In accordance with the provisions of current data protection legislation, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, GDPR), as well as Organic Law 3/2018 of 5 December on Personal Data Protection and the Guarantee of Digital Rights (hereinafter, LOPD-GDD), users are hereby informed in accordance with Article 13 of the GDPR and Article 11 of the LOPD-GDD:
Who is responsible for processing your data?
Company name: INTIME DESARROLLOS INFORMATICOS SL
Tax Identification Number (CIF): B87350328
Registered address: AVENIDA CASTIILA, 1, ED BEST POINT, OFICINA 20 28830 SAN FERNANDO DE HENARES MADRID ESPAÑA
Email address: DPO@IGEOERP.COM / RRHH@IGEOERP.COM
Website: WWW.IGEOERP.COM
Commercial Registry details:
For what purposes will we process your personal data?
INTIME DESARROLLOS INFORMATICOS SL processes your information for the following purposes:
Maintaining the business relationship and providing the contracted service.
Preparing quotations tailored to your needs.
Managing email communications with interested parties.
Carrying out the company’s recruitment processes.
Managing the company’s employees and human resources.
Sending commercial information related to our sector: SERVICES.
Monitoring the security of our premises (video surveillance).
Managing training activities.
How long will we retain your data?
The personal data you provide will be retained for as long as the business relationship remains in force. However, to ensure maximum transparency, we inform you that the general retention periods we apply are as follows:
General identification data (email address, first name, surname, telephone number, etc.): for the duration of the business relationship or until consent is withdrawn. In any case, the data will be deleted when it is no longer required for the purpose for which it was collected.
Law on Infringements and Penalties in the Social Order (obligations relating to registration, enrolment, deregistration, social security contributions, salary payments, etc.); Articles 66 et seq. of the General Tax Law (accounting records, etc.): four (4) years.
Personal legal actions without a specific limitation period (Article 1964 of the Spanish Civil Code): five (5) years.
Accounting, tax and employment records (Article 30 of the Spanish Commercial Code – accounting books, invoices, etc.): six (6) years.
Employment records: contracts, working time records, payslips and social security contributions, identification documents: four (4) years. In the case of occupational risk prevention reports, illness or accident records, and contracts with occupational risk prevention services: five (5) years.
Data subject to the Law on the Prevention of Money Laundering and Terrorist Financing (Article 25): ten (10) years.
Recruitment processes: two (2) years from the submission of the curriculum vitae.
Video surveillance: thirty (30) days, unless the recording captures an infringement and/or criminal offence.
Furthermore, in relation to the sending of commercial information, even after the relationship between the parties has ended, the Data Controller will continue to retain your information for the purpose of sending newsletters related to our products and services. You may exercise the rights recognised under current legislation at any time by contacting us through whichever communication channel is most convenient for you.
Disaggregated and anonymised data: no retention period.
Notwithstanding these general retention periods, we inform you that we will periodically review our systems to delete any data that is no longer legally required.
What is the lawful basis for processing your data?
Depending on the purposes for which your data is collected, the processing of your data is necessary for:
1. Managing the business relationship you have entered into and contracted with us.
Performance of a contract (as provided for under Article 6(1)(b) of the GDPR).
Consent of the data subject (as provided for under Article 6(1)(a) of the GDPR).
2. Preparing quotations tailored to your needs.
Performance of a contract and/or pre-contractual relationship (as provided for under Article 6(1)(b) of the GDPR).
3. Managing email communications with interested parties.
Consent of the data subject (as provided for under Article 6(1)(a) of the GDPR).
Legitimate interest (as provided for under Article 6(1)(f) of the GDPR).
4. Carrying out the company’s recruitment processes.
Consent of the data subject (as provided for under Article 6(1)(a) of the GDPR).
5. Managing the company’s employees and internal human resources.
Performance of a contract (as provided for under Article 6(1)(b) of the GDPR).
6. Sending commercial communications.
Consent of the data subject (as provided for under Article 6(1) of the GDPR).
Consent of the data subject (as provided for under Article 20 of the Spanish Information Society Services and Electronic Commerce Act – LSSICE).
Legitimate interest (as provided for under Article 6(1)(f) of the GDPR and Article 21(2) of the LSSICE).
7. Monitoring the security of our premises (video surveillance).
Legitimate interest (as provided for under Article 6(1)(f) of the GDPR).
8. Managing training activities.
Performance of a contract (as provided for under Article 6(1)(b) of the GDPR).
Consent of the data subject (as provided for under Article 6(1)(a) of the GDPR).
Furthermore, all data collected is necessary for the provision of the service. However, fields marked with an asterisk (*) are mandatory. If the mandatory data is not provided, the Data Controller will be unable to provide the contracted service.
Finally, we inform you that only individuals over the age of 14 may provide personal data through this website. As required by the LOPD-GDD, in the case of children under the age of 14, the consent of their parents or legal guardians is mandatory before we can process their personal data.
Furthermore, only individuals over the age of 18 may contract our services. In the case of minors under the age of 18, the consent of their parents or legal guardians is mandatory before we can provide the services offered, unless the minor is legally emancipated.
What rights do I have regarding data protection?
In accordance with Article 13 of the GDPR and Article 11(2)(c) of the LOPD-GDD, you may exercise any of the following rights by contacting us at the postal address AVENIDA CASTIILA, 1, ED BEST POI, OFICINA 20, or by email at CRISTINA.SERRANO@IGEOERP.COM / RRHH@IGEOERP.COM.
In any case, under current legislation, you are entitled to the following rights in accordance with Articles 15 to 22 of the GDPR and Articles 12 to 18 of the LOPD-GDD:
The right to request access to your personal data.
The right to request rectification or erasure of your personal data.
