Art. 1 – Confidentiality Rules
The General Data Protection Regulation of 27 April 2016 (“GDPR”) has been applicable since 25 May 2018. It imposes strict rules and conditions on companies regarding the processing of personal data belonging to their clients and prospects, with the aim of protecting their privacy.
For this reason, we intend to provide you with clear and precise information about the processing of your personal data.
Art. 2 – Data Controller
The data controller responsible for your personal data is the person in charge of the website you used and to whom you provided your data.
Art. 3 – Legal Basis for Data Processing and Use
We may only use your personal data for legitimate and necessary purposes (Article 6 of the GDPR). In practice, this means that we process your personal data, whether in electronic format or not, for legitimate purposes within the context of contractual, commercial, and security-related relationships. These purposes include, among others:
- Communication of information, offers, and prospecting materials
- Communications related to the execution of a contract
Art. 4 – What Constitutes Personal Data
Personal data includes any information relating to you that can be used to identify you. Anonymous data, which does not identify you, is not considered personal data. Your personal data may therefore include:
- Identity data (surname, first name, address, tax ID, etc.)
- Personal contact data (telephone number, personal email, etc.)
- Financial data (bank account number, billing details, etc.)
- Data related to the execution of a contract with us (contract details, billing address, professional data, etc.)
- Data related to the use of electronic equipment such as computers (passwords, login data, electronic identification data, billing details, etc.)
Sensitive data: The processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, as well as the processing of genetic data, biometric data for uniquely identifying a natural person, or data concerning a person’s sex life or sexual orientation is strictly prohibited. We are committed to fully complying with this prohibition.
How do we use your information? With whom do we share your information?
Art. 5 – Source and Origin of Personal Data
In general, the data we hold comes directly from you. If you choose not to provide the required or necessary information, you may lose access to certain benefits and/or we may decide to terminate the services we provide to you.
Art. 6 – Access to Personal Data
Your data is primarily used internally. For certain legitimate reasons, your personal data may be disclosed to or processed by third parties. However, we ensure that our subcontractors comply with GDPR requirements. Their data processing activities are governed by a strict legal framework.
Art. 7 – Data Retention Period
We take the necessary measures to ensure that the retention of personal data for the purposes described above does not exceed legally permitted periods.
Art. 8 – Your Rights
We are committed to taking appropriate technical and organisational measures to ensure the security of personal data processing (Article 32 of the GDPR).
Right of access (Article 15 GDPR) You have the right to access your personal data and to obtain or request a reasonable copy of it.
Right to rectification (Article 16 GDPR) You may request the correction of inaccurate data.
Right to erasure (Article 17 GDPR) and Right to restriction of processing (Article 18 GDPR) We commit to deleting your personal data, particularly in the following cases:
- The data is no longer necessary for the purposes for which it was collected or processed
- You object to the processing
- The personal data has been unlawfully processed
Right to lodge a complaint (Article 77 GDPR) You have the right to file a complaint with the Spanish Data Protection Agency (AEPD) at any time if you believe that the processing of your personal data constitutes a violation of the GDPR.
Art. 9 – Our Commitment
Our goal is to implement security processes to protect stored data against unauthorised access, misuse, manipulation, unlawful or accidental destruction, and accidental loss.
Art. 10 – Procedure in Case of a Data Breach
There is always a possibility that personal data processed within the context of a contractual relationship may fall into the wrong hands due to human error, computer error, etc. When a breach poses a high risk to the rights and freedoms of individuals, we will immediately inform you of the facts and the measures taken. We will ensure that the Spanish Data Protection Agency is notified within 72 hours of becoming aware of the breach, unless the breach does not pose a high risk to individuals’ rights and freedoms (Articles 32–34 GDPR).
Your Acceptance
Art. 11 – Consent
You give your explicit and unequivocal consent to the processing of personal data as described in this Privacy Policy. You have the right to withdraw your consent at any time by submitting a written request. We reserve the right to modify this Privacy Policy.