Data processing policy

As of May 25, 2018 the General Data Protection Regulation (hereinafter “GDPR”) becomes applicable and at Prodity we value and care about your privacy and the protection of your data.

In this Data Processing Policy we explain what personal data we collect and how we use it. We have tried to write it in a clear and simple way to make it easy to understand so that you can freely and voluntarily decide whether you wish to provide Prodity with your personal data or that of members of your organization.

PERSON IN CHARGE OF THE TREATMENT

– Identity of the responsible: PROSAFETY SOFTWARE, S.L.U.

– NIF/CIF: B52553419

– Address: Espacio Tecnológico de El Molinón – Estadio de El Molinón, 100 – C.P. 33203 Gijón (Asturias).

– Telephone: 984 107 637

If you have any questions regarding the processing of your personal data, please write to us at the following email address: dpo@proditysoftware.com

DATA WE COLLECT

We collect, store and process personal data necessary for the provision of our services, ensuring that it is adequate, relevant and not excessive for the legitimate purpose of the processing. In particular, the information we collect is:

– The information of our clients necessary to provide them with the services contracted with us, including identification and contact information, business, economic and banking data. Although most of this information is of a business nature, personal data may be included, mainly referring to the contact personnel of our client companies.

– Information from our suppliers, including identifying and contact information, financial and banking data, necessary to manage the services they provide to us. Although most of this information is of a business nature, personal data may be included, mainly concerning the contact personnel of our suppliers.

– Information of our Partners or external collaborators necessary for the management of the projects that we carry out jointly, including identifying and contact information, professional, economic and banking data. Although most of this information is of a business nature, personal data may be included, mainly concerning the contact personnel of our business partners.

– Internally, Prodity collects, stores and processes the personal data of our employees, including all the information necessary to manage the employment relationship that binds us and to comply with the legal obligations on the matter. This information includes, but is not limited to, employees’ identification, contact, banking or training data.

In all cases, the interested parties guarantee and are responsible, in any case, for the truthfulness, accuracy, validity and authenticity of the Personal Data provided, and undertake to keep them duly updated.

ACCESS TO PERSONAL DATA

For the proper development of the services we provide, Prodity staff may have access to information and certain personal data, mainly contact, contained in the files. In these cases, Prodity is committed to both the company and its staff to maintain the confidentiality and security of such data, for which it will adhere to the necessary confidentiality commitments and external processing contracts.

PURPOSE OF TREATMENT

The processing of the personal data we collect is for the following purposes:

– to manage the provision of the requested and/or contracted service

– manage the employment relationship that binds us

– manage commercial communications, by mail or electronic means, in those cases where the user has the option to unsubscribe, about new products and/or services offered by Prodity.

– Manage the subscription to the newsletter and subsequent sending of the same.

– Invitations to participate in our events, webinars and presentations

– manage requests for contact with our company through the channels provided for this purpose on our corporate or product website or through our apps.

Prodity COMMITMENTS:

– We only request personal information that is really necessary to provide you with the services you require.

– We never share personal information about our users with anyone, except to provide you with the best service, to comply with the law or if we have your express authorization.

– We will never use your personal data for any purpose other than that expressed in this privacy policy.

LEGITIMACY

The legal basis for the processing of your personal data is the consent given at the beginning of the business, employment or professional relationship or the execution of the contract that binds us. The user’s consent to the processing and transfer of their data may be revoked at any time by sending a request to dpo@proditysoftware.com.

In relation to the purpose of keeping you informed of news related to us or our services, the legal basis that allows us to perform such treatment, is based on your express consent, which you gave us at the time you started your relationship with Prodity.

WHEN DO YOU PROVIDE US WITH YOUR PERSONAL DATA?

– When we enter into a contractual relationship.

– When you use our Prodity tool.

– Participating in a promotion, event, fair, seminar or congress.

– By submitting your CV in paper format or by electronic means.

– Filled out the contact form on our website.

– By subscribing to our newsletter.

– Through our Social Networks[1].

RIGHTS

You have the right:

– of access to your personal data

– to request the rectification of inaccurate data

– to request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

– In certain circumstances, you may request the limitation of the processing of your data, in which case we will only keep them for the exercise or defense of claims.

– Also, in certain circumstances and for reasons related to your particular situation, interested parties may object to the processing of their data. In this case Prodity will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.

– As a data subject, you have the right to data portability, and you have the right to have personal data transmitted directly from data controller to data controller where technically feasible.

WITH WHICH THIRD PARTIES DO WE SHARE YOUR DATA?

In order to offer you the best service, we may only share your data with ESPIRAL MICROSISTEMAS, S.L.U., a company that is part of the business group to which Prodity belongs, and only for the purpose of carrying out the contractual obligations that bind us in a more efficient and effective way. The treatment that ESPIRAL gives to the personal data provided is absolutely confidential, as they will apply the same security measures that apply to all group companies, and will be carried out according to the purposes indicated above.

We will never sell or transfer your data to third parties unless you expressly authorize us to do so or we are required to do so by law or judicial authority.

As indicated above, in some situations we work with partners or collaborators who provide part of our services. These providers may only use your information to provide the corresponding services. Therefore, they may not use such information for their own purposes or pass it on to third parties.

WHERE IS YOUR DATA STORED?

We use various applications to process certain data. To ensure your privacy, these applications are subject to strict regulations and data is always stored within the European Union.

SECURITY AND CONFIDENTIALITY OF YOUR DATA

In Prodity we have a high commitment with the security of the information we handle, and with the fulfillment of the legal requirements that apply to us.

In this sense, to ensure the confidentiality, availability and integrity of both the information we handle (and, in particular, of personal data), as well as the systems, networks, applications and databases used for its processing, in Prodity:

– We periodically carry out risk assessments of information security and personal data protection risks, analyzing our risk situation and defining action plans accordingly.

– We have ISO 27000 certification issued by AENOR.

– An Information Security Policy has been defined and we have internal Data Protection procedures that must be complied with by the different parties involved in the processing of information.

– Awareness-raising and training actions have been developed for the organization’s internal personnel, necessary to ensure compliance with these policies and procedures.

In the event that, as a user or affected party, you detect any incident or security violation, or any vulnerability that may be affected, Prodity makes available to those affected the address: dpo@proditysoftware.com, through which you can make the communications deemed appropriate or necessary for the improvement of the security of our information and systems.

HOW LONG DO WE KEEP YOUR DATA?

The user’s data will be retained for the period necessary to fulfill each purpose, as indicated in the applicable laws, contractual obligations and the expectations and requirements of our customers or until the user requests its cancellation to Prodity, opposes or revokes its consent.

CHANGES TO OUR PRIVACY POLICY

In the event that our data protection policy should vary as a result of legislative changes or criteria emanating from the Spanish Data Protection Agency, you will be duly informed of any variation that may be necessary to comply with the law.

[1] If you want to control the information we automatically obtain from social networks, you can do so through your profile options in each of the social networks where you have an account. To do this, you must log in to the social network and manage from your user profile the information that you allow the network to make public and who you allow to access it.