Users of this website are hereby informed that any personal data they provide through this website—whether by filling out a form, via email, or by any other means—will be processed by the website owner in accordance with this Privacy Policy.
Who is responsible for processing your data?
Identity: SPANISH ASSOCIATION OF SHOPPING CENTERS AND OUTLETS; Tax ID: G-78922275; mailing address: Calle Mauricio Legendre, 19, 1º A, 28046 – Madrid (Spain), phone: 913084844, and email: asociación@aedecc.com.
For what purpose do we process your personal data?
The data may be processed for the following purposes, depending on the reason for which it was provided:
- To manage membership registration requests.
- To manage subscriptions to the Directory, as well as trial requests, if applicable.
- To manage registration for our Conference and contests.
- To manage participation in other events (trade shows, presentations, activities, etc.).
- Responding to requests for information, inquiries, or complaints submitted by the user, and following up on them.
- Send newsletters and other commercial communications via electronic means, unless the user expresses their objection by any means. Through these communications, users will be informed about the various services, giveaways, promotions, contests, and other events offered by the AECC.
What is the legal basis for processing your data?
The legal basis for processing personal data for the purpose of managing membership applications, subscriptions or trial access to the Directory, registrations for our Congress, and participation in contests and various events is the contractual relationship or the implementation of pre-contractual measures with the AECC. Therefore, you are required to provide your data; failure to do so will prevent the fulfillment of the contract.
The legal basis for processing personal data to respond to requests for information, requests, inquiries, or complaints is the data subject’s consent to the processing of their data, which is expressed by completing and submitting the various forms available on the AECC website or by contacting us through any other means; such consent may be revoked at any time. In any case, authorization to process your data for these purposes is voluntary, and your refusal would only result in the inability to address the specific request made.
Finally, in the case of members, the prospective offering of products and services is based on the satisfaction of a legitimate business interest. This legitimate interest is recognized by applicable legal regulations, which expressly permit the processing of personal data on this basis for direct marketing purposes. However, we remind you that you have the right to object to this processing of your data at any time, and you may do so through any of the means provided for in this clause. In any case, authorization to process data for this purpose is voluntary, and the user’s refusal would only result in them not receiving commercial information. However, if you provide us with your data to receive the newsletter, it will be processed based on your consent, which you express by filling out the form provided for that purpose.
How long will we process your data?
The data retention periods for the various processing activities will be:
- Personal data provided to manage membership applications and subscriptions or trials to the Directory will be retained for as long as the legal relationship between the company and the AECC remains in effect and, even thereafter, until any potential liabilities that may arise have expired and for as long as required by applicable regulations.
- Personal data provided for registration for our Congress, contests, or various AECC events will be retained until the conclusion of the activity. Subsequently, the data will be retained until any potential liabilities arising from the activity in question have expired.
- Personal data provided to submit requests, inquiries, or complaints will be retained for the time necessary to respond to them and definitively close them. Subsequently, they will be retained as a communication history, unless the data subject requests their deletion, for a maximum of one year.
- Personal data provided for the purpose of sending commercial communications will be retained indefinitely, until, if applicable, the user expresses a desire to have it deleted.
To whom will your data be disclosed?
Personal data will be treated confidentially and will be disclosed only to public authorities, in the cases provided for by law and for the purposes defined therein, and to financial institutions through which the management of collections and payments is carried out, where applicable.
We use tools for cloud-based data storage and for sending commercial communications via email. Such transfers are carried out under the Standard Contractual Clauses approved by the European Commission for international data transfers.
Processing of voice/image data in contests organized by the AECC
The AECC may take general photographs of the Congress and the contests it organizes, which will be used to publicize the AECC’s activities in various publications it owns, such as its website, Centros Comerciales magazine, advertising brochures, etc. By submitting entries and accepting the corresponding rules, you acknowledge the AECC’s right to record, reproduce, disseminate, and use, with respect to the candidates and winners of the AECC awards, without territorial or time limitations, through all written, spoken, and electronic media, in any form, by any means, and on any medium, the name, image, and voice of their individual representatives, for advertising, informational, and/or promotional purposes related to the AECC awards and the Congress, without any compensation. The legal basis for this processing is the performance of the contractual relationship underpinning participation in the Congress and the contest. Therefore, it is necessary to provide the data; otherwise, participation would not be possible. In light of the above, the data will be retained indefinitely for the stated purposes, unless you request its deletion. What about social
media?
If you become our friend or follower on social media, we will process your data to keep you informed of our activities and promotions through those channels. This data will be processed on the legal basis of your consent and will be retained for as long as you remain our friend or follower; you may revoke your consent at any time, although this will not affect the lawfulness of any processing carried out prior to such revocation. Providing data for this purpose is voluntary; however, if you do not do so, you will not be able to be a friend or follower on our social media platforms. The categories of data processed for this purpose are identifying data.
In cases where user registration is carried out via social media, the personal data we process will come from the relevant social media platform, to which the data subject will have previously provided such data for the purposes set forth in its corresponding privacy policies. The categories of data we will collect from the relevant social media platform are those listed on our registration form and which you have provided to that platform. If, in order to register on our website, more data than that provided by the social network is required, you must provide it additionally on our registration form, subject to the privacy conditions set forth in this clause.
What are your rights when you provide us with your data?
Any person has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where applicable, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
Under the conditions set forth in the General Data Protection Regulation, data subjects may request the restriction of the processing of their data or its portability, in which case we will retain it solely for the exercise or defense of legal claims.
Under certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. If you have given consent for a specific purpose, you have the right to withdraw it at any time, without this affecting the lawfulness of the processing based on consent prior to its withdrawal. In such cases, we will cease processing the data or, where applicable, cease doing so for that specific purpose, except for compelling legitimate grounds, or the exercise or defense of potential claims.
All the aforementioned rights may be exercised through the contact details provided at the beginning of this clause.
In the event of any violation of your rights, especially if you have not received a satisfactory response regarding their exercise, you may file a complaint with the Spanish Data Protection Agency (contact details available at www.agpd.es) or another competent supervisory authority. You may also obtain further information regarding your rights by contacting these bodies.
If you provide data regarding third parties, you assume the responsibility of informing them in advance of all provisions set forth in Article 14 of the General Data Protection Regulation under the conditions established therein and of having obtained their consent.
The AECC undertakes to use the personal data provided in accordance with the purposes indicated in this Data Protection Policy, respecting its confidentiality, as well as to comply with its obligation to safeguard it and implement all necessary measures to prevent alteration, loss, unauthorized processing, or access, in accordance with current data protection regulations.