In compliance with the provisions of Article 14 of EU General Data Protection Regulation 2016/679 (hereinafter, GDPR), we inform users of the processing that are carried out on the personal data related to sole traders when they refer to them only in said condition and in the context of their commercial activity.
Atlax Risk Management DAC processes personal data of the public census of sole traders in order to make reports on their economic activity.
The personal data that is processed corresponds to the category of data for the identification and basic characteristics of the business or business activity carried out, the business contact data, comparative evaluations, estimates and macroeconomic valuations, statistics of the economic evolution of the business that operates and publications referring to the business as a self-employed person, appearing in bulletins and public boards on notifications of social security and tax agency, granting of public subsidies to the business activity and awarding of the contracting of the public sector in favor of the company, business or commerce that explodes. In no case, there are data in this processing related to the personal, intimate or family sphere of the data subjects, nor are data belonging to special categories of articles 9 and 10 of GDPR.
The source of the personal data is the Cameral Public Census regulated in the basic Spanish Law 4/2014, of April 1, for Official Chambers of Commerce, Industry, Services and Navigation, provided by the Spanish Chambers of Commerce through of the entity CAMERDATA S.A.. Likewise, the data can come from the official bulletins and bulletin boards published by the different public administrations (Spanish “Official Bulletin of the State”, Regional and Provincial Bulletins, etc.).
The rest of the data that can be viewed in the Reports, are estimates and valuations of the economic activity of the business performed, never referring to the natural person and calculated on statistical bases and comparative sectoral data of business and commercial activities.
Eventually, the data may come from the data subjects after inquiries made directly to the person by telephone or personal interview.
The processing is based on the legitimate interest (Art. 6.1 f) GDPR) of Atlax Risk Management DAC to know the information required by its customers. Likewise, the lawful base of the processing could the articles 6.1 b) and 6.1 c) when the information allows our customers to comply with legal and contractual or pre-contractual obligations. For example, to allow these customers to comply with the obligations of information and due diligence imposed on the prevention of money laundering and terrorism financing.
These data are incorporated into all our products and information solutions on economic activities, companies or businesses carried out by the natural person engaged in an economic activity, regardless of their legal form, upon request of any of our customers that requires such information.
This information can only be accessed by our clients once they have registered, selected and paid for the business information services. Users of different information directories, such as Expansion's business directories, can also access this information at www.expansion.com/directorio-autonomos.html and “Empresia” in www.empresia.es
Atlax Risk Management DAC will keep the processing of these data on an annual basis provided they are published in the latest edition of the cameral census provided by the Chambers of Commerce. All data processed from previous versions that do not appear in the last edition of said census will be canceled.
Information regarding publications that appear in official bulletins is processed during the five years following their obtaining from said sources, being canceled after this period.
The existence of the legitimate interest for the treatment of the data of both Atlax Risk Management DAC and its customers to whom information services are provided, is based on the need to know the identifying data of the commercial and business activity developed by the natural person
These business information services are provided by Atlax Risk Management DAC as a company with a recognized presence in the infomediary market in the context of the necessary legal certainty demanded by the parties of any contractual relationship in their commercial operations. Your contribution to the society in general can be understood as of general and public interest as they are services that help and guarantee the legal security of thousands of transactions that are carried out daily in the market and that in some cases can respond to the need of the Atlax Risk Management DAC customers' compliance with a legal obligation. It also underlies a clear legitimate interest in Atlax Risk Management DAC customers who would need to know this information as part of the possible contractual or pre-contractual relationship
You have the right to request access to the personal data that is processed, as well as to request the rectification of erroneous data. Likewise, you can contact Atlax Risk Management DAC to exercise the rights of deletion of this data, or to limit its use in the future, or oppose the indicated processing, in the latter case there must be a reason, referring to a specific personal situation which justifies it.
For the exercise of any of these rights you must attach in all cases a copy of the document that proves your identity (ID, passport or similar).Para el ejercicio de cualquiera de estos derechos usted debe adjuntar en todos los casos copia de un documento que acredite su identidad
For this purpose, you can send your request to:
By e-mail: dpo@atlax360.com
By post: Olympia House, Office Suite 3C, 62 Dame Street, D02 X243, Dublin 2, Ireland
In any case, you have the right to file a claim with the competent Irish control authority: Data Protection Commission.
