Privacy

Public privacy policy

Consultoria Informática Studio73 S.L. —hereinafter “Studio73”, “we” and “our”— understands the importance of your privacy and respects it. Please read this privacy policy carefully. It explains:

• What data we collect.
• How we collect your data.
• How we use your data.
• To whom we disclose your data.
• How long we keep your data.
• How we protect your data
• How you can exercise your rights as a data subject.
• How this privacy policy is changed.

1. What data we collect

The categories of personal data we may collect include, among others:

• Identification and contact data: first and last name, email address, phone number, company and the information you provide when using a contact form.
• Data related to the provision of products and services: requests, quotations, invoices, payment details, products and services delivered, contracts and other information needed to manage the professional relationship.
• Marketing and website usage data: marketing preferences, subscription and unsubscription requests, participation in activities, posts on social platforms operated by us, browser type, language preference, IP address and browsing data when available.
• Data relating to complaints and requests: information needed to handle your enquiries, incidents and requests to exercise your rights.

2. How we collect your data

We collect personal data in various ways, including data we receive:

• Directly from you.
• From other parties, for example, when our client or supplier is a company and designates you as a contact person, or when we need to process data in the context of providing services to your organization.
• Through your use of our website, social media and other tools.
• From publicly available sources, such as the IP address, the time of the visit or the number of requests made on the site, when necessary and permitted.

3. How we use your data

The personal data we process always depends on the specific circumstances, such as the nature of the service or product to be provided, the legal obligations we are subject to, our legitimate interests or the specific consent you have given.

We process your data on the basis of the performance of a contract, the preparation of a professional relationship and/or our legitimate interests in order to:

• Provide information, products or services to clients and potential clients.
• Manage administrative, accounting and corporate law obligations.
• Carry out internal risk analysis, audits, quality and security controls.
• Manage enquiries, proposals, projects, support and professional communications.
• Send direct marketing when there is a valid legal basis, always respecting your right to object.

We have a legitimate interest in processing the data of clients or contact persons to send advertising messages, newsletters, invitations to commercial events and similar communications by electronic means when they concern similar products or services. You have the right to object to such processing at any time, without prejudice to the lawfulness of processing based on legitimate interest prior to the exercise of your right.

We process the following data on the basis of your consent when we request it:

• Direct marketing: your email address and/or phone number for marketing purposes.
• Cookies: non-essential cookies for marketing, measurement or analytics purposes.

You have the right to withdraw your consent at any time, without prejudice to the lawfulness of the processing carried out before withdrawal.

4. To whom we disclose your personal data

Your personal data may be processed or accessed by service providers, data processors and professional partners involved in the provision of Studio73’s services, always under the corresponding instructions and safeguards.

We may also disclose information when there is a legal obligation, when it is necessary to provide the requested service or when it is necessary to protect Studio73’s rights, security and systems.

If an international transfer is not covered by an adequacy decision of the European Commission, the appropriate safeguards provided for by the regulations will apply, such as standard contractual clauses where applicable.

5. How long do we keep your data?

We do not keep your personal data longer than necessary for the purposes described above, unless the law requires or permits a longer retention period. Retention periods may vary depending on the case, product or service.

We determine retention periods taking into account:

• The time needed to keep the data for commercial purposes, including the provision of products and services.
• The need to keep records of transactions and professional relationships.
• Monitoring and improving the performance and quality of products and services.
• The security of systems, products and services.
• Handling questions, incidents or complaints from clients and other stakeholders.
• Legal, contractual and regulatory retention requirements.
• Industry-specific retention standards where applicable.

6. How we protect your data

We have implemented technical and organizational measures to ensure the confidentiality, availability and integrity of the personal data we process, including, among others:

• Establishing and maintaining information security and data protection policies and procedures.
• Assessing and managing risks and incidents.
• Applying technical security controls, such as information classification, access control, authentication methods, physical, environmental and network perimeter controls, encryption, anonymization, pseudonymization or segmentation.
• Using, where appropriate, intrusion detection and prevention technologies, monitoring, anti-malware protection, backups, business continuity and disaster recovery.
• Assessing suppliers’ information security programmes.
• Promoting awareness and training initiatives.
• Taking part in security review and audit processes where applicable.

7. How you can exercise your rights as a data subject

Depending on the processing activities and the legal basis, you have several rights to keep control over your personal data:

• Right of access.
• Right to rectification.
• Right to object to data processing.
• Right to restriction of processing.
• Right to erasure.
• Right to withdraw previously given consent.
• Right to data portability.
• Right to lodge a complaint with the competent data protection authority.

These rights are not absolute. In certain circumstances, we may have the right or legal obligation to continue processing your data and, therefore, may not be able to fully meet your request. In such cases, we will inform you accordingly.

You can exercise these rights free of charge, except in cases of abuse, in which case reasonable administrative fees may be charged.

If, in our relationship with the client from whom we received your data, we act solely as a data processor, we will inform you accordingly and you must address your request to exercise your rights to that client.

For any question related to the exercise of your rights, please contact contacto@studio73.es. If you consider that the processing does not comply with the regulations, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) or with the competent authority.

Changes to this policy

As our website, products and services continue to develop, and as applicable legislation changes, we may update this privacy policy. We recommend that you review it periodically. The most recent version will always be available on this page.

Employee privacy policy

Studio73 understands the importance of privacy for its employees and respects it. This policy explains how Studio73, as data controller, processes its employees’ personal data in the context of its activities. This policy complements the public privacy policy and may be updated when necessary.

What data we collect

The categories of personal data may include identification and contact data, information needed for the employment relationship, administrative data and the data required by applicable labour, social security and social protection legislation.

How we use and protect that data

We process the data to manage the employment relationship, comply with legal obligations, administer the rights and obligations of the parties, maintain security and organize internal processes. We apply appropriate technical and organizational measures to protect the confidentiality, availability and integrity of the information.

Candidate privacy policy

This section explains how Studio73 processes the personal data of candidates in the context of its selection and hiring processes. We may modify this policy periodically if necessary.

What personal data we process

The personal data we process may include first and last name, address, phone number, email, education, professional experience and other information you voluntarily provide during the process.

How we collect your personal data

As a general rule, we collect your data directly from you. We will only collect, process or use personal data to the extent permitted or required by applicable laws and regulations and in accordance with the purposes for which it was collected.

For what purposes we process your personal data

We may process your data during the recruitment and selection process, to prepare and enter into an employment contract, to comply with legal obligations, to act on consent given or to manage legitimate interests related to organizing and evaluating the process.

To whom we disclose your personal data

To the extent permitted by applicable laws and regulations, we may share your data with the people at Studio73 involved in the recruitment and evaluation process, technology service providers and other parties requiring legitimate access.

How it is protected and how long it is kept

We have implemented technical and organizational measures to ensure the confidentiality, availability and integrity of the personal data we process, including access controls, authentication, encryption, backups, business continuity and disaster recovery where appropriate.

We will keep the data for as long as necessary for the selection process and for the purposes communicated, without prejudice to the applicable legal periods. The data of selected candidates may be added to the employee’s personal file in accordance with the applicable policy.

What your rights as a data subject are

You can exercise the rights described in this policy by writing to contacto@studio73.es. If you have any questions about this policy or how we manage your data, you can also use our contact page.