In compliance with current legislation on data protection, users are informed that, in “DUGUECH & DIP”, technical and organizational measures have been adopted in accordance with the provisions of the aforementioned regulations. The personal data that are collected in our forms are to be handled only by the personnel of “DUGUECH & DIP” or of the Data Managers established here. Appropriate security measures have been adopted for the data provided and, in addition, all the technical means and measures at our disposal have been installed to prevent the loss, misuse, alteration, unauthorized access and theft of any data that you provide.
The Client or User declares that all the data provided by him or her are true and correct, and undertakes to keep them updated, communicating to “DUGUECH & DIP”, any modification thereof. The user will be responsible for the veracity of their data and will be solely responsible for any conflicts or disputes that may arise due to the falsity of the same. It is important that, in order to keep personal data updated, the user informs “DUGUECH & DIP” whenever there has been any change. Otherwise, we cannot answer for their veracity.
EXERCISE OF RIGHTS
The LOPD and the GRPD grant interested parties the possibility of exercising a series of rights related to the processing of their personal data. In so far as the user’s data are subject to treatment by “DUGUECH & DIP”, they may exercise their rights. To do so, the user must contact us, providing documentation proving their identity (ID or passport), by email to firstname.lastname@example.org, or by written communication to the address that appears in our legal notice. Said communication must reflect the following information: Name and surname of the user, the request, the user’s address and the supporting data.
The exercise of rights must be performed by the user. However, they may be executed by a person authorized as legal representative of the authorizing party. In this case, the documentation proving this representation of the interested party must be provided.
The user may request the exercise of the following rights:
- The right to request access to personal data.
- The right to request rectification (if incorrect) or deletion.
- The right to request the limitation of data processing, in which case they will only be kept by “DUGUECH & DIP” for the exercise or defense of claims.
- The right to object to data processing: “DUGUECH & DIP” will stop processing your data, unless for legitimate reasons or the exercise or defense of possible claims the data must continue to be processed.
- The right to data portability: if you want your data to be processed by another firm, “DUGUECH & DIP” will facilitate the portability of your data to the new manager.
In the case that consent has been granted for a specific purpose, the user has the right to withdraw this consent at any time, without affecting the legality of the data processing based on that consent, prior to its withdrawal.
If a user considers that there is a problem with the way in which “DUGUECH & DIP” is handling their data, they can direct their claims to the Security Manager or to the corresponding data protection authority, with the Spanish Data Protection Agency being the indicated in the case of Spain.
CONSERVATION OF DATA
The disaggregated data will be preserved without a deletion deadline. With regards to customer data, the period of conservation of personal data will vary depending on the service that the Client contracts. In any case, it will be the minimum necessary, being able to stay until:
- 4 years: Labor Infringements and Penalties Law (obligations in matters of affiliation, registration, termination, contribution, payment of salaries …); Arts. 66 and next General Tax Law (accounting books …)
- 5 years: Art. 1964 Civil Code (personal actions without special term)
- 6 years: Art. 30 Commercial Code (accounting books, invoices …)
- 10 years: Art. 25 Law on the Prevention of Money Laundering and Financing of Terrorism.
Users of mailing lists or those uploaded by “DUGUECH & DIP” to pages or profiles of RSS will be retained until the user withdraws the consent.
Candidate data (CVs), if any: In case the candidate is not selected, “DUGUECH & DIP” may keep your resume stored for a maximum of two years to be included in future selection processes, unless the candidate states otherwise.
OBTAINING AND PROCESSING DATA
“DUGUECH & DIP” has the duty to inform users of its website about the collection of personal data that can be carried out, either by sending email or filling in the forms included in the website. In this sense, “DUGUECH & DIP” will be considered as responsible for the data collected through the means described above.
