Privacy policy

We collect your personal information through various means, but you will always be informed at the time of collection through information clauses about the data controller, the purpose and legal basis for processing, the recipients of the data, and the retention period for your information, as well as how you can exercise your data protection rights.

In general, the personal information we process is limited to identification data (first and last name, date of birth, address, national ID number, phone number and email), contracted services, and payment and billing data.

We obtain data from our prospective clients/users relating to identification data (first and last name, tax ID, postal address, phone number, email) and professional data (job title, workplace, industry) directly from them when they request information or make enquiries.

In cases of personnel management and selection, we collect academic and professional data in order to fulfil obligations arising from maintaining the employment relationship or, where applicable, becoming part of our staff.

We use social media, and this is another way of reaching you. Information collected through the messages and communications you post may contain personal information that is available online and accessible to the public. These social networks have their own privacy policies explaining how they use and share your information, so we recommend reviewing them before using them, to confirm that you agree with how your information is collected, processed and shared.

Through our website we collect personal information related to your browsing through the use of cookies. To find out clearly and precisely which cookies we use, their purposes and how you can configure or disable them, please see our Cookie Policy.

In addition, our facilities have a video surveillance system whose purpose is to ensure the safety of people and property, so your image may be recorded simply by accessing them. These images are kept for a maximum period of 1 month from the time they are captured, and would only be shared with State Security Forces and Corps if necessary.

We only keep your information for as long as necessary to fulfil the purpose for which it was collected, to comply with the legal obligations imposed on us, and to address any possible liabilities that may arise from fulfilling the purpose for which the data was collected.

If you wish to become part of our staff and apply for one of our job openings, the data provided will become part of our talent pool and will be kept for the duration of the selection process, and for a maximum of two years, or until you exercise your right to erasure.

If we have collected your data at any time to contact you as a potential user of our services, or to respond to a request for information made by you, such data will be kept for a maximum of two years from its collection, and will be deleted once that period has elapsed if no contractual relationship has been formalised, or as soon as you request it.

In any case, and as a general rule, we will keep your personal information for as long as a contractual relationship binds us, or until you exercise your right of erasure and/or restriction of processing, in which case the information will be blocked without further use, beyond its retention, for as long as it may be necessary for the exercise or defence of claims, or in case any liability may arise that needs to be addressed.

In general, we do not share your personal information, except for those disclosures we must make due to legal obligations imposed on us.

However, on some occasions and in order to develop and provide you with the requested service, we may share your data with other partner companies.

You may notify us of your objection to the sharing of your data, although in that case, it would not be possible to provide you with the requested service. Although it does not constitute a data transfer, in order to provide you with the requested service, third-party companies acting as our suppliers may access your information to carry out the service we have contracted them for. These processors access your data following our instructions, without being able to use it for a different purpose, and maintaining the strictest confidentiality. If necessary as a result of an incident recorded by our security cameras, your images could be shared with State Security Forces and Corps, in accordance with the Law.

Likewise, your personal information will be available to Public Administrations, Judges and Courts, for addressing any liabilities arising from the processing.

There are no international transfers of your data to countries outside the European Economic Area (EEA).

We have agreed with our suppliers that, in order to provide the contracted service, they will use servers located within the EEA, and if, in the future, we need to use servers located outside EU territory, appropriate measures will be adopted and incorporated into this Privacy Policy, ensuring that such suppliers are covered by the Privacy Shield agreement or that other adequate safeguards exist.

Data protection regulations allow you to exercise your rights of access, rectification, erasure and portability of data, and objection and restriction of processing, as well as not to be subject to decisions based solely on the automated processing of your data, where applicable.

These rights have the following characteristics:

• Exercising them is free of charge, unless the request is manifestly unfounded or excessive (e.g., repetitive in nature), in which case we may charge a fee proportional to the administrative costs incurred, or refuse to act
• You can exercise your rights directly or through your legal or appointed representative
• We must respond to your request within one month, although, taking into account the complexity and number of requests, this period may be extended by a further two months.
• We are obliged to inform you about the means for exercising these rights, which must be accessible, and we may not deny you the exercise of your right solely because you chose a different means. If the request is submitted electronically, the information will be provided by these same means whenever possible, unless you request otherwise.
• If we do not act on your request, we will inform you, no later than within one month, of the reasons for our inaction and of your right to lodge a complaint with a Supervisory Authority

We are committed to protecting your personal information.

We use reasonably reliable and effective physical, organisational and technological measures, controls and procedures aimed at preserving the integrity and security of your data and guaranteeing your privacy. In addition, all staff with access to personal data have been trained and are aware of their obligations regarding the processing of personal data.

In our contracts with suppliers, we include clauses requiring them to maintain confidentiality with respect to the personal data to which they have had access as a result of the assignment carried out, as well as to implement the technical and organisational security measures necessary to guarantee the ongoing confidentiality, integrity, availability and resilience of the systems and services used to process personal data.

All these security measures are reviewed periodically to ensure their adequacy and effectiveness. However, absolute security cannot be guaranteed and there is no security system that is completely impenetrable; therefore, in the event that any information being processed and under our control were to be compromised as a result of a security breach, we will take appropriate measures to investigate the incident, notify the Supervisory Authority and, where applicable, any users who may have been affected, so that they can take appropriate measures.