DATA PROTECTION POLICY
1. Data Protection Policy.
The following data protection policy applies to all personal data processing conducted by the Person in charge of data processing, be it through www.aritmos.com or elsewhere processed.
We therefore urge you to read our privacy policy before providing us with your personal information.
For any questions regarding our privacy policy, please contact us at: seguridad@aritmos.com
The user declares that he or she has read this Personal Data Protection Policy and has consented to his or her data being processed by the Person in charge and for the purposes herein stated.
Regulations that apply are as follows:
a. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons.
b. LOPDGDD: Organic Law 3/2018, of December 5 Organic Law on the Protection of Personal Data and Guarantee of Digital Rights.
c. LSSI: Law 34/2002, of July 11, 2002, on Information Society Services and Electronic Commerce.
2. Person in charge of data processing:
Handling the data is Informàtica del Segre, S.L., with VAT number B25035080 and address in Térmens Street, 8 - 25190, Lleida. Phone number: +34 973 188 300, e-mail: seguridad@aritmos.com, registered at the Companies House of Lleida, folio 184, volume 188, page I-2002, registration 3.
3. Handling of personal data
Listed below is a description of how we handle personal data:
a. Clients
Handling the data is Informàtica del Segre, S.L., with VAT number B25035080 and address in Térmens Street, 8 - 25190, Lleida. Phone number: +34 973 188 300 and email address: seguridad@aritmos.com.
Purpose of the processing: as well as entering and executing legal agreements with our clients, we also comply with our legal, accounting and tax obligations, answer our client’s questions and extend, execute, and improve the contractual relationship.
Advertising purposes: your data will be used to send you marketing communications regarding the IT, security and training-related products and/or services that the Company provides. This may be done by email, SMS, ems, mms or fax. If you consent to your personal data being processed for advertising purposes, please click the corresponding box below.
Legitimacy of the processing: the execution of a contract or the consent of both parties.
Data collected: names, surnames, ID card numbers, contact information, email addresses and VAT numbers.
Recipients: the controller will not disclose the User’s personal data to third parties unless the data subject has expressed consent or there is a legal obligation to do so.
Your personal data may be transferred to:
a. Civil service departments, Judges and Courts in order to comply with the legal obligations to which the Company is subject to as a result of its operation.
b. Financial institutions for the purpose of complying with the data controller's contractual obligations to the data subject.
c. Third parties when necessary to develop, perform, execute and control the contract between the data controller and the data subject.
d. Data processors bound to the Company by a Data Processing Agreement should they need to access such data to provide the services hired by the Company, which in no case will involve the transfer of such personal data.
Retention periods: until consent is revoked, the data controller will process personal data only for as long as necessary to carry out the purposes for which they were collected. Once the relationship has ended, the data will be blocked during the legally established periods needed to establish, exercise or defend any possible legal claims and subsequently deleted, unless there is a compelling reason for conservation.
Rights: the party concerned shall exercise the rights of access, rectification, erasure, process restriction, portability, objection, to not be subject to profiling and/or automated decision-making and revoke their consent without retroactive effect by sending a written communication to the Person in charge of data processing and providing the ID card or official document proving the identity of the party concerned indicating the request or right being exercised.
The party concerned may file a complaint with the Spanish Data Protection Agency through the website www.agpd.es
The full text of the data protection policy, including information about Article 13 of the GDPR is available at: https://www.aritmos.com/esp/politica-de-privacidad.php
b. Potential clients
Handling the data is Informàtica del Segre, S.L., with VAT number B25035080 and address in Térmens Street, 8 - 25190, Lleida. Phone number: +34 973 188 300 and email address: seguridad@aritmos.com.
Purpose of the processing: your personal data will be processed for the purpose of addressing any queries and questions that may arise as a result of your contacting with the person in charge.
The legitimacy of the treatment: The execution of a contract and your written consent.
Data collected: names, surnames, ID card numbers, contact information, email addresses and VAT numbers.
