Legal Notice and Privacy Policy

GENERAL INFORMATION

In accordance with Art. 10 of Law 34/2002 of July 11, on services of the information society and electronic commerce (hereinafter, LSSICE), we inform you that the owner of this website is PGPLANNING S.L, with its registered office at C/ Gremio de los Canteros num. 12-2º, Polígono Industrial de Hontoria, Hontoria (Segovia) and VAT number B44558633, a company registered in the Commercial Registry of Segovia: [Book: 0, Page: SG-8249, Folio: 206, Section: 1, Volume: 329] (hereinafter also PGPLANNING).

Contact details:

  • Postal address: C/ Gremio de los Canteros No. 12-2nd, Hontoria Industrial Estate, Hontoria (Segovia)
  • Email: privacy@pgplanning.es
  • Phone: +34 921101012

Privacy Policy

PGPLANNING, S.L., with address at C/ Gremio de los Canteros num. 12-2º, Polígono Industrial de Hontoria, Hontoria (Segovia) and VAT number B44558633 (hereinafter PGPLANNING), as the data controller of your personal data, informs you about the processing of your personal data so that, among other things, you understand:

  • Why we need to process your data.
  • What data we may hold about you and how we obtain it.
  • How long do we retain them.
  • Who do we share them with.
  • What are your rights in this regard and how can you exercise them.

PGPLANNING will process your data in full compliance with the current data protection regulations, without subjecting them to exclusively automated decisions or profiling that could significantly affect you.

A) DATA PROCESSING:

Below, we provide detailed information about the data processing we carry out based on the categories of people we interact with or the activities we perform, for what purposes, on what basis, for how long, and with whom, if applicable, we share such data.

a) Purposes and legal basis of the processing: Your data will be processed for the following purposes:

  • Customer management, to carry out the necessary activities for the proper administrative control of the relationship we have with our customers in order to address requests and carry out communications, charge, and any other necessary or derivative matters by virtue of the contract or the terms and conditions of use of our products, being legitimized for this purpose by virtue of the existing contractual or pre-contractual relationship.
  • PGPLANNING’s accounting and tax activities management, as it is necessary to comply with our legal obligations in these matters.
  • To send you communications related to special events, such as birthday greetings, being legitimized to do so based on our legitimate interest in maintaining the most cordial relationship possible with you.
  • To send you commercial communications and event invitations by electronic or other means we are legitimized to do so by virtue of the consent you have given for this purpose if the communication is sent electronically, and in the case of sending it by other means, by our legitimate interest in attracting new customers and generating business opportunities. Similarly, if you are already our customer and the commercial communication relates to services or products that are the same or similar to those you have already contracted, we may send you these commercial communications electronically in accordance with our legitimate interest and as provided in Art. 21.2 of Law 34/2002 on services of the information society and electronic commerce.
  • Additionally, and only if applicable, we will also process your data for control and security purposes, legal advice, and regulatory compliance, as it is necessary to satisfy a public interest, as well as our legitimate interest in defending our interests and rights, avoiding conduct contrary to our codes and internal regulations, and complying with legal obligations that apply to us (such as auditing, compliance with criminal regulations, personal data protection, etc.).

b) Origin and retention period of your data: The data has been provided by you or your legal representative, and we retain it while you maintain a contractual relationship with us and thereafter, duly blocked, for the period legally provided for the defense or filing of possible claims.

c) Types of data: The types of data we use about you are identification and contact details, personal characteristics (age), employment information (such as workplace and position), commercial information (activities and business), payment methods, and transaction details. Very rarely, we may also process other types of information that are relevant in a possible incident, investigation, or claim.

d) Communication of your data: We may share your personal data with the following entities and/or individuals:

  • Public Administrations, other Public Bodies, and entities authorized by law, when required or necessary.
  • Exceptionally, with Courts and Tribunals or other conflict resolution bodies, such as Arbitration Courts and mediators, State Security Forces, and Notaries and Registry Offices.
  • Companies or professionals in consulting, advisory, or legal defense.

Additionally, with the following of our providers, but exclusively to the extent necessary to provide their services to us:

  • Companies providing tax advisory and management services.
  • Providers of IT infrastructure and support for accounting activities.
  • If applicable, advertising or communication agencies.
  • Other providers who may complement or replace the previous ones.

