Privacy Policy
Customers and Suppliers Information Clause
BASIC INFORMATION ON DATA PROTECTION
| DATA CONTROLLER | INDICUS SOFTWARE, S.L. |
| PURPOSE | To establish the necessary communications that give content to the established contractual relationship and to the economic, administrative, and fiscal obligations. |
| LEGAL GROUNDS | Contractual Performance Compliance with a legal obligation Interés legítimo del responsable |
| RECIPIENTS | Data will not be disclosed to third parties, except for legal obligations and to banking institutions for the payment or collection of the services provided. |
| RIGHTS | You have the right to access, rectify, and delete data, as well as other rights, as explained in the additional information. |
| ADDITIONAL INFORMATION | You can request additional and detailed information about Data Protection by contacting us at our offices or via email: info@indicus.es. |
EXTENDED DATA PROTECTION INFORMATION
PROCESSING ACTIVITY FOR CUSTOMERS AND SUPPLIERS
Who is responsible for processing your personal data?
Company Name: INDICUS SOFTWARE, S.L.
VAT Number (CIF): B83535237
Address: C/ Marie Curie, 5-7 Beta Building, 2nd floor, offices 2.5 and 2.6, 28521 Rivas Vaciamadrid (Madrid), Spain
Email Contact: info@indicus.es
Phone: +34 918276475
For what purpose will we process your personal data?
For what purpose will we process your personal data? Your personal data will be used to fulfill the contractual relationship established in the sale or provision of services, as well as to comply with the economic and fiscal obligations arising from it and to establish the necessary contractual communications
How long will we keep your personal data?
Your personal data will be kept for the duration of the established relationship, and once it is finished, they will be kept based on the legal retention periods, which, according to economic and fiscal regulations, range from 4 to 10 years.
What is the legal basis for processing your personal data?
The legal basis for processing your personal data is:
Execution of a contract in which the data subject is a party (principal)
As a result of the contractual relationship established with customers and suppliers the data controller has legal obligations in economic and fiscal matters derived from the following regulations, which affect the retention periods:
Commercial Code of 1885
Corporate Income Tax Law (RDL 4/2004, of March 5) art.133.1
Tax regulations
General Tax Law law 58/2003
Article 24 of RD Leg. 1/2011 of July 1, approving the revised text of the Audit of Accounts Law
Royal Decree 1514/2007, of November 16, approving the General Accounting Plan
For the legitimate interest of the data controller
For the legitimate interest of the data controller, in the contractual communications that we will establish with customers and suppliers
Is there an obligation to provide this personal data?
Contractual requirement
What are the consequences of not doing so?
Inability to provide the requested service
Will we disclose your personal data?
Recipients or categories of recipients.
TAX ADMINISTRATION For compliance with tax obligations
BANKS SAVINGS BANKS AND RURAL SAVINGS BANKS for the collection/payment of services provided/received
What rights do you have when you provide us with your personal data?
Right of Access : You have the right to know if your data is being processed and to receive that information in writing through the requested means.
Right of RectificationYou have the right to request the rectification of your data if they are inaccurate or incomplete.
You have the right to request the deletion of your data; however, please note that the right to deletion is limited when there is a legal obligation to retain or block your data.
In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain them for the exercise or defense of claims, the protection of third parties, or for reasons of important public interest.
In certain circumstances and for reasons related to your specific situation, you may object to the processing of your data. The data controller will stop processing the data, except for compelling legitimate reasons or the exercise or defense of possible claims.
When the processing of your data is based on consent or is necessary for the execution of a contract or pre-contract and is carried out by automated means, you have the right to data portability, i.e., to receive them in a structured, commonly used, and machine-readable format, including sending them to a new controller.
Any data subject may file a complaint with the competent Data Protection Authority, especially when they have not obtained satisfaction in the exercise of their rights. You can contact them by sending a written request to the Spanish Agency for Data Protection at C/Jorge Juan n.º 6, 28001 Madrid or through their electronic headquarters at www.agpd.es
The forms for the exercise of your rights can be found in the Privacy Policy / rights section of our website, or you can request them in writing to the controller's address, or even obtain them from the electronic headquarters of the Control Authority at www.agpd.es, and they must be sent to the postal or electronic address of the controller.
Rights Information Clause
Who can exercise the rights?
The rights of data subjects are still personal, so they will be exercised by the data subject duly accrediting their identity (for this purpose, their ID card or equivalent will be requested). However, they can also be exercised through their legal representative, either due to their incapacity or minority that prevents them from personally exercising these rights, in which case it will be necessary to prove such condition. It can also be done through voluntary representation through a representative expressly appointed to exercise the right. In this case, the identity of the represented party must be clearly proven by providing a copy of their National Identity Document or equivalent document, and the representation conferred by them.
How can you exercise your rights?
The exercise of rights must be carried out through communication addressed to the data controller, which shall contain:
Name and surname of the data subject.
Photocopy of their national identity document, passport, or other valid identification document, or, where appropriate, of the person representing them.
