1.      Object

The purpose of this privacy policy is to make known to people (hereinafter, users or interested) who visit our website (hereinafter, website, website or web), the way we see, we treat and protect the personal data that decides to provide us with any means (Forms, emails, phone, contracts, etc.) and after reading, decide freely if you want us to treat them. Additionally, it will serve to expand the information that we have previously provided to the interested parties, in the informative clauses arranged in the collection processes of your personal data. 

Likewise, this policy aims to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of these data (hereinafter RGPD) and the Organic Law 3/2018, of December 5, of Protection of Personal Data and Guarantee of Digital Rights (hereinafter, LOPDGDD).

2.      Who is responsible for the treatment of your personal data?

3.      What personal data will we deal with and how do we get them?

For the development of our business activity, it is essential to treat personal data whose collection can be performed by digital media, through paper documents or as a result of face-to-face or telephone conversations and in any of these cases the data will be treated loyal, lawful and Transparent.

The data categories that our entity will deal with interested are:

·        Identification data: Name and surname, DNI or equivalent document, image and signature.

·        Contact information: Telephone, Email, Postal address.

·        Commercial data: Budget, Shopping, Management and Historical Service and / or Purchase, Contact Result (Phone, Email, Messaging and other communication channels).

·        Accounting data: Control of income and expenses, billing data.

·        Banking data: Accounts and bank cards.

·        Transaction of goods and services: Transfers and bank domiciliations, amounts and concepts.

·        Curricular data: Academic data, professional experience, personal characteristics, etc.

·        Navigation data: Time analysis of stay on our website, visited pages, demographic data (eg, age, sex, language).

Our entity will not collect special category data (eg health data, ethnic origin, political opinions or religious beliefs), but in the case of it is necessary to treat them, you will inform you and request a prior and express consent.

Consequently, the data requested will be adequate, relevant, limited to the strictly essential and necessary, treated only by the personnel and / or collaborators authorized by our entity, who will have signed a commitment to confidentiality and commit to Comply with the necessary safety standards that guarantee the confidentiality, integrity and availability of the treated data and other legally established requirements in the RGPD. Therefore, they will be treated within legality.

The data to be discussed are provided by the interested party or by its legal representative, although we can take the case in which we delegate some functions to certain collaborators and these are responsible for gathering their data, but they will always be treated with their prior and express consent.

In the event that an interested party does not provide the data that we request or provide incomplete or incorrect data, it will not be possible to fulfill and maintain the relationship with them.

The data categories that we can deal with about a person, will be based on the relationship that you maintain with our entity, as follows:

3.1.  Customers:

Identifying, contact, commercial, accounting, banking, transaction and services transaction, will be discussed, and may be collected only if the client provides them at the time of purchase of goods, contracting services, the request for pre-contractual measures or during the Maintenance of the commercial relationship, either personally, by phone, email or through the forms arranged on our website, online chat, instant messaging, etc.

3.2.  Information applicants:

Whether the information requested is face-to-face, telephone or written (eg email or web forms) we will ask you and / or will address identifying, contact and commercial data.

3.3.  Suppliers:

Identification, contact, commercial, accounting, banking, transaction and financial and financial transaction data will be discussed. These data may be treated during all stages of the commercial relationship and only if the provider facilitates them to begin with the commercial relationship.

3.4.  Employment applicants:

For this category of stakeholders, curricular, identification, contact and other data related to their professional or personal characteristics will be discussed, which will be provided by the applicant itself  by sending us your candidacy by any means (eg, in person, email, web forms), you can also be collected in personnel selection interviews (face-to-face or telematics), you can even come by employment by means of a collaborator that we have Delegate Certain Functions.

3.5.  Social networking users:

We are present in different social networks and we can deal with identifying, contact, commercial and other data that the user enables to be visualized or shared with the other users of the social network, including curricular data (eg LinkedIn). For more information, consult our Social network policy.

3.6.  Claimants:

Identifying, contact, contact and third-party personal information will be discussed, which the complaining party will refer.