Recipients: the controller will not disclose the User’s personal data to third parties unless the data subject has expressed consent or there is a legal obligation to do so.
Specifically, personal data may be transferred to:
a. Civil service departments, Judges and Courts in order to comply with the legal obligations to which the Company is subject to as a result of its operation.
b. Financial institutions for the purpose of fulfilling the data controller's contractual obligations to the data subject.
c. Third parties when necessary to develop, perform, execute and control the contract between the data controller and the data subject.
d. Data processors bound to the Company by a Data Processing Agreement should they need to access such data to provide the services hired by the Company, which in no case will involve the transfer of such personal data.
Retention periods: until consent is revoked, the data controller will process personal data only for as long as necessary to carry out the purposes for which they were collected. When the contractual relationship ends, the data will be blocked during the legally established periods needed to establish, exercise or defend any possible legal claims and subsequently deleted, unless there is a compelling reason for conservation.
Rights: the party concerned shall exercise the rights of access, rectification, erasure, process restriction, portability, objection, to not be subject to profiling and/or automated decision-making and revoke their consent without retroactive effect by sending a written communication to the Person in charge of data processing and providing the ID card or official document proving the identity of the party concerned indicating the request or right being exercised.
The party concerned may file a complaint with the Spanish Data Protection Agency through the website www.agpd.es
The full text of the data protection policy, including information about Article 13 of the GDPR is available at: https://www.aritmos.com/esp/politica-de-privacidad.php
c. Providers
Handling the data is Informàtica del Segre, S.L., with VAT number B25035080 and address in Térmens Street, 8 - 25190, Lleida. Phone number: +34 973 188 300 and email address: seguridad@aritmos.com.
Purpose of the processing: establishing and carrying out the legal relationship with our providers for the services and products we offer, complying with our legal, bookkeeping and tax obligations, answering your questions and managing, monitoring, supervising, broadening and improving the contractual relationship.
Legitimacy of the processing: the execution of a contract and consent given.
Data collected: personal data provided by the User when following a social network account such as name, surname, ID, address, email address and telephone number.
Recipients: the controller will not disclose the User’s personal data to third parties unless the data subject has expressed consent or there is a legal obligation to do so.
Specifically, personal data may be transferred to:
a. Civil service departments, Judges and Courts in order to comply with the legal obligations to which the Company is subject to as a result of its operation.
b. Financial institutions for the purpose of fulfilling the data controller's contractual obligations to the data subject.
c. Third parties when necessary to develop, perform, execute and control the contract between the data controller and the data subject.
d. Data processors bound to the Company by a Data Processing Agreement should they need to access such data to provide the services hired by the Company, which in no case will involve the transfer of such personal data.
Retention periods: until consent is revoked, the data controller will process personal data only for as long as necessary to carry out the purposes for which they were collected. When the contractual relationship ends, the data will be blocked during the legally established periods needed to establish, exercise or defend any possible legal claims and subsequently deleted, unless there is a compelling reason for conservation.
Rights: the party concerned shall exercise the rights of access, rectification, erasure, process restriction, portability, objection, to not be subject to profiling and/or automated decision-making and revoke their consent without retroactive effect by sending a written communication to the Person in charge of data processing and providing the ID card or official document proving the identity of the party concerned indicating the request or right being exercised.
The party concerned may file a complaint with the Spanish Data Protection Agency through the website www.agpd.es
The full text of the data protection policy, including information about Article 13 of the GDPR is available at: https://www.aritmos.com/esp/politica-de-privacidad.php
d. Human Resources
Handling the data is Informàtica del Segre, S.L., with VAT number B25035080 and address in Térmens Street, 8 - 25190, Lleida. Phone number: +34 973 188 300 and email address:seguridad@aritmos.com.
Purpose of the processing: managing employee and labor relationships.
Advertising purposes: your data will be used to send you marketing communications of products and/or services technology, security, and training products and/or services that the Company provides. This may be done by email, SMS, ems, mms, or fax. If you wish your personal data to be processed for advertising purposes, please give your express consent by ticking the appropriate box.
