MITATI PRIVACY POLICY
Our data protection policy is constructed and communicated in accordance with the applicable regulations, especially in relation to EU Regulation 2016/679 of the European Parliament and of the Council, regarding the protection of natural persons with regard to the treatment of personal data and the free circulation of these data, and by which Directive 95/46/CE (hereinafter, the "RGPD") and Law 3/2018, of December 5, on Data Protection are repealed and Guarantee of Digital Rights.
MITATI has also adopted the necessary technical and organizational measures to guarantee the confidentiality, security and adequate treatment of personal data, avoiding its alteration, loss, treatment or unauthorized access in accordance with the provisions of the applicable regulations, taking effective measures and complying, in any case, with the level of security appropriate to the level of the data processed. This work is carried out continuously, taking into account legislative or MITATI developments.
This policy may vary over time due to possible legislative changes or other business management reasons. Every time there is a change, it will be reflected, immediately, on the website, and the appropriate communications will be made, where appropriate.
The firm manages data of natural persons in the performance of a professional position or function, as well as personal data in the private sphere. Both categories have been catered for in establishing this privacy policy. The entity can act as RESPONSIBLE or as MANAGER OF THE TREATMENT. The privacy policy addresses and covers both types of action.
Who is RESPONSIBLE FOR THE PROCESSING of your data?
MITATI , with registered office at (), (). CIF (). email: ()
RESPONSIBLE FOR DATA PROTECTION : ()
PURPOSE OF DATA PROCESSING AND CONSERVATION
MITATI treats the information provided by its clients and other interested persons, with the following purposes:
Purposes of a contractual nature, in relation to associates, suppliers, collaborators and employees, to carry out the management of the provision of the rights and obligations derived from the contractual relationship.
Purposes based on the consent of the interested party, for information purposes in relation to activities and actions of the firm.
Regulatory purposes, for the fulfillment of its legal and/or regulatory obligations.
Purposes based on legitimate interest, under the provisions of article 19 of the LOPDGDD (Organic Law 3/2018 of December 5) and article 6.1.f) of EU Regulation 2016/679.
The data will be processed in the condition of RESPONSIBLE FOR THE TREATMENT, when they are collected and processed by MITATI
The data will be processed in the capacity of DATA PROCESSOR, when MITATI processes the data to provide a service to a third entity, which is responsible for the data.
DATA CONSERVATION
The personal data provided will be kept:
During the time required to fulfill the purpose for which they are collected, or for which the contractual relationship requires, including the time necessary, in accordance with applicable regulations, to comply with the relevant obligations and actions that may arise from it. .
As long as its deletion is not requested by the interested party.
being blocked when the first of the two events mentioned above occurs.
From that moment, it will be at the exclusive disposal of Judges and Courts, the Public Prosecutor or the competent Public Administrations, in particular the data protection authorities, for the attention of the possible responsibilities arising from the treatment, during the limitation period. of this. Once the aforementioned period has expired, the data will be deleted.
Profiling is not done.
LAWFUL TREATMENT
As RESPONSIBLE FOR THE TREATMENT, the legal basis for the treatment of your data is based on:
In the contractual relationship and execution of the signed contract.
In the event that you have expressly given your consent, the legal basis is said consent.
Legal legitimacy based on regulatory purposes.
In the legitimate interest, under article 19 of the LOGPGDD.
As MANAGER OF THE PROCESSING, it is up to the entity that has contracted us as a service provider, in its capacity as RESPONSIBLE FOR THE PROCESSING, to establish the legitimacy and treatment model.
RECIPIENTS OF THE DATA
The data is communicated to our collaborators who perform services such as subcontractors, legal firms, collaborators in charge of the treatment. In these cases, the corresponding data processing contract is signed with the recipient, which is required by the General Data Protection Regulation.
INTERNATIONAL DATA TRANSFERS
In relation to any transfer of your personal data to countries outside the EEA, the firm will implement the appropriate specific measures to guarantee an adequate level of protection of your personal data.
RIGHTS OF USERS
Any person has the right to obtain confirmation as to whether or not MITATI is processing personal data that concerns them.
Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which they were. collected.
In certain circumstances provided for in article 18 RGPD, the interested parties may request the limitation of the processing of their data, in which case MITATI will only keep them for the exercise or defense of claims.
Interested parties may object to the processing of their data for marketing purposes, including profiling. The Foundation will stop processing the data, except for compelling legitimate reasons or the exercise or defense of possible claims.
By virtue of the right to portability, the interested parties have the right to obtain the personal data that concerns them in a structured format for common use and mechanical reading and to transmit them to another person in charge.
EXERCISE OF RGPD RIGHTS BY THE USER
By writing to the addresses indicated above.
USER RESPONSIBILITY
The User guarantees that the personal data provided through the form is true, being obliged to communicate any modification of the same. Likewise, the User guarantees that the information provided corresponds to their real situation, that it is updated and accurate. In addition, the User undertakes to keep their data updated at all times, being solely responsible for the inaccuracy or falsity of the data provided and for the damages that may be caused to MITATI as the owner of the portal.
CLAIM BEFORE THE SPANISH DATA PROTECTION AGENCY
If you understand that your request has not been resolved correctly, you can go to request the protection of the Spanish Agency for Data Protection, whose data can be consulted at www.agpd.es
DATA CATEGORIES
What categories of data does MITATI process?
Identification data.
Information about your role or professional activity.
Economic data.
Generally, the special categories of articles 9 and 10 of the RGPD are not treated. If at any time this is the case, the entity will comply with the requirements of articles 9 and 10, and the explicit consent will be collected.
The data received or collected is necessary to fulfill the indicated purposes, and is treated confidentially in accordance with the privacy and security policies established by the firm.
ORIGIN
As RESPONSIBLE FOR THE PROCESSING, the personal data that MITATI processes comes from the information that you provide us when: you request services or resources, access our website, or establish any type of relationship, directly or indirectly.
As DATA PROCESSERS, the data comes from the DATA CONTROLLER, or MITATI collects it for themselves, during the provision of the service contracted with the DATA CONTROLLER.