Privacy policy

At SINASUITE, hereinafter THE CONTROLLER, we strive to offer the best possible experience through our products and services. To achieve this, it is necessary in certain cases to collect information. Your privacy matters to us, and we believe in transparency regarding the use of the data you provide.

Therefore, in accordance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (hereinafter GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (hereinafter LSSI), THE CONTROLLER informs the user that, as the data controller, it will incorporate the personal data provided by users into an automated file under its ownership.

SINASUITE’s Privacy and Data Protection Policy aims to guarantee the security of personal data and prevent the alteration, loss, or unauthorized processing or access of such data.

Basic information about data protection

Below, we inform you about the data protection policy of SINASUITE:

Controller: The entity responsible for the processing of all data collected from data subjects for the exercise of its business functions. These functions are carried out in accordance with the criteria and limitations established by Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR).

For the purposes of the law, SINASUITE is the Data Controller (Responsable del Tratamiento).

The details of the Controller are as follows:

  • Legal Name: SINASUITE SL (hereinafter SINASUITE)
  • Registered Office: Cataluña 9, Entresuelo A, 46020, Valencia (Spain)
  • Tax ID (CIF): B75518126
  • Registration Details: Incorporated before the notary Fernando Perez Rubio, under Public Deed 1118, dated 23 July 2008. Registered in the Commercial Registry of Valencia in Volume 8932, Book 6217, Folio 43, Page V-130496, dated 20 August 2008.
  • Email (DPO Contact): rgpd@laberit.com
  • Telephone: +34 960 075 817

 

What personal data do we process?

  • Identification data: first and last name, email address, and phone number.
  • Professional and academic data: such as CV, work experience, education, employment history, skills, degrees, and qualifications.
  • Publication data: any data you provide in a post or publication.
  • Images and voice.
  • Web browsing data.

How do we obtain your personal data?

SINASUITE obtains data directly from you when you browse the Website and use its features, when you register for training or attend events organized by SINASUITE or any company within the GROUP, as well as through forms and emails provided on the Website that allow you to contact us or any company within the LABERIT GROUP.

Purposes of processing:

The personal data provided through the contact form on this website, email, or other means provided for this purpose, as well as any data provided in the future, will be incorporated into a data file owned by SINASUITE and maintained under its responsibility.

The purpose of this file is to manage the relationship between SINASUITE and its Website users and other clients (web service management), and to provide the requested information and manage the contracted services. Furthermore, it will be used to keep you informed about our services (commercial communications related to our services), using the email address or other contact details provided by the user with their express consent. Providing information in the data collection forms is voluntary; however, if not provided, we will be unable to perform the service. It is your obligation to keep the data updated so that it reflects reality at all times. Any false or inaccurate statements resulting from the data provided, as well as any damages such information may cause to SINASUITE, shall be the responsibility of the user.

  • Sending Newsletters: SINASUITE processes your data based on the consent provided when subscribing to the Newsletter.
  • Handling inquiries and information requests: SINASUITE processes your data to provide the requested service based on the execution of the Website’s terms of use.

With whom do we share your personal data?

Your data may be communicated to other entities within the LABERIT GROUP when necessary to carry out the indicated purposes:

  • For internal administrative purposes;
  • In compliance with legal obligations; or
  • To comply with requirements from regulatory, judicial, or other authorities.

The entities belonging to the Laberit Group are those listed on the corporate website: Conócenos – Lãberit.

Additionally, data may be processed by internal and/or external service providers and collaborators, such as IT services, tools and/or applications, web services, and other third parties whose intervention may be required to carry out the purposes indicated in this Notice. These parties will act as Data Processors for SINASUITE, with whom SINASUITE has established a contractual relationship for this purpose.

At any time, you may contact SINASUITE to request additional information by reaching out to the Data Protection Officer at rgpd@laberit.com.

Data Retention Periods

At SINASUITE, all data retention periods and the criteria established for them will comply with current regulations. In any case, the personal data provided will be kept for the time necessary to fulfill the purpose for which they were collected and to determine any possible responsibilities that may arise from said purpose, in addition to the periods established in archiving and documentation regulations. Furthermore, they will be kept as long as there is a mutual interest in maintaining the purpose of the processing. When no longer necessary for such purpose, they will be deleted using appropriate security measures to guarantee the pseudonymization of the data or their total destruction.

