Privacy policy

In accordance with the provisions of the Llei orgànica de Protecció de Dades Personals i garantia dels drets digitals (hereinafter LOPDGDD), the [Reglament General de Protecció de Dades (hereinafter RGPD)](https://www.boe.es/doue/2016/119/l00001-00088. pdf) and the current regulations on data protection, the Electronic Technology and Certification Agency (hereinafter ACCV) informs the users of its services of the following aspects so that they can expressly, freely and voluntarily determine whether they wish to provide the personal data that may be required for the provision of the services offered. To this end, ACCV provides users with the appropriate technical resources so that, in advance, they can access this Privacy Policy notice or any other relevant information.

How do we obtain your personal data?

We collect your personal data on different occasions:

- When you contact us directly through the web www.accv.es, through the phone lines, or by contacting our e-mail accounts, to request support or information about our products and services.

- Every time you contract or subscribe one of our products or services, with the signature of the corresponding contract.

The user guarantees that the personal data provided are true and is responsible for communicating to the ACCV any change in them. At the same time, the user will assume responsibility for any damage or harm that may be caused by providing false, incomplete or inaccurate data.

The ACCV has adopted the legally required levels of security for the protection of personal data, installing the necessary technical and organizational measures to prevent the loss, misuse, alteration, unauthorized access and theft of the data provided.

What is the legitimacy for the processing of your data?

The legal basis for the processing of your personal data is found either in:

- (i) The contractual relationship established by virtue of the services subscribed to the ACCV according to the conditions of use and obligations that appear with the subscription of the services.

- (ii) The very purpose of the provision of electronic certificate issuance that requires linking signature validation data with a natural person.

- (iii) The legal obligation to, on the one hand, verify the identity and other attributes of the natural person to whom the ACCV issues a qualified certificate - Llei 6/2020, d'11 de novembre, reguladora de determinats aspectes dels serveis electrònics de confiança and Reglament eIDAS - and, on the other hand, to register and keep these data accessible for the stipulated legal term.

The contracting of our services obliges the client to provide his personal data, even in the case of the use of a pseudonym, so if he does not consent to the processing of his personal data, the service cannot be provided.

How long do we keep your data?

The data provided will be kept in electronic and/or paper format, as long as the commercial relationship is maintained and for the years necessary to comply with the legal obligations of registration and access, in particular those of the Law 6/2020, of November 11, regulating certain aspects of electronic trust services (15 years) and of the eIDAS Regulation.

To which recipients will your personal data be communicated (assignments and transfers)

In order to provide its electronic trust services, the ACCV may delegate to a third party the registration tasks as well as the development and maintenance tasks of the applications and platforms that manage personal data. These entities will be considered to be in charge of the processing in having access to the data provided by the ACCV, for the sole and exclusive fulfillment of the work of the registry house when these are necessary to provide the contracted service or for the fulfillment of the contracted services.

In the same way the ACCV will be able to contract external mailing services to which it will cede, when appropriate, the minimum personal data necessary for the sending of those mailings contracted by the user, as long as the ceding entity uses them exclusively for the full fulfillment of its obligations of transport, sending and delivery of the mailing and not for other purposes.

Except for legal obligation or in the previous case, the ACCV will not transfer your personal data to third parties, nor will it be transferred to third countries or international organizations.

Who is our Data Protection Officer?

It corresponds to the figure of the Personal Data Protection Delegate of the Generalitat Valenciana, due to the fact that the ACCV is an integral part of the Administration of the Generalitat and its instrumental public sector.

- Delegació de Protecció de Dades de la Generalitat

- Conselleria de Participació, Transparència, Cooperació i Qualitat Democràtica

- address: Passeig de l’Albereda, 16. 46010 València

- e-mail: dpd@gva.es

You can get more information here.

What are your rights regarding our treatment of your data?

Any person has the right to obtain confirmation as to whether or not the ACCV processes personal data concerning him/her.

The interested party has the right to:

- To access your personal data, as well as to request the correction of inaccurate or incomplete data, or to request its deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. In case of requesting the correction or deletion of your personal data from our databases, you are informed that the electronic certificates issued in your name and valid at that moment will have to be revoked by the ACCV. The ACCV will keep a copy of this data only for the purpose of complying with the legal obligations on retention terms and for the exercise or defense of claims.

- To request to the ACCV the portabilitat of your personal data in case you want them to be treated by another responsible.

- Request the limitation of the processing of your data to the main purpose for which they were transferred to the ACCV. This request will not affect the previous processing request based on the contractual need to process your data.

- In certain circumstances and for reasons related to your particular situation, you may oppose to the processing of your data. The ACCV will stop processing the data, except for legitimate compelling reasons, or in the exercise or defense of possible claims must continue to be processed.

- In certain circumstances, there is the possibility of withdrawing consent. In the event that consent has been granted for a specific purpose, you have the right to withdraw consent at any time, without affecting the lawfulness of the treatment based on the consent prior to its withdrawal.

How to exercise your rights?

To exercise your rights, you can use one of the following options:

- By postal mail to the following address AGÈNCIA DE TECNOLOGIA I CERTIFICACIÓ ELECTRÒNICA, *INFRAESTRUCTURES I *SERVEIS DE *TELECOMUNICACIONS I *CERTIFICACIO SA, Departament Jurídic, Polígon Ademuz, s/n. 5a Planta - 46100, Burjassot (València). We recommend the use of a means of proof that the application has been sent and received.

- By e-mail to the following addresses gestioncerts@accv.es or soporte@accv.es

- By means of consultation through the section Contact of this web.

- The subscribers of the certification services can also do it electronically through our Personal Area (APSC) or in person at our Registration points.

Given the very personal nature of these rights, it will be necessary for the interested party to prove his/her identity, either by identifying him/herself with his/her digital certificate, digitally signing the mail or letter, in person by means of an accrediting document in accordance with the law, or by allowing the ACCV to adopt the pertinent measures in order to verify its veracity.

If you have not been satisfied with the request to exercise your rights, you may file a complaint with our Data Protection Officer and/or the Data Protection Control Authority (by contacting the Electronic Headquarters of the Spanish Data Protection Agency).

Use of cookies

The ACCV uses cookies to improve and optimize the experience of its users in the web sites under the domain accv.es.

If you do not want a cookie to be installed on your hard disk, configure your Internet browser not to receive them. You can also destroy the cookies freely, although this may reduce the quality and speed of the service.

Register of data processing activities

You can access ACCV Istec’s register of data processing activities (RAT) through this document: Download the RAT