Data processing policy

As of 25 May 2018, the General Data Protection Regulation (hereinafter, ‘GDPR’) applies, and at Prodity we value and care about your privacy and the protection of your data.

In this Data Processing Policy, we explain what personal data we collect and how we use it. We have tried to write it in a clear and simple way to make it easy to understand, so that you can freely and voluntarily decide whether you wish to provide your personal data or that of members of your organisation to Prodity.

PERSON IN CHARGE OF THE TREATMENT

– Identity of the responsible: PROSAFETY SOFTWARE, S.L.U.

– NIF/CIF: B52553419

– Address: Espacio Tecnológico de El Molinón – Estadio de El Molinón, 100 – C.P. 33203 Gijón (Asturias).

– Telephone: 984 107 637

If you have any questions regarding the processing of your personal data, please email us at: dpo@proditysoftware.com

DATA WE COLLECT

We collect, store and process personal data necessary for the provision of our services, ensuring that it is adequate, relevant and not excessive for the legitimate purpose of the processing. In particular, the information we collect is:

– The information of our clients necessary to provide them with the services contracted with us, including identification and contact information, business, economic and banking data. Although most of this information is of a business nature, personal data may be included, mainly referring to the contact personnel of our client companies.

– Information from our suppliers, including identifying and contact information, financial and banking data, necessary to manage the services they provide to us. Although most of this information is of a business nature, personal data may be included, mainly concerning the contact personnel of our suppliers.

– Information of our Partners or external collaborators necessary for the management of the projects that we carry out jointly, including identifying and contact information, professional, economic and banking data. Although most of this information is of a business nature, personal data may be included, mainly concerning the contact personnel of our business partners.

· Internally, Prodity collects, stores and processes the personal data of our employees, including all the information necessary to manage our employment relationship and comply with the relevant legal obligations. This information includes, but is not limited to, employees’ identification, contact, bank and training details.

In all cases, the interested parties guarantee and are responsible, in any case, for the truthfulness, accuracy, validity and authenticity of the Personal Data provided, and undertake to keep them duly updated.

ACCESS TO PERSONAL DATA

In order to properly perform the services we provide, Prodity staff may have access to information and certain personal data, mainly contact details, contained in the files. In such cases, Prodity undertakes to ensure that both the company and its staff maintain the confidentiality and security of such data, for which purpose it will comply with the necessary confidentiality commitments and external processing contracts.

PURPOSE OF TREATMENT

The processing of the personal data we collect is for the following purposes:

·

· Managing the working relationship that binds us together

· Manage commercial communications, by post or electronic means, in cases where the user has the option to unsubscribe, regarding new products and/or services offered by Prodity.

– Manage the subscription to the newsletter and subsequent sending of the same.

– Invitations to participate in our events, webinars and presentations

· Manage requests to contact our company through the channels provided for this purpose on our corporate or product website or through our apps.

PRODITY’S COMMITMENTS:

– We only request personal information that is really necessary to provide you with the services you require.

– We never share personal information about our users with anyone, except to provide you with the best service, to comply with the law or if we have your express authorization.

– We will never use your personal data for any purpose other than that expressed in this privacy policy.

LEGITIMACY

The legal basis for the processing of your personal data is the consent given at the beginning of the commercial, employment or professional relationship or the execution of the contract that binds us. The user’s consent to the processing and transfer of their data may be revoked at any time by sending a request to the address dpo@proditysoftware.com

In relation to the purpose of keeping you informed of news related to us or our services, the legal basis that allows us to carry out such processing is based on your express consent, which you gave us when you began your relationship with Prodity.

WHEN DO YOU PROVIDE US WITH YOUR PERSONAL DATA?

– When we enter into a contractual relationship.

· When you use our Prodity tool.

– Participating in a promotion, event, fair, seminar or congress.

– By submitting your CV in paper format or by electronic means.

– Filled out the contact form on our website.

– By subscribing to our newsletter.

– Through our Social Networks[1].

RIGHTS

You have the right:

– To access to your personal data

– To request the rectification of inaccurate data

– To request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected

– In certain circumstances, you may request the limitation of the processing of your data, in which case we will only keep them for the exercise or defense of claims.

– Furthermore, in certain circumstances and for reasons related to your particular situation, interested parties may object to the processing of their data. In this case, Prodity will cease to process the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.

– As a data subject, you have the right to data portability, and you have the right to have personal data transmitted directly from data controller to data controller where technically feasible.

WITH WHICH THIRD PARTIES DO WE SHARE YOUR DATA?

Para ofrecerte el mejor servicio, únicamente podríamos compartir tus datos con ESPIRAL MICROSISTEMAS, S.L.U. sociedad que forma parte del grupo empresarial al que pertenece Prodity y únicamente con la finalidad de llevar a cabo las obligaciones contractuales que nos unen de una manera más eficiente y eficaz. El tratamiento que ESPIRAL da a los datos personales facilitados es absolutamente confidencial, ya que aplicarán las mismas medidas de seguridad que se aplican a todas las empresas de grupo, y se realizará de acuerdo a las finalidades indicadas anteriormente.

We will never sell or transfer your data to third parties unless you expressly authorize us to do so or we are required to do so by law or judicial authority.

As indicated above, in some situations we work with partners or collaborators who provide part of our services. These providers may only use your information to provide the corresponding services. Therefore, they may not use such information for their own purposes or pass it on to third parties.

WHERE IS YOUR DATA STORED?

We use various applications to process certain data. To ensure your privacy, these applications are subject to strict regulations and data is always stored within the European Union.

SECURITY AND CONFIDENTIALITY OF YOUR DATA

At Prodity, we are highly committed to the security of the information we handle and to complying with the legal requirements that apply to us.

In this regard, to ensure the confidentiality, availability and integrity of both the information we handle (and, in particular, personal data) and the systems, networks, applications and databases used for its processing, at Prodity:

– We periodically carry out risk assessments of information security and personal data protection risks, analyzing our risk situation and defining action plans accordingly.

– We have ISO 27000 certification issued by AENOR.

– An Information Security Policy has been defined and we have internal Data Protection procedures that must be complied with by the different parties involved in the processing of information.

– Awareness-raising and training actions have been developed for the organization’s internal personnel, necessary to ensure compliance with these policies and procedures.

In the event that, as a user or affected party, you detect any security incident or breach, or any vulnerability that may be affected, Prodity provides those affected with the following address: dpo@proditysoftware.com, through which communications deemed appropriate or necessary for improving the security of our information and systems may be made.

HOW LONG DO WE KEEP YOUR DATA?

User data will be kept for the period necessary to fulfill each purpose, as indicated in the applicable laws, contractual obligations and the expectations and requirements of our customers, or until the user requests to be removed from Prodity, objects to or revokes their consent.

CHANGES TO OUR PRIVACY POLICY

In the event that our data protection policy should vary as a result of legislative changes or criteria emanating from the Spanish Data Protection Agency, you will be duly informed of any variation that may be necessary to comply with the law.

[1] If you want to control the information we automatically obtain from social networks, you can do so through your profile options in each of the social networks where you have an account. To do this, you must log in to the social network and manage from your user profile the information that you allow the network to make public and who you allow to access it.