Data controller
PEFC Spain (Spanish Association for Forest Sustainability), whose registered office is in Spain and whose contact email is CertificadosGFS@pefc.es, is the data controller for the personal data collected through this form.
Purpose of processing
Your data is processed solely to manage and handle your PEFC trademark licence application, maintain the related correspondence and meet the legal obligations arising from the certification scheme.
Legal basis
Processing is based on the explicit consent you give when submitting the form, on the performance of the contractual relationship arising from the licence and on compliance with applicable legal obligations.
Data retention
Data is retained for as long as needed to handle the application and maintain the licence, and for a maximum of 72 months after the relationship ends, in line with legal obligations and PEFC Spain's internal policies. Once that period expires, records are flagged for deletion and permanently removed after a 30-day grace period.
Recipients
Data is not shared with third parties except where legally required. Technology providers supporting PEFC Spain may access it under the corresponding data processing agreement.
Your rights
You may exercise the rights of access, rectification, erasure, objection, restriction and portability by writing to CertificadosGFS@pefc.es. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) if you believe the processing does not comply with the applicable regulations.
Security
PEFC Spain applies appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of the personal data processed.