Version updated to RGPD. 25/05/2018
I. Who is responsible for the processing of your data?
In accordance with current regulations on the Protection of Personal Data, we inform you that the data provided have been incorporated into the customer file whose owner and controller is the Responsible with address at Carrer Santes Creus, 1, Vilanova de Meià, 25735.
You may contact the Legal and Regulatory Compliance Officer at info@cyberadvisio.com or by letter addressed to Carrer Santes Creus, 1, Vilanova de Meià, 25735, for any questions or concerns about our privacy practices or your personal information choices.
II. Users
The access and/or use of the aforementioned website of Responsible attributes the condition of USER to any natural person who is interested in products and services offered through its web pages or who accepts, from its entry and/or use, the General Conditions of its services that, where appropriate, may be established. These Conditions will be applicable independently of the General Conditions of Contracting that are of obligatory compliance.
III. How did we obtain your personal data?
The personal data that we process at the Controller come from the data subject.
The categories of data that are or may be processed are:
- Identifying information (name, user name, address, postal code, telephone number, cell phone number, e-mail address, identification document, organization where you work and position).
- Electronic identification information (IP addresses, cookies).
- Banking and payment information (credit card information, account number).
- Quality of search and survey results.
- Information about your interaction with and use of the services, products and websites, including connection information, platform, device, error reports, bandwidth, page view statistics, traffic to and from our websites, usage statistics.
- Products or services contracted.
- Correspondence between the Responsible Party and you.
- Information on searches performed and documents accessed, interactions with documents (bookmarking, printing, adding notes, selecting fragments).
- Number of users in your organization.
- Recordings of telephone calls from commercial agents and/or customer services.
No specially protected data is processed.
IV. For what purposes do we process your personal data?
The personal data provided will be used for:
- Registration for access to our website, manage the contractual relationship for the sale of computer equipment and services.
- Registration on the website for access to products and services offered to distributors and as a prerequisite to the subscription and execution of product contracts.
- Administrative and accounting management requirements, issuing and sending invoices, and compliance with tax and commercial laws. The data will be kept for the legally established period.
- To allow, with your explicit consent, marketing actions, commercial information, promotions, training, events, sending communications and advertising material, including by digital messaging. The data will be kept until the revocation of consent.
- Account setup and management: name, email, phone and device information, technical support, identity verification, sending account and service related information.
- Personalization: sending and suggestion of adapted content, personalization of the service experience. Some services may require geographic localization.
- Services offered: storage of data and documents as part of products or solutions. Access to this information is limited to authorized personnel with important business reason, such as technical assistance.
V. How, when and with whom is personal information shared?
The Responsible Party shares or discloses personal information only when strictly necessary to provide services or business operations.
- Data processing within the Data Controller is shared only by internal staff for the provision of services, account management, sales, marketing, technical support, customer service and product development.
- All employees and processors (contractors, advisors, managers, legal consultants) must follow the privacy and data security policies.
- Business partners: Sometimes, agreements are made to provide joint services, offer content or hold events. You may be a customer of both the Controller and its partner, and both may collect and share information about you. See our partners’ privacy statements for more details.
- Third-party service providers: Personal information is only available to them when necessary to fulfill contracted services, such as software, systems, marketing, cloud hosting, data analysis, order fulfillment and delivery. They may not use or share the information for other purposes.
- Transfer to third parties for legal reasons: to comply with legal obligations and to respond to requests from government agencies, tax authorities, customs, banking entities, transportation services, law firms, consulting, insurance, accounting or auditing firms. Also in cases of merger, sale, restructuring, acquisition or similar processes.
- To protect rights, systems and services, as well as users.
VI. What are your rights regarding your personal information?
You may exercise your rights of access, rectification, deletion, limitation of processing and opposition to the processing of personal data.
You may exercise these rights or revoke consent by sending a request to info@cyberadvisio.com.
To exercise your rights or any clarification, please write to info@cyberadvisio.com, proving that you are the owner of the data.
You may file a complaint with the Spanish Data Protection Agency if you are not satisfied with the exercise of your rights.
VII. How long do we keep your personal information?
The user’s personal data will be processed for as long as he/she holds the status of user of the Responsible’s services, i.e. as long as he/she does not exercise his/her right of deletion.
The Controller will retain your personal information as long as necessary to comply with the purposes of this policy, applicable law and court orders.
In case you exercise your right of deletion, your data will be blocked and kept in restricted form at the disposal of the competent authorities for a maximum of 5 years for possible responsibilities.
When personal information is no longer needed, it is securely deleted or destroyed.
VIII. Cookies and other technologies
The Controller uses cookies and similar technologies. Cookies are small text files sent to your browser from a website’s server, which do not contain personally identifiable information. The Responsible may use cookies on its websites and software. The cookie is stored by the browser and can be accessed by the website on subsequent visits. Other websites may send cookies, but they cannot access the Responsible’s cookies.
Web pages and interfaces can include clear gifs, web beacons and tracking pixels to count visits or whether emails have been opened. This helps to evaluate the effectiveness of certain communications and campaigns.
Information about cookies is defined in the Cookie Policy.
Some services may contain links to third-party applications and websites that are not managed or controlled by the Controller. The privacy practices of these third parties will be governed by their own policies. Please review their privacy policies.
IX. Legitimation
The communication of personal data is a legal or contractual requirement necessary to provide information, send offers or formalize the contracting of products and services. If this data is not provided, it may not be possible to provide the requested service.
X. Sending communications
The Client/User gives consent to the Responsible for sending commercial, advertising and promotional communications by email or other equivalent electronic means. The data will be used to carry out these communications, according to Regulation (EU) 2016/679. You may revoke consent at each communication or at any time by writing to info@cyberadvisio.com or at the address Carrer Santes Creus, 1, Vilanova de Meià, 25735.
XI. How do we treat your data?
Your data is incorporated into password-protected electronic files hosted on secure servers, with daily backups. Physical copies are stored in protected repositories.
Data can be hosted in cloud-based systems, under the same security measures. Automated access to data is secure.
Data are subjected to computer encryption processes to ensure security.