Interested or affected: Private clients, workers, professionals, and company representatives

Processing - What processing do we do with your personal data?
In compliance with Regulation (EU) 2016/679 and the Organic Law on the Protection of Personal Data, we inform you that your personal data may be subject to any of the following processing activities:

• TR04 - Advertising campaigns (Legal basis: Law 34/1988, of November 11, General Advertising.)
• TR08 - Collecting the opinions of the interested parties (Legal basis: Regulation (EU) 2016/679 on data protection and LOPD.)
• TR03 - Selection of own personnel (Legal basis: Royal Legislative Decree 3/2015, of October 23, approving the consolidated text of the Employment Law.)
• TG01 - Own accounting and book management, as the responsible party. (Legal basis: Royal Decree 1514/2007, of November 16, regulating the General Accounting Plan.)
• TG25 - Data collection for own tax management (Legal basis: Law 58/2003, of December 17, General Tax.)
• TG12 - Own labor management: data collection (Legal basis: Royal Legislative Decree 1/1994, of June 20, approving the Consolidated Text of the General Social Security Law.)
• TR09 - Security on technical and organizational measures in the applied software (Legal basis: Regulation (EU) 2016/679 on data protection and LOPD.)
• TE08 - Personal Data Protection (Legal basis: Regulation (EU) 2016/679 and Organic Law 3/2018.)
• TE02 - Occupational risk prevention (Legal basis: Law 31/1995, of November 8, on the prevention of Occupational Risks.)
• TE07 - Document destruction (Legal basis: Regulation (EU) 2016/679)
• TV01 - Sales / Service Provision (Legal basis: Commercial and Tax Legislation)
• TE03 - Transport and/or parcel delivery service (Legal basis: Royal Decree of August 22, 1885, publishing the Commercial Code.)
• TR05 - Emails (Legal basis: Commercial Code and other applicable legislation.)
• TR01 - Information requests received (Legal basis: Commercial Code and other commercial provisions.)
• TR07 - Incident and/or security breach management (Legal basis: Regulation (EU) 2016/679 on data protection and LOPD.)
• TE04 - Own legal affairs management (Legal basis: applicable commercial and labor legislation.)
• TE01 - IT systems maintenance (Legal basis: Commercial Code.)

Responsible - Who are we?
We are responsible for the processing of your data. Therefore, both the interested parties and the competent bodies are explicitly, precisely, and unequivocally informed of the following aspects related to the data controller:

Purposes - For what purposes do we use your personal data?
In this organization, we may process your personal data exclusively for the purposes indicated below:

• Verify that all necessary technical measures for the proper management of personal data with the applied software are being carried out.
• Sending commercial and/or advertising information via email.
• Management of information requests received by the interested party about our products or services.
• Exclusive management of internal incidents detected in compliance with GDPR requirements.
• Conduct advertising campaigns to promote our services and/or products.
• Collect the opinion of the interested parties.
• Selection of personnel to fill necessary job vacancies.
• Comply with all requirements provided by the Occupational Risk Prevention Law.
• Sending parcels and correspondence.
• Manage any legal issues affecting the company.
• Manage, maintain, and repair IT storage systems.
• Actions to carry out own labor management.
• Actions to carry out own tax and accounting management.
• Comply with the principle of limitation on the retention period of personal data.
• Compliance with the requirements of Regulation (EU) 2016/679 and Organic Law 3/2018.
• Administrative Management of individual clients.

Legitimacy - Why do we use your data?
We are authorized to process your personal data for the following reasons:

• Your unequivocal, informed, and express consent, in cases where it is legally required, without the withdrawal of such consent conditioning the execution of other processing whose legitimization is different, and without such withdrawal affecting the legality of the treatment prior to the withdrawal of the same.
• A legal obligation of the data controller.
• The execution of the service provision contract and/or the sale of the corresponding products, signed by you.
• The legal basis for processing your data is a legitimate interest of the controller. This interest is based on the prior realization of a proportionality or balancing test between the legitimate interest of the controller and the interests or rights and freedoms of the data subjects. This balancing involved the assessment of the interest, the assessment of the impact of the processing on the data subjects, the balance between the two previous concepts, and the implementation of additional safeguards. Since the final balancing is favorable to the controller, the processing can be carried out in accordance with the applicable personal data protection regulations. For any questions or clarifications, you can contact us through the email provided in the section corresponding to the data controller.

