Privacy policy

In compliance with current legislation on data protection, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), Organic Law on the Protection of Personal Data (LOPDCP, 15/99), Regulation of Development of the LOPDCP (Royal Decree, 1720/2007, of 21 December), we inform you of the Personal Data Protection Policy, with regard to the processing of personal data, is as follows::

1.- PERSONAL DATA CONTROLLER

The controller is the legal person who determines the purposes and means of the processing of personal data. Consequently, he/she is the one who processes the personal data and the purpose for which it is processed.
The data controller is::

2.- PROCESSING OF PERSONAL DATA AND ITS PROTECTION

Personal data is any information about an identified or identifiable natural person. For the purposes set out in this Privacy Policy, the controller collects and processes the personal data explained in each type of processing, which will depend on the different services you request or the contractual relationship you have with our organisation. Our organisation undertakes to treat your personal data with complete confidentiality and to apply the appropriate physical, technical and organisational security measures for the protection of your personal data.

You guarantee and are responsible, in any case, for the truthfulness, accuracy, validity and authenticity of the personal data provided and undertake to keep them duly updated.

1.- Processing of customer data

What is the purpose of the processing of your data?
Your data will be processed for all the purposes of the company’s relationship with its customers.

How is the customer category defined?
Customers are people with whom a business relationship is maintained as clients.

What personal data are processed?
The personal data processed are those necessary for the maintenance of the commercial relationship. Invoicing, sending advertising by post or e-mail.
The personal data processed are:

• • Identifiers:
    • Name & Surname
    • NIF
    • Postal address
    • Phone numbers
    • E-mail
  • Bank details: for direct debit of payments

Who are the recipients to whom the personal data will be communicated?
The personal data processed will be provided to the IT support company and the accounting and tax management company.
Your personal data will not be passed on to any other entity, except those required by law to public bodies.

What is the envisaged deadline for the erasure of data processing?
The time limit for the deletion of the processing of personal data are those provided for by tax legislation regarding the statute of limitations for liability.

2.- Processing of potential customer data

What is the purpose of the processing of your data?
Your data are processed for all the management of the company’s relationship with potential customers.

How is the category of potential customers defined?
Potential customers are people with whom you seek to maintain a business relationship as customers.

What personal data are processed?
The personal data processed are those necessary for the commercial promotion of the company.
The personal data processed are:

• • Identifiers:
    • Name & Surname
    • NIF
    • Postal address
    • Phone numbers
    • E-mail

Who are the recipients to whom the personal data will be communicated?
Your personal data will not be passed on to any entity, except those required by law to public bodies.

What is the envisaged deadline for the erasure of data processing?
The deadline for the deletion of personal data processing is one year from the first contact.

3.- Processing of applicant data

What is the purpose of the processing of your data?
Your data are processed for all the purposes of the company’s relationship with candidates for employment with the company.

How is the candidate category defined?
Candidates are people who wish to work for the controller.

What personal data are processed?
The personal data processed are those necessary to manage the curricula vitae of potential future employees.
The personal data processed are:

• • Identifiers:
    • Name & Surname
    • Postal address
    • Phone numbers
    • Skype
    • E-mail
  • Personal characteristics:
    • Marital estatus
    • Date and place of birth
    • Age
    • Sex
    • Nacionality
    • Other
    • Excluded: data on race, health or trade union affiliation
  • Academic data:
    • Regulated training
  • Personal characteristics:
    • Previous experience
    • Date of incorporation
    • Other

Who are the recipients to whom the personal data will be communicated?
Your personal data will not be passed on to any entity, except those required by law to public bodies.

What is the envisaged deadline for the erasure of data processing?</strong>
The deadline for the deletion of personal data processing is one year from the submission of the application.

4.- Processing of training data

What is the purpose of the processing of your data?
Your data is processed for all training courses offered by QATRO.

How is the training category defined?
The training category is made up of persons participating in courses given at QATRO.

What personal data are processed?
The personal data processed are those necessary to manage the courses given at QATRO.
The personal data processed are:

• • Identifiers:
    • Name & Surname
    • DNI
    • Postal address
    • Phone numbers
    • E-mail
  • Academic Data:
    • Regulated training
  • Professional data:
    • Company
    • Position and department
    • Company activity

Who are the recipients to whom the personal data will be communicated?
The personal data processed will be provided to the IT support company and the accounting and tax management company.
Your personal data will not be passed on to any other entity, except those required by law to public bodies.

What is the envisaged deadline for the erasure of data processing?
The time limit for the deletion of the processing of personal data are those provided for by tax legislation regarding the statute of limitations for liability.

3.-DATA SUBJECTS’ RIGHTS

Under the applicable data protection legislation, you have the following rights in relation to the processing of your personal data:

Right of access:
Data subjects shall be provided with a list of the personal data held, together with the purpose for which they have been collected, the identity of the recipients of the data, the storage periods, and the identity of the data controller with whom they may request rectification, erasure and objection to the processing of the data.
Data subjects shall be provided with a list of the personal data in its possession together with the purpose for which they have been collected, the identity of the recipients of the data, the retention periods, and the identity of the data controller with whom they may request rectification, erasure and objection to the processing of the data.

Right of rectification:
Inaccurate or incomplete data subjects’ data shall be amended in accordance with the purposes of the processing.

Right of deletion:
Data subjects’ data shall be deleted when the data subjects express their refusal or opposition to consent to the processing of their data and there is no legal duty to prevent it.

Right to object:
Data subjects must express their refusal to the data controller, who will cease processing their data provided that there is no legal obligation to do so.

Right of portability:
Data subjects should communicate their decision and inform the controller, where appropriate, of the identity of the new controller to whom they provide their personal data.

Claim:
Data subjects may lodge a complaint with the Spanish Data Protection Agency at the following address:
C/Jorge Juan, 6
28001 Madrid
Tf. +34 901 100 099

Or at the following link:
https://sedeagpd.gob.es/sede-electronica-web/vistas/formQuejasSugerencias/seleccionarQuejaSugerencia.jsf

QATRO may use cookies, small data files that are stored in the user’s system, which make it possible to personalise and facilitate the user’s browsing of the website, and which are associated with an anonymous user without being able to deduce any personal data about him/her. The user can prevent the generation of cookies on their computer by activating the corresponding option in their browser. This deactivation of cookies does not prevent the user from accessing the contents of the website.

Cookies:

CONSENT, NID, AEC : google.com – Techniques – Used for the operation of Google services such as reCaptcha and search and content sharing services.

pll_language Technical Used to set language