Legitimacy of the processing: the execution of a contract.
Data collected: Npersonal data provided by the User when following a social network account such as name, surname, ID, address, email address and telephone number.
Recipients: the controller will not disclose the User’s personal data to third parties unless the data subject has expressed consent or there is a legal obligation to do so.
Specifically, personal data may be transferred to:
a. Civil service departments, Judges and Courts in order to comply with the legal obligations to which the Company is subject to as a result of its operation.
b. Financial institutions for the purpose of fulfilling the data controller's contractual obligations to the data subject.
c. Third parties when necessary to develop, perform, execute and control the contract between the data controller and the data subject.
d. Data processors bound to the Company by a Data Processing Agreement should they need to access such data to provide the services hired by the Company, which in no case will involve the transfer of such personal data.
Retention periods: until consent is revoked, the data controller will process personal data only for as long as necessary to carry out the purposes for which they were collected. When the contractual relationship ends, the data will be blocked during the legally established periods needed to establish, exercise or defend any possible legal claims and subsequently deleted, unless there is a compelling reason for conservation.
Rights: the party concerned shall exercise the rights of access, rectification, erasure, process restriction, portability, objection, to not be subject to profiling and/or automated decision-making and revoke their consent without retroactive effect by sending a written communication to the Person in charge of data processing and providing the ID card or official document proving the identity of the party concerned indicating the request or right being exercised.
The party concerned may file a complaint with the Spanish Data Protection Agency through the website www.agpd.es
The full text of the data protection policy, including information about Article 13 of the GDPR is available at: https://www.aritmos.com/esp/politica-de-privacidad.php
e. Access Control
Handling the data is Informàtica del Segre, S.L., with VAT number B25035080 and address in Térmens Street, 8 - 25190, Lleida. Phone number: +34 973 188 300 and email address:seguridad@aritmos.com.
Purpose of the processing: controlling access managing internal security at the Company’s facilities through the data provided.
Legitimacy of the processing: ensuring the safety of individuals and the security of equipment and property, which legitimates the processing of data through access control systems.
Data collected: name, surname, ID and telephone number.
Recipients: the controller will not disclose the User’s personal data to third parties unless the data subject has expressed consent or there is a legal obligation to do so.
Specifically, personal data may be transferred to:
a. Civil service departments, Judges and Courts in order to comply with the legal obligations to which the Company is subject to as a result of its operation.
b. Financial institutions for the purpose of fulfilling the data controller's contractual obligations to the data subject.
c. Third parties when necessary to develop, perform, execute and control the contract between the data controller and the data subject.
d. Data processors bound to the Company by a Data Processing Agreement should they need to access such data to provide the services hired by the Company, which in no case will involve the transfer of such personal data.
Retention periods: until consent is revoked, the data controller will process personal data only for as long as necessary to carry out the purposes for which they were collected. When the contractual relationship ends, the data will be blocked during the legally established periods needed to establish, exercise or defend any possible legal claims and subsequently deleted, unless there is a compelling reason for conservation.
Rights: the party concerned shall exercise the rights of access, rectification, erasure, process restriction, portability, objection, to not be subject to profiling and/or automated decision-making and revoke their consent without retroactive effect by sending a written communication to the Person in charge of data processing and providing the ID card or official document proving the identity of the party concerned indicating the request or right being exercised.
The party concerned may file a complaint with the Spanish Data Protection Agency through the website www.agpd.es
The full text of the data protection policy, including information about Article 13 of the GDPR is available at: https://www.aritmos.com/esp/politica-de-privacidad.php
f. Personnel selection
Handling the data is Informàtica del Segre, S.L., with VAT number B25035080 and address in Térmens Street, 8 - 25190, Lleida. Phone number: +34 973 188 300 and email seguridad@aritmos.com.
Purpose of the processing: managing job applications for job vacancies, either posted or that may arise in the future.
Legitimacy of the processing: the consent given by the interested party when applying for a job vacancy.
