Privacy policy
This is a translation provided for convenience. The Spanish version is the legally binding one.
Identity and contact details of the data controller
DATCISIONS, S.L., a company domiciled in Nigrán (Pontevedra), Spain, with tax ID (CIF) B67969915, is the controller of the personal data processed through this website. This clause provides information about how the Company will use your personal data.
This Privacy Policy also sets out the rights that both registered and unregistered Users have under GDPR 2016/679 and Organic Law 3/2018 on the Protection of Personal Data. If you have any questions about the processing of your personal data, please contact the Company at clientes@datcisions.com
Where this information is given
On the following website: www.datcisions.com (more information in our legal notice).
Data processing
Through this website, DATCISIONS, S.L. sets out its privacy policy on the processing and protection of the personal data of anyone with whom it has a relationship that requires processing their data.
The operations, activities and technical procedures, automated or not, that allow personal data to be collected, stored, modified, transferred and otherwise handled are considered processing of personal data. In this case we inform you of joint processing where necessary to manage services and/or products contracted with any of the companies mentioned above, without prejudice to section 4 of this policy.
Maximum transparency: for this reason we tell you how we process data, even when we do not collect data through the website.
We do not share data with third parties; your data is safe. It will only be disclosed to third parties when there is a legal obligation to do so or when it is essential in order to provide you with the service. We tell you about this under “Recipients”.
Legal compliance: DATCISIONS, S.L. complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR), Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights, and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE or LSSI), and, although repealed as it regulated LOPD 15/99, continues to apply the security measures of Royal Decree 1720/2007.
1. Data controller
In compliance with current data protection legislation, we inform you that the personal data you provide voluntarily through any of our means of collecting information will be included in automated and/or manual processing, DATCISIONS, S.L., with which you have the contractual relationship, being the Controller of that processing. The data will not be disclosed to third parties except where there is a legal obligation.
DATCISIONS, S.L. also declares and guarantees that it maintains the security levels for the protection of personal data required by current legislation, and that it has put in place all the technical means within its reach to prevent the loss, misuse, alteration, unauthorised access to and theft of the data provided by data subjects, and to ensure that its employees observe these requirements, as well as the duty of secrecy over the protected data and other applicable confidentiality obligations.
2. What personal data do we process?
Processing your data is necessary to give you access to the content and/or features of our Website or, if you request it, to send you information or provide the services offered through it. We are firmly committed to processing your personal data lawfully and consistently, in accordance with the principles and legal obligations of current personal data protection regulations.
When you browse our Website and, in particular, when you interact with it, you provide us with data directly, for example when you fill in any online form or request for the processing purposes indicated in each case (for example, the contact form).
The data you provide relates to those forms. We will always ask only for data that is adequate, relevant and limited to what is necessary for those processing purposes (principle of data minimisation):
- Contact and identification data: first name, surname, address, telephone number, email address.
- Commercial data and preferences: information you give us about your preferences, for example the type of services you are interested in.
- Any data you decide to give us voluntarily.
- Data arising from the communications you have with us.
- Information about your own browsing in the case of Online Services (IP address or information derived from cookies or similar devices; see our Cookie Policy on the website).
- Information available in publicly accessible sources that we may lawfully access.
- Data arising from the contractual or pre-contractual relationship you have with us, including your image, in which case we will always inform you that your image may be captured.
- Data that third parties provide to us about you, where there is a legitimate basis for doing so or your consent has been obtained.
- Data about third parties that you provide to us, with the prior consent of the third party concerned.
3. How do we process data?
At DATCISIONS, S.L. we always process your personal data in strict compliance with current legislation. We also inform you that we have appropriate technical and organisational measures in place to guarantee an optimal level of security, thereby ensuring that only authorised persons will have access, that we will keep the data intact, preventing any intentional or accidental loss, and that we have reinforced our data processing systems and services.
The operations, activities and technical procedures, automated or not, that we carry out and that allow personal data to be collected, stored, modified, transferred and otherwise handled are considered processing of personal data.
4. Purposes of the data
DATCISIONS, S.L. processes your data for the following purposes:
- To enable you to browse our Website, giving you access to the information and content on it.
- To handle and manage your queries and requests.
- To send you all the information you need about the features of the service you have requested from us.
- If you agree, or there is sufficient legal basis, to send you information and advertising about offers, products, services, promotions, gifts and campaigns relating to our services.
- To provide proper customer service to data subjects.
- To carry out quality control of our services through possible opinion surveys.
- If you have accepted the cookie policy, to pursue the purposes associated with the different types of cookies described in it. You may configure the use of cookies whenever you wish, and you have the right to withdraw your consent to the purposes associated with cookies. Please note that withdrawing your consent to the processing of your data for certain types of cookies, such as session or technical cookies, may prevent you from browsing our Website (see the cookie policy).
- To adopt any protective measures applicable under current regulations, including the possible anonymisation of your personal data using the appropriate techniques available. Accordingly, anonymisation and pseudonymisation may also be carried out in this context to better protect your personal data.
- To apply the relevant technical and/or organisational security measures to your personal data, according to the risk at any given time.