If you wish, you can request more detailed information about these providers through the contact point indicated at the end of this document.

e) International data transfers: In relation to the indicated purposes, it is not expected that your data will be processed from outside the European Economic Area (EEA).

Only in the case of customers outside the EEA, if an incident or conflict arises, it may be necessary to transfer your data to entities that provide us with advisory or legal defense services outside the European Economic Area (EEA) and/or conflict resolution bodies. Such data transfer, if it occurs, is exceptional and necessary for the formulation, exercise, or defense of our rights and interests. Therefore, this transfer, when the destination location has not been declared safe by the European Commission, is covered by the provisions of Art. 49.1.e) of the General Data Protection Regulation.

a) Purposes and Legitimacy of Processing: Your data will be processed for the following purposes:

  • To manage and supervise the relationship we maintain with our suppliers and collaborators, as it is necessary for the execution of a contract or the application, where appropriate, of pre-contractual measures, as well as by virtue of the legitimate interest that PGPLANNING, S.L. has in doing so.
  • PGPLANNING, S.L.’s accounting and tax management, as necessary to comply with our legal obligations in these areas.
  • To send you communications related to special events, such as Christmas or birthday greetings, based on our legitimate interest in maintaining the most cordial relationship possible with our suppliers in accordance with established social customs.
  • Additionally, and only if applicable, we will also process your data for control and security purposes, legal advice, and regulatory compliance, as it is necessary to satisfy our legitimate interest in defending our interests and rights, preventing conduct contrary to our internal codes and regulations, and complying with legal obligations that apply to us (such as auditing, compliance with criminal regulations, personal data protection, etc.).

b) Origin and retention period of your data: The data has been provided to us by you or your legal representative, or from other sources (third-party recommendations, advertising spaces, or through your corporate website). We retain the data while you maintain a contractual relationship with us and, subsequently, duly blocked, for the legally stipulated period for the defense or filing of possible claims.

c) Data types: The types of data we use include identifying data, personal characteristics (such as nationality and marital status), academic and/or professional data, occupational data, and data related to transactions. Very rarely, we might also process other types of information that could be relevant in a possible incident, investigation, or claim.

d) Comunication of Your Data: We may share your personal data with the following entities and/or individuals:

  • Public Administrations, other Public Agencies, and entities authorized by law, when required or necessary.
  • Exceptionally, Courts and Tribunals or other conflict resolution bodies, such as Arbitration Courts and mediators, as well as Notaries and Registry Offices.
  • Companies or professionals in consulting, advisory, or legal defense.

Additionally, with our following providers, but exclusively to the extent required to provide their services to us:

  • Providers of IT infrastructure and support for accounting activities.
  • Tax and accounting management.
  • Other providers who may complement or replace the previous ones.

If you require specific or more detailed information about any of these third parties, you can request it through our contact point.

e) International Data Transfers: None anticipated.

a) Purposes and Legitimacy of Processing: Your data will be processed for the following purposes:

  • The management and development of the relationship we maintain with third parties, whether individuals or legal entities, through their legal representatives and, where applicable, contact persons, based on our legitimate interest in maintaining an adequate relationship with these third parties.
  • To send you communications related to special events, such as Christmas or birthday greetings, based on our legitimate interest in maintaining the most cordial relationship possible with our suppliers in accordance with established social customs.
  • To comply with our obligations in terms of regulatory compliance (data protection, criminal law, etc.) based on our legitimate interest in doing so and to provide ourselves with the appropriate means of proof, as well as due to legal obligations that apply to us.

b) Origin and retention period of your data: The data has been provided to us by you, your legal representative, or other sources (the company you provide services to, LinkedIn, or the corporate website of the company you work for). We retain it while the relationship we maintain with the entity for which you provide services or work is in force, and subsequently, duly blocked, for the period legally provided for the defense or filing of possible claims.

c) Types of data: The types of data we use are your identification, contact, and employment details. Very rarely, we might also process other types of information that are relevant in a possible incident, investigation, or claim.

d) Communication of Your Data: We may share your personal data with the following entities and/or individuals:

  • Public Administrations, other Public Bodies, and entities authorized by law, when required or necessary.
  • Exceptionally, Courts and Tribunals or other conflict resolution bodies, such as Arbitration Courts and mediators, as well as Notaries and Registrars.
  • Companies or professionals in consulting, advisory, or legal defense.

