Any personal data provided through the features of this website will be treated in accordance with the following privacy policy.

1. PURPOSE, SCOPE AND DURATION 

ZABALA INNOVATION CONSULTING, S.A., located at Paseo Santxiki, 3 bis – 31192 Mutilva (Navarra), with VAT number ESA31419773, is responsible for the ISGAN website.

This Privacy Policy (the Policy) applies to any personal data provided by users when they subscribe to the newsletter, for the purpose of producing anonymous statistical data.

This Policy applies to all users of the website, regardless of their location, unless otherwise specified. It is effective from the moment users accept it while browsing the website and remains valid for as long as the website is operational, or until the purpose has been fulfilled. The Policy will automatically terminate if the website is no longer accessible.

2. TYPES OF DATA COLLECTED

The personal data required to accomplish the purpose are:

• The user’s first and last name
• The user’s email address
• The user’s country or region

Optional fields include:

• Organisation
• Title/Position
• Onboarding channel
• Sector

The website’s data controller shall not process any personal data that is considered special and/or sensitive according to the applicable laws of this Policy.

3. DATA PROCESSING AND PURPOSE

‘Processing’ means any operation or set of operations performed on personal data, such as collection, organisation, structuring, storage, alteration, retrieval, consultation, use, disclosure, dissemination, combination, restriction, and erasure, in accordance with the applicable laws.

No personal data is automatically stored or collected when browsing, and users shall not be nominatively identified by personal data, unless they provide it voluntarily. Users can visit the website without disclosing their identity.

The data controller will only collect, store, record and use personal data for the duration of the project, provided that the user has given their informed consent through this Policy.

The data controller will only organise and structure personal data to the extent necessary for the proper functioning of the website’s services and to fulfil its purpose. It will not adapt, alter, disclose, or disseminate any user personal data. Such actions may only occur under specific circumstances and with the user’s informed consent, if required for the proper functioning of the website’s services.

The data controller will delete any personal data after the purpose of the storage is terminated, without the need for a request from the user, and unconditionally upon the user’s request at any time.

4. DATA RETENTION 

The data retention period will be the duration of the project, unless otherwise stated in this Policy.

In the event of the termination of the website, all personal data stored to date must be deleted.

6. RIGHTS OF THE USERS

In accordance with the laws applicable to this Policy, users have the following rights regarding their personal data:

• Right to transparent information (Articles 12, 13 and 14)
• Right of access by the data subject (Article 15)
• Right to rectification (Article 16)
• Right to erasure (‘right to be forgotten’) of data (Article 17)
• Right to restrict data processing (Article 18)
• Right to be notified of any rectification, erasure or restriction of processing (Article 19)
• Right to data portability, i.e. the right to transfer personal data to another data controller (Article 20)
• Right to object and to automated individual decision-making (Article 21)

7. SECURITY MEASURES

The data controller shall implement appropriate technical and organisational measures to ensure a level of security aligned to the risk related to the personal data such as anonymisation, pseudonymisation and encryption; the capability to maintain the confidentiality, integrity, availability and resilience of processing systems and services; regularly testing, assessing and evaluating any physical or technical risks; solving and restoring in the event of any accidental and/or unlawful destruction, loss, alteration, unauthorised disclosure or access to personal data transmitted, stored or otherwise processed.

8. AUTOMATED DECISION-MAKING AND PROFILING

Personal data shall not be used for any automated decision-making or profiling.

9. DATA PROTECTION COMPLIANCE

The data controller is committed to ensuring that the website complies with applicable laws and data protection laws, especially Regulation (EU) 2016/679 (General Data Protection Regulation).

10. AMENDMENTS TO THE PRIVACY POLICY 

This Policy shall be amended in writing as soon as an error or need is detected or when any of the preconceived circumstances provided herein change. This shall not affect the legal validity of the remaining provisions.

11. DATA PROTECTION COMPLAINTS

Users can lodge a complaint with the data protection authorities or supervisory bodies, including national supervisory authorities and the European Data Protection Board, if they feel their data protection rights have been violated.