Privacy policy

In compliance with the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as RGPD) we inform you that the personal data provided Data Privacy Outsourcing & Information Technology Law, S.L.  (hereinafter referred to as DPOITLAW), with Tax ID Number: B-86995362, street address, Antracita, 30 4º B, 28045, Madrid and email: info@dpoitlaw.com.

CONTACT

For any matter connected with the processing of data of natural persons by DPOITLAW you may contact the email address rgpd@dpoitlaw.com, or else you may also get in touch with our Data Protection Delegate by way of the following email address dpd@dpoitlaw.com.

DPOITLAW will collect the following information provided by the data subject:

  • COMMERCIAL CONTACT form: to deal with and manage the information requests sent by the User with this form.

Data collected: name, phone, email and comments.

Purpose: to deal with requests for information asked by any means about products and services offered by DPOITLAW, and for the establishment or maintenance of business relationships.

Lawful basis: based on the consent given by the data subject, DPOITLAW is entitled to process the data provided through the contact request, and in accordance with the legitimate interest in the development and maintenance of business relationships.

Storage limitation: data will be kept until the moment the data subject requests their cancellation or erasure and once deleted they will be kept available to the public administration, judges and courts for the time-barring of the actions that may apply to the processing of your data.

  • CURRICULUM OR RECRUITMENT: to send Curriculum to DPOITLAW via the web or by any other means.

Data collected: professional expertise area, name, surname, telephone, e-mail, CV, cover letter and other personal data related to the Curriculum or professional profile.

Purpose: management of the application for the recruitment processes published or for other vacancies according to your professional profile that may arise in the future within the activities of DPOITLAW.

Storage limitation: data will be kept until you are awarded a job or until you request their erasure. They will therefore be kept for the time necessary for the purpose of the processing, and once concluded they may be kept for the time-barring of the actions that may apply to the processing of your data.

Lawful basis: consent granted by the candidate.

Recipients: the data provided and derived from the selection process may be disclosed to:

      • Third companies identified by the data subject and that may be necessary for the candidate’s request for references.
  • PROMOTIONAL or NEWSLETTERS: the submission of information, news, notices, reminders and promotions that may be of your interest, related to the activities of DPOITLAW and its clients.

Data collected: email address, first name and surname.

Purpose: the registration of those who are interested in the submission of information, news and promotions, and to establish or maintain business relationships.

Lawful basis: the provision of data subject’s consent to DPOITLAW to be registered in promotional services, and the legitimate interest in the development of business relationships.

Storage limitation: data will be kept until the moment the data subject requests their cancellation or erasure and once deleted they will be kept available to the public administration, judges and courts for the time-barring of the actions that may apply to the processing of your data.

  • SERVICES: data given for the provision of services by DPOITLAW. Services will be identified at the time of data collection and registration.

Data collected: first name, ID number, job address, address, email, contact telephone number, and other necessary information depending on the registration requested, and which will be solely necessary for registration in the services offered by DPOITLAW.

Purpose:  registration of data subjects for the provision of services provided by the DPOITLAW, and to establish and maintain business relationships.

Lawful basis: the provision of data subject’s consent to DPOITLAW for the aforementioned services, and the legitimate interest in the development of business relationships.

Storage limitation: data will be kept for the time necessary for the purpose of the processing or until the moment in which the data subject requests their cancellation or erasure, and once deleted they will be kept available to the public administration, judges and courts for the time-barring of the actions that may apply to the processing of your data.

  • Registration and Monitoring of Corporate Social Networks accounts: personal data that you enable or supply to social networks at the time of becoming a follower of them. The corporate accounts of the social networks of DPOITLAW are the following:

TWITTER: https://twitter.com/fernandoramosTI

LINKEDIN: http://es.linkedin.com/in/fernandoramossuarez

Data collected: first name, surname, ID number, address, address, email, telephone number, and other information provided by the corresponding social network.

Purpose: social network monitoring, and maintenance and development of business relationships.

Lawful basis: consent provided by the user, and in accordance with legitimate interest for the development of business relations.

Storage limitation: data will be kept for the time necessary for the purpose of the processing or until the moment in which the data subject requests their cancellation or erasure, and once deleted they will be kept available to the public administration, judges and courts for the time-barring of the actions that may apply to the processing of your data.

  • CLIENTS / SUPPLIERS: professional personal data provided by Clients/Suppliers for the provision of services and management of the legal or contractual relationship.

Data collected: name surnames, ID number, job address, email, job telephone, bank details.

Purpose: management of service contractual relationship.

Lawful basis: the existing legal or contractual relationship necessary for the provision of the service.

Storage limitation: data will be kept for the time necessary for the purpose of the processing or until the moment in which the data subject requests their cancellation or erasure, and once deleted they will be kept available to the public administration, judges and courts for the time-barring of the actions that may apply to the processing of your data.

The disclosure of data to third parties is not envisaged, except for the provision of third-party services by data processors with which DPOITLAW has signed the corresponding data processing agreements and has verified that they provide sufficient guarantees to implement proper technical and organizational measures that meet the requirements of the GDPR, assuring the protection of data subjects’ rights.

EXERCISE OF RIGHTS

The data subject has his/her rights recognized to access, rectification, suppression, limitation, opposition and portability of his/her data under the responsibility of DPOITLAW. Likewise, the User shall have the right to withdraw his or her consent for the processing by DPOITLAW. He/she also has the right to lodge a complaint with a supervisory authority.

The data subject may exercise his/her rights at any time by means of sending a postal communication to DPOITLAW at the address stated above or by email to the address rgpd@dpoitlaw.com expressly specifying the right that he/she wishes to exercise.

TECHNICAL AND ORGANIZATIONAL SECURITY MEASURES

DPOITLAW has adopted the necessary technical and organisational measures to guarantee the safety and integrity of data, and to protect them from any alteration, loss, processing or unauthorized access.

DATA PROVIDED

Data collected by different means are those strictly necessary to meet your request, which you voluntarily communicate to us. The refusal to provide data marked as mandatory shall impede the provision of the services requested. In order to keep your personal data updated, you should inform us of any change that may take place in relation to them, otherwise we shall not be answerable for their accuracy. Likewise, in those cases where third party data are disclosed the data subject undertakes to inform them about the content of this privacy policy.

The Interested Party undertakes to forward as soon as possible to DPOITLAW any change and correction of his/her data of a personal nature so that the information contained in the DPOITLAW Activity Records remains updated at all times.

By virtue of the legitimate interest of DPOITLAW, the data subject´s personal data may be used for the establishment or maintenance of business relations by any means, including electronically, so as to inform him/her regarding products and services offered by these, with the option open at any time of opposing such processing for business purposes by means of remitting a postal communication to the aforementioned address, or via email to the address rgpd@dpoitlaw.com.