Website Privacy Policy of Artistas Intérpretes o Ejecutantes, EGDPI, AIE
This Privacy Policy regulates the processing of Personal Data carried out by Artistas Intérpretes o Ejecutantes, EGDPI, AIE, with registered office at Calle Torrelara, 8, 28016, Madrid (hereinafter referred to as “AIE“) through the website www.aie.es (hereinafter, the “Website“).
- Identity and Contact Details of the Data Controller
In compliance with Regulation (EU) 2016/679, General Data Protection Regulation (“GDPR”), and Organic Law 3/2018, on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDGDD”), we inform you that the personal data collected through the Website will be processed by AIE confidentially and will be incorporated into a processing activities register owned by AIE.
If you have any questions or wish to make any queries regarding data protection, you may contact the Data Protection Officer (“DPO”) of AIE via email at: dpo@aie.es.
- Purposes of Processing and Legal Basis
AIE will process the personal data collected through the Website for the following purposes:
| Purpose of Processing | Legal Basis (Article 6 GDPR) | Processed Personal Data | Data Recipients | Retention Period |
| Sending commercial communications or newsletters. | Consent (Art. 6.1.a GDPR). | Email, contact preferences. | Messaging services or delivery platforms. | Until consent is withdrawn or unsubscribed. |
| Management of assistance requests. | Consent (Art. 6.1.a GDPR). | Name, surname, ID document, date of birth, address, email, phone number, membership number, professional, family, banking, and financial data, and data justifying the request. | Not shared with third parties unless legally required. | For the duration of the contractual relationship and subsequently for the necessary period to comply with legal obligations. |
| Personal data fields marked with an asterisk (*) on the Website’s forms are mandatory. If the User does not provide the required information, AIE may deny the corresponding service. | ||||
| Purpose of Processing | Legal Basis (Article 6 GDPR) | Processed Personal Data | Data Recipients | Retention Period |
| Course registration through online or physical support. | Performance of a contract (Art. 6.1.b GDPR). | Name, surname, email, ID number (if applicable), membership number, and contact phone number. | Not shared with third parties unless legally required. | For the necessary time to address the request. |
| Processing requests related to intellectual property rights. | Performance of a contract (Art. 6.1.b GDPR). | Name, surname, professional data. | Tax administration. | For the duration of the contractual relationship and subsequently for the necessary period to comply with legal obligations. |
| Estate management in case of decease. | Performance of a contract (Art. 6.1.b GDPR). | Name, surname, address, succession documentation (will, death certificate), tax data. | Not shared with third parties unless legally required. | For the duration of the contractual relationship and subsequently for the necessary period to comply with legal obligations. |
| Legal management and services related to AIE. | Performance of a contract (Art. 6.1.b GDPR). | Name, surname, ID document, professional data, address. | Not shared with third parties unless legally required. | For the duration of the contractual relationship and subsequently for the necessary period to comply with legal obligations. |
| Management of rights administration and payments. | Performance of a contract (Art. 6.1.b GDPR). | Name, surname, ID document, date of birth, address, email, phone number, professional data, banking data. | Not shared with third parties unless legally required. | For the duration of the contractual relationship and subsequently for the necessary period to comply with legal obligations. |
| Registration and access to the AIE Virtual Office. | Performance of a contract (Art. 6.1.b GDPR). | Name, surname, email, access credentials. | Not shared with third parties unless legally required. | While the user remains registered or until they request deregistration. |
| Purpose of Processing | Legal Basis (Article 6 GDPR) | Processed Personal Data | Data Recipients | Retention Period |
| Compliance with tax obligations related to rights settlement. | Compliance with a legal obligation (Art. 6.1.c GDPR). | Name, surname, address, tax residence, economic data. | Tax administration. | For the time established by tax regulations. |
| Administration of intellectual property rights. | Compliance with a legal obligation (Art. 6.1.c GDPR). | Name, surname, address, tax residence, ID document, contact phone number, banking data. | Tax administration. | During the contractual relationship |
- Categories of Processed Data
AIE processes the following categories of personal data:
- Identification data: Name, surname, ID/NIF, postal address, email, phone number.
- Professional data: Affiliation, type of managed rights, repertoire data, and financial data related to rights distribution.
- Contact data: Email, address, and phone number.
- Tax data: Fiscal residence and other necessary data to comply with tax obligations.
- Other: Other data that justifies the request made.
- Data Retention Period
Personal data will be retained:
- For the time necessary to fulfil the indicated purposes. If compliance with a legal obligation applies, data may be retained for the period established by the applicable regulations.
- Once the relationship with the data subject ends, data will be blocked for a period of five years exclusively to address potential legal liabilities.
- Data will be deleted at the end of the blocking period unless there are ongoing administrative or judicial proceedings.
- Security Measures
AIE guarantees the confidentiality, integrity, and availability of personal data by implementing appropriate technical and organisational measures:
- Risk assessments associated with data processing.
- Encryption measures, access control, and periodic audits.
- A protocol to manage potential security breaches.
- Third-Party Access to Data
AIE may allow access to personal data to subcontracted entities for the following purposes:
- Website development and maintenance and management tools.
- Provision of web hosting services and technical support.
- Resolution of technical incidents related to the Website.
- Messaging services or delivery platforms.
Additionally, in compliance with legal obligations, AIE may transfer data to competent authorities and legitimate third parties, in accordance with applicable regulations.
AIE ensures that these entities comply with applicable data protection regulations.
- Rights of Data Subjects
The User may exercise the following data protection rights:
| Right | Description |
| Access | Request information about the personal data processed by AIE. |
| Rectification | Request the correction of inaccurate or incomplete data. |
| Erasure | Request the deletion of processed personal data. |
| Restriction of Processing | Request the restriction of data usage in certain circumstances. |
| Data Portability | Request the transfer of personal data to another controller. |
| Objection | Object to the processing of personal data for specific purposes. |
To exercise these rights, please send a request to dpo@aie.es. If you consider that AIE has infringed the regulations, you have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es).
This Privacy Policy will be updated periodically to reflect regulatory or processing changes. Please consult the latest version at www.aie.es/privacy.