GDPR Privacy Policy

What processing do we carry out with your personal data?

In compliance with Regulation (EU) 2016/679 and the Organic Law on the Protection of Personal Data, we inform you that your personal data may be subject to some of the following processing:

• TR04 – Advertising campaigns
  Legal basis: Law 34/1988, of November 11, General Advertising Law.
• TR08 – Gather the opinions of interested parties
  Legal basis: Regulation (EU) 2016/679 on data protection and LOPD.
• TR03 – Selection of own personnel
  Legal basis: Royal Legislative Decree 3/2015, of October 23, approving the revised text of the Employment Law.
• TG01 – Accounting and bookkeeping management, as manager
  Legal basis: Royal Decree 1514/2007, of November 16, regulating the General Accounting Plan.
• TG25 – Data collection for self-management of tax returns
  Legal basis: Law 58/2003, of December 17, General Tax Law.
• TG12 – Own labor management: data collection
  Legal basis: Royal Legislative Decree 1/1994, of June 20, approving the Consolidated Text of the General Social Security Law.
• TR09 – Assurances on technical and organizational measures in applied software
  Legal basis: Regulation (EU) 2016/679 on data protection and LOPD.
• TE08 – Protection of Personal Data
  Legal basis: Regulation (EU) 2016/679 and Organic Law 3/2018.
• TE02 – Occupational Risk Prevention
  Legal basis: Law 31/1995, of November 8, on the prevention of occupational risks.
• TE07 – Document Destruction
  Legal basis: Regulation (EU) 2016/679.
• TV01 – Sales / Service Provision
  Legal basis: Commercial and Tax Legislation.
• TE03 – Transport and/or package delivery service
  Legal basis: Royal Decree of August 22, 1885, publishing the Commercial Code.
• TR05 – Emails
  Legal basis: Commercial Code and other applicable legislation.
• TR01 – Information requests received
  Legal basis: Commercial Code and other commercial provisions.
• TR07 – Management of incidents and/or security violations
  Legal basis: Regulation (EU) 2016/679 on data protection and LOPD.
• TE04 – Management of own legal affairs
  Legal basis: Applicable commercial and labor legislation.
• TE01 – Maintenance of computer systems
  Legal basis: Commercial Code.

Responsible Who are we?

We are responsible for the processing of your data. Therefore, both data subjects and the competent authorities are hereby expressly, precisely, and unequivocally informed of the following aspects regarding the data controller.

Purposes: What do we use your personal data for?

In this organization, we may process your personal data exclusively for the purposes indicated below:

• Ensure that all necessary technical measures are being implemented to properly manage personal data with the software used.
• Sending commercial and/or advertising information by email.
• Management of information requests received from the interested party about our products or services.
• Exclusive management of internal incidents detected in compliance with GDPR requirements.
• Conduct advertising campaigns to promote our services and/or products.
• Gather the opinions of interested parties.
• Selection of personnel to fill the necessary job vacancies.
• Comply with all the requirements set forth in the Occupational Risk Prevention Law.
• Shipping of packages and correspondence.
• Manage any legal issues affecting the company.
• Manage, maintain, and repair computer storage systems.
• Actions to carry out one's own labor management.
• Actions to carry out your own tax and accounting management.
• Comply with the principle of limiting the retention period for personal data.
• Compliance with the requirements of Regulation (EU) 2016/679 and Organic Law 3/2018.
• Administrative Management of private clients.
• Carry out the sale or provision of the contracted service.
• A commercial or user profile may be created based on the information provided or obtained. You are expressly informed that, under no circumstances, will profiles be created using the data of a minor.
• The personal data you provide will be retained for the duration of the contractual relationship or, where applicable, until you exercise your right to object or withdraw the consent granted. To do so, you can visit the relevant section on our website or send an email to the address indicated in the section relating to the data controller.

Legitimacy Why do we use them?

We are entitled to process your personal data for the following reasons:

• Your unequivocal, informed, and express consent, in those cases where it is legally required, without, in any case, the withdrawal of such consent conditioning the execution of other processing whose legitimacy is different, and without said withdrawal affecting the legality of the processing prior to its withdrawal.
• A legal obligation of the data controller.
• The execution of the contract for the provision of services and/or the purchase of the corresponding products, signed by you.
• The legal basis for processing your data is the legitimate interest of the controller. This interest is based on a prior assessment of proportionality or weighing between the legitimate interest of the controller and the interests or rights and freedoms of the data subjects. This weighing involved assessing the interest, evaluating the impact of the processing on the data subjects, balancing the two concepts mentioned above, and implementing additional safeguards. If the final assessment is favorable to the controller, the processing can be carried out in accordance with applicable personal data protection regulations.

