As part of the forms used for the collection of personal data, BONDITEX SL shall include the required information for compliance with the duty to notify the data subject, as set out in articles 13 and 14 of the General Data Protection Regulation (hereinafter GDPR), and shall also comply with the principle of lawfulness of processing (article 6 of the GDPR).
To facilitate the greater requirement for information provided to the data subject whose personal data is to be processed, the information can be presented by adopting a layered or tiered information model, in line with the fact that the information must be provided in clear, simple language and in a concise, transparent, intelligible and easily accessible form.
Article 11 of Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights regulates the basic information required in a first layer.
The layered information consists of:
- Presentation of basic information (1st layer): this consists of presenting basic information at a primary level, in summary form, at the same time and in the same medium in which the data is collected.
- Reference to additional information (2nd layer): This consists of presenting detailed and complete information in an appropriate, structured, concise and precise way. The way in which this additional information is presented depends on the characteristics of the medium used to inform.