The use of the data subject's identifying electronic signature will exempt them from providing photocopies of their ID card or equivalent document.
If the data subject requests any of their rights electronically, the response will be provided through the same means, unless the data subject specifies another method.
Request specifying the request.
Address for notification purposes, date, and signature of the applicant.
Supporting documents for the request being made, where applicable.
What are our obligations?
The data controller must respond to the request addressed to them in any case, regardless of whether the data subject's data appears in their processing.
In the event that the request does not meet the specified requirements, the data controller must request that they be corrected.
The data controller is responsible for proving compliance with the duty to respond and must keep evidence of compliance with the aforementioned duty.
The response shall be made effective within the maximum period established by law, although, whenever possible, an attempt will be made to prepare and deliver the information in a shorter time. It is reminded that the legal response periods are:
30 days.
Extension of up to two more months in exceptionally complex cases that are duly justified and informed to the data subject.
RIGHT OF ACCESS
The data subject shall have the right to obtain from the data controller confirmation as to whether or not personal data concerning them are being processed, and, where that is the case, access to the personal data (Article 15 of the GDPR).
RIGHT TO RECTIFICATION
The data subject shall have the right to obtain from the data controller without undue delay the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement (Article 16 of the GDPR).
RIGHT TO ERASURE
The data subject shall have the right to obtain from the data controller the erasure of personal data concerning them without undue delay, and the data controller shall have the obligation to erase personal data without undue delay in certain circumstances that will be analyzed below (Article 17 of the GDPR).
RIGHT TO RESTRICTION OF PROCESS
The data subject shall have the right to obtain from the data controller the restriction of processing of data in certain cases, which will be analyzed later. Art. 18 of the GDPR.
RIGHT TO DATA PORTABILITY
The data subject shall have the right to receive the personal data concerning them, which they have provided to a data controller, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided in certain cases. Art. 20 of the GDPR.
RIGHT TO OBJECT
The data subject shall have the right to object, on grounds relating to their particular situation, at any time, to the processing of personal data concerning them in certain circumstances that will be analyzed later. Art. 21 of the GDPR.
RIGHT NOT TO BE SUBJECT TO AUTOMATED INDIVIDUAL DECISION-MAKING
Every data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them. Art. 22 of the GDPR.
REPRESENTATION MODEL
Any data subject may exercise their rights through duly completed representation, with the data subject and the representative duly identified.
Privacy Clause for Social Media Followers
BASIC INFORMATION ON DATA PROTECTION
| DATA CONTROLLER | INDICUS SOFTWARE, S.L. |
| PURPOSE | Receive information directly related to the services we provide, events, activities, and promotions of our organization, always through the chosen social network and interact with us. |
| LEGAL GROUNDS | Consent of the data subject |
| RECIPIENTS | Data will not be disclosed to third parties |
| RIGHTS | You have the right to access, rectify, and delete data, as well as other rights, as explained in the additional information. |
| ADDITIONAL INFORMATION | You can consult additional and detailed information about Data Protection on our website in the Privacy Policies/Social Media Followers section. |
EXTENDED DATA PROTECTION INFORMATION
ACTIVIDAD DE TRATAMIENTO SEGUIDORES EN REDES SOCIALES
Who is responsible for processing your personal data?
Company Name: INDICUS SOFTWARE, S.L.
VAT Number (CIF): B83535237
Address: C/ Marie Curie, 5-7 Beta Building, 2nd floor, offices 2.5 and 2.6, 28521 Rivas Vaciamadrid (Madrid), Spain
Email Contact: info@indicus.es
Phone: +34 918276475
For what purpose will we process your personal data?
Your personal data will be used to manage the list of people who like our Facebook, Twitter, YouTube, Google+, and Linkedin pages.
This allows us to receive information directly related to the services we provide, events, activities, and promotions of our organization, always through the chosen social network and interact with us.
How long will we keep your personal data?
The data provided on the respective social network will remain accessible to us as long as you keep the 'follow' or 'like' button active. If you wish to stop following us, all you have to do is click on the 'unfollow' or 'unlike' button, or remove us from your contacts on Google+ and delete the contact on Linkedin.
What is the legal basis for processing your personal data?
The legal basis for the processing of your personal data is:
By the consent of the data subject, subject to the conditions established in the privacy and data protection policies of each social network. We provide you with a link to each of them for your reading:"
Youtube
Google+
Is there an obligation to provide this personal data?
There is no obligation to provide data beyond what is necessary for registration on each social network.
What are the consequences of not doing so?
Impossibility of communication and tracking through social networks.
Will we disclose your personal data?
There is no provision to disclose your personal data or to make international transfers with them.
What rights do you have when you provide us with your personal data?
Please note that we access the personal data that appear in your profile as a result of the mutual follow-up of our Twitter, Facebook, or Instagram accounts exclusively. Therefore, we understand that the exercise of rights over your personal data should be carried out through the respective social network. Nonetheless, we inform you of what these rights are:
Right of Access : You have the right to know if your data is being processed and to receive that information in writing through the requested means.
