WHAT TYPES OF PERSONAL DATA DO WE PROCESS AND FOR WHAT PURPOSE?

1-Types of personal data we process

We may collect and process the following categories of personal data:

1. Name, title, gender.
2. Your contact details, company name and position within it, address, phone number, NIF, and your email address.
3. If you contract our services, all the data you provide to carry them out.
4. Communicating with you:

We record your communications with us made via email or other channels. When you make a phone call, our customer service team may record your queries in our database.

1. Information collected when using our website and other digital channels, if applicable.

When you use our website, we may log your IP address, browser type, operating system, referring website, and web browsing behavior.

1. Information related to social networks.

Depending on your social network settings, we may receive information from your social network provider. For example, when you log in with a social media account to use our services, we may receive your social media profile including contact details, interests, and connections. For more information about the personal data we receive from your social network provider and how to modify the settings, please check the website and privacy policy of your social network provider.

1. Information you choose to share with us.

You may choose to share information with us, for example, by adding a comment on LinkedIn, completing a customer survey, or others.

2-Your personal data will only be used for the following purposes:

1. Registering you in our database if you contract our services.
2. Performing the necessary commercial and administrative management with users of our website and our customers or potential customers.
3. At GRUP Servycat, we process the information you provide to respond to the information request you send us, to provide information about our products and services, to manage the sale of our products internally and externally, as well as the purchases we make from our suppliers, the contracting of our services, and to comply with the legal obligations arising from these activities.
4. Sending commercial advertising communications via email, social networks, or any other electronic or physical medium, if you have expressly consented to receiving such commercial communications electronically. If you have registered in our customer database, we may send you commercial information related to our services without requiring prior consent.
5. Communicating with you to respond to your queries and handle your complaints.
6. Communicating with you to obtain your opinion on the quality of our services or the treatment received.
7. Similarly, the data collected during your browsing will be processed to provide access to online content on the website, as well as attend to user requests, maintain statistics of visits (IP addresses, browser data, country, page accessed, etc.) so we can improve our services and products, optimize our offerings, provide better customer service, and improve the design and content of our websites.
8. The data of our clients and suppliers will be processed, within the contractual relationship that links them with us, to comply with the necessary administrative, fiscal, accounting, and labor obligations under current legislation.
9. Objection or revocation. You can object to or revoke your consent to receive marketing communications at any time by following the instructions in the relevant marketing communication or contacting us via our email lopd@servycat.com.
10. If you fill out any of the forms on our website, it will be necessary to provide certain personal data, which will be processed for the purpose for which they are requested. You will be asked to confirm that you have read our Legal Notice before your data is collected.

In accordance with the LSSICE, we inform you that GRUP Servycat does not engage in SPAM practices, meaning that we do not send commercial emails without the necessary legitimacy. In any case, you will always have the option to withdraw your consent to receive our communications.

We will not process your personal data for any other purpose than those described in this Policy, unless required by legal obligation or judicial order.

Your personal data will not be subject to decisions based on automated processing that produce effects on you.

WHAT IS THE LEGAL BASIS THAT LEGITIMATES THE PROCESSING OF YOUR DATA?

The legal basis that legitimizes the processing of your personal data is your express consent granted to carry out the purposes previously described, which will be requested when you request information from us, or by ticking the relevant box when providing your data in any of our personal data collection forms.

If a commercial relationship occurs between you, either as a client or supplier, and GRUP Servycat, the legal basis that will legitimize the processing of your personal data will be the execution of the contractual relationship that will have been created, as well as, if applicable, compliance with the corresponding legal obligations.

If you do not provide us with your personal data or do not accept our privacy policy, GRUP Servycat will not process your personal data, but it may also mean that we cannot send you information or, if applicable, provide you with our services.

Commercial Information.

Any communication sent will be incorporated into GRUP Servycat’s information systems.

If you provide us with your email and accept this privacy policy, we inform you that GRUP Servycat may carry out the following activities and/or actions unless you indicate otherwise:

Sending any information, including commercial information about news, updates, etc., and any information related to our activities or services contracted by our clients. The legal basis that legitimizes this processing is our legitimate interest in the commercial relationship established with you.