Recipients - With whom can we share your personal data?
Your personal data will be communicated to the following companies and organizations:

• Tax Agency
• State Public Employment Service
• General Treasury of Social Security
• National Data Protection Agency
• Banks and savings banks

Your personal data will not be transferred to any third country or international organization.

Sources - What data do we process and how have we obtained them?
Your personal data will be included in the following files, owned by the organization:

• FG01 Own accounting management
• FG02 Own labor management
• FG15 Own tax management. Data collection
• FE01 IT maintenance
• FE02 Occupational risk prevention
• FE03 Transport and delivery
• FE04 Own legal affairs
• FR01 Information requests received
• FR03 Own personnel selection
• FR04 Advertising campaigns
• FR05 Emails
• FR07 Incident and/or security breach management
• FR08 Collecting the opinion of the interested parties
• FR09 Security in software and hardware
• FE07 Document destruction
• FE08 Personal Data Protection
• FP01 Clients

The personal data we process in our organization come from the following sources:

• The data subject themselves

Rights - What rights can you exercise?
We guarantee you the exercise of the rights that assist you in relation to the processing of your personal data. In particular, we inform you that you have the right to:

• Obtain confirmation about whether your data is being processed.
• Exercise the right of access to personal data we hold about you, obtaining information on the purposes of processing, the category of data processed, possible recipients, the retention period, the origin of the data, and, where appropriate, the profiling or automated decision-making.
• Exercise the right to rectification. In this regard, we remind you that the personal data we hold should always reflect reality accurately, so please do not hesitate to use your right in case of modification, change, or cancellation of any data. You guarantee that the personal data you have provided us by any means are true and accurate and undertake to notify any modification or change to them, being solely responsible for any loss or damage caused to the controller or any third party due to erroneous, inaccurate, or incomplete communication of information.
• For reasons related to your particular situation, you may object to the processing of your data, in which case our organization will cease to process the data, except for legitimate reasons preventing this.
• Request the deletion of your personal data when, among other reasons, they are no longer necessary for the purposes described above or when we are no longer authorized to process them.
• Request the portability of your data, when the processing is carried out by automated means and provided that it is linked to our entity based on a signed contract or you have given your consent for the processing carried out. In such cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, or to have them transmitted directly to another controller, where technically possible.
• In certain circumstances, you may request the restriction of the processing of your data, in which case we will only retain them for the exercise or defense of claims.
• Object to automated decision-making, including profiling.

These rights can be exercised free of charge, except in the cases provided by law, through a written and signed request by you or, where appropriate, your representative, addressed to the controller at the addresses provided for this purpose in the first section, or physically at any of our establishments.

• You also have the right to file complaints, either with the Spanish Data Protection Agency (on the website https://www.agpd.es/) or with the competent supervisory authority.
• Similarly, you can approach the Courts of Justice to seek compensation.
• Finally, you have the right to withdraw your consent, as easily as you granted it. To do this, you can visit our website, where you will find the necessary information to quickly and easily revoke the authorization you granted us to carry out these communications. You can also send an email to the address indicated in the section related to the controller.
• We also inform you that for each processing of your personal data, possible threats and impacts are determined, mitigating or eliminating, where possible, potential damages by applying the corresponding security measures that are periodically reviewed to determine their effectiveness. Our control system also allows compliance with the principles of processing your data, being able to demonstrate to the data subject the principle of purpose limitation, the principle of data retention limitation, the principle of data minimization, as well as the principle of integrity and confidentiality. Finally, we also inform you that you will periodically receive surveys that will allow us to know your opinion on any suggestions regarding the processing of your personal data, as well as to comply with the principle of transparency and accuracy of the data processed.

For any questions or clarifications, you can contact us through the email provided in the first section.

Sello VigilaMisDatos