BFA – Business Factory Auto

Privacy Policy

In compliance with current data protection regulations, Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (General Data Protection Regulation – GDPR) and the Spanish Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD, Law 3/2018 of December 5), we inform you of the following Personal Data Protection Policy regarding the processing of personal data.

Data Controller

The data controller is the legal entity that determines the purposes and means of personal data processing. In other words, the controller decides how and for what purposes personal data is processed.

For the purposes of this Privacy Policy, the data controller is:

  • Company name: Fundación Cluster de Automoción y Movilidad de Galicia (CEAGA)
  • Tax ID (NIF): G-36.983.575
  • Registered address: Avda. Citroën, 3 y 5 – Edificio Zona Franca 1st Floor – 36210 Vigo, Spain
  • Email: ceaga@ceaga.com
  • Phone: +34 986 213 790
  • Activity: Business association.

What Personal Data We Process and How We Protect It?

Personal data refers to any information relating to an identified or identifiable natural person. For the purposes described in this Privacy Policy, we collect and process personal data depending on the services you request or the contractual relationship you maintain with our entity. Our organization is committed to treating personal data with full confidentiality and applying appropriate physical, technical, and organizational security measures to protect personal data. 

You guarantee the truthfulness, accuracy, currency, and authenticity of the personal data you provide and agree to keep it duly updated.

Processing of “Contacts and Interested Parties” Data

1. What personal data do we process?
Identification data: name, address, phone number, email address. 

2. Why do we process your personal data?
We process the personal data you provide in the contact form for managing contacts and individuals interested in the BFA project. We may also use data for promotional purposes with your explicit consent.

Personal data will be kept as long as the commercial relationship continues. If you request deletion, your data will be removed from our contact database.

3. Legal basis for data processing:
Your express consent. 

4. Who receives your data?
Your personal data will not be transferred to any third party and no international transfers are planned.

Processing of “External Collaborators” Data

1. What personal data do we process?

  • Identification data: name, ID, address, phone, email
  • Financial data: bank account
  • Professional and academic data: position, qualifications
  • Transaction data: products and services delivered

2. Why do we process their data?
For management of external collaborators (teachers, project evaluators, tutors), contractual, accounting, administrative, payment, and fiscal obligations.

Personal data will be retained during the commercial relationship and may remain for the legally required period for legal/fiscal compliance before deletion.

3. Legal basis:
Execution of a contract and compliance with legal obligations.

Personal data may be shared with Spanish fiscal and social security authorities and with entities co-financing BFA (IGAPE, Consorcio de la Zona Franca de Vigo, Vigoactivo, Stellantis, GAIN, XESGALICIA) with explicit consent. Participant photos may also be published on websites and networks with consent.

 

Processing of “BFA Project Participants” Data

1. What personal data do we process?
Identification and professional/academic data. 

2. Why do we process personal data?
For managing data of participants submitting projects on the BFA platform. 

Personal data will be kept unless the person requests cancellation, in which case it will be deleted from our database.

Legal basis:
Consent and contract execution.

Who receives your data?
Shared with entities co-financing the BFA project with consent and may include publication of participant photos with consent.

 

Your Rights

In accordance with applicable data protection law, you have the right to:

  • Be informed about the use and processing of your data
  • Access your data
  • Rectify incorrect or incomplete data
  • Request deletion of data
  • Limit processing under certain conditions
  • Data portability
  • Object to processing, including profiling
  • Not be subject to automated decisions
  • Withdraw consent at any time
  • Submit a complaint to a supervisory authority (e.g., Spanish Data Protection Agency) 

You may exercise these rights free of charge by contacting us or via email at ceaga@ceaga.com with proof of identity. Additional information is available on the Spanish Data Protection Agency website.

Intellectual Property

The design of this portal and its source code, logos, trademarks, and distinctive signs are owned by Fundación Cluster de Automoción y Movilidad de Galicia (CEAGA) and are protected by intellectual property rights. 

Texts, data and graphic designs belong to CEAGA or content providers and may not be modified, copied, transformed, reproduced, distributed, or transmitted without express authorization.