Protection of personal data
Information related to the processing of your personal data and the exercise of the GDPR rights.
Personal data protection policy
Processing activities register (PAR)
Exercise of rights (GDPR)
Information for the interested parties to exercise your data protection rights
What is personal data?
Personal data is any information about an identified or identifiable natural person, both relating to their identity (name and surname, address, social security details, a photograph or video, etc.) and to their existence and occupations (education, work, illnesses, etc.) For example: postal addresses, e-mail accounts, ID card, sick leave documents, financial and tax information or union membership.
Data relating to a legal entity (address, company name, VAT number, etc.) are not considered to be personal data, and therefore the Data Protection Regulations are not applicable.
What are your data protection rights?
Data protection rights are those that employees, clients and users can exercise before TMB, free of charge, to have control over their personal data.
- Right of access
- Right of rectification
- Right of suppression (right to forget)
- Right to object
- Right to the limitation of processing
- Right to data portability
- The right to not be subject to automated individual decisions
- Who can exercise these data protection rights?
These rights may be exercised by the people concerned or by a person representing them (in the case of children under 14, the disabled, people over 14 if required by law, or where the person concerned voluntarily appoints someone to represent him or her).
In the case of a deceased person, the right of deletion may be exercised by the relatives with the organizations responsible for the files containing the person's data.
How can you exercise your data protection rights?
If you want to exercise your rights on any of this personal data, you can do so by following the steps below:
1. Provide a photocopy of your ID card or equivalent document proving your identity which is considered valid according to law. If acting through legal representation, it will also be necessary to provide the ID card and a document proving the representative's representation.
2. Fill in the form bellow to to request the exercise of your rights, indicating clearly and in detail your request
If you want to send this documents, send an e-mail to the address: firstname.lastname@example.org clearly indicating on the subject line "Exercise GDPR Rights". Attach the completed form, together with a copy of the documentation indicated in point 1.
You can also exercise your rights by mail at the following address: Carrer 60, number 21-23, sector A, Zona Franca, 08040 Barcelona clearly indicating on the envelope "Exercise GDPR rights". A filled out and signed copy of this form and a photocopy of the documents referred to in point 1 must be enclosed in the envelope.
We will answer your request to exercise your rights via the same method you used to communicate it.
We inform you that TMB will use your personal data in order to manage the exercise of your data protection rights in compliance with a legal obligation.