Privacy Policy

In accordance with the provisions of the current regulations on personal data protection, we provide you with the following information:

Information to the interested party and/or user

NETWORKIA makes this privacy policy available to you to inform you, in detail, about how the personal data that you as a data subject and/or user provide or have provided, through any means (website, e-mail, telephone, in person, online or paper forms, etc.), are or will be treated.

NETWORKIA has taken all necessary technical and organizational measures to ensure the confidentiality, integrity, availability and resilience of the personal data in its custody.

Responsibility of the interested party and/or user

By providing your data, you, as the interested party and/or user (hereinafter the Interested Party), guarantee that you are over 18 years of age and that the data provided to NETWORKIA are true, accurate, complete and up to date. To this effect, the Interested Party confirms that he/she is responsible for the truthfulness of the data provided and that he/she will keep said information conveniently updated, so that it corresponds to his/her real situation, being responsible for any false or inaccurate data that may be provided, as well as for any damages, direct or indirect, that may arise from this.

Responsible for the treatment

Company name: NETWORKIA BUSINESS CENTER, SL

TAX ID: B65717456

Address: Av. Portal del Angel 36, 08002 Barcelona

Telephone: 900 900 092

E-mail: protecciondedatos@networkia.es

Purposes, storage periods and legitimacy of the data processing

NETWORKIA, as Data Controller of the personal data of the Data Subject, as well as those that may be provided in the future, informs you that these data will be processed in accordance with the provisions of the current regulations on personal data protection, and therefore provides you with the following information about each of the processing carried out by NETWORKIA:

Contact / Inquiries

Purpose of processing: to respond and follow up on queries, requests for information, suggestions and complaints, as well as to maintain contact with those who have shown interest in the company, its products or services.

Data retention criteria: data will be retained for the time necessary to process and respond to the query.

Legitimation for data processing: RGPD: 6.1.f) the legal basis for data processing is based on the Legitimate Interest of the Data Controller to attend and respond to communications or requests received.

Proforma Invoices / Quotations

Purpose of the treatment: the preparation and delivery of proforma invoices and/or estimates requested by the Interested Parties, as well as to be able to follow up on them by telephone, telematically or in person.

Data retention criteria: data will be retained for as long as there is a mutual interest in doing so, or the data subject requests its deletion.

Customers

Purpose of processing: customer management, maintenance of contractual and / or commercial relationships with them, manage the procurement of products and / or services, as well as for administrative management (billing, collections, etc.), accounting and taxation of the company and for compliance with legal obligations that all this implies. Also to be able to establish contact with people who provide services in a legal entity (company, organization, etc.), as well as with individual entrepreneurs and liberal professionals, in order to establish or maintain business-to-business (B2B) relations with them.

Data retention criteria: data will be retained for as long as the contractual and/or commercial relations between both parties are maintained and their deletion is not requested and, in the event of doing so, for the time provided for by the regulations in force (tax, commercial, etc.) regarding the statute of limitations of responsibilities.

Legitimation for data processing: RGPD: 6.1.b) the legal basis for the processing of data is the execution and maintenance of contractual and/or commercial relations between both parties, as well as compliance with legal obligations (tax, commercial, etc.) that all this implies. The processing of contact data of a professional nature for business relationships is legitimized by the Legitimate Interest of the Data Controller to be able to contact, establish and/or maintain business relationships with the legal entity in which the Data Subject provides its services, as well as with individual entrepreneurs and liberal professionals (RGPD: 6.1.f and LOPDGDD: 19).

Suppliers

Purpose of processing: management of suppliers, maintenance of contractual and/or commercial relations with them, as well as administrative (billing, collections, etc.), accounting and tax management of the company and for compliance with the legal obligations that all this implies. Also to be able to establish contact with people who provide services in a legal entity (company, organization, etc.), as well as with individual entrepreneurs and liberal professionals, in order to establish or maintain business-to-business (B2B) relations with them.

Subcontracted workers

Purpose of processing: management and control of subcontracted persons to verify compliance with the obligations arising from labor regulations, occupational risk prevention, coordination of business activities, etc., as well as for management, planning, organization of work, etc.