In compliance with the provisions of Article 14 of EU General Data Protection Regulation 2016/679 (hereinafter, GDPR), we inform you on the processing that are carried out on the data of natural persons who perform a function within a legal person, as well as their partners or shareholders.
Atlax Risk Management DAC processes this personal data to prepare business reports on the business activity of different companies, which are subsequently marketed to clients interested in this information.
The data in question are limited to information on the composition of the governing body of the legal entity and the appointments made by it, either to hold a management position or to perform any other function within the entity.
Data are also processed on the composition of the shareholding structure of the capital companies.
This data is used by our clients for any purpose of their own based on their legitimate interest, as a further piece of information about the company that they consult in our business reports, always within the scope of the performance of their function in the sphere of the capital company.
The categories of personal data processed are limited to only to the person's name and surname, the position or function performed, the name of the company where that office or function is held and the date of publication of the appointment, together with the actual image of the publication in the Bulletin. Under no circumstances does this processing include data relating to the personal, intimate or family sphere of the data subjects, or special category personal data as referred to in Articles 9 and 10 of the GDPR.
The source of the personal data is in all cases the Official Gazette of the Commercial Registry (hereinafter referred to as BORME) and the balance sheet reports filed by the companies themselves with the Commercial Registries, which are consulted on behalf of clients interested in obtaining this information. This information is accessible to any citizen on the basis of the principle of registry publicity.
Publications of appointments that appear in the media, in particular in newspapers, are also used.
Eventually, the data may come from the data subjects after inquiries made directly to the person by telephone or personal interview.
The data may also have been provided by the Enterprises themselves or in census publications and yearbooks published by polling companies.
This processing is carried out without the need to obtain your prior consent, based on the legitimate interest in knowing this information required by Atlax Risk Management DAC's Clients according to article 6.1 f of the GDPR, as well as in sections b) and c) of the same precept, for example, to allow our clients to comply with obligations of verification of formal information and beneficial ownership imposed in the legislation on the prevention of money laundering and terrorist financing.
This information will only be accessible to our customers and users once they have registered, selected and paid for business information services.
Atlax Risk Management DAC shall keep the personal data published in the BORME until the official publication of their dismissal or resignation in the BORME. However, it will maintain the processing of the data of the dismissed Administrators until the legal limitation period for the exercise of possible criminal and social liability actions that may be brought by those of our clients who believe they have suffered damage as a result of their management.
In the case of data from yearbooks and censuses, the processing of the data ceases as soon as no reference to the data appears in the latest edition provided.
The legitimate interest as a basis for the processing carried out by Atlax Risk Management DAC, as well as that of the clients to whom we provide information services, is based on the need to know the identification and composition data of the governing bodies of the legal entities considered as shareholders, or which participate in their ownership or have the capacity to represent them, as well as the functions that they perform in the same, always as one more piece of information offered in the different information products and services marketed by Atlax Risk Management DAC and always and only when the data is public because it has appeared in a source accessible to the public or because of the principle of registry publicity.
These business information services have been provided in the infomediary market for decades, always in the context of the necessary legal certainty demanded by the parties to any contractual relationship in their operations in the market. Their contribution to society can be understood to be of general and public interest, as they are services that help and guarantee the legal security of the thousands of transactions that are carried out daily in the market and that in some cases even respond to the need to comply with legal regulations such as, for example, the regulation of the prevention of money laundering. There is also a clear legitimate interest of Atlax Risk Management DAC's clients in knowing this information as part of their right to exercise civil and criminal liability actions against the administrators in accordance with current legislation.
Atlax Risk Management DAC does not make automated decisions nor elaborate data subject profiles.
Data subjects have the right to request access to their personal data that is processed, as well as to request the rectification of erroneous data. Likewise, you can contact Atlax Risk Management DAC to exercise the rights of deletion of this data, or to limit its use in the future, or oppose the indicated processing, in the latter case there must be a reason, referring to a specific personal situation which justifies it.
For the exercise of any of these rights you must attach in all cases a copy of the document that proves your identity (ID, passport or similar).
For this purpose, you can send your request to:
By e-mail: dpo@atlax360.com
By post to: Atlax Risk Management Designated Activity Company, Olympia House, Office Suite 3C, 62 Dame Street, D02 X243, Dublin 2, Ireland
In any case, you have the right to file a claim with the competent Irish control authority: Data Protection Commission.