Potrius” inform to the Users of this web site about its policy regarding personal data protection and processing of the users and clients which could be collected by navigation, product acquisition or contracting of services through this website. Accordingly, “Potrius” ensures compliance of current regulation about personal date protection, contemplated in the Law 15/1999 of 13 December, of Personal Data Protection and the Royal Legislative Decree 1720/2007, of 21 of December, approving the Development Regulation of LOPD, and in the General Regulation of Data Protection (RDPD) (UE) 2016/679.

SECURITY MEASURES

In accordance with the current legislation of data protection, we inform our users that, in “Potrius”, it has taken every technical and organizational measure necessary to ensure the secure nature of personal data and to avoid any unauthorized alteration, loss, processing or access, bearing in mind the state of the art, the nature of the stored data and the risks to which they are exposed, whether caused by human intervention or the physical or natural environment.

THE TRUTHFULNESS OF THE DATA

The user declares that all the data given to “Potrius” is truthful and correct; the user furthermore is obliged to keep all the information updated and correct, notifying “Potrius” of any changes. The user vouches for the veracity of the data he / she supplies and “Potrius” reserves the right to exclude any user who has supplied false data from the registry services, without prejudice to any other legal implications such an action may imply.

EXERCISE RIGHTS

The LOPD and RGPD grant to the users the chance to exercise some rights related to the personal data processing. As long as those user’s data are processed by “Potrius”, users could use that rights. For that, the user should contact, providing all documents which proof its identity (DNI or Passport), through e-mail to hablamos@potriusco.com, or through post to the address which appears in our Legal Notice. That communication must show the following information: Name and Surname of user, the application request, the address and supporting data.

The exercise of right should be done by user. However, it could be executed for other authorized person as legal representative of the user. In that case, that representation must be accredited.

The user will be able to request the exercise of the following rights:

  • Right to request access to its personal data

  • Right to request rectification or cancellation of personal data

  • Right to request limitation of its processing, in which case they will be only preserved by “Potrius” for the exercise or protection of claims.

  • Right to object the data processing: “Potrius” will stop data processing, unless they must use them for legal matters or in the defense of claims.

  • Right to the data portability: in the event that it is requested to be used for another brand, “Potrius” will ensure that potability to the new responsable.

In the event of given consent to a specific purpose, the user has the right to cancel that consent in any moment, without affecting the processing made under before consent.

If any user considers that there is any problem with the way that “Potrius” is processing its personal data, is able to transmit those claims to the Security Responsable or the competent data security authority, being in Spain Agencia Española de Protección de Datos.

DATA PRESERVATION

Disaggregated data will be maintained without a deletion deadline. Regarding Customers data, the retention period of personal data will depend on the services contracted of customers. In any case, it will be the minimum required, till:

  • 4 years: Labor Infringements and Penalties Law; Arts. 66 and following of General Taxation Law.

  • 5 years: Art. 1964 of Civil Code.

  • 6 years: Art. 30 of Commerce Code

  • 10 years: Art. 25 of Anti-Money-Laundering Act and terrorist Financing.

The users of emails lists or uploaded by “Potrius” to pages or profiles of RRSS, will be kept till the users retire its consent.

Candidate data (C.V.): in the event of not been selected candidate, “Potrius” will be able to keep its C.V. 2 years as maximum to be taken in account for future vacancies, unless otherwise stated by user.

DATA COLLECTION AND PROCESSING

Potrius” should inform the users of its website about collection of personal data which could be used, by sending email or fill in the forms included in the website. In that sense, “Potrius” will be responsible of the data collected thought those ways mentioned.

In turn, “Potrius” should inform the users that the finality of the data processing obtained covers the attention of the requirements made by users, the inclusion of the Contacts Agenda, the provision of products and services and the commercial management. The transactions, arrangements and technical process which can be done automatically, or not and which could provide the collection, storage, modification, transfer or other actions about personal data, will be recognized as personal data processing.

Potrius” provides to users some telematic services for the personal data collection and processing, which the purposes above mentioned. The personal data provided by telematic method, thought email, contact forms or online contracts, will be used for commercial and administrative management of the customers and used of this company. That data, will be covered thought servers managed by Google, which is also the service company of email and which will be treated as Processing responsable.

Our email server is Google LLC, thought Google Suite.

As it is mentioned in the LSSICE, “Potrius” undertakes not to send commercial communications without identifying them as such. To this end, will not constitute commercial communication the information sent to customers for the maintenance of commercial relationship.

In any case, it will be obtained only the necessary data to performance the contracted service, or in order to serve adequately the user’s request of information.

Sometimes, the personal data will be provided through other websites linked. In that case, “Potrius” employees won’t have access to that data under any circumstances.

INFORMATION COMMUNICATION TO THIRD PARTIES

Potrius” will not cede or communicate your information to any third parties, except in those cases stipulated by law or when the User expressly authorizes us to do so. Therefore, by contracting our services, the users accept that any of them, full or in part, outsourced to other people or company, and they will have the consideration as Processing Responsable, which the ones “Potrius” has agreed a confidentiality contract, or adhered to their privacy policies, stipulated in their web sites. They will also accept that some personal data collected could be provided to the Processing Responsible, when it is necessary for the effectivity of their service. The user could refuse to that transfer of their data to the Processing Responsable, by written request, for any methods mentioned above.

CONFIDENTIALITY

The information provided by customers, will be consider as confidential in any case. It cannot be used to other purposes except the ones related of service or product contracted with “Potrius”. “Potrius” agrees not to disclose or reveal information about customer claims, the reasons for the advice requested or the length of their relationship with it.

VALIDITY

This data protection and privacy policy has been written by EXPERTOS LOPD, data protection company, on 21st of May of 2018, and it could be modify depending on regulation modifications and jurisprudence.