The personal data you provide to us on this website by any of the means enabled for this purpose will be processed in accordance with this privacy policy.
1.- IDENTITY OF THE DATA CONTROLLER
All the processing referred to in this privacy policy is carried out by:
Name | VAT NUMBER | Address |
| |
ZABALA INNOVATION CONSULTING, S.A. | A31419773 | Paseo Santxiki, 3 bis – E- 31192 Mutilva (Navarra, Spain) |
2.- DATA PROCESSING
This privacy policy details the processing of personal data, including the legal basis in accordance with the GDPR and the specific retention period of the data. These periods will be extended by the time necessary to comply with legal obligations and address any liabilities that may arise in relation to the fulfilment of the purpose for which the data were collected. If at any time your authorisation is requested for the processing of your data for a purpose of which your consent is required, the lack of granting (or its subsequent withdrawal) will have no consequences for you.
DATA RELATING TO OUR RELATIONSHIP WITH YOU
Processing and purposes | Data we collect about you | Legal basis (GDPR) | Retention period |
Requests for information or queries (by any means you use, including collection at fairs, events and phone calls): We will use your data to respond to your requests for information, queries or complaints and manage what is necessary. We will also use them to prepare service or collaboration proposals. | Name, email, organisation, telephone, geographical location (region, country), tracking URLs (web addresses that allow us to know how you found our website), and any other information you voluntarily share with us in the forms. | 6.1.a) GDPR. The data subject has given consent to the processing. 6.1.b) GDPR Processing is necessary for the performance of pre-contractual measures at the request of the data subject. | For the time necessary to address and manage your request and/or complaint. |
Use of our websites, social media profiles and marketing emails: We will use the data from your visit to our websites to show you relevant content (including targeted advertising), analyse metrics and web traffic to improve our platforms and understand how you interact with us. We may also see how you interact with marketing communications to assess the quality of the content, interest and improve it. | IP address, tracking URLs, identifiers about the device you access from, approximate geographical location, how you interact with the website, email or similar, and any other data through cookies, in accordance with our cookie policy. | Art. 6.1.a) GDPR. Explicit consent of the data subject. | Provided you do not object and the Controller is authorized to process it. |
In-person events and webinars: Manage your participation in them. In cases where your image/voice is processed during the event (if the event is held online, for example). | Name, email, organisation, interests, attendance, participation in the webinar, dietary preferences (for offline events), voice, image, and tracking URLs. | Art. 6.1.b) GDPR. Processing is necessary for the performance of a contract to which the data subject is a party. Art. 6.1.a) GDPR. Explicit consent of the data subject. | Provided the contractual relationship is in force and the Controller is authorized to process it. |
Commercial communications: We will use your data to send you commercial communications that we consider may be of interest to you. These may include information or advertising, publications or newsletters (periodic newsletter). | Name, email, organisation, telephone, interests, geographical location (region, country), any other information you voluntarily share with us in the forms, tracking URLs, and identifiers that allow us to know how you interact with our campaigns. | Art. 6.1.a) GDPR. Explicit consent of the data subject. | As long as you do not withdraw your consent. |
DATA ASSOCIATED WITH REGULATORY COMPLIANCE
Processing and purposes | Data we collect about you | Legal basis (GDPR) | Retention period |
Attention to the exercise of the rights of the data subjects: In the event that, as a data subject, you exercise any of the rights you have in relation to your personal data, we will use the data you provide to us to evaluate your request and address it. | Name, email, address, and any other data necessary to prove your identity. | Art. 6.1.c) GDPR. Compliance with a legal obligation applicable to the Controller based on articles 15 to 22 of the GDPR. | As long as necessary to address the exercise of rights communicated to the Controller. |
COOKIES
If you have accepted to receive cookies when you start visiting this website, the website’s cookie policy will apply to you.
3.- RECIPIENTS. INTERNATIONAL DATA TRANSFERS
As a general rule, unless legally required, your data will not be communicated or transferred to any third party without your prior express consent. In any case, some communications and/or transfers of data to third parties may be imposed by certain regulations or to meet obligations with Public Administrations, the Public Prosecutor’s Office, Judges and Courts, and State Security Forces and Bodies. Other communications and/or transfers will be a necessary consequence of the provision of the requested service, event management or the result of your express consent to the communication. Below, we list the purposes for which it may be necessary to communicate your data to third parties and whether these involve international data transfers:
- Website hosting: The data hosted on our website will be communicated to the company that provides us with the web hosting service.
Finally, we inform you that we use the following third-party services that involve international data transfers:
- Google Ireland Limited: Web analytics service called “Google Analytics”, involves international data transfers outside the EU economic area, and according to the provider’s statement, they comply with the applicable legal framework through the Standard Contractual Clauses established by the European Commission.
- Microsoft: Email, data hosting, videoconferencing Microsoft is adhered to the “EU-U.S. Data Privacy Framework (EU-U.S. DPF)” instrument that allows international data transfers.
- LinkedIn Ireland Unlimited Company: Social network service. According to the provider’s terms and conditions, involves international data transfers outside the EU economic area, and according to the provider’s statement, it is certified for the EU-U.S. Data Privacy Framework that allows international data transfers.
4.- RIGHTS
Regarding the personal data collected for processing, you have the possibility to exercise the rights of access, rectification, deletion and portability. Likewise, in certain circumstances, you will have the right to request the limitation or opposition to the processing of your data, in which case the Controller will cease processing them and will only keep them if there is a legal obligation to do so or until the prescription of the actions that may arise.
For any query or exercise of your rights you may contact ZABALA INNOVATION CONSULTING, S.A. using any of the channels indicated in the first section of this privacy policy.
Finally, you can also contact the supervisory authority when you deem it appropriate to file a complaint (for example, in the country where you have your habitual residence, your place of work or where you consider the alleged infringement has occurred). For the appropriate purposes, we inform you that in Spain the Supervisory Authority is the Spanish Data Protection Agency, and you can exercise your rights through the forms that each entity has enabled for this purpose.
5.- MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER
By checking the corresponding boxes and entering data in the fields on the various forms on the website, users expressly, freely, and unequivocally accept that their data is necessary for the provider to respond to their request, with the inclusion of data in the remaining fields being voluntary. Users guarantee that the personal data provided to the data controller is accurate and are responsible for communicating any changes thereto.
