In accordance with the principles of lawfulness, fairness and transparency, we make this Privacy Policy available to you.
1. Who is the controller of your data?
| Controller | APSE CONSULTANT, S.A. |
| Tax ID (NIF) | A82953746 |
| Registered office | AVDA. MEDITERRÁNEO, 10, 28007, MADRID |
| COMERCIAL@APSE.ES | |
| Telephone | 914332399 |
| Data Protection Officer | DPO@APSE.ES |
2. For what purpose do we process your personal data?
At APSE CONSULTANT, S.A., depending on the category of data subject concerned, we process the information you provide for the following purposes:
| Data subjects | Purposes of processing |
|---|---|
| Prospective clients | Managing the potential commercial and/or professional relationship, sending requested information and/or answering queries, and providing offers of our services and/or products that may be of interest to you. |
| Clients | Managing the commercial and/or professional relationship and providing offers of our services and/or products that may be of interest to you. |
| Suppliers | Managing the commercial and/or professional relationship. |
| Job applicants | Managing the recruitment process. |
| Website users | Analysing their browsing data. |
3. What is the legal basis for processing your data?
Depending on the category of data subject concerned, the legal basis for processing your personal data may be:
| Data subjects | Legal basis (Article 6 GDPR) |
|---|---|
| Prospective clients |
Art. 6.1.b GDPR: taking steps at the request of the data subject prior to entering into a contract (quotes, engagement letters, service proposals…). Art. 6.1.f GDPR: legitimate interest (sending requested information, answering queries…). Art. 6.1.a GDPR: consent of the data subject (providing offers of our services and/or products). |
| Clients | Art. 6.1.b GDPR: performance of a contract to which the data subject is party. |
| Suppliers | Art. 6.1.b GDPR: performance of a contract to which the data subject is party. |
| Job applicants | Art. 6.1.a GDPR: consent of the data subject. |
| Website users | Art. 6.1.a GDPR: consent of the data subject. |
The data we request are adequate, relevant and strictly necessary, and you are under no obligation to provide them; however, failure to do so may affect the purpose of the service or make it impossible to provide.
4. How long will we keep your personal data?
Your data will be kept for the minimum time necessary to properly provide the service offered, as well as to meet any liabilities that may arise from it and any other legal requirement.
5. To whom will your data be disclosed?
APSE CONSULTANT, S.A. will not disclose your data to any third party unless you are expressly informed of this.
In addition, we inform you that, under current legislation or the contractual relationship you have with APSE CONSULTANT, S.A., certain data may be disclosed to:
- Banks and financial institutions, for the collection of payments for services contracted and/or products purchased.
- Public authorities with competence in the sectors in which APSE CONSULTANT, S.A. operates, when required by current legislation.
6. Are international data transfers carried out?
APSE CONSULTANT, S.A. may carry out international data transfers from this website as a result of the acceptance of cookies:
Google LLC and Google Ireland Limited transfer data to the United States on the basis of the user’s consent when accepting cookies.
By accepting the cookies of these entities, the user consents to the transfer to the United States of any personal data that may be collected through the loading and reading of cookies. The United States is considered to offer a level of protection equivalent to that of the European Union only in respect of those US companies included in the EU-US data privacy list known as the “Data Privacy Framework” (hereinafter, “DPF”). US companies that have not signed up to the DPF shall be deemed not to guarantee a level of protection equivalent to that of the European Union.
If the user does not consent to this international transfer of data to the United States, they must reject these cookies, in which case the features or services offered through these cookies will not be provided.
You can find information about any transfers to third countries carried out by the third parties identified in the cookie policy in their respective policies.
7. What are your rights when you provide us with your data?
The data protection rights that data subjects may exercise, where applicable, are:
| Right | What does it involve? |
|---|---|
| Right of access | To find out which personal data the Controller processes. More information here. |
| Right to rectification | To have the personal data processed by the Controller amended when they are inaccurate, incorrect or incomplete. More information here. |
| Right to object | To request that the Controller does not process your personal data for certain specific purposes. More information here. |
| Right to erasure | To request that the Controller deletes your personal data. More information here. |
| Right to restriction | To request that the Controller restricts the processing of your personal data. More information here. |
| Right to data portability | Where processing is carried out by automated means, to receive your personal data in a structured, commonly used, machine-readable and interoperable format, and to transmit them to another controller. More information here. |
| Right not to be subject to automated individual decision-making | This right is intended to ensure that you are not subject to a decision based solely on automated processing of your data, including profiling, which produces legal effects concerning you or similarly significantly affects you. More information here. |
| Right to lodge a complaint with the competent authority | To lodge a complaint against the Controller with the Spanish Data Protection Agency (AEPD) if the User considers that the entity has processed their personal data in breach of the regulations. |
Data subjects may exercise their data protection rights by writing to the registered office of APSE CONSULTANT, S.A. at AVDA. MEDITERRÁNEO, 10, 28007, MADRID, or to the email address provided for this purpose: DPO@APSE.ES.
You may use the following forms to exercise your rights:
- Form to exercise the right of access.
- Form to exercise the right to rectification.
- Form to exercise the right to erasure.
- Form to exercise the right to object.
- Form to exercise the right to restriction of processing.
- Form to exercise the right to data portability.
- Form to exercise the right not to be subject to automated individual decision-making.
For more information on exercising your rights, visit the official website of the Spanish Data Protection Agency (hereinafter, “AEPD”) at the following link.
8. Can I withdraw my consent?
You have the possibility and the right to withdraw your consent for any specific purpose previously given, without affecting the lawfulness of processing based on consent before its withdrawal.
9. Where can I complain if I consider that my data are not being processed correctly?
If any data subject considers that their data are not being processed correctly by APSE CONSULTANT, S.A., or that their requests to exercise their rights have not been satisfactorily handled, they may lodge a complaint with the relevant data protection authority, which in Spain is the Spanish Data Protection Agency (AEPD). More information on its website: www.aepd.es.
10. Security and updating of your personal data.
In order to safeguard the security of your personal data, we inform you that we have adopted all the technical and organisational measures necessary to guarantee the security of the personal data provided, in order to prevent their alteration, loss and/or unauthorised processing or access, as required by law, although absolute security does not exist.
So that we can keep your personal data up to date, it is important that you inform us whenever they change.
11. Confidentiality.
APSE CONSULTANT, S.A. informs you that your data will be treated with the utmost care and confidentiality by all staff involved in any stage of the processing. We will not transfer or disclose your data to any third party, except in cases provided for by law or where the data subject has given express authorisation.
