Privacy Policy

We collect your personal information through different means, but you will always be informed at the point of collection through informational clauses about the data controller, the purpose and legal basis for processing, the recipients of the data and the retention period, as well as how you can exercise your data protection rights.

In general, the personal information we process is limited to identifying data (name and surname, date of birth, address, national ID number, telephone and email), services contracted and payment and billing data.

We obtain data from our potential clients/users relating to identification (name, surname, tax ID, postal address, telephone, email) and professional information (job title, workplace, sector) directly from them when they request information or make enquiries.

In cases involving employment management and recruitment, we collect academic and professional data in order to fulfil obligations arising from the employment relationship or, where applicable, to bring new members on board.

We use social media, which is another way we may reach you. Information collected through messages and communications you publish may contain personal information that is publicly available online. These social networks have their own privacy policies explaining how they use and share your information, so we recommend reviewing them before use to confirm you agree with how your information is collected, processed and shared.

Through our website, we collect personal information related to your browsing activity via the use of cookies. For clear and precise information about the cookies we use, their purposes and how to configure or disable them, please consult our Cookie Policy.

In addition, our premises are equipped with a video surveillance system whose purpose is to ensure the safety of people and property. Your image may therefore be recorded simply by entering the premises. Such footage is retained for a maximum period of one month from the date of capture and would only be shared with law enforcement authorities if strictly necessary.

We only retain your information for the period of time necessary to fulfil the purpose for which it was collected, to comply with legal obligations imposed on us and to address any potential liabilities that may arise from the fulfilment of the purpose for which the data was gathered.

If you wish to join our team and apply for one of our positions, the data you provide will be added to our employment database and retained for the duration of the selection process and for a maximum of two years, or until you exercise your right to erasure.

If at any point we have collected your data to approach you as a potential user of our services or to respond to an information request made by you, that data will be retained for a maximum of two years from the date of collection and will be deleted once that period has elapsed, provided no contractual relationship has been formalised, or at the moment you request it.

In all cases, and as a general rule, we will retain your personal information for as long as a contractual relationship binds us or until you exercise your right to erasure and/or restriction of processing. In such cases, the information will be blocked and not used beyond its retention, whilst it may be necessary for the exercise or defence of claims or where any form of liability may need to be addressed.

In general, we do not share your personal information, except in cases where we are required to do so by law.

However, on occasion and in order to develop and deliver the service you have requested, we may share your data with other partner companies.

You may inform us of your objection to the sharing of your data, although in that case it would not be possible to provide the requested service. Although this does not constitute a transfer of data, in order to provide the service you have requested, third-party companies acting as our suppliers may access your information to carry out the service we have engaged them to perform. These processors access your data in accordance with our instructions and may not use it for any other purpose, maintaining strict confidentiality at all times. Should it be necessary as a result of an incident recorded by our security cameras, your footage could be shared with law enforcement authorities in accordance with applicable legislation.

Furthermore, your personal information will be made available to public authorities, courts and tribunals to address any potential liabilities arising from the processing.

There are no international transfers of your data to countries outside the European Economic Area (EEA).

We have agreed with our suppliers that, for the provision of contracted services, they will use servers located within the EEA. Should we need to make use of servers located outside EU territory in the future, appropriate measures will be adopted and incorporated into this Privacy Policy, ensuring that such suppliers are covered by the Privacy Shield agreement or that other adequate safeguards are in place.

Data protection regulations allow you to exercise your rights of access, rectification, erasure and portability of data, as well as objection and restriction of processing, and the right not to be subject to decisions based solely on automated processing of your data, where applicable.

These rights are characterised as follows:

• Their exercise is free of charge, unless the requests are manifestly unfounded or excessive (e.g. repetitive in nature), in which case we may charge a fee proportionate to the administrative costs incurred or refuse to act
• You may exercise your rights directly or through a legal or voluntary representative
• We must respond to your request within one month, although this period may be extended by a further two months where the complexity and volume of requests warrants it
• We are obliged to inform you of the means by which you may exercise these rights, which must be accessible. We may not refuse the exercise of a right solely on the grounds that you have chosen a different method. Where the request is submitted electronically, the information will be provided by electronic means where possible, unless you request otherwise
• If we do not act on your request, we will inform you within one month of the reasons for not doing so and of the possibility of lodging a complaint with a supervisory authority

We are committed to protecting your personal information.

We use reasonably reliable and effective physical, organisational and technological measures, controls and procedures aimed at preserving the integrity and security of your data and ensuring your privacy. In addition, all staff with access to personal data have been trained and are aware of their obligations in relation to the processing of personal data.

In the contracts we enter into with our suppliers, we include clauses requiring them to maintain the duty of confidentiality with regard to personal data accessed in the course of the work assigned to them, and to implement the technical and organisational security measures necessary to ensure the ongoing confidentiality, integrity, availability and resilience of data processing systems and services.

All of these security measures are reviewed periodically to ensure their adequacy and effectiveness. However, absolute security cannot be guaranteed and no security system is impenetrable. In the event that any information under our control is compromised as a result of a security breach, we will take appropriate measures to investigate the incident, notify the supervisory authority and, where applicable, inform any affected users so that they may take appropriate action.