The right to request restriction of processing.
The right to object to processing.
The right to data portability.
You may request the forms required to exercise your rights from the Data Controller using the email address provided in the Data Controller’s contact details.
Additionally, you may lodge a complaint with the Spanish Data Protection Agency (AEPD). Further information is available in Section VII of this document.
To whom will your data be disclosed?
You will always be informed and, where applicable, your express consent will be requested before your personal data is disclosed or transferred internationally, in accordance with current legislation (Articles 13(1)(e) and 44 of the GDPR, as well as Articles 11(1) and 40 of the LOPD-GDD 3/2018).
We therefore inform you that the third parties with which the Data Controller works have their servers located within the EU, EEA or Switzerland and have appropriate security measures in place to ensure that data is processed securely and confidentially.
Except in the circumstances mentioned above, where required by law, in cases expressly provided for by law or where strictly necessary for the provision of a service, your data will not be transferred or disclosed to third parties.
In general, data may be disclosed to:
Technology service providers.
Payment service providers.
Courier and parcel delivery companies.
Third parties or intermediaries acting as service providers on our behalf (administrative agencies, consultancies, self-employed collaborators, etc.).
Third-party data processors, collaborators or parties with a close business relationship with the Data Controller, exclusively for the purpose of providing our services.
Data disclosures will be carried out under the strictest confidentiality standards, implementing the necessary measures, such as signing confidentiality agreements or adhering to the privacy policies published on the respective websites of the parties involved.
Users may object to the disclosure of their data to Data Processors by submitting a written request through any of the communication channels indicated above.
The Data Controller will not transfer or disclose your data to third parties, except in cases provided for by law or where the provision of a service requires a contractual relationship with a Data Processor.
Accordingly, the User accepts that some of the personal data collected may be provided to these Data Processors (payment platforms, administrative agencies, intermediaries, etc.) when necessary for the effective provision of a contracted service or the delivery of a purchased product.
The User also accepts that, in the provision of services, such services may be subcontracted, in whole or in part, to other individuals or companies acting as Data Processors, with whom the corresponding confidentiality agreement has been entered into or whose privacy policies, as published on their respective websites, have been accepted.
Users may object to the disclosure of their data to Data Processors by submitting a written request through any of the communication channels indicated above.
How have we obtained your data?
The personal data used by INTIME DESARROLLOS INFORMATICOS SL is obtained directly from the data subject, in compliance with Article 13 of the GDPR and Article 11 of the LOPD-GDD, as mentioned above, or from group companies or collaborating companies.
You may obtain further information about these companies by writing to CRISTINA.SERRANO@IGEOERP.COM / RRHH@IGEOERP.COM or by visiting the Data Controller’s office at the postal address indicated in this document.
What categories of data do we process?
The categories of personal data processed are as follows:
– Identification data:
First name.
Surname.
National identity document (DNI), foreigner’s identity number (NIE), passport or equivalent document.
Postal addresses.
Email addresses.
Sex.
Date of birth.
Place of birth.
Contact telephone number (mobile/landline).
– Commercial information:
First-party and third-party commercial information.
– Financial data:
Bank account number.
Credit card number.
– Curriculum vitae:
Academic information.
Qualifications.
Hobbies.
Membership of associations or clubs.
– Video surveillance:
Images.
The processing of sensitive data will be carried out in accordance with Article 9 of the GDPR and Article 9 of the LOPD-GDD. In all cases, the data subject will be informed of which data will be used by the Data Controller.
Security measures
Users of the Data Controller’s website are informed that the technical and organisational security measures available to us have been implemented to prevent the loss, misuse, alteration, unauthorised access and theft of data, thereby ensuring the confidentiality, integrity and quality of the information contained therein, in accordance with current data protection legislation.
Personal data collected through forms is processed exclusively by the Data Controller’s personnel or designated Data Processors.
The Website also uses SSL encryption, allowing Users to securely submit their personal data through the website’s contact or registration forms.
Social media
The Data Controller maintains profiles on some of the main social media platforms (Facebook, Instagram) and acknowledges its status as Data Controller for the data of its followers, fans, subscribers, commenters and other User profiles (hereinafter, followers) published by the Data Controller.
Where not prohibited by law, the purpose of processing data by the Data Controller will be to inform followers about its activities and offers through any means permitted by the social media platform, as well as to provide personalised customer service.
The lawful basis for this processing is the consent of the data subject, which may be withdrawn at any time.
Under no circumstances will the Data Controller extract data from social media platforms unless the User’s specific and express consent has been obtained for that purpose (for example, for the organisation of a competition).
Confidentiality
The information provided by the User will, in all cases, be treated as confidential and may not be used for purposes other than those described herein.
The Data Controller undertakes not to disclose or reveal information concerning the User’s intentions, the reasons for requesting advice or the duration of their relationship with the Data Controller.
Accuracy of data
The User declares that all data provided is true and accurate and undertakes to keep it up to date.
The User is responsible for the accuracy of their data and will be solely responsible for any disputes or legal proceedings that may arise as a result of providing false information.
To enable us to keep personal data up to date, Users must inform the Data Controller whenever any changes occur.
Documentation prepared by LegalDPO , based on the information provided by the Data Controller.
The content complies with the legislation in force as of February 2023 and may vary in accordance with legislative changes or judicial interpretations. It is the responsibility of the website owner to verify the validity of the applicable legislation at all times.
We make every effort to comply with data protection legislation, as we consider data protection to be of the utmost importance.
However, we inform you that, if you believe your rights have been infringed, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), located at C/ Jorge Juan, 6, 28001 Madrid, Spain.
Further information about the AEPD is available at http://www.agpd.es/ .
Documentation prepared by LegalDPO: https://legaldpo.es/ .