Right of RectificationYou have the right to request the rectification of your data if they are inaccurate or incomplete.
You have the right to request the deletion of your data; however, please note that the right to deletion is limited when there is a legal obligation to retain or block your data.
In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain them for the exercise or defense of claims, the protection of third parties, or for reasons of important public interest.
In certain circumstances and for reasons related to your specific situation, you may object to the processing of your data. The data controller will stop processing the data, except for compelling legitimate reasons or the exercise or defense of possible claims.
When the processing of your data is based on consent or is necessary for the execution of a contract or pre-contract and is carried out by automated means, you have the right to data portability, i.e., to receive them in a structured, commonly used, and machine-readable format, including sending them to a new controller.
Any data subject may file a complaint with the competent Data Protection Authority, especially when they have not obtained satisfaction in the exercise of their rights. You can contact them by sending a written request to the Spanish Agency for Data Protection at C/Jorge Juan n.º 6, 28001 Madrid or through their electronic headquarters at www.agpd.es
The models for requesting the exercise of your rights can be found in the rights section of our website. You can also request them in writing to the address of the data controller, or obtain them from the electronic headquarters of the supervisory authority at www.agpd.es, and they must be sent to the postal or electronic address of the data controller.
Newsletter Users Information Clause
BASIC INFORMATION ON DATA PROTECTION
| DATA CONTROLLER | INDICUS SOFTWARE, S.L. |
| PURPOSE | Management of communication and newsletter information through the website. |
| LEGAL GROUNDS | By the consent of the data subject. |
| RECIPIENTS | Data will not be disclosed to third parties, except for legal obligations. |
| RIGHTS | You have the right to access, rectify, and delete data, as well as other rights, as explained in the additional information. |
| ADDITIONAL INFORMATION | You can consult additional and detailed information about Data Protection on our website in the Privacy/Newsletter Policies section. |
EXTENDED DATA PROTECTION INFORMATION
NEWSLETTER PROCESSING ACTIVITY
Who is responsible for processing your personal data?
Company Name: INDICUS SOFTWARE, S.L.
VAT Number (CIF): B83535237
Address: C/ Marie Curie, 5-7 Beta Building, 2nd floor, offices 2.5 and 2.6, 28521 Rivas Vaciamadrid (Madrid), Spain
Email Contact: info@indicus.es
Phone: +34 918276475
For what purpose will we process your personal data?
Your personal data will be used for the purpose of sending you our newsletter or informational bulletin with content related to our industry, through your registration on the distribution list.
How long will we keep your personal data?
Your personal data will be processed until you revoke the consent provided for this type of commercial or informational communication. Once revoked, we will keep them 'blocked' for a maximum of 3 years, as long as there are legal responsibilities arising from the processing of your personal data.
What is the legal basis for processing your personal data?
The legal basis for the processing of your personal data is:
By the consent of the data subject.
Is there an obligation to provide this personal data?
Necessary requirement for subscribing to the newsletter.
What are the consequences of not doing so?
Impossibility to send it to you.
Will we disclose your personal data?
There are no planned disclosures of your personal data or international transfers.
Data processors involving transfers to third countries.
Commercial communications via email are carried out through MailChimp, which acts as a data processor, and we have a contract with them in accordance with Article 28 of the GDPR.
With your contact information, specifically your email address, there is an international data transfer to the United States, as we use a service provider for the management of informational/commercial communications (newsletter) that hosts your data there.
This transfer is regulated by the agreement between European and American authorities known as the Privacy Shield, which provides equivalent guarantees to European individuals.
What rights do you have when you provide us with your personal data?
Right of Access : You have the right to know if your data is being processed and to receive that information in writing through the requested means.
Right of RectificationYou have the right to request the rectification of your data if they are inaccurate or incomplete.
You have the right to request the deletion of your data; however, please note that the right to deletion is limited when there is a legal obligation to retain or block your data.
In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain them for the exercise or defense of claims, the protection of third parties, or for reasons of important public interest.
In certain circumstances and for reasons related to your specific situation, you may object to the processing of your data. The data controller will stop processing the data, except for compelling legitimate reasons or the exercise or defense of possible claims.
When the processing of your data is based on consent or is necessary for the execution of a contract or pre-contract and is carried out by automated means, you have the right to data portability, i.e., to receive them in a structured, commonly used, and machine-readable format, including sending them to a new controller.
Any data subject may file a complaint with the competent Data Protection Authority, especially when they have not obtained satisfaction in the exercise of their rights. You can contact them by sending a written request to the Spanish Agency for Data Protection at C/Jorge Juan n.º 6, 28001 Madrid or through their electronic headquarters at www.agpd.es
The models for requesting the exercise of your rights can be found in the rights section of our website. You can also request them in writing to the address of the data controller, or obtain them from the electronic headquarters of the supervisory authority at www.agpd.es, and they must be sent to the postal or electronic address of the data controller.