Política de Privacidad

1. USER INFORMATION

Who is responsible for the processing of your personal data?

ITBID TECHNOLOGIES 2002, S.L.

.- Av. Josep Tarradellas, 8-10

.- Email: info@itbid.com

.- Phone: (+34) 933 218 614

ITBID does not currently have a designated DPO.

Why do we process your personal data and what is the legal basis for doing so?

We may process your personal data in different areas of our business:

Thus through the different forms enabled on our website or actions in RRSS, we will treat them confidentially to achieve the following purposes:

In the Contact form

• To respond to inquiries or any type of request made by the user through any of the contact forms provided on the website of the controller. (based on the legitimate interest of the controller, Art. 6.1.f GDPR)
• Sending commercial advertising communications via email, fax, SMS, MMS, social networks, or any other electronic or physical means, present or future, that enables commercial communications with our customers. These communications will be carried out by the controller and will be related to their products and services, or those of their collaborators or suppliers, with whom they have reached some agreement for promotion. In this case, third parties will never have access to personal data. (based on the consent of the data subject, Art. 6.1.a GDPR)
• Conducting statistical analysis and market studies. (based on the legitimate interest of the controller, Art. 6.1.f GDPR)

In the Request a Demo form

• Guiding through the requested demo and responding to raised queries. (based on the legitimate interest of the controller, Art. 6.1.f GDPR)
• Sending commercial advertising communications via email, fax, SMS, MMS, social networks, or any other electronic or physical means, present or future, that enables commercial communications. These communications will be carried out by the controller and will be related to their products and services, or those of their collaborators or suppliers, with whom they have reached some agreement for promotion. In this case, third parties will never have access to personal data. (based on the consent of the data subject, Art. 6.1.a GDPR)
• Conducting statistical analysis and market studies. (based on the legitimate interest of the controller, Art. 6.1.f GDPR)

On Linkedin

• Process requests and queries to the person in charge.
• To inform about activities and events organized by the manager
• Inform about products or services offered by the manager
• review public profiles in the event of an employee search according to the needs of the profile.

In addition to the processing that takes place through the website, within the scope of the different processing activities identified in its Register of Activities, we will process them to achieve, among others, the following purposes:

For the management of labor relations.

• In the selection and hiring process or,
• During the development of the labor relationship as a result of the control of the labor activity
• or in the relations with the legal representation of workers or for health surveillance. (in most of these cases the treatment will be justified by being necessary for the execution of the employment contract, and in other occasions for the fulfillment of legal obligations or because the agents involved have given their consent). For the management of relations with Customers and Suppliers.

Para la gestión de las relaciones con Clientes y Proveedores

• The processing of personal data in relationships with customers and suppliers will be justified by the need to execute the contract concluded with them or to execute, at their request, pre-contractual measures. In other cases, the processing of professional contact data will be justified by ITBID's legitimate interest in initiating or maintaining a business relationship. This same legitimate interest is a sufficient legal basis to send commercial communications to our clients without prejudice to the right of opposition that they may exercise at any time. In other cases, we will have to process this data to fulfill our obligations to the public administration, for example, with the Tax Agency, without requiring your consent for the processing.

• Our main activity is based on the design, marketing, and maintenance of a management software that allows our clients to manage their relationship with their suppliers. Therefore, the processing of data that our clients incorporate into this tool will be their sole responsibility. ITBID will be responsible for processing customer data necessary to manage the user account to provide personalized access to our platform and the interactive services it offers. (as it is necessary for the performance of the contract as a SaaS provider, Art. 6.1.b GDPR)

• Regarding the data entered by the clients, either directly or through our assistance for data migration, ITBID will act as a Data Processor and will only process the data according to the instructions given by the client and documented in the Data Processing Agreement signed with each one.

For the management of relations with Group companies.

• Our organization is in the process of expansion and has opened offices in other cities both nationally and internationally. This fact implies the need to maintain open information flows for the management of our organization that sometimes will involve the processing of personal data. Thus, our administrative head office may act as a data processor for the rest of the companies of the Group based on a data processor contract that legitimizes the processing, being the legitimate interest of the responsible or the third party sufficient legal basis for the processing.

 Categories of personal data we process

In the contact forms we will process basic identification data such as the name of the contact, the name and email of the organization, and the contact telephone number.

In the Demo application we will process basic identification data such as name, company email, contact telephone number, etc.

In the social networks in which we can interact, public profile data insofar as they may be necessary for the recruitment of the position we may need.