Additionally, with our following providers, but exclusively to the extent necessary for them to provide their services to us:

  • Providers of IT infrastructure and support for accounting activities.
  • Tax and accounting management.
  • Other providers who may complement or replace the previous ones.

If you require specific or more detailed information about any of these third parties, you can request it through our contact point.

e) International Data Transfers: None anticipated.

a) Purposes and Legitimacy of Processing: Your data will be processed for the following purposes:

  • Management of the selection processes, being supported by a legitimate interest in the selection of personnel to fill job positions and, if applicable, by the application submitted by the candidate themselves.
  • Additionally, and only if applicable, we will also process your data for control and security purposes, legal advice, and regulatory compliance, as it is necessary to satisfy our legitimate interest in defending our interests and rights, in avoiding behaviors contrary to our codes and internal regulations, and to comply with legal obligations applicable to us (audit, compliance with criminal regulations, personal data protection…).

b) Origin and retention period of your data: The data has been provided to us by you, your legal representative, or other sources (platforms like LinkedIn or talent search companies). We retain it for 1 year from the receipt of the application, CV, or candidate’s history, unless it is necessary for a longer period for the formulation or defense of possible claims or for the investigation of possible irregularities or criminal acts.

c) Data Types: The types of your data we use are identification, contact, academic and/or professional, and occupational. Very rarely, we might also process other types of information that are relevant in a possible incident, investigation, or claim.

d) Communication of your data: We may share your personal data with Public Administrations, other Public Bodies, and entities authorized by law (including conflict resolution bodies and legal professionals) when required or necessary.

Additionally, with our following providers, but exclusively to the extent required for them to provide their services to us:

  • IT infrastructure providers.
  • Other providers who may complement or replace the previous ones.

If you require specific or more detailed information about any of these third parties, you can request it through our contact point.

e) International Data Transfers: None anticipated.

a) Purposes and Legitimacy of Processing: Your data will be processed for the following purposes:

  • To manage and respond to requests and communications that may be sent to us through our published email and/or contact forms on our website, by virtue of our legitimate interest in addressing the communications we receive.
  • For technical or functional and analytical purposes, through the cookies implemented on our website. The processing of your data is based, in relation to essential cookies (technical or functional, as well as personalization requested by the user), on our legitimate interest in the correct and secure functioning of the website, and in relation to other cookies, on the consent granted by the user through the cookie notice or settings panel.

b) Origin and retention period of your data: The data has been provided to us by you through our web forms or contact emails, as well as through cookies when browsing our website. hose obtained, if applicable, through cookies, are retained for the period indicated for each cookie or type of cookies in our cookie notice and/or Cookie Policy. Regarding the data you provide by sending us an email or communication through a web form, they will be retained until the received communication is definitively addressed and subsequently, duly blocked, for the period legally provided for the defense and filing of possible claims.

c) Types of Data: Your types of data we use are:

  • Through our web forms and contact email: identification and contact details, and any other information you choose to provide in the email or the form.
  • Through cookies: User device data: IP, browser used and its version, as well as browsing habits: Time of visit, sections of the website visited, source of the visit, and other statistical data.

d) Communication of your data: Except with our cookie providers, which are mentioned in our Cookie Policy, or due to a legal obligation or a request from a competent authority, we will not share your data with anyone.

e) International data transfers: The use of the Google Analytics cookies set involves the transfer of your data to Google, an entity based in the USA. e) International data transfers: The use of the Google Analytics cookies set involves the transfer of your data to Google, an entity based in the USA. Google is currently adhering to the “Privacy Framework”, which is considered to provide an adequate level of data protection according to the European Commission’s Adequacy Decision regarding the said “Privacy Framework”. In addition, Google has committed to implementing a series of measures that ensure an adequate level of protection, which you can find more information about in Analytics Data Protection Measures.

a) Purposes and legitimacy of processing: Your data will be processed to send you information and commercial communications, including via electronic means (email or SMS), about PGPLANNING’s products, services, and activities, provided that you have given us your consent to do so.

b) Origin and retention period of your data: The data has been provided to us by you or your legal representative, or by lead generation companies or service intermediaries through which you have expressed interest in our products or services. We retain your data as long as you do not withdraw your given consent, and afterward, we will continue to retain your data, duly blocked, for the legally prescribed period for the possible defense or filing of claims.

c) Types of Data: The types of your data we use are exclusively identification and contact details.

d) Communication of your data: Unless legally obligated or required by a competent public authority, we will not share your data with anyone. However, our IT infrastructure provider may have access to your data as necessary for the provision of their service, but we ensure they treat it with the same care as we do, apply high protection guarantees, and only use it for what is strictly necessary in relation to the service they provide us.

e) International Data Transfers: None anticipated.

