Privacy policy

We collect your personal information through different means, but you will always be informed at the time of collection through information clauses about the data controller, the purpose and legal basis for processing, the recipients of the data and the period for which your information will be kept, as well as how you can exercise your data protection rights.

In general, the personal information we process is limited to identifying data (name and surname, date of birth, address, national ID number, phone and email), services contracted, and payment and billing details.

We obtain identification data (name, surname, tax ID, postal address, phone, email) and professional data (job title, workplace, sector) from our potential customers/users directly when they request information or make enquiries.

For personnel management and selection, we collect academic and professional data in order to meet the obligations arising from maintaining the employment relationship or, where applicable, joining our workforce.

We use social media, and this is another way of reaching you. The information collected through the messages and communications you post may contain personal information that is available online and accessible to the public. These social media platforms have their own privacy policies explaining how they use and share your information, so we recommend you check them before using them to confirm that you agree with how your information is collected, processed and shared.

Through our website we collect personal information related to your browsing through the use of cookies. To find out clearly and precisely which cookies we use, their purposes, and how you can configure or disable them, please see our Cookie Policy.

In addition, our facilities have a video surveillance system whose purpose is to ensure the safety of people and property, meaning your image may be recorded simply by accessing them. These images are kept for a maximum period of 1 month from the time they are captured and will only be shared with State Security Forces and Corps if necessary.

We only keep your information for the period of time necessary to fulfil the purpose for which it was collected, to comply with legal obligations imposed on us, and to address any possible liability that may arise from fulfilling the purpose for which the data was collected.

If you wish to join our workforce and apply for one of our positions, the data provided will become part of our talent pool and will be kept for as long as the selection process lasts and for a maximum of two years, or until you exercise your right to erasure.

If at any time we have collected your data to contact you as a potential user of our services or to respond to a request for information made by you, such data will be kept for a maximum of two years from its collection, and will be deleted after that period if no contractual relationship has been established, or as soon as you request it.

In any case, and as a general rule, we will keep your personal information for as long as a contractual relationship binding us exists, or until you exercise your right to erasure and/or restriction of processing, in which case the information will be blocked without further use beyond its retention, for as long as it may be necessary for the exercise or defence of claims or any liability that may need to be addressed.

In general, we do not share your personal information, except for those disclosures required by legal obligations.

However, on some occasions, in order to develop and provide the requested service, we may share your data with other collaborating companies.

You can let us know if you object to the sharing of your data, although in that case, we would not be able to provide the requested service. Although this does not constitute a transfer of data, in order to provide the requested service, third-party companies acting as our suppliers may access your information to carry out the service we have contracted them for. These processors access your data following our instructions, without being able to use it for any purpose other than that agreed, and maintaining the strictest confidentiality. Should it be necessary as a result of an incident recorded by our security cameras, your images could be shared with State Security Forces and Corps, in accordance with the Law.

Likewise, your personal information will be made available to Public Administrations, Judges and Courts, to address any liability arising from the processing.

There are no international transfers of your data to countries outside the European Economic Area (EEA).

We have agreed with our suppliers that, in order to provide the contracted service, they will use servers located within the EEA, and if, in the future, we need to use servers located outside the EU, appropriate measures will be adopted and incorporated into this Privacy Policy, ensuring that such suppliers are covered under the Privacy Shield agreement or that other adequate safeguards exist.

Data protection regulations allow you to exercise your rights of access, rectification, erasure and portability of data, and objection and restriction of processing, as well as the right not to be subject to decisions based solely on automated processing of your data, where applicable.

These rights are characterised as follows:

• Exercising them is free of charge, unless the requests are clearly unfounded or excessive (e.g., repetitive in nature), in which case we may charge a fee proportional to the administrative costs incurred, or decline to act
• You may exercise your rights directly or through your legal or voluntary representative
• We must respond to your request within one month, although, taking into account the complexity and number of requests, this period may be extended by a further two months.
• We are obliged to inform you about the means for exercising these rights, which must be accessible, and we cannot deny you the exercise of a right solely because you have chosen a different means. If the request is submitted by electronic means, the information will be provided by these means whenever possible, unless you request otherwise.
• If we do not act on the request, we will inform you, no later than within one month, of the reasons for our inaction and of your right to lodge a complaint with a Supervisory Authority

We are committed to protecting your personal information.

We use reasonably reliable and effective physical, organisational and technological measures, controls and procedures aimed at preserving the integrity and security of your data and guaranteeing your privacy. In addition, all staff with access to personal data have been trained and are aware of their obligations regarding the processing of personal data.

In our contracts with suppliers, we include clauses requiring them to maintain confidentiality with respect to any personal data they may have accessed in carrying out the assigned task, as well as to implement the necessary technical and organisational security measures to ensure the ongoing confidentiality, integrity, availability and resilience of the systems and services involved in the processing of personal data.

All these security measures are reviewed periodically to ensure their adequacy and effectiveness. However, absolute security cannot be guaranteed, and no security system is entirely impenetrable, so in the event that any information under processing and under our control is compromised as a result of a security breach, we will take appropriate steps to investigate the incident, notify the Supervisory Authority and, where applicable, any users who may have been affected so that they can take appropriate measures.