Privacy Policy

1. USER INFORMATION

Who is responsible for the processing of your personal data?

ITBID TECHNOLOGIES 2002, S.L.

.- Av. Josep Tarradellas, 8-10

.- Email: info@itbid.com

.- Phone: (+34) 933 218 614

.- ITBID currently does not have a designated DPO

Why do we process your personal data and what is the legal basis for doing so?

We may process your personal data in different areas of our activity:

Thus, through the different forms available on our website or actions on social media, we will process them confidentially to achieve the following purposes:

In the Contact form:

• Respond to queries or any requests made by the user through any of the contact forms available on the responsible party’s website. (based on the legitimate interest of the controller, art. 6.1.f GDPR)
• Send commercial advertising communications by email, fax, SMS, MMS, social media, or any other electronic or physical means, present or future, that allows communication with our clients. These communications will be made by the controller and will relate to its products and services, or those of its collaborators or suppliers, with whom an agreement for promotion has been reached. In this case, third parties will never have access to personal data. (based on the consent of the data subject, art. 6.1.a GDPR)
• Conduct statistical analysis and market studies. (based on the legitimate interest of the controller, art. 6.1.f GDPR)

In the Request a Demo form:

• Guide through the requested demo and respond to any queries posed. (based on the legitimate interest of the controller, art. 6.1.f GDPR)
• Send commercial advertising communications by email, fax, SMS, MMS, social media, or any other electronic or physical means, present or future, that allows communication with our clients. These communications will be made by the controller and will relate to its products and services, or those of its collaborators or suppliers, with whom an agreement for promotion has been reached. In this case, third parties will never have access to personal data. (based on the consent of the data subject, art. 6.1.a GDPR)
• Conduct statistical analysis and market studies. (based on the legitimate interest of the controller, art. 6.1.f GDPR)

On LinkedIn

• Process requests and queries made to the controller
• Provide information about activities and events organized by the controller
• Provide information about products or services offered by the controller
• Review public profiles in cases of employee searches based on the required profile needs.

In addition to the processing that takes place on the website, in the context of the different processing activities identified in its Activity Register, we will process them to achieve, among others, the following purposes:

For the management of labor relations

• In the selection and hiring process, or
• During the development of the labor relationship as a result of monitoring labor activity
• or in relations with the legal representation of workers or for health monitoring. (in most of these cases, the processing will be justified as necessary for the execution of the employment contract, and in other cases for compliance with legal obligations or because the involved parties have given their consent)

For the management of relationships with Clients and Suppliers

• The processing of personal data in relations with clients and suppliers will be justified by the need to execute the contract entered into with them or to execute pre-contractual measures at their request. In other cases, the processing of professional contact data will be justified by ITBID’s legitimate interest in initiating or maintaining a commercial relationship. This same legitimate interest is a sufficient legal basis to send commercial communications to our clients without prejudice to the right of opposition, which can be exercised at any time. In other cases, we will need to process those data to comply with our obligations to the public administration, for example, with the Tax Agency, without requiring consent for processing.

• Our main activity is based on the design, marketing, and maintenance of a management software that allows our clients to manage their relationships with suppliers, so the processing of data that our clients incorporate into this tool will be their exclusive responsibility. ITBID will be responsible for processing client data necessary to manage the user account and provide personalized access to our platform and the interactive services it offers. (necessary for the execution of the contract as a SaaS provider, 6.1.b GDPR)

• Regarding data provided by clients, either directly or through our assistance in data input, ITBID will be the Processor and will only process it according to the instructions given by the client and documented in the Data Processing Agreement signed with each client.

For the management of relationships within the Group of Companies

• Our organization is in a process of expansion and has branches in other cities both nationally and internationally. This requires maintaining open information flows for managing our organization, which may occasionally involve processing personal data. Thus, our Administrative headquarters may act as the Data Processor for the other Group companies based on a Processor contract that legitimizes the processing, with the legitimate interest of the controller or the third party as a sufficient legal basis for processing.

Categories of personal data we process

In the contact forms, we will process basic identification data such as the contact name, the name and email of the organization, and the contact phone number.

In

the demo request form, we will process basic identification data such as the name, company email, and contact phone number.