RETENTION PERIOD How long will we keep your data?

The personal data you provide will be kept for the time necessary to manage the information you request from us, as well as to manage your operations or for the fulfillment of any contract generated between GRUP Servycat and third parties. If we have your identifying data in our database for sending commercial information, it will be kept as long as the necessary legal basis that legitimizes its retention and use is maintained. You can cancel your data at any time to stop receiving commercial information.

Once the data has fulfilled the purposes for which it was collected, we will delete it permanently. However, we will keep your data longer if necessary for compliance with legal obligations. It may also be necessary to retain it for the period required for the prescription of legal responsibilities that may arise.

The data you provide to initiate a personnel selection process in GRUP Servycat or any of the Group companies will be kept for a maximum period of one year. Afterward, if you are not hired by GRUP Servycat or any of the Group companies, and you are not part of any ongoing selection process, the data will be deleted, and we will not retain a copy.

The personal data of our employees will be retained for the duration of their employment relationship with GRUP Servycat and, later, for the periods legally required.

The personal data of candidates preselected by an ETT and provided to us during a personnel selection process will only be kept during this process and later, if the candidate is selected by GRUP Servycat. Otherwise, the data must be returned to the ETT or destroyed, as instructed by the ETT, and we will not retain a copy unless it is temporarily retained for a future selection process.

TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

Within our organization, your personal data will be processed by duly authorized personnel, and, if necessary or practical to fulfill the purposes stated above, they may be processed by third parties.

The categories of recipients to whom your personal data may be communicated are the following:

Among the companies of our group, listed in the first point of this policy, for operational reasons of administration, management, and database unification.

Third parties appointed as data processors, such as IT providers, consultants, advisors, and other companies providing auxiliary services.

Public entities and organizations, exclusively to comply with the corresponding legal obligations.

Other providers to whom, where applicable, your personal data may be transferred, such as transporters, financial institutions, fraud detection service providers, etc.

Our employees' data may be provided to our clients when they request it in order to provide their services at their facilities, in compliance with occupational risk prevention regulations.

Social media providers.

Third-party websites. Our websites may link to third-party websites. If you follow these links, you will leave our website or mobile applications. This privacy policy does not apply to third-party websites. Servycat Group disclaims any responsibility for third-party use of your personal data. The use of these websites is at your own risk.

In any case, all the third parties mentioned above will have signed, beforehand, the corresponding confidentiality commitment following our instructions in accordance with current data protection regulations, and will be subject to professional secrecy or will act in compliance with a legal obligation.

The information you provide to us through this website will be hosted on Servycat Group's servers.

WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE YOUR DATA?

If you wish to exercise the rights granted by data protection regulations, please send us an email to the following address: lopd@servycat.com, indicating the right you wish to exercise in the subject line and attaching a copy of your national identity card or passport.

The rights recognized by current regulations and that you may exercise, where applicable, are:

Right of Access to Data:

You have the right to know whether Servycat Group is processing your personal data, and if processing is confirmed, you will be granted access to the following information:

- The purposes of the processing.

- The categories of data being processed.

- The retention period or criteria for storing the data.

Right to Rectification of Data:

You have the right for Servycat Group to rectify your data when they are inaccurate or incomplete through an additional rectifying statement.

Right to Erasure of Data:

You have the right to have your data erased by Servycat Group when:

- The processing is unlawful.

- You have withdrawn your consent.

- They are no longer necessary for the purposes for which they were collected or processed.

- You have exercised your right to object, and no other legitimate grounds for processing prevail.

- The data must be erased to comply with a legal obligation of Servycat Group.

You will not have the right to have your data erased when processing is necessary:

- To exercise the right to freedom of expression and information.

- To comply with a legal obligation of Servycat Group.

- For the formulation, exercise, or defense of claims.

- For public interest based on current legislation for public health reasons or for historical, statistical, or scientific research purposes.

Right to Data Portability:

You have the right to have Servycat Group transmit your data to another data controller or to the data subject themselves, in a structured, commonly used, and machine-readable format, when processing is carried out by automated means and is based on:

- The consent of the data subject for specific purposes.

- The execution of a contract or pre-contract with the data subject.

The right to data portability does not apply when:

- Technical transmission is impossible.