Data collected: personal data provided by the User when following a social network account such as name, surname, ID, address, email address and telephone number.
Recipients: the controller will not disclose the User’s personal data to third parties unless the data subject has expressed consent or there is a legal obligation to do so.
Specifically, personal data may be transferred to:
a. Civil service departments, Judges and Courts in order to comply with the legal obligations to which the Company is subject to as a result of its operation.
b. Financial institutions for the purpose of fulfilling the data controller's contractual obligations to the data subject.
c. Third parties when necessary to develop, perform, execute and control the contract between the data controller and the data subject.
d. Data processors bound to the Company by a Data Processing Agreement should they need to access such data to provide the services hired by the Company, which in no case will involve the transfer of such personal data.
Retention periods: until consent is revoked, the data controller will process personal data only for as long as necessary to carry out the purposes for which they were collected. When the contractual relationship ends, the data will be blocked during the legally established periods needed to establish, exercise or defend any possible legal claims and subsequently deleted, unless there is a compelling reason for conservation.
Rights: the party concerned shall exercise the rights of access, rectification, erasure, process restriction, portability, objection, to not be subject to profiling and/or automated decision-making and revoke their consent without retroactive effect by sending a written communication to the Person in charge of data processing and providing the ID card or official document proving the identity of the party concerned indicating the request or right being exercised.
The party concerned may file a complaint with the Spanish Data Protection Agency through the website www.agpd.es
The full text of the data protection policy, including information about Article 13 of the GDPR is available at: https://www.aritmos.com/esp/politica-de-privacidad.php
g. Video surveillance
Handling the data is Informàtica del Segre, S.L., with VAT number B25035080 and address in Térmens Street, 8 - 25190, Lleida. Phone number: +34 973 188 300 and email address: seguridad@aritmos.com.
Purpose of the processing:
Ensuring the safety of individuals and the security of equipment and property.
Complying with emergency plans.
Use of video surveillance as a way of monitoring a worker's access and presence at the workplace, as well as verifying that he or she fulfills their work obligations and duties.
Legitimacy of the processing: legitimate interest.
Data collected: personal data provided by the User when following a social network account such as name, surname, ID, address, email address and telephone number.
Recipients: the controller will not disclose the User’s personal data to third parties unless the data subject has expressed consent or there is a legal obligation to do so.
Specifically, personal data may be transferred to:
a. Civil service departments, Judges and Courts in order to comply with the legal obligations to which the Company is subject to as a result of its operation.
b. Financial institutions for the purpose of fulfilling the data controller's contractual obligations to the data subject.
c. Third parties when necessary to develop, perform, execute and control the contract between the data controller and the data subject.
d. Data processors bound to the Company by a Data Processing Agreement should they need to access such data to provide the services hired by the Company, which in no case will involve the transfer of such personal data.
Retention periods: until consent is revoked, the data controller will process personal data only for as long as necessary to carry out the purposes for which they were collected. When the contractual relationship ends, the data will be blocked during the legally established periods needed to establish, exercise or defend any possible legal claims and subsequently deleted, unless there is a compelling reason for conservation.
Rights: the party concerned shall exercise the rights of access, rectification, erasure, process restriction, portability, objection, to not be subject to profiling and/or automated decision-making and revoke their consent without retroactive effect by sending a written communication to the Person in charge of data processing and providing the ID card or official document proving the identity of the party concerned indicating the request or right being exercised.
The party concerned may file a complaint with the Spanish Data Protection Agency through the website www.agpd.es
The full text of the data protection policy, including information about Article 13 of the GDPR is available at: https://www.aritmos.com/esp/politica-de-privacidad.php
h. Queries submitted through the web form:
Handling the data is Informàtica del Segre, S.L., with VAT number B25035080 and address in Térmens Street, 8 - 25190, Lleida. Phone number: +34 973 188 300 and email address: seguridad@aritmos.com.
Purpose of the processing: answering queries and requests received through the website and providing the requested services.
