CONTROLLER IDENTIFICATION
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter GDPR), Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter LOPDGDD) and any other applicable data protection regulations, we inform you that the personal data provided will be processed within DataBitlaw’s personal data processing systems:
Name: DATA BITLAW & COMPLIANCE, S.L. (hereinafter DataBitlaw)
Formerly known as DATA PRIVACY OUTSOURCING & INFORMATION TECHNOLOGY LAW S.L. (DPO&IT LAW)
Address: CL Antracita, 30 – 4ºB – 28045 – MADRID (Spain)
Tax ID number: B-86995362
Registered in the Madrid Mercantile Registry, Page M-583109, Volume 32398, Folio 39, Section 8, IRUS: 1000292641146. EUID: ES28065.081377044
Contact: info@databitlaw.tech
CONTACT
For any matter related to the processing of personal data by DataBitlaw, please contact us at rgpd@databitlaw.tech or our Data Protection Officer at dpd@databitlaw.tech.
PERSONAL DATA
DataBitlaw will collect the following data:
COMMERCIAL CONTACT:
Processing of enquiries and contact requests received by any means regarding DataBitlaw's services, as well as the maintenance of commercial relationships:
o Data collected: Name, telephone number, email address, and enquiry.
o Purpose: To respond to requests for information made by the data subject by any means regarding DataBitlaw's products and services, and to establish and maintain commercial relationships.
o Legal basis: Processing is carried out on the basis of the data subject’s consent and, where applicable, on DataBitlaw’s legitimate interests in developing and maintaining commercial relationships.
o Retention periods: The data will be retained until the data subject requests the erasure or deletion of their data and, once deleted, it will be retained, where applicable, for the relevant statutory limitation periods in order to address potential legal liabilities before competent public authorities and judicial bodies.
CV OR EMPLOYMENT:
Sending your CV via the website or by any other means to DataBitlaw.
o Data collected: Professional area, name, surname, telephone number, email address, CV, cover letter and any other personal data associated with the CV or professional profile.
o Purpose: Management of the data subject’s application for published selection processes or other vacant positions in line with their professional profile that may arise in the future within the activities of DataBitlaw.
o Legal basis: The processing is carried out on the basis of consent by the data subject or the application of pre-contractual measures at the request of the data subject.
o Retention periods: The data will be kept for as long as necessary for the purpose of the processing or until you request its deletion. Once the processing has been completed or deletion has been requested, the data will be retained, where applicable, for the relevant statutory limitation periods in order to address potential legal liabilities before competent public authorities and judicial bodies.
o Recipients: The data provided and derived from the selection process may be transferred to third-party companies identified by the data subject for the purpose of requesting references that may be necessary for the selection of the candidate.
PROMOTIONAL OR NEWSLETTERS:
The sending of information, news, notices, reminders and promotions that may be of interest to you, related to the activities of DataBitlaw.
o Data collected: Email address, first name and surname.
o Purpose: To register data subjects for the sending of information, news and promotions, and to establish and maintain commercial relationships.
o Legal basis: The processing is carried out on the basis of consent by the data subjects to DataBitlaw for registration in promotional services, and the legitimate interests in the development of commercial relationships.
o Retention periods: The data will be retained until the data subject requests the erasure or deletion of their data and, once deleted, it will be retained, where applicable, for the relevant statutory limitation periods in order to address potential legal liabilities before competent public authorities and judicial bodies.
SERVICES:
Data provided for the provision of DataBitlaw services. The services will be identified at the time of data collection and registration.
o Data collected: Name, surname, national identity card number, contact address, home address, email address, contact telephone number and other data necessary for the service requested, which will be exclusively necessary for registration with DataBitlaw services.
o Purpose: The registration of data subjects for the provision of services and to establish and maintain commercial relationships.
o Legal basis: The processing is carried out on the basis of the legal or contractual relationship necessary for the provision of the service and the legitimate interests in the development of commercial relationships.
o Retention periods: The data will be kept for the time necessary for the purpose of the processing, and once this has been completed, it will be retained, where applicable, for the relevant statutory limitation periods in order to address potential legal liabilities before competent public authorities and judicial bodies.
