Privacy Notice

We want you to know, through this notice, what are the criteria we follow regarding the use of the data you provide us, or that we have collected through third parties.

Our data protection policy is constructed and communicated in accordance with the applicable regulations, most notably in relation to the EU Regulation 2016/679 of the European Parliament and of the Council (hereinafter, GDPR) on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

This policy may change over time due to possible legislative changes. In case of any modification, we will keep you informed through this page.

ARRABE has adopted the necessary technical and organizational measures to guarantee the confidentiality and security of personal data, avoiding its alteration, loss, treatment or unauthorized access in accordance with the stipulations of the applicable regulations, and complying, in any case, with the level of security appropriate to the level of data processed.

ARRABE manages data of natural persons in the performance of a professional position or function, as well as personal data in the private sphere. Both categories have been considered when establishing this privacy policy.

What is personal data?

Personal data refers to any information or data that can identify you directly (e.g., your first or last name) or indirectly (e.g., your national identity card or ID card) without disproportionate effort. Personal Data can be considered as information relating to a natural person, such as e-mail / private postal addresses / cell phone number, usernames, etc.

Who is the data controller?

The person responsible for processing your data is:

ARRABE INTEGRA, S.L. (hereinafter ARRABE).

TAX ID B82529058

C/Alfonso XII, 20, Planta 1ª – 28014 Madrid

Tel. 915 489 540

protecciondedatos@arrabeintegra.es

Purpose of Processing

For what purpose do we process your personal data?

ARRABE processes the information provided by the interested parties for the following purposes:

  1. CONTRACTUAL NATURE PURPOSES: to facilitate the management of the provision of the agreed services, to maintain the commercial relationship, as well as any other service that is subsequently contracted.
  2. If you give your consent, for marketing purposes, for the offering of products or services of our own or of third party companies related to the sectors of legal and tax advice, auditing, accounting, financial and strategy advice, personnel management, for the offering of products or services within the business and private sphere of all the companies of the Afianza Group, whose list is available to you at the mailing and email addresses indicated above.
  3. PURPOSES BASED ON LEGITIMATE INTEREST, under the protection of the provisions of Article 19 of the LOPDGDD (Organic Law 3/2018 of December 5) and Article 6.1.f) of EU Regulation 2016/679, with regard to contact details, function or positions held by natural persons providing services in a legal person, referring only to the data necessary for their location and to maintain relations of any kind with the legal person in which the affected person provides their services.
  4. PURPOSES PROTECTED 6.1.c) RGPD AND ARTICLE 8.1 LOPDGDD, when the processing is necessary for compliance with a legal obligation required of the controller, imposed by a rule of European Union law or a rule having the force of law, which may determine the general conditions of the processing and the types of data subject to it, as well as the transfers that may be required as a result of compliance with the legal obligation.

How long will we keep your data?

The personal data provided will be kept

  • As long as required by the business relationship,
  • If their deletion is not requested by the interested party.

being blocked when the first of the two above-mentioned events occurs. From that moment, it will remain at the exclusive disposal of Judges and Courts, the Public Prosecutor’s Office or the competent Public Administrations, particularly the data protection authorities, for the attention of possible liabilities arising from the treatment, during the prescription period of these. Once the period has expired, the data will be deleted.

Is profiling performed?

No profiling is not performed.

To which recipients are your data communicated?

The data is communicated to our collaborators who perform services as data processors. There are no international data transfers.

Lawful Processing

What is the legal basis for the processing of your data?

The legal basis for the processing of your data is based:

  • On the contractual relationship and execution of the contract entered with us.
  • If you have expressly given your consent, the legal basis is such consent.
  • The processing of personal data, for compliance with the obligations established under the regulations for the prevention of money laundering is covered by the provisions of Article 8.1 of Organic Law 3/2018, of December 5, and Article 6.1.c) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, not requiring the consent of the data subject. Nor will consent be required for data communications made under the regulations for the prevention of money laundering, being also covered by Article 8.1 of Organic Law 3/2018, of December 5.
  • Covered by the concept of legitimate interest, established in Recital 47 and Article 6.1.f) of the GDPR, once the rights and freedoms of the data subjects and the interests of the Company have been weighed, based on the following criteria:
    • The interests or fundamental rights and freedoms of data subjects are the general ones that require the protection of personal data. In addition, data of minors or data of special categories are not included.
    • The risk to the interests or fundamental rights and freedoms of data subjects is minor or non-existent, due to the information processed and the technical and organizational measures adopted by the Company.
    • The obligation of its customers who use their data to include such information in the advertising communications they send to users.
    • This information is published on the company’s website, and
    • An adequate and simple management, processing and information process has been created, in relation to the exercise by the interested parties of their RGPD rights.

Rights

What are your rights?

  • Any person has the right to obtain confirmation as to whether AFIANZA is processing personal data concerning them.
  • Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
  • In certain circumstances provided for in Article 18 RGPD, data subjects may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.
  • Data subjects may object to the processing of their data for marketing purposes, including profiling. ARRABE will stop processing the data, except for compelling legitimate reasons or the exercise or defense of possible claims.
  • Under the right to portability, data subjects have the right to obtain the personal data concerning them in a structured, commonly used and machine-readable format and to transmit it to another data controller.

How can the rights be exercised?

  • By writing to ARRABE INTEGRA, S.L., C/ Alfonso XII 20, 1ª planta, 28014 Madrid.
  • By e-mail to protecciondedatos@arrabeintegra.es

What are the different ways to make a claim?

If you consider that ARRABE has not solved your request correctly, you can request the protection of the Spanish Data Protection Agency, whose details can be consulted at www.aepd.es.

Data Categories

What categories of data do we process?

  • Identification data.
  • Data about your function or professional activity.
  • Economic-financial information.
  • Labor and employee information.
  • Information for the management of legal proceedings and legal matters in general.

No special categories of articles 9 and 10 of the RGPD are processed, except for data relating to health, if you have contracted our labor department services or in specific cases. In relation to such data, when used, the Company complies with the legal requirements and explicit consent is collected.

Personal data is treated confidentially in accordance with the privacy and security policies established by the Company.

The data received or collected are those necessary to fulfill the purposes indicated.

Origin

How did we obtain your data?

The personal data that we process comes from the information that you provide when you contract with ARRABE, access our website, or establish any type of relationship with us, directly or indirectly.