Who is responsible for the processing of your personal data?

ITBID TECHNOLOGIES 2002, S.L.

Av. Josep Tarradellas, 8-10

Email: info@itbid.com

Phone number: (+34) 933 218 614

ITBID Does not currently have a designated DPO.

Why do we process your personal data and what is the legal basis for doing so?

We may process your personal data in different areas of our business:

Thus, through the different forms enabled on our website or actions in RRSS, we will treat them confidentially to achieve the following purposes:

In the Contact form

• To respond to queries or any type of request made by the user through any of the contact forms made available on the website of the responsible party(for the legitimate interest of the responsible party, art. 6.1.f GDPR).
• Send commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that enable commercial communications with our customers. These communications will be made by the responsible party and will be related to its products and services, or those of its collaborators or suppliers, with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data(by consent of the data subject, 6.1.a GDPR).
• Conduct statistical analysis and market research(for the legitimate interest of the data controller, art. 6.1.f GDPR).

In the Request a demo form

• To guide you through the requested demo and answer your queries(for the legitimate interest of the responsible party, art. 6.1.f GDPR).
• Send commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that enable commercial communications. These communications will be made by the responsible party and will be related to its products and services, or those of its collaborators or suppliers, with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data(by consent of the data subject, 6.1.a GDPR).
• Conduct statistical analysis and market research(for the legitimate interest of the data controller, art. 6.1.f GDPR).

On LinkedIn

• Handling requests and queries to the person in charge
• Report on activities and events organized by the person in charge
• To inform about products or services offered by the responsible party.
• review public profiles in the event of an employee search, adjusting them to the needs of the profile.

In addition to the processing that takes place through the website, within the scope of the different processing activities identified in its Register of Activities, we will process them to achieve, among others, the following purposes:

For the management of labor relations

• In the selection and hiring process o,
• During the course of the employment relationship as a result of the monitoring of labor activity
• or in relations with the legal representation of workers or for health surveillance. (in most of these cases the processing will be justified as being necessary for the performance of the employment contract, and in other cases for compliance with legal obligations or because the agents involved have given their consent).

For the management of relations with Customers and Suppliers

• The processing of personal data in relations with customers and suppliers shall be justified by the need to execute the contract concluded with them or for the execution at their request of pre-contractual measures. On other occasions, the processing of professional contact data will be justified by a legitimate interest of ITBID in initiating or maintaining a business relationship. This same legitimate interest is sufficient legal basis to send commercial mailings to our customers without prejudice to the right of opposition that may be exercised at any time. In other cases, we will have to treat such data to fulfill our obligations to the public administration, for example, with the Tax Agency not requiring your consent to the treatment.

• Our main activity is based on the design, marketing and maintenance of a management software that allows our customers to manage the relationship with their suppliers, so the processing of data that our customers incorporate into this tool will be their sole responsibility. ITBID will be responsible for the processing of customer data necessary to manage the user account to provide personalized access to our platform and interactive services offered (as necessary for the execution of the contract as a SaaS provider, 6.1.b GDPR).

• With respect to the data entered by customers, either directly or through our ITBID data dump support, it will be the Data Processor and will only process them according to the instructions given by the customer and documented in the Data Processor contract it has signed with each of them.

For the management of relations with Group companies

• Our organization is in the process of expansion and has opened offices in other cities both nationally and internationally. This fact implies the need to maintain open information flows for the management of our organization that sometimes will involve the processing of personal data. Thus, our Administrative head office may act as a data processor for the rest of the companies of the Group based on a data processor contract that legitimizes the processing, being the legitimate interest of the responsible party or the third party sufficient legal basis for the processing.

Categories of personal data we process

In the contact forms we will process basic identification data such as the name of the contact, the name and email of the organization, and the contact telephone number.

In the Demo application we will process basic identification data such as name, company email, contact telephone number, etc.

In the social networks in which we can interact, public profile data insofar as they may be necessary for the recruitment of the position we may need.

In labor relations, we will process basic identification data such as Name and surname; DNI / CIF / identification document; Address; Email; Telephone or social security number; Personal characteristics such as Sex; Marital status; Nationality, Age; Date and place of birth; Employment details such as Position / position; Category or professional group; Department; Company; Non-economic payroll data; Leave data; Corporate contact data; Work permit. Academic and professional such as Qualifications; Training; Professional experience; Attendance control: Date / time in and out; Reason for absence; ID attendance control and also belonging to special categories such as Union membership or health-related data;

In relations with customers and suppliers we will treat professional contact data such as name and surname if you are a businessman or professional, a contact phone and email. If you are a legal entity we will process your corporate data such as the company name and CIF, address, telephone and email contact. We will also process economic data necessary for the billing of our products and services. In the user registration of the platform basic identification data such as username and password and other information that is necessary depending on the conditions of the service you contract with us. All this will be specified in our service contract and contract of service provider.

In the relations of the Group of companies, we may process personal data mainly for the maintenance of the labor relations of each of our delegations, since they are central administrative offices.

How long will we keep your personal data?

They will be kept for no longer than necessary to maintain the purpose of the processing or there are legal prescriptions that dictate their custody and when it is no longer necessary for that purpose, they will be deleted with appropriate security measures to ensure the anonymity of the data or the total destruction of the data.

Thus, when we process data on the basis of legitimate interest, we will keep them for as long as such interest is maintained. When the basis of legitimacy is the performance of the contract, as long as the employment relationship is maintained and once concluded, for the time required by applicable law for the fulfillment of other obligations, for example, by the statute of limitations for civil actions, we will keep certain data for a period of 5 years. Where the processing is based on the consent you have given us, as long as you have not revoked the consent and without prejudice to the validity of the processing carried out prior to the revocation. In the event that the processing is based on the fulfillment of legal obligations, it will be necessary to comply with the provisions of the applicable regulation to determine the duration of the processing. Thus, if we must comply with tax obligations, we will process personal data for a period of 4 years.

To whom do we provide your personal data?

No communication of personal data to third parties is foreseen except, if necessary for the development and execution of the purposes of the processing, to our service providers related to communications, with whom the RESPONSIBLE has signed confidentiality and data processor contracts required by the privacy regulations in force.

International Data Transfers

Not performed.

What are your rights?

The rights of the USER are:

• Right to withdraw consent at any time.
• Right of access, rectification, portability and deletion of your data, and limitation or opposition to its processing.
• The right to file a complaint with the supervisory authority (www.aepd.es) if you believe that the processing does not comply with the regulations in force.

Contact information to exercise your rights:

ITBID TECHNOLOGIES 2002, S.L. AVDA. JOSEP TARRADELLAS, 8, AT. 3 – 08029 Barcelona (agpd@itbid.org)