Privacy policy

We collect your personal information through various means, but you will always be informed at the time of collection through informative clauses regarding the data controller, the purpose and legal basis for processing, the data recipients and the retention period of your information, as well as how you can exercise the rights available to you regarding data protection.

In general, the personal information we process is limited to identification data (name and surname, date of birth, address, national ID number, phone and email), contracted services and payment and billing data.

We obtain data from our potential clients/users relating to identification data (name, surname, tax ID, postal address, phone, email) and professional data (position, workplace, sector of activity) directly from them when they request information and ask questions.

In cases of personnel management and selection, we collect academic and professional data in order to meet the obligations arising from the employment relationship or, where applicable, to become part of our staff.

We use social media, and this is another way of reaching you. Information gathered through the messages and communications you post may contain personal information that is publicly available online. These social networks have their own privacy policies explaining how they use and share your information, so we recommend you review them before using them, to confirm you agree with how your information is collected, processed and shared.

Through our website we collect personal information related to your browsing through the use of cookies. To find out clearly and precisely which cookies we use, their purposes and how you can configure or disable them, please see our Cookie Policy.

In addition, our facilities have a video surveillance system whose purpose is to guarantee the safety of people and property, so your image may be recorded simply by accessing them. These images are kept for a maximum period of 1 month from the time they are recorded and would only be shared with State Security Forces and Corps if necessary.

We only keep your information for as long as necessary to fulfil the purpose for which it was collected, to comply with the legal obligations imposed on us and to address any liabilities that may arise from fulfilling the purpose for which the data was collected.

If at any time you wish to become part of our staff and apply for one of our job openings, the data provided will become part of our talent pool and will be kept for as long as the selection process lasts, and for a maximum of two years or until you exercise your right to erasure.

If at any point we have collected your data to contact you as a potential user of our services or to respond to a request for information made by you, such data will be kept for a maximum of two years from its collection, and will be deleted after that period if no contractual relationship has been established, or as soon as you request it.

In any case, and as a general rule, we will keep your personal information for as long as there is a contractual relationship linking us, or until you exercise your right to erasure and/or restriction of processing, in which case the information will be blocked, with no further use beyond its retention, for as long as it may be necessary for the exercise or defence of claims or any liability that may arise.

In general, we do not share your personal information, except for any transfers we must make on the basis of legal obligations imposed on us.

However, on some occasions, in order to develop and provide you with the requested service, we may share your data with other collaborating companies.

You may notify us of your objection to the transfer of your data, although in that case it would not be possible to provide you with the requested service. Although it does not constitute a transfer of data, in order to provide you with the requested service, third-party companies acting as our providers may access your information to carry out the service contracted with them. These processors access your data following our instructions and without being able to use it for a different purpose, maintaining the strictest confidentiality. Should it become necessary as a result of an incident recorded by our security cameras, your images could be shared with State Security Forces and Corps, in accordance with the Law.

Likewise, your personal information will be made available to Public Administrations, Judges and Courts, to address any potential liabilities arising from the processing.

There are no international transfers of your data to countries outside the European Economic Area (EEA).

We have agreed with our providers that, in order to provide the contracted service, they will use servers located within the EEA, and if, in the future, we need to use servers located outside EU territory, appropriate measures will be adopted, which will be incorporated into this Privacy Policy, ensuring that such providers are covered by the Privacy Shield agreement or that other adequate safeguards exist.

Data protection regulations allow you to exercise your rights of access, rectification, erasure and data portability, and objection and restriction of processing, as well as the right not to be subject to decisions based solely on automated processing of your data, where applicable.

These rights are characterized by the following:

• Exercising them is free of charge, except in the case of manifestly unfounded or excessive requests (e.g., of a repetitive nature), in which case we may charge a fee proportional to the administrative costs incurred, or refuse to act
• You may exercise your rights directly or through your legal or voluntary representative
• We must respond to your request within one month, although, taking into account the complexity and number of requests, this period may be extended by a further two months.
• We are obliged to inform you about the means to exercise these rights, which must be accessible and cannot be denied simply because you chose a different means. If the request is submitted electronically, the information will be provided by the same means whenever possible, unless you request otherwise.
• If we do not act on your request, we will inform you, within one month at the latest, of the reasons for our inaction and of the possibility of lodging a complaint with a Supervisory Authority

We are committed to protecting your personal information.

We use reasonably reliable and effective physical, organizational and technological measures, controls and procedures aimed at preserving the integrity and security of your data and guaranteeing your privacy. In addition, all staff with access to personal data have been trained and are aware of their obligations regarding the processing of personal data.

In the case of contracts entered into with our providers, we include clauses requiring them to maintain confidentiality regarding personal data to which they have had access under the assignment carried out, as well as to implement the technical and organizational security measures necessary to ensure the ongoing confidentiality, integrity, availability and resilience of the systems and services used to process personal data.

All these security measures are reviewed periodically to ensure their adequacy and effectiveness. However, absolute security cannot be guaranteed and no security system is impenetrable, so, in the event that any information subject to processing and under our control is compromised as a result of a security breach, we will take appropriate measures to investigate the incident, notify the Supervisory Authority and, where applicable, any users who may have been affected, so that they can take appropriate measures.