Legitimacy of the processing: the consent given by clicking on the acceptance box.
Data collected: personal data provided by the User when following a social network account such as name, surname, ID, address, email address and telephone number.
Recipients: the controller will not disclose the User’s personal data to third parties unless the data subject has expressed consent or there is a legal obligation to do so.
Specifically, personal data may be transferred to:
a. Civil service departments, Judges and Courts in order to comply with the legal obligations to which the Company is subject to as a result of its operation.
b. Financial institutions for the purpose of fulfilling the data controller's contractual obligations to the data subject.
c. Third parties when necessary to develop, perform, execute and control the contract between the data controller and the data subject.
d. Data processors bound to the Company by a Data Processing Agreement should they need to access such data to provide the services hired by the Company, which in no case will involve the transfer of such personal data.
Retention periods: until consent is revoked, the data controller will process personal data only for as long as necessary to carry out the purposes for which they were collected. When the contractual relationship ends, the data will be blocked during the legally established periods needed to establish, exercise or defend any possible legal claims and subsequently deleted, unless there is a compelling reason for conservation.
Rights: the party concerned shall exercise the rights of access, rectification, erasure, process restriction, portability, objection, to not be subject to profiling and/or automated decision-making and revoke their consent without retroactive effect by sending a written communication to the Person in charge of data processing and providing the ID card or official document proving the identity of the party concerned indicating the request or right being exercised.
The party concerned may file a complaint with the Spanish Data Protection Agency through the website www.agpd.es
The full text of the data protection policy, including information about Article 13 of the GDPR is available at: https://www.aritmos.com/esp/politica-de-privacidad.php
i. Newsletter
Handling the data is Informàtica del Segre, S.L., with VAT number B25035080 and address in Térmens Street, 8 - 25190, Lleida. Phone number: +34 973 188 300 and email address: seguridad@aritmos.com.
Purpose of the processing: sending you information, news, reminders and promotions related to the activities of the responsible that may be of interest to you.
Legitimacy of the processing: we will send you information, news, reminders and marketing materials about the company’s activities that may be of interest to you.
Data collected: personal data provided by the User when following a social network account such as name, surname, ID, address, email address and telephone number.
Recipients: the controller will not disclose the User’s personal data to third parties unless the data subject has expressed consent or there is a legal obligation to do so.
Specifically, personal data may be transferred to:
a. Civil service departments, Judges and Courts in order to comply with the legal obligations to which the Company is subject to as a result of its operation.
b. Financial institutions for the purpose of fulfilling the data controller's contractual obligations to the data subject.
c. Third parties when necessary to develop, perform, execute and control the contract between the data controller and the data subject.
d. Data processors bound to the Company by a Data Processing Agreement should they need to access such data to provide the services hired by the Company, which in no case will involve the transfer of such personal data.
Retention periods: until consent is revoked, the data controller will process personal data only for as long as necessary to carry out the purposes for which they were collected. When the contractual relationship ends, the data will be blocked during the legally established periods needed to establish, exercise or defend any possible legal claims and subsequently deleted, unless there is a compelling reason for conservation.
Rights: the party concerned shall exercise the rights of access, rectification, erasure, process restriction, portability, objection, to not be subject to profiling and/or automated decision-making and revoke their consent without retroactive effect by sending a written communication to the Person in charge of data processing and providing the ID card or official document proving the identity of the party concerned indicating the request or right being exercised.
The party concerned may file a complaint with the Spanish Data Protection Agency through the website www.agpd.es
The full text of the data protection policy, including information about Article 13 of the GDPR is available at: https://www.aritmos.com/esp/politica-de-privacidad.php
j. Social media
Handling the data is Informàtica del Segre, S.L., with VAT number B25035080 and address in Térmens Street, 8 - 25190, Lleida. Phone number: +34 973 188 300 and email address:seguridad@aritmos.com.
Purpose of the processing: signing up on and following the Company’s corporate social media accounts.
Legitimacy of the processing: the consent given by the user when registering with the social network.