In turn “DUGUECH & DIP” informs users that the purpose of processing the data collected includes the attention of requests made by users, inclusion in the contact list, the provision of products or services and the management of the business relationship. The operations, procedures and technical processes that are carried out in an automated or non-automated manner and that enable the collection, storage, modification, transfer and other actions on personal data, are considered as processing of personal data.
“DUGUECH & DIP” makes available to users a series of telematic mechanisms for the collection and processing of their personal data, with the purposes provided above. The personal data provided in a telematic way, either through email, contact forms on this website or online contracting, will be used for the commercial and administrative management of customers and users of the company. These data will be processed through servers managed by https://es.godaddy.com/, which is also the company providing e-mail services, and which will be considered as the Data Manager.
On the other hand, the mail and name data will be incorporated into a database for sending commercial communications and managing the subscription to the services requested by the client or user, managed through the servers of https: // mailchimp. com / and https://www.hubspot.com/, which will also be considered as Data Managers. You can unsubscribe at any time by clicking on the link you will find in our communications, or by directing a request to exercise your right to the company in charge of the data processing or to “DUGUECH & DIP”.
As established by the LSSICE, “DUGUECH & DIP” undertakes not to send commercial communications without identifying them as such. For this purpose, the information sent to customers for the maintenance of the existing contractual relationship will not be considered commercial communication.
In any case, only data necessary to perform the contracted service, or to be able to adequately respond to the request for information made by the user, will be obtained. Sometimes, personal data will be provided through links to third-party websites. In this case, at no time will the staff of “DUGUECH & DIP” have access to the personal data that the Client provides to said third parties.
“DUGUECH & DIP” has a profile on the main online social networks (Facebook, Twitter, LinkedIn, Google+, Skype), being recognized in all cases as responsible for the treatment of the data of its followers, fans, subscribers, commentators and other user profiles (hereinafter, followers) published by “DUGUECH & DIP”. The treatment that “DUGUECH & DIP” will carry out with said data within each of the aforementioned networks will be the one that the social network allows to the corporate profiles.
“DUGUECH & DIP” will be able to inform its followers, when the law does not prohibit it, by any means that the social network allows, about its activities and offers, as well as providing personalized customer service. In no case will “DUGUECH & DIP” extract data from social networks, unless the user’s consent is expressly and explicitly obtained for it (for example, for an online competition).
DATA MANAGEMENT IN THE UNITED STATES
“DUGUECH & DIP” uses the email marketing services of https://mailchimp.com/ and https://www.hubspot.com/. In addition, “DUGUECH & DIP” makes use of the US social networks Facebook, Twitter, LinkedIn, Skype and Google Plus.
The user expressly and unequivocally gives their consent for the processing of their data and for the international transfer thereof to these service provider companies.
COMMUNICATION OF INFORMATION TO THIRD PARTIES
“DUGUECH & DIP” will not give or communicate your data to any third party, except in the cases provided by law or when the provision of a service implies the need for a contractual relationship with a person in charge of processing, and always in accordance with the general conditions approved by the user prior to contracting the same. Thus, when contracting our services, the user accepts that some of them may be, totally or partially, subcontracted to other persons or companies, which will be considered as Managers of the Data, with which the corresponding confidentiality contract has been agreed, or adhering to their privacy policies, established in their respective web pages. They also accept that some of the personal data collected will be provided to these Treatment Managers, when necessary for the effective performance of the contracted service. The user may refuse to transfer their data to the Treatment Managers, by written request, by any of the aforementioned means.
The information provided by the customer will, in all cases, be considered confidential, without being able to be used for purposes other than those related to the services contracted or products acquired from “DUGUECH & DIP”. “DUGUECH & DIP” undertakes not to disclose information about the client’s claims, the reasons for the advice requested or the duration of the client’s relationship with “DUGUECH & DIP”.
This privacy and data protection policy has been drafted, on October 31, 2018, and may vary depending on the changes in regulations and jurisprudence that may occur, with the data owner being responsible for reading the updated document, in order to know their rights and obligations in this regard at all times.