Privacy policy

We collect your personal information through various means, but you will always be informed at the time of collection by means of information clauses regarding the data controller, the purpose and legal basis for processing, the recipients of the data and the retention period for your information, as well as how you can exercise your data protection rights.

In general, the personal information we process is limited to identification data (first and last name, date of birth, address, ID number, phone number and email), contracted services, and payment and billing data.

We obtain data from our potential customers/users relating to identification data (first and last name, tax ID, postal address, phone number, email), professional data (position, place of work, sector of activity) directly from them when they request information or make inquiries.

In cases of personnel management and recruitment, we collect academic and professional data in order to meet the obligations arising from the employment relationship or, as applicable, to join our staff.

We use social networks, and this is another way to reach you. Information collected through the messages and communications you post may contain personal information that is publicly available and accessible online. These social networks have their own privacy policies explaining how they use and share your information, so we recommend reviewing them before using them to confirm that you agree with how your information is collected, processed and shared.

Through our website we collect personal information related to your browsing through the use of cookies. To find out clearly and precisely which cookies we use, their purposes and how you can configure or disable them, please see our Cookie Policy.

In addition, our facilities have a video surveillance system whose purpose is to ensure the safety of people and property, so your image may be recorded simply by accessing them. These images are kept for a maximum period of 1 month from the time they are captured and would only be provided to State Security Forces and Bodies if necessary.

We only keep your information for the period of time necessary to fulfill the purpose for which it was collected, to comply with the legal obligations imposed on us, and to address any potential liabilities that may arise from fulfilling the purpose for which the data were collected.

If at any point you wish to join our staff and apply for one of our job openings, the data provided will become part of our talent pool and will be kept for as long as the selection process lasts and for a maximum of two years, or until you exercise your right to erasure.

If at any time we have collected your data in order to reach out to you as a potential user of our services or to respond to a request for information made by you, such data will be kept for a maximum of two years from their collection, being deleted after that period if no contractual relationship has been formalized, or at the time you so request.

In any case, and as a general rule, we will keep your personal information for as long as a contractual relationship binding us exists, or until you exercise your right to erasure and/or restriction of processing, in which case the information will be blocked without any further use beyond its retention, for as long as it may be necessary for the exercise or defense of claims or for any liability that may need to be addressed.

In general, we do not share your personal information, except for such disclosures as we must make on the basis of legal obligations imposed on us.

However, on some occasions, and in order to develop and provide the requested service, we may share your data with other partner companies.

You may notify us of your objection to the sharing of your data, although in that case it would not be possible to provide you with the requested service. Although it does not constitute a transfer of data, in order to provide the requested service, third-party companies acting as our providers may access your information to carry out the service we have contracted them for. These processors access your data following our instructions, without being able to use them for a different purpose, and maintaining the strictest confidentiality. In the event that it becomes necessary as a result of an incident recorded by our security cameras, your images could be shared with State Security Forces and Bodies, in accordance with the provisions of the Law.

Likewise, your personal information will be made available to Public Administrations, Judges and Courts, to address any liabilities arising from the processing.

There are no international transfers of your data to countries outside the European Economic Area (EEA).

We have agreed with our providers that, in order to provide the contracted service, they will use servers located within the EEA, and if, in the future, we should need to use servers located outside the territory of the EU, appropriate measures will be adopted and incorporated into this Privacy Policy, guaranteeing that such providers are subject to the Privacy Shield agreement or that other appropriate safeguards exist.

Data protection regulations allow you to exercise your rights of access, rectification, erasure and data portability, and objection and restriction of processing, as well as the right not to be subject to decisions based solely on the automated processing of your data, where applicable.

These rights are characterized as follows:

• Exercising them is free of charge, unless the requests are manifestly unfounded or excessive (e.g., repetitive in nature), in which case we may charge a fee proportional to the administrative costs incurred or decline to act
• You may exercise your rights directly or through your legal or voluntary representative
• We must respond to your request within one month, although this period may be extended by a further two months if the complexity and number of requests so require.
• We are obliged to inform you about the means to exercise these rights, which must be accessible, and we may not deny you the exercise of a right solely because you chose a different means. If the request is submitted electronically, information will be provided through the same means whenever possible, unless you request otherwise.
• If we do not act on the request, we will inform you, within one month at the latest, of the reasons for our inaction and of the possibility of lodging a complaint with a Supervisory Authority

We are committed to protecting your personal information.

We use reasonably reliable and effective physical, organizational and technological measures, controls and procedures aimed at preserving the integrity and security of your data and guaranteeing your privacy. In addition, all personnel with access to personal data have been trained and are aware of their obligations regarding the processing of personal data.

In contracts entered into with our providers, we include clauses requiring them to maintain confidentiality regarding the personal data to which they have had access under the assignment carried out, as well as to implement the necessary technical and organizational security measures to guarantee the ongoing confidentiality, integrity, availability and resilience of the systems and services processing personal data.

All these security measures are periodically reviewed to ensure their adequacy and effectiveness. However, absolute security cannot be guaranteed, and no security system is impenetrable; therefore, in the event that any information subject to processing and under our control were to be compromised as a result of a security breach, we will take appropriate measures to investigate the incident, notify the Supervisory Authority and, where applicable, the users who may have been affected, so that they can take appropriate measures.