Data collected: personal data provided by the User when following a social network account such as name, surname, ID, address, email address and telephone number.
Recipients: the controller will not disclose the User’s personal data to third parties unless the data subject has expressed consent or there is a legal obligation to do so.
Specifically, personal data may be transferred to:
a. Civil service departments, Judges and Courts in order to comply with the legal obligations to which the Company is subject to as a result of its operation.
b. Financial institutions for the purpose of fulfilling the data controller's contractual obligations to the data subject.
c. Third parties when necessary to develop, perform, execute and control the contract between the data controller and the data subject.
d. Data processors bound to the Company by a Data Processing Agreement should they need to access such data to provide the services hired by the Company, which in no case will involve the transfer of such personal data.
Retention periods: until consent is revoked, the data controller will process personal data only for as long as necessary to carry out the purposes for which they were collected. When the contractual relationship ends, the data will be blocked during the legally established periods needed to establish, exercise or defend any possible legal claims and subsequently deleted, unless there is a compelling reason for conservation.
Rights: the party concerned shall exercise the rights of access, rectification, erasure, process restriction, portability, objection, to not be subject to profiling and/or automated decision-making and revoke their consent without retroactive effect by sending a written communication to the Person in charge of data processing and providing the ID card or official document proving the identity of the party concerned indicating the request or right being exercised.
The party concerned may file a complaint with the Spanish Data Protection Agency through the website www.agpd.es
The full text of the data protection policy, including information about Article 13 of the GDPR is available at: https://www.aritmos.com/esp/politica-de-privacidad.php
k. E-mail legal disclaimer
This message and its attachments are addressed exclusively to its intended recipient and may contain confidential information that constitutes trade secrets as defined by applicable law (1/2019 on Trade Secrets). The Company has a legitimate interest in protecting such information and so its disclosure is legally prohibited. Please note that if you are not the intended recipient, have received it by accident or are not authorized to view it, you are not allowed to read, copy, save, disclose, or use it and must notify seguridad@aritmos.com or forward it to the sender and delete it without reading. Violating this notice may constitute a crime of disclosure of trade secrets as defined by Article 197 of the Penal Code (Law 10/1995).
We hereby inform you that the use of any personal data collected or generated as a result of communications between you and the data controller, such as your email address and any other information contained therein, is in strict compliance with general data protection regulations and will be processed for the purpose of handling your request, both within the framework of a business relationship (contractual obligation) a potential relationship and when you send an email on your own initiative (legitimate interest). Data will be kept as long as the contractual relationship is maintained and obligations exist. You may exercise your rights of access, rectification, erasure, process restriction, portability and objection by contacting the data controller.
More information on data protection policy is available at: https://www.aritmos.com/esp/politica-de-privacidad.php.
5. Security measures
The company has taken all appropriate technical and organizational measures to ensure an adequate level of security as well as to prevent the loss, misuse, alteration, and unauthorized access to the user’s personal information.
6. Quality and updating of personal data
We hereby inform you that you must provide the personal data we request and that choosing not to do so will result in us being unable to process such data.
The User must take all reasonable steps to ensure that the personal data provided to the data controller is accurate, current, and complete as well as to inform the data controller of any future updates or changes.
Should the User provide any kind of personal information relating to third party individuals, such individuals will have to be duly informed as stated in articles 13 & 14 GDPR so that they can give prior express written consent for their data to be used and processed.
The User is solely liable for any harm or damage caused to a third party or to their own as a result of personal data being incorrect, inaccurate, incomplete, excessive or irrelevant.
7. Age restriction
People under 18 years of age are not allowed to submit personal information since this website and its contents are intended for people of legal age.
8. Amendments to this Data Protection Policy
The Person in charge of data processing may, at any time, update or modify this data protection policy in accordance with applicable legislation, jurisprudential developments or business practices by publishing the amended version on the website.
Version 8, date of publication April 2021
All rights reserved © Informàtica del Segre, S.L. 2021, Lleida