- It could negatively affect the rights and freedoms of third parties.

- The processing serves a public interest mission based on current legislation.

Right to Restriction of Processing:

The data subject has the right to object to the processing of their data carried out by Servycat Group for reasons related to their specific situation, when the processing is based on:

- Direct marketing.

- Profiling.

- Legitimate interest of the controller or third parties, as long as it does not override the interests or rights and freedoms of the data subject, especially if they are a child.

- Historical, statistical, or scientific research, unless processing is necessary for public interest reasons.

Even if the data subject objects to the processing of their data, Servycat Group may continue processing them as long as their legitimate interest prevails over the interests or rights and freedoms of the data subject in a judicial procedure justifying it.

Servycat Group must inform the data subject about the right to object to the processing of their data explicitly, clearly, and separately from any other information, at the time of the first communication.

Right to Object:

This is the right for the processing to not take place or to cease when it is not necessary for consent, based on a legitimate and well-founded reason, related to the data subject's personal situation, justifying it, and provided that no law mandates otherwise.

Right Not to Be Subject to Profiling:

The data subject has the right not to be subject to profiling aimed at making automated decisions based on data processing to evaluate, analyze, or predict the following personal aspects:

- Professional performance.

- Economic situation.

- Health.

- Personal preferences or interests.

- Reliability.

- Behavior.

- Location or movement of the person.

When profiling is solely based on automated processing:

- The data subject has the right to be informed if the decision that may be made could significantly affect them legally.

- The data subject has the right to obtain human intervention from Servycat Group, to express their point of view, and to challenge the decision if processing was authorized through:

- The explicit consent of the data subject.

- A contract between Servycat Group and the data subject.

This right will not apply to profiling when the decision made as a result of this is authorized through:

- The explicit consent of the data subject.

- A contract between Servycat Group and the data subject.

- Processing based on current legislation.

COMPLAINT TO THE CONTROL AUTHORITY:

If you consider that Servycat Group has violated any of your rights protected by data protection regulations or that it has breached any obligation in terms of personal data protection, you have the right to file a complaint with the competent control authority, which in Spain is the Spanish Data Protection Agency, located at Calle Jorge Juan, 6. 28001 – Madrid.

Phone: 901 100 099 - 912 663 517

You can also file an electronic complaint through the electronic headquarters available on their website https://www.aepd.es 

ADDITIONAL INFORMATION 

-SOCIAL NETWORKS (PRIVACY POLICY)

We inform you that Servycat Group may have a presence on social networks. The processing of data carried out from individuals who follow social networks (and/or make any link or connection action through social networks) of the official pages of Servycat Group will be governed by this section, as well as by the terms of use, privacy policies, and access rules of the corresponding social network, accepted previously by the user.

Servycat Group will process your data to properly manage its presence on the social network, inform about activities, products, or services provided, as well as for any other purpose permitted by the rules of social networks.

The publication of content is prohibited:

- That is allegedly unlawful under national, community, or international regulations, or carries out allegedly unlawful activities or violates the principles of good faith.

- That attacks the fundamental rights of individuals, lacks courtesy on the network, annoys or may generate negative opinions in our users or third parties, and in general, any content that Servycat Group considers inappropriate.

- And in general, that contravenes the principles of legality, honesty, responsibility, protection of human dignity, protection of minors, protection of public order, protection of private life, protection of consumers, and intellectual and industrial property rights.

Additionally, Servycat Group reserves the right to remove, without prior notice, from its website or corporate social network, any content it deems inappropriate.

Communications sent via social networks will be incorporated into a file owned by Servycat Group, and information of interest may be sent.

You can access more information, as well as consult the companies that are part of our group, in this privacy policy.

In any case, if you send personal information via the social network, Servycat Group will be exempt from responsibility regarding the security measures applicable to the platform, and the user, if they wish to know them, must consult the corresponding conditions of the network in question.

SECURITY MEASURES:

The data provided will be processed with absolute confidentiality. Servycat Group has adopted all the technical and organizational measures required by the current data protection regulations to guarantee the confidentiality, integrity, and availability of the data. The appropriate measures have been implemented to avoid data loss, misuse, unauthorized access, and theft.