I. DATA CONTROLLER

Who controls your data?

• Holder: SELIER BY ATISA, S.L., (hereinafter, “SELIER”)
• Registered office: Calle Serrano, 240. 7º planta. 28016. Madrid
• Tax ID number: B16901472
• E-mail: gestionlopd@atisa.es

II. PURPOSE OF DATA PROCESSING AND CATEGORIES OF DATA PROCESSED

For what purpose and for how long will we process your personal data?

SELIER will process the user’s data, manually and/or automatically, for the following specific purposes:

• To manage the contracting of services through the platform, as well as the respective invoicing and delivery.
• To periodically send email notifications about services, events and news related to our professional activity, unless otherwise indicated or unless the user objects or withdraws their consent.
• To periodically send commercial and/or promotional information related to the contracted services sector and of added value for end users, unless otherwise stated or unless the user objects or withdraws their consent.
• To produce anonymous statistical reports on the access habits and activity carried out by users on the Platform.
• To draw up a commercial profile of the user and carry out commercial actions adjusted to it, by using their data derived from the management of the products purchased (browsing data, access habits, traffic), unless otherwise indicated or unless the user opposes or withdraws their consent.
• In the event that you send us your curriculum vitae or register for the different job offers that we may publish, we shall process your data in order to evaluate and manage your job application and, where appropriate, carry out the necessary actions for the selection and recruitment of personnel, in order to offer you positions that match your profile. Unless otherwise indicated, the provision of the required data is necessary, and failure to provide it will prevent the selection process from continuing.
• To fulfil legally established obligations, as well as to verify compliance with contractual obligations, including fraud prevention.

What categories of data do we process?

In accordance with the aforementioned purposes, SELIER processes the following categories of data:

• Identification data: name, surname, first name
• Contact details: postal address, postcode, telephone, e-mail.
• Academic and professional data, in the case of selection processes: education/qualifications, student record, professional experience, membership of professional bodies or associations.
• Economic, financial and banking data.
• Web traffic and location data.
• Electronic communications metadata.
• Commercial information data.

The personal data requested in each of the forms is obligatory; refusal to provide it shall render the provision of services requested impossible.

The user guarantees that the data provided is true, exact, complete and up to date, and is responsible for any direct or indirect damage or harm that may be caused as a result of non-compliance with this obligation. In the event that the user provides third-party data, he/she shall declare that he/she has their consent and undertakes to transfer the information contained in this clause to them, exempting SELIER from any liability in this regard. Nevertheless, SELIER may verify this fact by implementing applicable due diligence measures, in accordance with data protection regulations.

How long do we keep your data?

SELIER shall only keep the personal data of users for the time required in order to carry out the purposes for which it was collected, as long as consents granted are not withdrawn. Subsequently, if necessary, it shall retain the information blocked for the legally established periods of time.

In the case of the data you provide in connection with job offers to which you wish to subscribe, it shall be retained for one year from the date of the last update. Once this period has elapsed without the data having been updated, the data shall be deleted, unless you tell us otherwise.

What security measures do we put in place to safeguard your data?

SELIER is committed to the protection of personal data and the privacy of users, and therefore, in order to protect the different types of data reflected in this privacy policy, it shall undertake the technical security measures required in order to prevent its loss, manipulation, dissemination or alteration.

• Encryption of communication between the user’s device and SELIER servers.
• Encryption of the information on SELIER’s own servers.
• Other measures to prevent access to user data by third parties.

In those cases in which SELIER has service providers for the maintenance of the platform that are outside the European Union, these international transfers have been regularised in accordance with SELIER’s commitment to the protection, integrity and security of users’ personal data.

III. DATA COMMUNICATIONS

To which recipients will your data be communicated?

SELIER informs users that their data may be communicated to other SELIER entities in order to attend to their requests, manage the services contracted and inform them about services, events and news related to our professional activity.

Additionally, we wish to inform you that certain data, within the framework of the regulations in force your contractual relationship with SELIER, may be shared with:

• Public administrations with competence in SELIER’s sectors of activity, when so established by the regulations in force.
• The State Security Forces and Corps pursuant to the provisions of the Law.
• Banks and financial institutions for invoicing services offered.

IV. LEGITIMACY

What is the legitimacy for the processing of your data?

SELIER’s legitimisation to carry out the processing of user data lies in the consent of the interested party, requested for the specific case.

For its part, the management of the contracting of services, payment, invoicing and respected deliveries is legitimised by the execution of the contract itself.

The processing of data for the purpose of sending electronic newsletters on services, events and news related to our professional activity is based on the legitimate interest of SELIER to carry out such processing in accordance with current legislation.

Additionally, the legitimacy for the processing of your data, in relation to the submission of Curriculum vitae or registrations for professional offers that we may publish, is based on the consent of the user who sends their data, which they can withdraw at any time, although this would mean that your application could not be taken into account in our personnel selection processes. However, the withdrawal of your consent shall not affect the lawfulness of any processing operations previously undertaken.

The user’s information may also be used to comply with the different legal obligations of SELIER.

V. USERS’ RIGHTS

What rights does the data subject have?

You can send us a letter to SELIER at Calle Serrano, 240. 7º planta. 28016. (Madrid) or via the e-mail address gestionlopd@atisa.es

At any time and free of charge, you may exercise the following rights:

• Withdraw consent granted.
• Obtain confirmation as to whether or not SELIER is processing personal data concerning you.
• Access your personal data.
• Rectify inaccurate or incomplete data.
• Request the deletion of your data when, among other reasons, the data is no longer required for the purposes for which it was collected.
• Obtain from SELIER the limitation of data processing when any of the conditions provided for in the data protection regulations are met.
• In certain circumstances and on grounds relating to their particular situation, data subjects may object to the processing of their data. SELIER shall cease to process the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.
• Obtain human intervention in order to express their point of view and to challenge automated decisions taken by SELIER, if applicable.
• Request the portability of your data.
• Complain to the Spanish Data Protection Agency (www.aepd.es) when the interested party believes that SELIER has breached rights stipulated in the applicable data protection regulations.

SELIER is committed to regulatory compliance and respect for the rights of users, as well as respect for their privacy, so if you have any questions regarding how we treat your personal data, please do not hesitate to contact us through the channels indicated.