In employment relationships, we will process basic identification data such as Name and Surname; ID / Tax Identification Number; Address; Email; Phone or Social Security Number; Personal characteristics such as Gender; Marital status; Nationality; Age; Date and place of birth; Employment details such as Position / Job title; Professional category or group; Department; Company; Non-economic payroll data; Absence data; Corporate contact information; Work permit. Academic and professional information such as Degrees; Training; Professional experience; Presence control: Entry and exit date / time; Reason for absence; Presence control ID; as well as belonging to special categories such as Trade union affiliation or health-related data.

In relations with customers and suppliers we will treat professional contact data such as name and surname if you are a businessman or professional, a contact phone and email. If you are a legal entity we will process your corporate data such as the company name and CIF, address, telephone and email contact. We will also process economic data necessary for the billing of our products and services. In the user registration of the platform basic identification data such as username and password and other information that is necessary depending on the conditions of the service you contract with us. All this will be specified in our service contract and contract of service provider.

In the relations of the Group of company we will be able to treat personal data fundamentally for the maintenance of the labor relations of each one of our delegations for being administrative central.

How long will we keep your personal data?

They will be kept for no longer than necessary to maintain the purpose of treatment or there are legal requirements that dictate their custody and when no longer necessary for this purpose, they will be deleted with appropriate security measures to ensure the anonymity of the data or the total destruction of the same.

Thus, when we process data on the basis of legitimate interest, we will keep them for as long as such interest is maintained. When the basis of legitimacy is the performance of the contract, as long as the employment relationship is maintained and once concluded, for the time required by applicable law for the fulfillment of other obligations, for example, by the statute of limitations for civil actions, we will keep certain data for a period of 5 years. Where the processing is based on the consent you have given us, as long as you have not revoked the consent and without prejudice to the validity of the processing carried out prior to the revocation. In the event that the processing is based on the fulfillment of legal obligations, it will be necessary to comply with the provisions of the applicable regulation to determine the duration of the processing. Thus, if we must comply with tax obligations, we will process personal data for a period of 4 years.

To whom do we provide your personal data?

No communication of personal data to third parties is foreseen except, if necessary for the development and execution of the purposes of the processing, to our service providers related to communications, with whom the RESPONSIBLE has signed confidentiality and data processor contracts required by current privacy regulations.

International Data Transfers

Not performed.

What are your rights?

The rights of the USER are:

• Right to withdraw consent at any time.
• Right of access, rectification, portability and deletion of your data, and to limit or oppose its processing.
• Right to file a complaint with the supervisory authority (www.aepd.es) if he/she considers that the processing does not comply with current regulations.

Contact details to exercise your rights:

ITBID TECHNOLOGIES 2002, S.L. AVDA. JOSEP TARRADELLAS, 8, AT. 3 – 08029 Barcelona (agpd@itbid.org)

2. OBLIGATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

The USERS, by checking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or presented in download forms, expressly and freely and unequivocally accept that their data are necessary to fulfill their request, by the provider, being voluntary the inclusion of data in the remaining fields. The USER guarantees that the personal data provided to the RESPONSIBLE are truthful and is responsible for communicating any changes to them.

The RESPONSIBLE informs that all data requested through the website are mandatory, as they are necessary for the provision of optimal service to the USER. If all the data is not provided, there is no guarantee that the information and services provided will be completely tailored to your needs.

3. SECURITY MEASURES

That in accordance with the provisions of the current regulations on personal data protection, the RESPONSIBLE is complying with all the provisions of the GDPR and LOPDGDD regulations for the processing of personal data under its responsibility, and manifestly with the principles described in Article 5 of the GDPR, whereby they are processed lawfully, fairly and transparently in relation to the data subject and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The RESPONSIBLE guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of the USERS and has communicated the appropriate information to them so that they can exercise them.

For more information about privacy guarantees, you can contact the RESPONSIBLE person through ITBID TECHNOLOGIES 2002, S.L.. AVDA. JOSEP TARRADELLAS, 8, AT. 3 - 08029 Barcelona (agpd@itbid.org).

1. USER INFORMATION

Who is responsible for the processing of your personal data? 

ITBID TECHNOLOGIES 2002, S.L., hereinafter referred to as the RESPONSIBLE, informs the USER that it has created a profile on the Social Networks: LinkedIn, which is responsible for the processing of the user's personal data carried out on said social networks. The USER is informed that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679, of April 27 (GDPR), and Organic Law 3/2018, of December 5 (LOPDGDD). Therefore, the following information about the processing is provided:

What do we process your personal data for? 