- In general, to comply with legal and regulatory obligations according to the sector of activity (without limitation or exclusion), towards judicial bodies, regulatory and supervisory bodies and the state security forces, with which we are obliged to comply under the laws of the countries in which the activity is carried out, including actions aimed at detecting fraud and preventing crimes or unlawful acts.
5. Legal basis for processing
The legal basis for processing Personal Data is your express consent (art. 6.1(a) GDPR) and, depending on the case, the legitimate interest (art. 6.1(f) GDPR) of ourselves or third parties, the application of pre-contractual measures (art. 6.1(b) GDPR) at the request of the data subject, or your consent (art. 6.1(a) GDPR).
For sending information and advertising about offers, products, services, promotions, gifts and campaigns, the legal basis for processing your data in commercial communications is your consent (art. 6.1(a) GDPR) and, where they are covered by article 21.2 of Law 34/2002 of 11 July on Information Society Services and Electronic Commerce, legitimate interest (art. 6.1(f) GDPR).
6. Minors
Children under 14 may not use the services available through the Website without the prior authorisation of their parents, guardians or legal representatives, who will be solely responsible for all acts carried out through the Website by the minors in their care, including filling in forms with those minors' personal data and ticking, where applicable, the accompanying boxes. In this regard, and since DATCISIONS, S.L. is unable to check whether users are minors, parents and guardians are warned that it is up to them to put in place the necessary mechanisms to prevent minors from accessing the Website and/or providing personal data without their supervision, and DATCISIONS, S.L. accepts no liability in this respect.
7. Electronic communications
- If you receive communications by these means (emails, automated form replies and other communication systems), we inform you that the messages are intended solely for their addressee and may contain privileged or confidential information. If you are not the intended addressee, you are hereby notified that any use, disclosure and/or copying without authorisation is prohibited under current legislation.
- In accordance with Law 34/2002 of 11 July on Information Society Services and Electronic Commerce and Directive 2002/58/EC, we inform you that if you do not wish to receive commercial communications and information through this electronic channel, you can tell us through the same channel, writing BAJA COMUNICACIONES (unsubscribe) in the subject line, so that your personal data is removed from our database. Your request will be actioned within 10 days of being sent. If we do not receive an express reply from you, we will understand that you accept and authorise our company to continue sending these communications.
8. How long do we keep your data?
Personal data relating to natural persons that DATCISIONS, S.L. collects by any means will be kept until the data subject requests its erasure. It will also be kept for as long as the relationship that gave rise to the processing lasts, respecting in any case the legal retention periods. At the end of this period, the personal data will be deleted from all DATCISIONS, S.L. systems.
9. Who will your data be disclosed to?
There will be no disclosure, transmission or transfer of personal data, other than those already described, except where required by law. If the Public Administration or Regional Institutions request your data within the scope of the functions expressly attributed to them by law, it will be transmitted.
Should there be any disclosure, transmission or transfer of personal data outside the cases described above, you will be informed beforehand so that you can give your consent where appropriate.
However, in order to organise ourselves properly and have sound operations and procedures that ensure the good management of DATCISIONS, S.L., it may be necessary to engage advisers, professionals or other service companies to process data under our instructions.
This processing on behalf of third parties is governed by a contract in writing, or in some other form that allows its conclusion and content to be proven, expressly specifying that the processor will process the data in accordance with our instructions, will not apply or use it for any purpose other than that set out in the contract, and will not disclose it, not even for storage, to other persons.
10. What are your rights when you provide us with data?
Data protection regulations give the owner of personal data the following rights:
- Right to withdraw any consent previously given.
- Right of access: to know what type of data is being processed and the characteristics of the processing carried out.
- Right of rectification: to request the correction of data that is inaccurate or untrue.
- Right to portability: to obtain a copy, in an interoperable format, of the data being processed.
- Right to restriction of processing where you consider it is not necessary.
- Right of erasure: to request that processing stops and the data is deleted when it no longer needs to be kept.
- Right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), C/ Jorge Juan, 6, 28001 Madrid. Fax: 914483680. Tel: 901 100 099.
- If you would like more information about the processing of your data, to correct any inaccurate data, to object to and/or restrict any processing you consider unnecessary, or to request that processing be cancelled when the data is no longer needed, you can write to: email: clientes@datcisions.com, Tel: 986599271.
- Your request must include the following information: the user's full name, the request itself, their address and supporting documentation.
- Rights must be exercised by the user in person. However, they may be exercised by a person authorised as the legal representative of the user. In that case, documentation proving this representation of the data subject must be provided.
11. Purposes of data processing
Below are the purposes of the data processing carried out by the Data Controller:
RECORD OF PROCESSING ACTIVITIES: CONTACTS
- PURPOSE: Sending commercial information, offers, and information about products and/or services to customers and/or potential customers.
- LEGAL BASIS: Express consent of the data subject (art. 6.1(a) GDPR).
- DESCRIPTION: Category of personal data (identification: full name, telephone, email).
- DISCLOSURE OF DATA: No data will be disclosed to third parties.
- DATA ERASURE PERIOD: Until your request for information has been resolved.