Data retention criteria: data will be retained for the period of time established by current legislation regarding the prescription of responsibilities and, when they are no longer necessary for that purpose, they will be deleted.

Legitimacy for data processing: the legal basis for data processing is the execution, fulfillment and development of the contract between NETWORKIA BUSINESS CENTER, S.L. and the company by which you are hired, as well as for the observance of the applicable legal obligations derived therefrom (Workers’ Statute, Occupational Risk Prevention Law, General Social Security Law, etc.).

Origin of the data: the data have been provided by the subcontractor company (company with which you have an employment/contractual relationship), contracted by the Responsible for the provision of services.

The categories of data processed are:

Identification data: Name and surname, ID card number and SS or mutuality number.
Job details: Occupation and position.
Academic and professional: Education and qualifications.

Resume submission

Purpose of processing: filing and registration of documentation and resumes voluntarily provided by the interested parties for future selection processes of candidates for a job in the company.

Data retention criteria: data will be kept for a maximum period of one year or until the interested party exercises his or her right of deletion. In this regard, after the aforementioned period, and if you wish to continue participating in the selection processes of the Data Controller, please send us your resume again.

Legitimation for data processing: RGPD: 6.1.a) the legal basis for data processing is the consent provided by the Interested Party at the time of providing their data to participate in selection processes. By submitting or sending us his/her curriculum vitae, the Data Subject authorizes the processing of his/her data by means of a clear affirmative action.

Data communication

In general, personal data will not be communicated to third parties, except in cases where there is a legal obligation or where it is necessary for the provision of services or for the maintenance and development of relations, such as, but not limited to:

Public Administrations, Judges and Courts, for the fulfillment of legal obligations, as well as for the attention of possible responsibilities derived from the applicable regulations.
Financial/banking entities, for the management of collections and payments.
Mutual insurance companies and prevention companies, compliance with occupational risk prevention regulations.
Contractor or principal company, for compliance with applicable regulations.
Service providers contracted by the Controller, who will have the status of Data Processor.

Although it is not a transfer of data, in order to carry out some of the treatments indicated or to provide you with a service, it may be that third party companies, acting as Data Processors (our suppliers), access your information to carry out the aforementioned treatment or service. These persons in charge access your data following our instructions and without being able to use them for a different purpose and maintaining the strictest confidentiality.

International transfers

NETWORKIA does not intend to make international transfers of your data to countries outside the European Economic Area (EEA). In those cases in which it is necessary, they will only be made to recipients that are located in a country, a territory or one or more specific sectors of that country or international organization that has been declared adequate level of protection by the European Commission; or are under the Privacy Shield agreement; or that are covered by any of the appropriate safeguards provided for in article 46.2 of Regulation (EU) 2016/679.

Rights of interested parties

Any person has the right to obtain confirmation as to whether or not the Data Controller is processing personal data concerning him/her, as well as to withdraw, at any time, any consent he/she may have given for any specific purpose, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

Data protection regulations allow you to exercise your rights of access, rectification, deletion and portability of data and opposition and limitation to their processing, as well as not to be subject to decisions based solely on the automated processing of your data, where appropriate.

These rights are characterized by the following:

It is free of charge, except in the case of manifestly unfounded or excessive requests (e.g. repetitive nature), in which case the Data Controller may charge a fee proportional to the administrative costs incurred or refuse to act.
You may exercise your rights directly or through your legal representative or volunteer.
We must respond to your request within one month, although, taking into account the complexity and number of requests, the deadline may be extended by an additional two months.
We have the obligation to inform you about the means to exercise these rights, which must be accessible and without being able to deny you the exercise of the right for the sole reason of choosing another means.
If the request is submitted electronically, the information will be provided electronically whenever possible, unless you ask us to do otherwise.
If the Controller does not comply with the request, he/she will inform you, within one month at the latest, of the reasons for his/her inaction and the possibility to complain to a Supervisory Authority.

How to exercise these rights

Interested parties may exercise their rights by sending a written communication to the postal or e-mail address of the Data Controller, indicating in the reference “EXERCISE OF DPA RIGHTS”, including:

Request in which the application is made.
Address for notification purposes.
Date and signature.

