Privacy Policy

Data Controller. The data processed in the present form will be processed by the company MUSEO NACIONAL DEL PRADO DIFUSIÓN, S.A.U, S.M.E. with CIF number A84888056 and address at Calle Ruiz de Alarcón, 13, 28014, Madrid as the data controller.

Purpose. The purpose of the data collected is the management of users of the website, as well as the management of electronic communication.

Legitimacy. Consent given by ticking the corresponding checkbox. Your personal data will be treated according to our privacy policy.

Refusal to grant consent. Failure to enter the data marked as mandatory on the form will result in your request not being processed.

Recipients. Your data will not be disclosed to any company, unless legally required.

Rights. You can access, rectify and delete your data, request data portability, as well as the limitation or opposition to its processing; you have the right not to be subject to automated decisions, as well as to obtain clear and transparent information about the processing of your data, as explained in the additional information.

Right to file a complaint before the Control Authority (AEPD). From MUSEO DEL PRADO DIFUSIÓN, S.A.U, S.M.E. we make every effort to comply with the data protection regulations, since it is a valuable asset for us.

Additional information. Additional and detailed information on data protection can be found on our website.

Who is responsible for the processing of your data?

• Company name: MUSEO NACIONAL DEL PRADO DIFUSIÓN, S.A.U., S.M.E.
• VAT NUMBER: A84888056
• Address: calle de Ruiz de Alarcón, 13 - 28014, Madrid
• Telephone: 91 429 84 51
• E-mail: info@museodelpradodifusion.es

For what purpose will we process your personal data?
At MUSEO NACIONAL DEL PRADO DIFUSIÓN, S.A.U, S.M.E. we will treat your information for:

• To maintain the commercial relationship and the provision of the contracted service.
• Manage e-mail communications with interested parties.

For how long will we keep your data?
The personal data you provide will be kept for as long as the current business relationship is maintained. However, in order to have the maximum transparency with you, we indicate that the general computations with which we work are as follows:

• Accounting, tax and labor: six (6) years.
• Labor: ten (10) years.

However, despite the existence of these general deadlines, we inform you that we will periodically review our systems to proceed to delete those data that are not legally required.

What is the legitimacy for the processing of your data?
According to the purposes of the collection of our data, the processing of your data is necessary for:

1. To manage the business relationship you have entered into and contracted with us. 
        a. Execution of a contract (enabled by Article 6.1.b GDPR) 
        b. Consent of the data subject (enabled by Article 6.1.a RGPD).
2. Manage email communications with the data subjects. 
        a. Consent of the data subject (enabled by Article 6.1.a RGPD) 
        b. Legitimate interest (enabled by Article 6.1.f RGPD).

All data collected are necessary for the provision of the service. However, those data marked with an asterisk (*) are mandatory. If the mandatory data are not provided, MUSEO DEL PRADO DIFUSIÓN, S.A.U, S.M.E. will not be able to provide you with the contracted service.

What is the legitimate basis for the processing of your personal data?
Your personal data will be processed lawfully in accordance with your consent and/or the contractual relationship entered into between you and MUSEO DEL PRADO DIFUSIÓN, S.A.U, S.M.E.

What rights do I have regarding data protection?
You can exercise any of the following rights by contacting us at the postal address Calle Ruiz de Alarcón, 13, 28014 Madrid or at the e-mail address info@museodelpradodifusion.es. In any case, according to current legislation, you have recognized the:

• Right to request access to your personal data.
• Right to request its rectification or suppression.
• Right to request the limitation of processing.
• Right to object to the processing.
• Right to portability.
• Right of deletion/Right to be forgotten.

You can use the following forms to exercise your rights in an easier way. You can download them by clicking here. Additionally, you can file a complaint with the Spanish Data Protection Agency (AEPD). More information in section 7 of this page.

To which recipients will your data be communicated?
Tus datos no serán comunicados a terceras empresas. Asimismo, te informamos de que tus datos no se transferirán internacionalmente a ningún tercer país.

The personal data used by MUSEO NACIONAL DEL PRADO DIFUSIÓN, S.A.U, S.M.E. comes from the interested party.

What categories of data do we handle?
The categories of personal data that are processed:

• Identification data 
       First name 
       Last name 
       ID card / NIE / passport or equivalent document 
       Postal addresses 
       E-mail addresses 
• Financial information 
       Bank account number 
       Credit card number

The data collected are only those derived from the service contracted and/or provided to the user.

From MUSEO NACIONAL DEL PRADO DIFUSIÓN, S.A.U, S.M.E. we make every effort to comply with the data protection regulations, since it is a valuable asset for us. However, we inform you that in the event that you understand that your rights have been undermined, you can file a complaint with the Spanish Data Protection Agency (AEPD), located at Calle Jorge Juan, 6, 28001 Madrid. More information about the AEPD, at www.agpd.es.