to non‑clients, responding to information requests, sharing data with partners, geolocation, and social media data.
-
Pre-contractual relationship for recruitment processes.
-
Legitimate interest for fraud prevention.
TO WHOM WILL YOUR DATA BE COMMUNICATED?
Your data may be communicated to:
a. Competent Public Administrations, including courts, as required by law.
b. Financial institutions for payment management.
c. Other companies in our Group (see https://www.agiletv.com/tv).
d. Agile TV partners and collaborators, for sending commercial communications and profiling (see “partners” section in the cookie policy).
Additionally, third‑party service providers may access your data as data processors, under strict confidentiality and following our instructions.
WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US YOUR DATA?
You have the right to:
-
Confirm whether your data is being processed.
-
Access your personal data.
-
Request rectification or deletion.
-
Request limitation or portability under certain conditions.
-
Object to processing for reasons related to your situation.
-
Withdraw consent at any time.
-
Object to automated decision-making.
Rights characteristics:
-
Free of charge unless requests are unfounded or excessive.
-
You may act personally or through a representative.
-
We must respond within one month (extendable by two more in complex cases).
-
Requests submitted electronically will receive an electronic response when possible.
-
If we do not process your request, we will inform you within one month and advise on the possibility of filing a complaint with a Supervisory Authority.
Links to request forms are provided to facilitate exercising your rights:
-
Form for Exercising the Right to Erasure (“Right to be Forgotten”)
-
Form for Exercising the Right Not to Be Subject to Automated Individual Decision-Making
All the rights mentioned above may be exercised through the contact methods listed at the beginning of this clause. In all cases, you must verify your identity by attaching a photocopy or scanned copy of your ID card or equivalent document, or a document proving representation if the right is exercised through a representative.
All the rights mentioned above may be exercised through the entity’s contact channels listed at the beginning of this clause.
If any of your rights are violated, especially if you have not obtained satisfaction in exercising them, you may file a complaint with the Spanish Data Protection Agency (contact details available at www.aepd.es) or any other competent supervisory authority. You may also obtain more information regarding your rights by contacting these authorities.
HOW DO WE PROTECT YOUR PERSONAL DATA?
We are firmly committed to protecting the personal data we process. We use reasonably reliable and effective physical, organizational, and technological measures, controls, and procedures designed to preserve the integrity and security of your data and guarantee your privacy.
Furthermore, all personnel with access to personal data have been trained and are aware of their obligations regarding the processing of your data.
In contracts with our suppliers, we include clauses requiring them to maintain confidentiality regarding any personal data to which they have access as a result of the commissioned service, as well as to implement the necessary technical and organizational security measures to ensure the permanent confidentiality, integrity, availability, and resilience of personal data processing systems and services.
All of these security measures are periodically reviewed to ensure their adequacy and effectiveness.
However, absolute security cannot be guaranteed, and no security system is impenetrable. Therefore, if any information under our control is compromised as a result of a security breach, we will take appropriate measures to investigate the incident, notify the Supervisory Authority, and, where applicable, inform those users who may have been affected so they can take appropriate measures.
WHAT IS YOUR RESPONSIBILITY AS THE DATA SUBJECT?
By providing us with your personal data, you guarantee that you are over 14 years of age and that the data provided is true, accurate, complete, and up to date.
For these purposes, the data subject is responsible for the accuracy of the data and must keep it duly updated so that it reflects their real situation, being responsible for any false or inaccurate data provided, as well as any direct or indirect damages that may arise.
If you provide data about third parties, you assume the responsibility of informing them beforehand of everything set out in Article 14 of the General Data Protection Regulation, under the conditions established in that provision.
HOW HAVE WE OBTAINED YOUR DATA?
In cases where user registration is carried out through social networks, the personal data we process will originate from the relevant social network, to which the data subject will have previously provided such data for the purposes described in its own privacy policies. The categories of data we collect from the relevant social network are those listed in our registration form and which you have provided to that social network.
If additional data — beyond what the social network provides — is essential to complete registration on our website, you must provide such data in our registration form, in accordance with the privacy conditions set out in this Policy.