You may also exercise your rights through legal representation, in which case, in addition to the ID of the interested party, you must provide ID and proof of representation of the third party.

You must prove your identity by attaching a photocopy or, where appropriate, a scanned copy of your ID card or equivalent document in order to verify that we are only responding to the interested party or his legal representative, in which case you must provide proof of representation.

Upon request, we will provide you with the forms to exercise these rights, indicating which right you wish to exercise.

Likewise, and especially if you consider that you have not obtained full satisfaction in the exercise of your rights, we inform you that you may file a complaint with the National Control Authority by contacting the Spanish Data Protection Agency, C/ Jorge Juan, 6 – 28001 Madrid.

Social networks

NETWORKIA uses social networks and this is another way to reach you. The information collected through the messages and communications you post may contain personal information that is available online and accessible to the public.

These social networks have their own privacy policies, which explain how they use and share your information, so we recommend that you consult them before using them to confirm that you agree with the way in which your information is collected, treated and shared.

The processing of the data of persons who become followers and/or make any link or connection action through the social networks of the official pages of the Data Controller shall be governed by this privacy policy and by the privacy policies of the social networks themselves.

The Data Controller will process your data for the purposes of:

Correctly manage your presence in the corresponding social network.
Send personal and individual messages through the social network channels.
Inform you of activities, products and/or services of the Data Controller, or third parties that may be related to our activity.
Any other treatment that the regulations of social networks may allow.

Cookies

In general, if you browse the Internet you can accept or reject cookies from the configuration options of your browser.

This website may use cookies and other similar technologies such as local shared objects, flash cookies or pixels, which are small files that some platforms, such as web pages, can install on the user’s equipment (computer, tablet, smartphone, etc.).

Their functions can be very varied:

Store browsing preferences.
Collect statistical information.
Allow certain technical functionalities.
Store information about the user’s browsing habits or equipment.

Cookies are useful for several reasons. From a technical point of view, they allow web pages to work in a more agile way and adapted to the user’s preferences, such as storing the user’s language or the currency of his or her country, etc.

In addition, they help the Controllers of the websites to improve their services and to make the advertising displayed on them more efficient, thanks to the statistical or habit information they collect through them.

For the installation and use of certain cookies it is necessary to obtain the informed consent of the users. Cookies that require user consent are, among others:

Analytical Cookies.
Advertising Cookies.
Affiliation cookies.

Excluded are those of a technical nature and those necessary for the operation of the website or the provision of services expressly requested by the user.

The user has the ability to configure your browser to be alerted to the receipt of cookies and to prevent their installation on your computer. Please refer to your browser instructions for more information.

For more information about cookies please see our Cookie Policy.

Mandatory or optional nature of the information provided by the interested party

The Interested Party, by checking the corresponding boxes and entering data in the fields marked as mandatory in the various forms, expressly and freely and unequivocally accept that their data are necessary to meet their request by the Data Controller, being voluntary the inclusion of information in the remaining fields.

If all the mandatory data is not provided, the corresponding processing of the same cannot be carried out and therefore the requests, contracts or applications made by the Interested Party cannot be attended.

The Interested Party guarantees that the personal data provided are truthful and is responsible for communicating any changes to them.

Safety measures

NETWORKIA is committed to protecting your personal information by using reasonably reliable and effective physical, organizational and technological measures, controls and procedures aimed at preserving the integrity and security of your data and ensuring your privacy.

In addition, all personnel with access to personal data have been trained and are aware of their obligations in relation to the processing of their personal data.

In the case of the contracts we sign with suppliers, we include clauses requiring them to do so:

Maintain the duty of secrecy with respect to the personal data to which they have had access by virtue of the assignment.
Implement the necessary technical and organizational security measures to guarantee the confidentiality, integrity, availability and permanent resilience of the systems and services for the processing of personal data.

All these security measures are reviewed periodically to ensure their adequacy and effectiveness.

However, absolute security cannot be guaranteed and no security system is impenetrable, so in the event that any information under our control and subject to processing is compromised as a result of a security breach, we will take appropriate steps to investigate the incident, notify the Supervisory Authority and, where appropriate, those Stakeholders who may have been affected to take appropriate action.