Who is the Data Controller?

–Data Controller: Garrido Asesores Fiscales, S.L. (hereinafter, “GARRIDO”)

-TIN ES-B82809914

 

You can contact us through:

–Address: Calle Santa Engracia nº 14-16, 28010 Madrid (Spain)

-Telephone: +34 91 319 60 62

-You can also contact our Data Protection Officer at the following e-mail address: privacidad@garrido.es.  The Data Protection Officer is the person who is responsible for verifying proper compliance with the rules of protection of personal data by GARRIDO. The Data Protection Officer performs its work of supervision and monitoring independently and confidentially.

 

Personal data processed

-Identifying data: Name and surname(s), email address, postal address, email, telephone number and photo.

-Data relating to personal characteristics: Marital status, family data, date of birth, place of birth, age, sex and nationality.

-Data relating to social circumstances: Characteristics of accommodation, housing, family situation, property, licences, permits and authorisations.

-Academic or professional data: Training, qualifications, professional experience and membership to professional bodies or associations.

-Detailed employment data: Profession, job position.

-Commercial information data: Activities and businesses.

-Economic, financial, and insurance data: income, earnings, investments, assets, credits, loans, guarantees, banking details, pension plans, retirement, payroll financial data, tax deductions/taxes, insurance, mortgages, subsidies, benefits, credit history, credit cards.

-Data collected during web browsing: Type of Internet browser, operating system, IP address from which the website is accessed, date and time of consent cookies and similar technologies.

-Sensitive data: Those that may be provided by the data subject (ideology, trade union membership, religion, beliefs, racial or ethnic origin, health, sex life, genetic and biometric data).

-Other data: Any other data provided by the Interested Party, through the forms available on the website (work with us, request for exercise of rights, Internal Information System, etc.), as well as in the communications that may be maintained with GARRIDO.

  

Purpose for which we process personal data

–Management of service contract agreements, followed by their execution, billing, and delivery.

–Management of queries, complaints/incidents, claims and requests made by the user/client.

–Management of the internal information system. You can obtain more information in the Internal Whistleblower Channel.

–Sending commercial communications about services, events (attendance at conferences and training sessions); and legislative, legal and doctrinal news. You can withdraw your consent at any time by clicking the unsubscribe button at the end of each communication or by sending an email to the Data Protection Officer at privacidad@garrido.es with the subject line ‘Unsubscribe from Commercial Communications..

–Application management. If you send us your CV or register for a published job offer, we will process your data in order to evaluate and manage your job application and, where appropriate, to carry out the necessary actions for the selection and recruitment of personnel, in order to offer you positions that match your profile. The provision of the required data is necessary, and failure to provide it will prevent the continuity of the selection process.  Likewise, if you have authorised us to do so, we may keep your details for future processes.

–Connection and navigation data obtained through analysis tools: GARRIDO uses cookies and other technologies to keep track of your interaction with our services. For more information about the types of cookies and similar technologies we use and why and how you can control such technologies should you interact with us, you can find more information at Cookie Policy.

–Website and social media management (LinkedIn).

 

Duration of data processing

With respect to the data collected through the Website and for the purposes previously indicated, GARRIDO will process your data for the time necessary to attend to the request made by the user/client. This period may vary from the time needed to contact the user who requests it to the actual contracting or not of our services.

In any case, we will keep your personal data blocked for the statute of limitations period for any actions that may arise from the relationship with the user/client or to address requests from public authorities.

 

Legitimation of the processing

-Legitimation by pre-contractual measures and / or execution of the contract, pursuant to Article 6.1.b) of the GDPR.

-Clients who contract the services offered by GARRIDO.

-Users/clients by browsing the Website and accepting its Terms of Use.

-Management of queries, complaints / incidents, claims and requests made.

-Lawful basis for compliance with legal obligations, pursuant to Article 6(1)(c) of the GDPR.

-In cases in which the data subject exercises the rights indicated below.

-As a result of legal actions promoted by or directed against GARRIDO are followed before the organs of the Administration of Justice.

-If a whistleblower contacts through the means provided by GARRIDO to report within the Internal Information System any facts that may constitute violations of the current law regarding (i) European Union Law, (ii) criminal or administrative law (serious or very serious infringements), and (iii) the Compliance System of GARRIDO .

-Lawful basis for the unequivocal consent of the data subject, based on Article 6(1)(a) of the GDPR.

-By accepting cookies and other analysis tools.

 

Addressees

No transfer of your data to third-parties is foreseen, unless required by public bodies or legal obligation.

However, in order to properly manage the service provided, GARRIDO, will contract third-party service providers (all are located in the European Economic Area) that will have access to your personal data and that will process the aforementioned data in the name and on behalf of GARRIDO, as a result of its provision of services.

 

Rights that you may exercise with regard to the processing of your personal data

-Right of Access: Consists of the right to obtain information about the data concerning the data subject and which is the object of processing.

-Right of Rectification: Consists of the right to have the accuracy of the data respected, to correct or update them.

-Right to Erasure (“right to be forgotten”): The right to request the deletion of the data and for them not to be processed, if the requirements are met.

-Right of Object: the right to object to the processing of data.

-Right to Restriction of Processing: the right to limit access to processed data.

-Right to Data Portability: the right to have the data provided to the data subject or to a third party for processing.

-Right not to be subject to automated individual decision-making, including profiling: This right aims to ensure that you are not subject to a decision based solely on the processing of your data, including profiling, which produces legal effects concerning you or significantly affects you in a similar way.

-Right to withdraw consent: The right to withdraw consent previously given.

To exercise the rights mentioned in this section you can contact the Data Protection Officer of GARRIDO, by completing this form: Click here.

In any case, you may file a complaint with the Supervisory Authority competent in this matter, which in the case of Spain is the Spanish Data Protection Agency, especially when you have not obtained satisfaction in the exercise of your rights, by writing to them at C/ Jorge Juan, number 6, 28001 – Madrid, or through the website: https://www.aepd.es/en.

 

Other Matters

–Security. As previously mentioned, GARRIDO is committed to a culture of compliance, which naturally includes the protection of personal data. For this reason, it has a Privacy Policy in accordance with the GDPR and the LOPDGDD. Thus, it has implemented effective technical, physical, and organizational security measures to prevent and mitigate any harm that may be caused to the data subjects, committing to the scrupulous fulfillment of these measures and to keeping them updated in order to cover any possible changes that may occur in the risks.

–Confidentiality. The personal data that are provided to GARRIDO will be treated with the utmost confidentiality, pledging to keep the proper secrecy regarding these.

–Responsibility. The user/client guarantees that the data provided are true, accurate, complete and up to date, being responsible for any loss or damage, direct or indirect, which may be caused as a result of breach of this obligation. In the event that the user/client provides data of third parties, he/she declares to have the consent of these and undertakes to transfer the information contained in this policy, exempting GARRIDO OUTSOURCING from any liability in this regard. However, GARRIDO may carry out checks to verify this fact, adopting the appropriate due diligence measures, in accordance with data protection regulations.

–Privacy Policy Update: GARRIDO may modify this privacy policy as a result of legislative changes, legal doctrine, and opinions of the AEPD that apply to it directly, indirectly, or by sector. All changes, modifications, or amendments that we make to our Web Privacy Policy will be published on this page.

 

Garrido 2024/08/06