Please note that the information provided here exclusively refers to the processing of your data through social networks by PGPLANNING. The social network(s) or platform(s) through which you interact with us will process your personal data for their own purposes and in accordance with their published privacy notices. Therefore, we recommend that you refer to those notices or privacy policies to understand how each social network handles your personal data, with whom they share it, how long they retain it, and other characteristics of their data processing practices.

a) Purposes and legitimacy of processing: Your data will be processed to interact with you on the social networks and platforms where PGPLANNING has a presence. This processing will be carried out at all times within the context of the relevant platform and subject to and based on its Terms and Conditions which have been accepted.

b) Source and retention period of your data: The personal data will be those you provide through the social network of which you are a user and will only be used within it by virtue of the interaction and through the mechanisms available on the different social networks or platforms.

Since we do not store your personal data in our own systems, this processing will last as long as you interact with us through the mechanisms available on the different social networks or platforms where we are present, such as the “follow”, “connect”, or “like” buttons or similar.

c) The types of data: The types of data we use are identification, contact, and any other data you wish to provide to us through the platform by which you interact with us.

d) Communication of Your Data: None anticipated on our part.

e) International Data Transfers: None anticipated on our part.

B) IS IT MANDATORY TO PROVIDE YOUR PERSONAL DATA?

It is mandatory for you to provide the data that, as described above for each category of individuals, is necessary for those purposes based on the execution of a contract we have with you or for the fulfillment of legal obligations. In these cases, if such data is not provided, it will not be possible to fulfill your request or to execute the corresponding contract, in whole or in part.

C) ABOUT OUR PROVIDERS:

When choosing providers whose services involve processing personal data under our control, PGPLANNING applies strict criteria to select only those that offer an adequate level of guarantees for this purpose. Additionally, we contractually require them to adopt the necessary technical and organizational measures to ensure the protection of the rights and freedoms of individuals whose information is processed and to use the personal data only for what is strictly necessary in relation to the service they provide us and for the duration of that service.

D) YOUR RIGHTS AND HOW TO EXERCISE THEM:

You have the right to obtain information about the processing of your data, to access it, and to have it rectified or, if necessary, deleted. In certain circumstances, you also have the right to restrict the processing of your data, in which case we will only retain it for the exercise or defense of claims, to object to our processing of it, and to its portability by transmitting it to you or directly to another company you designate.

Withdrawal of consent: Regarding the processing of your data that we carry out based on the consent you have given us, you have the right to withdraw that consent at any time. However, the withdrawal will not have retroactive effects, so it will not affect the processing that has been carried out up to that point.

It is stated that Interested Parties may exercise their right to object to the purposes described above that are based on the satisfaction of a legitimate or public interest. However, this right may be denied if, in view of the request made, it is considered that there are compelling legitimate grounds for the processing or if the data is necessary for the formulation, exercise, or defense of claims.

To exercise any of these rights, you can contact PGPLANNING at the postal address C/ Gremio de los Canteros núm. 12-2º, Polígono Industrial de Hontoria, Hontoria (Segovia) or via email at privacy@pgplanning.es.

We also inform you that if you believe there has been any kind of violation in relation to the processing of your personal data, you can file a complaint with the competent supervisory authority (in Spain, the Agencia Española de Protección de Datos or the body that may replace it in the future; for other European countries, please consult here).

E) CONTACT POINT:

For additional information, or for any other questions regarding the processing of your data, please do not hesitate to contact us through:

  • Address: C/ Gremio de los Canteros No. 12-2º, Hontoria Industrial Estate, Hontoria (Segovia)
  • E-mail: privacy@pgplanning.es

Current version dated February 26, 2024.