Who is responsible for processing your data?


XL ROOTS
Calle las mercedes 28
48930 Getxo Vizcaya
B44713022

For what purpose do we process your personal data?


At Grupo Siguiente Destino, we process the information provided by data subjects to carry out the administrative, accounting, and tax management of the requested services, as well as to send commercial communications about our products and services.


How long will we keep your data?


The data will be kept until the data subject requests its deletion, and where applicable, for the years necessary to comply with legal obligations.
What is the legal basis for processing your data?
We indicate the legal basis for processing your data:

Contract execution: Provision of the requested services.
Legitimate interest of the Data Controller: Sending commercial communications
To which recipients will your data be disclosed?
The data will be disclosed to the following recipients:

Tax Agency, to comply with legal obligations.
Financial institutions, to issue the corresponding receipts.
Data transfers to third countries
No data transfers to third countries are planned.


What are your rights when you provide us with your data?


Any person has the right to obtain confirmation as to whether Grupo Siguiente Destino is processing personal data concerning them.

Data subjects have the right to access their personal data, request the rectification of inaccurate data, or, where applicable, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, data subjects may request the limitation of the processing of their data, in which case we will only keep it for the exercise or defence of claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, Grupo Siguiente Destino will stop processing the data, except for compelling legitimate reasons or the exercise or defence of possible claims.

You can exercise your rights in the following manner: by contacting the data controller’s address.

If you have given your consent for a specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

If you believe your data protection rights have been violated, especially if you have not obtained satisfaction in exercising your rights, you can file a complaint with the competent Spanish Data Protection Authority via its website: www.agpd.es.


How have we obtained your data?


The personal data we process at Grupo Siguiente Destino comes from the data subject.

The categories of data processed are:

Identification data
Postal and email addresses
Commercial information
No special categories of personal data are processed (data revealing ethnic or racial origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data aimed at uniquely identifying a natural person, health data, or data relating to a person’s sexual life or orientation).