In the social networks where we may interact, data from public profiles as necessary for the recruitment of employees matching the required profile.

In labor relations, we will process basic identification data such as Name and Surname; ID / CIF / identifying document; Address; Email; Phone or Social Security Number; Personal characteristics such as Sex; Marital Status; Nationality; Age; Date and place of birth; Employment details such as Position; Category or professional group; Department; Company; Non-economic payroll data; Data of leave; Corporate contact data; Work permit. Academic and professional data such as Degrees; Training; Professional experience; Attendance control data such as Entry/Exit time; Reason for absence; ID attendance control and also belonging to special categories such as Union membership or health data;

In relationships with clients and suppliers, we will process professional contact data such as name and surname if you are a business or professional, phone number, and contact email. If you are a legal entity, we will process your corporate data such as company name, CIF, address, phone, and contact email. We will also process economic data necessary for billing our products and services. In the user registration for the platform, basic identification data such as username and password, and other information necessary depending on the service contract you have with us. All of this will be specified in our service provision contract and Data Processing Agreement.

In the company group relationships, we may process personal data primarily to maintain labor relationships within each of our branches as the central administrative office.

For how long will we keep your personal data?

They will be kept no longer than necessary to fulfill the purpose of processing, or if there are legal requirements mandating their retention. When no longer needed, they will be deleted with appropriate security measures to ensure the anonymity of the data or its complete destruction.

Thus, when processing data based on legitimate interest, we will keep it as long as that interest remains. When the legal basis is the execution of a contract, as long as the employment relationship exists and once concluded, for the time required by applicable legislation to comply with other obligations, for example, for the statute of limitations on civil actions, we will retain certain data for 5 years. When the processing is based on the consent you provided, we will retain the data as long as you do not revoke your consent, without affecting the validity of processing carried out before the revocation. If the processing is based on the fulfillment of legal obligations, the duration of processing will be determined by the applicable law. For example, if we must comply with tax obligations, we will process personal data for 4 years.

Who do we share your personal data with?

No personal data is shared with third parties, except when necessary for the development and execution of the processing purposes, with our service providers related to communications, with whom the RESPONSIBLE party has signed confidentiality and Data Processor contracts required by current privacy regulations.

International data transfers

None is made.

What are your rights?

The rights of the USER are:

• The right to withdraw consent at any time.
• The right to access, rectify, portability, and deletion of your data, and to limit or oppose its processing.
• The right to file a complaint with the supervisory authority (www.aepd.es) if you believe the processing does not comply with current regulations.

Contact details to exercise your rights:

ITBID TECHNOLOGIES 2002, S.L. AVDA. JOSEP TARRADELLAS, 8, AT. 3 – 08029 Barcelona (agpd@itbid.org)

2. OBLIGATORY OR VOLUNTARY NATURE OF THE INFORMATION PROVIDED BY THE USER

Users, by ticking the corresponding boxes and entering data in fields marked with an asterisk (*) in the contact form or presented in download forms, expressly and freely accept that their data are necessary to attend to their request, by the provider, with the inclusion of data in other fields being voluntary. The USER guarantees that the personal data provided to the RESPONSIBLE party are truthful and is responsible for notifying any changes to them.

The RESPONSIBLE party informs that all data requested through the website are mandatory, as they are necessary for providing optimal service to the USER. If all data are not provided, it is not guaranteed that the information and services provided will fully meet their needs.

3. SECURITY MEASURES

In accordance with the current personal data protection regulations, the RESPONSIBLE party is complying with all provisions of the GDPR and LOPDGDD for processing personal data under its responsibility, and expressly with the principles outlined in Article 5 of the GDPR, whereby data is processed lawfully, fairly, and transparently in relation to the data subject, and is adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.

The RESPONSIBLE party guarantees that it has implemented appropriate technical and organizational policies to apply the security measures required by the GDPR and LOPDGDD to protect the rights and freedoms of USERS, and has communicated the necessary information for them to exercise these rights.

For more information on privacy guarantees, you can contact the RESPONSIBLE party through ITBID TECHNOLOGIES 2002, S.L.. AVDA. JOSEP TARRADELLAS, 8, AT. 3 – 08029 Barcelona (agpd@itbid.org).
“`

Let me know if you need further adjustments!