Recipients With whom can we share your personal data?

• Your personal data will be communicated to the following companies and organizations:
  
  • Tax Agency
  • State Public Employment Service
  • General Treasury of Social Security
  • National Data Protection Agency
  • Banks and savings banks
• Your personal data will not be transferred to any third country or international organization.

Origins What data do we process and how did we obtain it?

• Your personal data will be incorporated into the following files, owned by the organization:
  
  • FG01 Own accounting management
  • FG02 Own labor management
  • FG15 Own tax management. Data collection
  • FE01 Computer maintenance
  • FE02 Occupational Risk Prevention
  • FE03 Transportation and Shipping
  • FE04 Own legal matters
  • FR01 Requests for information received
  • FR03 Selection of own personnel
  • FR04 Advertising campaigns
  • FR05 Emails
  • FR07 Management of security incidents and/or violations
  • FR08 Gather the opinions of interested parties
  • FR09 Security in software and hardware
  • FE07 Document Destruction
  • FE08 Protection of Personal Data
  • FP01 Clients
• The personal data we process in our organization comes from the following sources:
  
  • The interested party himself

Rights What rights can you exercise?

We guarantee that you can exercise your rights regarding the processing of your personal data. In particular, we inform you that you have the right to:

• Obtain confirmation as to whether your data is being processed.
• Exercise your right to access the personal data we hold, obtaining information about the purposes of the processing, the category of data processed, the potential recipients, the retention period, the origin of the data, and, where applicable, the creation of profiles or automated decision-making.
• Exercise the right to rectification. For these purposes, we remind you that the personal data we hold must always be a true reflection of reality, so do not hesitate to exercise your right if any of your data is modified, changed, or deleted. You guarantee that the personal data you have provided to us by any means is true and accurate, and you undertake to notify us of any changes or modifications to the data. You are solely responsible for any loss or damage caused to the data controller or any third party due to the communication of erroneous, inaccurate, or incomplete information.
• For reasons related to your particular situation, you may object to the processing of your data, in which case our organization will stop processing it, unless there are legitimate reasons for preventing it.
• Request the deletion of your personal data when, among other reasons, it is no longer necessary for the purposes described above or we no longer have the legal authority to process it.
• Request data portability when the processing is carried out by automated means and provided that you are linked to our entity based on a signed contract or have given your consent for the processing. In these cases, you will have the right to receive your personal data in a structured, commonly used, and machine-readable format, or to have it transmitted directly to another controller, when technically feasible.
• In certain circumstances, you may request that the processing of your data be restricted, in which case we will only retain it for the purpose of exercising or defending legal claims.
• Object to automated decision-making, including profiling. These rights may be exercised free of charge, except in cases provided for by law, by means of a written request signed by you or, where applicable, by your representative, addressed to the data controller at the addresses provided for this purpose in the first section, or in person at any of our establishments.
• You also have the right to file complaints, either before the Spanish Data Protection Agency (on the website https://www.agpd.es/) or before the corresponding supervisory authority.
• Likewise, you may go to court to claim compensation.
• Finally, you have the right to withdraw your consent, just as easily as you gave it. To do so, you can visit our website, where you will find the necessary information to quickly and easily revoke the authorization you have granted us to carry out these communications. You can also send an email to the address indicated in the section regarding the data controller.
• We also inform you that, in each case, the potential threats and impacts that may arise as a result of processing your personal data are determined, mitigating or eliminating, if possible, potential damages through the application of the corresponding security measures, which are periodically reviewed to determine their effectiveness. Our control system also enables us to comply with the principles of data processing, accrediting to the data subject the principles of limitation to the purpose of processing, the principle of limitation to the retention period, the principle of data minimization, as well as the principle of integrity and confidentiality. Finally, we also inform you that you will periodically receive surveys that will allow us to understand your opinion on any suggestions regarding the processing of your personal data, as well as to comply with the principle of transparency and accuracy of the data processed. For any questions or clarifications, you can contact us at the email address provided in the first section.

Without further ado, sincerely,

The Responsible Party.