3.7.  Visitors:

Identification, contact, company data will be discussed if the visit is for commercial reasons, these compiled when you provide them with the visit to request access to our facilities or when your interlocutor in our entity, it will be provided to allow you access to These.

3.8.  Web users:

When visiting our website and only if the user expressly authorizes, analytical data can be collected (eg visiting time or pages) including demographic data (eg sex, age, country or language). For more information visit our Cookies. .

3.9.  More information for the interested parties:

It will be made available to the interested parties, the information legally established in the corresponding information clauses, included in the different means of data collection, so that the interested person decides freely and expressly if they want their personal data to be treated by our entity.

All categories and type of personal data treated, will be duly identified in the corresponding treatment activities owned by our entity.

4.      Why will your data be treated?

In general, the treatment of personal data conducted by our entity is intended to comply and maintain the relationship with the different collectives of people with whom we have contact.

Depending on this relationship, the treatment of your data is due to different purposes and that as a statutory and non-limiting, we detailed below:

4.1.  Customers:

Your personal data will be treated to identify you, fulfill and maintain the pre-contractual and contract relationship  including sending commercial communications by different media, attending consultations,  perform quality controls and commercial statistics, for the provision of our services, sale or rental of goods, for the delivery of goods, for accounting and billing management, the transaction  of goods and services, the management of collections, management of incidents, claims and exercise of rights, as well as for other purposes that we are obliged to comply with this relationship, to which we are subject to or to meet our legitimate interests.

4.2.  Information applicants:

We will treat your personal data to meet the requests for information of any kind you want to move, to identify you, for shipping or delivery of budgets and information about the goods and / or services of your interest, including commercial information related to your request We will also carry out follow-up contacts, by different means to know the decisions taken regarding the commercial proposals that we have remitted.

4.3.  Employment applicants:

Your data will be treated to include you in our selection and workblock processes, to identify you, as well as to contact you and inform you about vacancies, interview coordination and other matters related to your candidacy.

4.4.  Suppliers:

They will treat their personal data with the purpose of maintaining the pre-contractual and contractual relationship, complying with the commercial relationship either for the request for budgets, for the purchase of goods or contracting services, to consult and identify you, for the accounting management and the property management and the property transaction and Services, as well as for other purposes necessary to comply with this relationship, with our legal obligations and legitimate interests.

4.5.  Social networking users:

We will treat your personal data to maintain the relationship as users of the same social network, to identify you, to contact you, share news or advertising and address other personal data that the Social Network itself allows you to share with the rest of this components. For more information Consult our Social Network Policy.

4.6.  Claimants:

Personal data will be treated to identify you, manage your claim and contact you about the situation of this, in addition to complying with our legal obligations and legitimate interests.

4.7.  Visitors:

Data from visits to our facilities will be treated to identify you, to comply with our obligations on occupational risks and access and access control issues.

4.8.  Web users:

By accepting the installation of cookies when you visit our website, data can be treated with different purposes (eg analysis of visits). For more information visit our Cookies policy.

4.9.  More information for the interested parties:

The information legally established will be made available to the interested parties  in the corresponding informative clauses included in the different data collection media, (eg forms, locutions, contracts, etc.) so that you decide freely and expressly if you want the personal data requested by our entity, in this same sense, this information will be remembered in the different documents or communications that we share with the interested parties (eg distinctive, invoices, legal notices, etc.).

In case the interested person does not provide the data that we request or are provided incomplete or erroneous data, we may not be able to meet your request for information or relate to this.

The data will not be treated further or with purposes other than those accepted by the interested parties.

The purposes that motivate the treatment of personal data will be duly identified in the corresponding treatment activities owned by our entity.