REGISTRATION AND MONITORING OF CORPORATE SOCIAL MEDIA ACCOUNTS:
The personal data you provide or enable on social networks when you become a follower of these. DataBitlaw's corporate social media accounts are as follows:
TWITTER: https://twitter.com/fernandoramosTI
LINKEDIN: https://www.linkedin.com/company/databitlaw/
o Data collected: Name, Surname, Tax ID Number, contact address, home address, email address, contact telephone number, other data provided by the corresponding social network.
o Purpose: management of corporate social media accounts and interactions, and the establishment and maintenance of commercial relationships.
o Legal basis: The processing is carried out on the basis of consent by the data subject and legitimate interests in developing commercial relationships
o Retention periods: the data will be kept for the time necessary for the purpose of the processing, and once this has been completed, it will be retained, where applicable, for the relevant statutory limitation periods in order to address potential legal liabilities before competent public authorities and judicial bodies.
CUSTOMERS/SUPPLIERS:
Professional personal data provided by customers/suppliers for the provision of services and management of the legal or contractual relationship.
o Data collected: Name, Surname, National Identity Number, professional contact address, email address, contact telephone number.
o Purpose: to manage the contractual relationship for the service and to establish and maintain commercial relationships.
o Legal basis: The processing is carried out on the basis of the existing legal or contractual relationship necessary for the provision of the service and the legitimate interests in the development of commercial relationships.
o Retention periods: data will be retained for as long as necessary for the purpose of processing or deletion, and once this has been completed or deleted, it may be retained for a period of six years where applicable, for accounting and tax purposes and/or for the relevant statutory limitation periods in order to address any potential legal liabilities before competent public authorities and judicial bodies.
Personal data may be disclosed to third parties or competent authorities for the provision of services by third parties as data processors with whom DataBitlaw has signed the corresponding Data Processing Agreements and verified that they meet the necessary guarantees to apply appropriate technical and organisational measures, so that the processing is carried out in accordance with the requirements of the GDPR, guaranteeing the protection of the rights of the data subject.
PROCESSING BASED ON LEGITIMATE INTEREST
We inform you that there are data processing operations whose legal basis is the satisfaction of legitimate interests pursued by DataBitlaw. These processing operations are carried out after weighing up your rights and our legitimate interests, in which we have concluded that the latter prevails, as established in Article 6.1.f) of the GDPR.
You can consult the analysis of the balancing of legitimate interests for a processing operation at any time by sending your request to the following email address: rgpd@databitlaw.tech.
We also remind you that you have the right to object to processing based on legitimate interests. You can do so by sending an email to: rgpd@databitlaw.tech.
Specifically, based on the legitimate interests of DataBitlaw, the personal data of the data subject may be used for the establishment or maintenance of commercial relationships by any means, including electronic means, regarding information of interest related to DataBitlaw's products and services.
DATA DISCLOSURES
Personal data may be disclosed to third parties or competent authorities for the fulfilment of legal obligations, as well as for the provision of third-party service providers acting as data processors with whom DataBitlaw has signed the corresponding data processing agreements, having previously verified that they provide sufficient guarantees to apply appropriate technical and organisational measures, so that the processing is carried out in accordance with the requirements of the GDPR, guaranteeing the security and protection of the rights of the data subject.
EXERCISE OF RIGHTS
Data subjects have the right to access, rectification, erasure, restriction of processing, objection and data portability as well as the right to withdraw consent at any time. Similarly, they are protected by the right to withdraw their consent to processing by DataBitlaw. They also have the right to lodge a complaint with the supervisory authority. See https://www.aepd.es.
The data subjects may exercise their rights at any time by sending a letter, attaching a document proving their identity and expressly indicating the right they wish to exercise, to DataBitlaw at the above address or by sending an email to: rgpd@databitlaw.tech.
TECHNICAL AND ORGANISATIONAL SECURITY MEASURES
DataBitlaw has adopted the necessary technical and organisational measures to guarantee the security and integrity of the data, as well as to prevent its alteration, loss, unauthorised processing or access.
DATA PROVIDED
The data collected through the various channels provided are those strictly necessary to respond to your request, which the data subject voluntarily provides. Refusal to provide the data classified as mandatory will result in the non-provision or impossibility of accessing the service for which it was requested. Likewise, data may be provided voluntarily in order to enable the services to be provided in an optimal manner. Similarly, in cases where third-party data is provided, the data subject undertakes to inform them of the content of this privacy policy
The data subject undertakes to notify DataBitlaw as soon as possible of any modification or rectification of their personal data so that the information contained in DataBitlaw's records of processing activities is kept up to date at all times.