Purpose of processing: to maintain a relationship between the USER and the RESPONSIBLE which may include the following operations: 

• Process requests and queries to the person in charge. 
• To inform about activities and events organized by the manager 
• Inform about products or services offered by the manager 
• review public profiles in the event of an employee search according to the needs of the profile. 

Why may we process your personal data? 

Legal basis for processing: article 6.1.a GDPR, the data subject has consented to the processing of his/her personal data for one or more specific purposes. The USER has a profile on the same social network and has decided to join the social network of the RESPONSIBLE thus showing interest in the information published therein, therefore, at the time of requesting to follow our official profiles, he/she provides us with his/her consent to the processing of those personal data published on his/her profile. 

The USER can access at any time to the privacy policies of the social network itself, as well as configure your profile to ensure your privacy. 

The RESPONSIBLE has access and treats that public information of the USER, in particular, your contact name. These data are only used within the social network itself and will only be incorporated into a file of the RESPONSIBLE when necessary to process the USER's request. 

How long will we keep your personal data? 

Criteria for data retention: they will be kept as long as the USER does not revoke the consent given as indicated in this privacy policy.  

To whom do we provide your personal data? 

Communication of data: the information provided by the USER through the RESPONSIBLE's social networks, including their personal data, may be published, always depending on the services that the USER uses, so it may be publicly available to other third party users of social networks. From the profile of each social network, the USER can configure what information he/she wants to make public in each case, view the permissions that have been granted, delete them or disable them, such as any third party application that is no longer desired to be used. 

No communication of personal data to third parties outside the social network is foreseen except, if essential for the development and execution of the purposes of treatment, to our service providers related to communications, with which the RESPONSIBLE has signed confidentiality contracts and processing manager required by current privacy regulations. 

What are your rights? 

Rights of the USERmay only be exercised in relation to information that is under the control of the RESPONSIBLE. 

• Right to withdraw consent at any time 
• Right of access, rectification, portability and deletion of your data, and to limit or oppose its processing. 
• The right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with the regulations in force. 

Contact details to exercise your rights: 

ITBID TECHNOLOGIES 2002, S.L.. AVDA. JOSEP TARRADELLAS, 8, AT. 3 – 08029 Barcelona (agpd@itbid.org) 

2. USE OF THE PROFILE

The RESPONSIBLE will carry out the following actions: realizará las siguientes actuaciones: 

• Access to the public information of the profile. 
• Publication in the USER's profile of all information already published in the RESPONSIBLE's social network. 

• Send personal and individual messages through the social network channels. 
• Updates on the status of the page that will be published on the USER's profile. 

The USER can always control their connections, delete content that is no longer of interest to them and restrict who they share their connections with; to do so, they must access their privacy settings. 

3. PUBLICATIONS

The USER, once he/she is a follower or has joined the RESPONSIBLE's social network, may publish comments, links, images, photographs or any other type of multimedia content supported by the same. The USER, in all cases, must be the owner of the content published, enjoy the copyright and intellectual property rights or have the consent of the third parties concerned. 

Any publication on the social network, whether text, graphics, photographs, videos, etc. that violate or are likely to violate morals, ethics, good taste or decorum, and/or that infringe, violate or violate intellectual or industrial property rights, the right to image or the law, is expressly prohibited. 

In these cases, the RESPONSIBLE reserves the right to immediately remove the content, without prior notice, and may request the permanent blocking of the USER. 

The RESPONSIBLE will not be responsible for the contents that a USER has freely published. 

The USER must keep in mind that his publications will be known by other users, so he himself is primarily responsible for his privacy. 

The images that may be published in the social network will not be stored in any file by the RESPONSIBLE, but they will remain in the social network. 

4. DATA OF MINORS OR PERSONS WITH SPECIAL ABILITIES

Access and registration through the RESPONSIBLE's social networks is prohibited to minors under 18 years of age. On the other hand, if the USER has special abilities, it will be necessary the intervention of the holder of their parental authority or guardianship, or their legal representative by means of a valid document proving the representation. 

The RESPONSIBLE shall be expressly exonerated from any liability that may arise from the use of social networks by minors or people with special abilities. The RESPONSIBLE social networks do not consciously collect any personal information from minors, therefore, if the USER is a minor, he/she should not register or use the RESPONSIBLE social networks or provide any personal information. ni tampoco proporcionar ninguna información personal.