5.      Why do we treat your data (legitimation)?

The treatment of your personal data by our entity, is carried out with any or more of the following legitimizing bases:

a.      When it offers us your express, free, informed and unequivocal consent, after being informed at the time of collecting your data and more expanded with this Privacy Policy, which after reading this and being able to, you can voluntarily authorize us to the treatment of your data for One or more ends, by dialing the boxes arranged for this purpose in our web forms, through its verbal consent (will specify voice recording) or with the signing of the informative clauses that we provide at each moment when requesting your personal data.

b.      For the execution of a contract in which you are part or have requested pre-contractual measures.

c..       When treatment is necessary for compliance with a legal obligation applicable to our entity.

a.      When the treatment is necessary for the satisfaction of legitimate interests persecuted by our entity or by a third party, provided that on these interests do not prevail the interests or fundamental rights and freedoms of the interested party. In this regard, we inform that our entity has carried out an analysis by pondering our legitimate interests with the rights and freedoms of the interested party, always respecting their fundamental rights.

In the event that the user is under 14 years of age, it will be necessary to have the consent of the parents, tutors or legal representative, to address their data. The user is solely responsible for the veracity of the data that refers us.

6.      Conservation data

The personal data provided will be kept while maintaining the relationship with the interested party and during the time necessary to fulfill the purpose for which their data has been collected.

After this relationship, we will keep them blocked in those cases where it is necessary to keep them until the prescription of responsibilities to the exclusive effects of claims or legal actions, as well as to comply with our legal obligations, for example:

7.      Development profile

We do not elaborate profiles or automated decisions will be made using your personal data, but in the case of doing so, it will be informed and requested prior authorization to do so.

In the same way, you have the right to oppose this type of treatment at any time by writing to our entity to info @tymbia.com

8.      Assignment data

As a general rule, our entity does not give personal data to third parties without prior consent, however, it will be necessary to give data in the following cases:

In the case of our customers or Suppliers, your personal data may be transferred to third-party entities by legal obligation (eg Tax Agency), or in those cases and entities necessary to provide our services or pay bills (eg banking entities) or in the case of property delivery your data may be assigned To collaborating transport companies of our entity.

Also, the personal data of customers or Suppliers they may be treated by third parties that we delegate any of our obligations (eg accountable advisors) and all of them have committed themselves through a treatment agreement to comply with the same security measures implemented by our entity, as well as to undergo the duty of secrecy and confidentiality on personal data treated, among other obligations on personal data protection.

In the case of employment applicants, Your data will not be given to third-party entities, except that we legally see each other forced.

Regarding the applicants for information or users of our website, your data will not be given to third-party entities, except in the cases exposed prior and informed at each moment of your collection and only with your express consent, unless our legitimate interest prevails or we legally see that we are forced to do it, in Whose case will not be necessary your consent.

In general terms, we will be able to give up your personal data to judges, courts, fiscal ministry and / or the competent public administrations before possible claims when we are obliged to it.

9.      Transfer international data

In case of assignments to third-party entities located in countries outside the European economic space, we will inform and request the prior and express consent of interested persons.

10.  Measures of security

Our entity has implemented all the technical and organizational measures necessary to protect the treated personal data, avoiding its loss, theft or unauthorized use.

These measures have been created according to the type of data treated and the purposes that motivate such treatment. These are periodically verified in our internal compliance controls of personal data protection regulations and through external audits.

11.  Their rights

You, as a holder of your personal data and acting on your own name or by means  of your legal representative (eg, children under 14 years old) can go to our entity at any time and ask us to exercise your rights in terms of personal data protection.

We explain what these rights are:

11.1.         Right of access:

You have the right to know and ask us at any time to know the following information:

·        If we are treating or not your personal data.

·        The purpose of treatment, as well as the categories of personal data that are treated.

·        The origin of your data, in case you will not be provided to us.

·        The recipients or categories of destinations to which my personal data have been communicated, or will be communicated, including, where appropriate, recipients in third parties or international organizations.

·        Information on adequate guarantees related to the transfer of my data to a third country or an international organization, where appropriate.

·        The planned period of conservation, or if it is not possible, the criteria for determining this period.

·        If there are automated decisions, including the elaboration of profiles, significant information on applied logic, as well as the importance and expected consequences of such treatment.

·        Copy of your personal data that is subject to treatment.

11.2.         Right of rectification:

Request the rectification of your personal data when these are inaccurate, as well as to complete them when they are incomplete.

