▸ Business name: FONESTAR SISTEMAS, S.A.

▸ C.I.F./N.I.F.: A28780443

▸ Registered office: D. Ramón de la Cruz, 64, 28001 Madrid

▸ Listed in the Madrid Register, Page M 156950, Folio 64, Volume 9770, Section 1.

▸ Telephone: 942254555

▸ E-Mail: web@fonestar.com

▸ Domain name: www.fonestar.com


In accordance with the provisions of EU Regulation 679/2026 and the LOPD, we inform you that the personal data you provide us with and those that are generated during the course of the provision of care are processed for the following purposes:

The accounting, fiscal and administrative management of clients, the maintenance of the commercial relationship and the sending of communications to facilitate contact and the maintenance of the relationship, by any means that you have provided us with.

Managing contacts, carrying out commercial communication actions and responding to queries and suggestions.

The processing of orders and applications.

Enable the participation in personnel selection processes of the person concerned.

The disclosure and diffusion of the entity’s activities, and the sending of commercial communications.

Video surveillance of facilities.

How long will we keep your data?

The personal data provided shall be kept for as long as their deletion is not requested by the person concerned, or whoever legally acts as his or her legal representative, and for as long as they are necessary – including the need to keep them during the applicable limitation periods – or relevant for the purpose for which they were collected or recorded.

The conservation of the data will be conditional on the legal obligation that FONESTAR SISTEMAS, S.A. has to conserve them. Once these periods have expired, the data will be destroyed or erased, and the deletion, elimination or destruction will be carried out in such a way that the information contained in the media cannot be recovered.


The legal basis for the processing of your data is the consent given by the data subject.

It is also a legitimate reason for the processing of data because it is necessary for the performance of a contract of sale or provision of services to which the data subjects are party or for the implementation, at their request, of pre-contractual measures (art. 6.1.a and b GDPR). This consent may be revoked at any time.

A cause for legitimacy is the fulfilment of a legal obligation for the data controller, for example to comply with the provisions of the law on patient autonomy and other applicable health regulations.

Legitimate interest also constitutes a legitimate ground for processing in particular with regard to Video Surveillance.

To which recipients will your data be communicated?

As a consequence of the management of the authorised purposes, your data may be communicated to entities or persons directly related to FONESTAR SISTEMAS, S.A. and the services provided. These individuals or entities will be linked to the provision of a service by a contract with the entity, without being able to use the data for other purposes.

Your data will not be transferred to any entity without your consent, except for the transfers provided for by law. In this regard, your express consent will be requested for the transfer of your data to any other entity.

No international transfers of data outside the European Union or to entities that do not comply with the data protection standards set out in EU Regulation 679/2016 are foreseen.

Where does your data come from?

The personal data processed by FONESTAR SISTEMAS, S.A. are provided by the person concerned, or by the company or entity in which they provide their services.

What categories of data does FONESTAR SISTEMAS, S.A. process?

FONESTAR SISTEMAS, S.A. will process the data you provide us with, which may be of the following categories:

Identification and contact details


Economic, financial and insurance data

Commercial information

What are your rights?

Any person has the right to obtain confirmation as to whether or not FONESTAR SISTEMAS, S.A. processes personal data concerning them.

Data subjects have the right to access their personal data and to obtain a copy of the personal data undergoing processing, to update it, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. FONESTAR SISTEMAS, S.A. shall cease to process the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.

Also in certain circumstances, provided for in Article 18 RGPD, data subjects may request the restriction of the processing of their data, in which case FONESTAR SISTEMAS, S.A. will process them, with the exception of their storage, with the consent of the data subject or for the formulation, exercise or defence of claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a specific Member State.

If applicable, as a consequence of the application of the right to erasure or objection to the processing of personal data in the online environment, data subjects have the right to be forgotten according to the jurisprudence of the Court of Justice of the EU.

Under the right to portability, data subjects have the right to obtain the personal data concerning them in a structured, commonly used and machine-readable format and to transmit it to another party.

Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or significantly affects him or her in a similar way, subject to the exceptions provided for in Article 22.1 GDPR.

The data subject has the right to the erasure of his or her data, due to the disappearance of the purpose for which the data was processed or collected, due to revocation of consent when this is what legitimises the processing, or for the other reasons contained in article 17RGPD. Erasure will be carried out by proceeding to the high-level erasure of the data contained in automated media and the physical destruction of non-automated media.

How can rights be exercised?

By means of a letter, always accompanied by a copy of the DNI or other document that accredits the identity of the interested party, addressed to the addresses indicated in the heading, addressed to the data protection officer of the entity.

What channels of complaint are available?

If you consider that your rights have not been duly addressed, you have the right to file a complaint with the Spanish Data Protection Agency, whose contact details are: Telephone: 901 100 099 Postal Address: C/ Jorge Juan, 6 Madrid

Last updated on 13 March 2020