GDPR

Our data-protection commitment

CRITIC S.L. applies Regulation (EU) 2016/679, Spanish Organic Law 3/2018 and other applicable Spanish privacy and data-protection rules.

Processing principles

• Lawfulness, fairness and transparency.
• Purpose limitation and data minimisation.
• Accuracy and updating.
• Storage limitation.
• Integrity, confidentiality and accountability.

Organisational and security measures

Access controls, confidentiality, backups and technical measures proportionate to risk are applied. Access is limited to staff and providers who need it for their duties.

Processors

When technology, hosting, email or support providers are involved, access is governed by contracts and appropriate safeguards. International transfers are not made without a valid legal basis and suitable safeguards.

Rights and complaints

Requests may be sent to critic.canarias@gmail.com, stating the right concerned and providing sufficient information to verify identity. You may also contact the Spanish Data Protection Authority.