11.3.         Opposition Right:

You can oppose you to treat your data when they are incorrect or your treatment is no longer necessary.

In the event that you act as a reported or person affected by a complaint within the framework of Law 2/2023, you may not exercise your opposition right, as it is presumed (under the test on the contrary) that there are reasons that legitimize the treatment of your data Personal, in accordance with the provisions of article 31.4 of the law.

11.4.         Right of deletion:

Ask for your data to be eliminated, for any of these causes:

·        Your data is no longer necessary for the purposes for which they were collected or treated.

·        You have not given the consent for the treatment of your data.

·        When you have exercised opposition right.

·        When the data has been treated illegally.

·        When the data must be deleted for compliance with a legal obligation.

11.5.         Right to limitation of treatment:

You may request us to exercise this right when any or several of these assumptions occur:

·        When you challenge the accuracy of your data, during a period that allows the responsible to verify the accuracy of these.

·        When the treatment is illegal and you are opposed to the deletion of your data and inspire the limitation of its use.

·        When data is no longer needed for treatment purposes, but the interested party needs them for the formulation, exercise or claim of claims.

·        When you have opposed the treatment under Article 21, paragraph 1, while it is verified whether the legitimate reasons of the person responsible prevail over those of the interested party.

11.6.         Right of portability:

It refers to the right to obtain data related to you, in a structured format, common use and mechanical reading, as well as transmit them to another responsible for further treatment.

11.7.         Right not to be subject to automated decisions:

Right not to be subject to a decision based solely on automated treatment, including the elaboration of profiles, which produces legal effects on it or affects you significantly in a similar way.

To exercise any of your rights, should be addressed in writing TYMBIA Solucions, S.L.. good by mail to the address: Cami Miralcamp, 139 - 12200 Wave (Castellón) or Email: Info @tymbia.com demonstrating the rights you wish to exercise, accompanied by a copy of your ID or equivalent document to know who we must provide the requested information and contact information to send you our answer. If you act on behalf of another person, you must prove your representation.

If you want to transfer any suggestions or consultation about the treatment of your personal data, you can contact our data protection consultants:

Audidat 3.0, S.L.U

C / Martínez Villena 14, 3rd floor, 02001 - Albacete.

We inform you that you have the right to make a claim before the Spanish Agency for Data Protection in: C / Jorge Juan, 6, 28001 Madrid or in www.aepd.es. .

12.  Commitment to the protection of personal data

Scope

Our commitment to the protection of personal data will be required compliance for all departments and working people of our entity, as well as those third parties that act on our behalf.

Object

We have established action protocols for the treatment of your personal data, in accordance with the provisions of European and Spanish data protection regulations.

Principles

We will treat your data with a lidness, loyalty, transparency, minimization of data, accuracy, limitation of the term of conservation, integrity, confidentiality and active liability.

Special data category

Our entity prohibits the treatment of personal data that reveal ethnic or racial origin, political opinions, religious or philosophical convictions, union affiliation, genetic or biometric data, data related to the Health or data related to sexual orientation, except in the exceptions authorized legally and with the prior consent of the interested party.

Party rights

Our entity will attend and respond as quickly as possible and diligence as possible, its requests for exercise.

Record of activities, Impact assessment and security measures

Our entity will carry out a register of treatment activities and analyze the purposes of treatment, stakeholder and data, recipients, international transfers, conservation terms, etc., to evaluate treatment risks and implement the necessary safety measures for Guarantee the confidentiality, integrity and availability of personal data.

Likewise, in each treatment activity, the need to develop an impact assessment and determine whether there is an obligation to designate a delegate of data protection, establishing if necessary, that the person designated for this position meets sufficient knowledge and experience Considering the provisions of current regulations.

Control

We have external help that advises us in this area, monitoring all publications  carried out by the competent control bodies and other European and Spanish entities related to the data protection regulations, in order to comply with this regulation at all times

13.  Update this policy

Our entity reserves the right to modify this policy without prior notice. That is why we recommend consulting it each time you visit our website.