Privacy policy

We collect your personal information through different means, but you will always be informed at the time of collection through information clauses about the data controller, the purpose and legal basis of the processing, the data recipients and the retention period of your information, as well as how you can exercise the rights you have in matters of data protection.

In general, the personal information we process is limited to identifying data (name and surname, date of birth, address, ID, telephone and email), contracted services and payment and billing data.

We obtain data from our potential clients/users relating to identification data (name, surname, Tax ID, postal address, telephone, email), professional (position, workplace, activity sector) directly from them when they request information and queries from us.

In cases of personnel management and selection, we collect academic and professional data to be able to comply with obligations arising from maintaining the employment relationship or, where appropriate, become part of our workforce.

We use social networks and this is another way to reach you. Information collected through messages and communications you publish may contain personal information that is available online and accessible to the public. These social networks have their own privacy policies that explain how they use and share your information, so we recommend you consult them before using them to confirm that you agree with how your information is collected, processed and shared.

Through our website we collect personal information related to your navigation through the use of cookies. To clearly and precisely know the cookies we use, what their purposes are and how you can configure or disable them, consult our Cookie Policy.

In addition, our facilities have a video surveillance system whose function is to guarantee the safety of people and property, so your image may be recorded simply by accessing them. These images are kept for a maximum period of 1 month from their capture and would only be communicated to State Security Forces in the event that it becomes necessary.

We only keep your information for the period of time necessary to fulfill the purpose for which it was collected, comply with legal obligations imposed on us and address possible responsibilities that could derive from the fulfillment of the purpose for which the data was collected.

In the event that you wish to become part of our workforce and opt for one of our jobs, the data provided will become part of our employment pool and will be kept for the duration of the selection process and for a maximum of two years or until you exercise your right to deletion.

If at any time we have collected your data to address you as a potential user of our services or to respond to a request for information made by you, such data will be kept for a maximum of two years from its collection, being deleted after said period if a contractual relationship has not been formalized or at the time you request it from us.

In any case, and as a general rule, we will maintain your personal information as long as there is a contractual relationship that binds us or you do not exercise your right to deletion and/or limitation of processing, in which case, the information will be blocked without using it beyond its conservation, while it may be necessary for the exercise or defense of claims or some type of responsibility could be derived that would have to be addressed.

In general, we do not share your personal information, except for those transfers that we must make based on imposed legal obligations.

However, on some occasions and to develop and provide you with the requested service, we may communicate your data to other collaborating companies.

You can communicate your opposition to the transfer of your data, although in that case, it would not be possible to provide you with the requested service. Although it is not a transfer of data, to provide you with the requested service it may be that third-party companies, which act as our suppliers, access your information to carry out the service we have contracted from them. These processors access your data following our instructions and without being able to use them for a different purpose and maintaining the strictest confidentiality. In case it becomes necessary derived from an incident recorded by our security cameras, your images could be communicated to State Security Forces, by virtue of what is established in the Law.

Likewise, your personal information will be available to Public Administrations, Judges and Courts, to address possible responsibilities arising from the processing.

There are no international transfers of your data to countries outside the European Economic Area (EEA).

With our suppliers we have agreed that, for the provision of the contracted service, they use servers located in the EEA and if, in the future, we need to use servers located outside the EU territory, appropriate measures will be adopted, which will be incorporated into this Privacy Policy, ensuring that such suppliers are under the Privacy Shield agreement or that there are other appropriate guarantees.

Data protection regulations allow you to exercise your rights of access, rectification, deletion and portability of data and opposition and limitation to their processing, as well as not to be subject to decisions based solely on automated processing of your data, when appropriate.

These rights are characterized by the following:

• Their exercise is free, except for requests that are manifestly unfounded or excessive (e.g., repetitive in nature), in which case we may charge a fee proportional to the administrative costs incurred or refuse to act
• You can exercise the rights directly or through your legal or voluntary representative
• We must respond to your request within one month, although, if the complexity and number of requests is taken into account, the period may be extended by another two months.
• We have the obligation to inform you about the means to exercise these rights, which must be accessible and we cannot deny you the exercise of the right solely for choosing another means. If the request is submitted by electronic means, information will be provided by these means when possible, unless you request that it be otherwise.
• If we do not act on the request, we will inform you, no later than one month, of the reasons for our non-action and the possibility of claiming to a Control Authority

We commit to protecting your personal information.

We use physical, organizational and technological measures, controls and procedures, reasonably reliable and effective, aimed at preserving the integrity and security of your data and guaranteeing your privacy. In addition, all personnel with access to personal data has been trained and is aware of their obligations regarding the processing of your personal data.

In the case of contracts we sign with our suppliers, we include clauses requiring them to maintain the duty of secrecy regarding personal data they have accessed by virtue of the assignment made, as well as implement technical and organizational security measures necessary to guarantee the confidentiality, integrity, availability and permanent resilience of personal data processing systems and services.

All these security measures are reviewed periodically to ensure their adequacy and effectiveness. However, absolute security cannot be guaranteed and there is no security system that is impenetrable, so in the event that any information subject to processing and under our control is compromised as a consequence of a security breach, we will take appropriate measures to investigate the incident, notify it to the Supervisory Authority and, where appropriate, to those users who may have been affected so they can take appropriate measures.