Legal Basis (Legitimation)

SINASUITE will only process your personal data in any of the following cases:

  • Through the free, explicit, unequivocal, and informed consent of the data subject. Simple means will be provided to revoke said consent.
  • When there is a legitimate interest of SINASUITE that justifies the processing, provided that the interests, rights, or freedoms of the data subjects do not prevail.
  • When the processing is necessary for the maintenance or fulfillment of a legal relationship between SINASUITE and the data subject.
  • When the processing or disclosure responds to the fulfillment of an obligation imposed by applicable national legislation or is carried out by an Authority or Public Administration that requires it in the legitimate exercise of its powerds, ensuring the maximum right to privacy of the data subjects.
  • When exceptional situations occur that endanger the life, health, or safety of the data subject or other persons or groups.
  • Recipients

 

SINASUITE will only allow access to personal data to its administrators, collaborators, or employees who need to access such data due to the activities they perform within the framework of the contracted services.

Furthermore, we inform you that, to the extent strictly necessary to fulfill the stated purposes, your data may be shared with other companies or entities belonging to or linked with the Lãberit Group, to be processed under their responsibility and always for the same purposes reported in this Policy. The companies or entities belonging to or linked with the Lãberit Group with whom your data may be shared can be consulted on the website www.laberit.com.

Additionally, in the event of a legal obligation or requirement, we may communicate your data to the competent public authorities in accordance with said legal obligation or requirement.

To guarantee compliance with the provisions of the GDPR, when SINASUITE entrusts processing activities to a processor, it will only use processors that provide sufficient guarantees, particularly regarding specialized knowledge, reliability, and resources, for the implementation of technical and organizational measures that meet the requirements of the GDPR, including the security of processing.

  • International Data Transfers

We inform you that SINASUITE does not perform transfers of personal data to third countries or international organizations.

  • Rights

Every individual has the right to obtain confirmation as to whether or not SINASUITE is processing personal data concerning them.

Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only keep it for the exercise or defense of legal claims.

In certain circumstances, and for reasons related to their particular situation, data subjects may object to the processing of their data. SINASUITE will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of potential legal claims.

The user may exercise the aforementioned rights at any time by writing to the contact details established at the beginning of this privacy policy, either by postal mail or email.

To process the request to exercise these rights, it will be necessary to verify the identity of the user; therefore, said communication must include first and last name, the specific request, an address for notification purposes, date, signature, and a photocopy of the ID card (DNI) or another valid identification document.

The exercise of these rights shall in no way affect access to the website.

Depending on the right you wish to exercise, we will provide you, if requested, with the appropriate form for completion, in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016.

Data subjects may exercise their rights of access, rectification, erasure or blocking, restriction, and objection to the processing of their data by contacting the following email address: rgpd@laberit.com

For more information on the exercise of rights, you may visit the website of the Spanish Data Protection Agency (AEPD).

  • Specific Privacy Notices and Channels for the Exercise of Rights

Below are the specific privacy notices that you may find on the Website, as well as the channels through which you can exercise the rights indicated in the previous clause in relation to the data processing associated with these specific privacy notices:

  • Acts, events, and training organized by the Lãberit Group
  • Privacy Notice:

AVISO DE PRIVACIDAD PARA EVENTOS

SINASUITE y las sociedades que formen parte del Grupo Lãberit de conformidad con la legislación mercantil (en adelante, cualquiera de ellas, «LABERIT») se comprometen a proteger tu privacidad y te garantizan el cumplimento de la legislación de protección de datos personales, en particular, el Reglamento General de Protección de Datos («RGPD») y la legislación de protección de datos personales aplicable en cada país en los que estén domiciliadas las sociedades del Grupo Lãberit. Tus datos personales serán tratados de forma lícita, leal y transparente; conforme a fines determinados explícitos y legítimos; y sólo si son adecuados, pertinentes y limitados a lo necesario en relación con dichos fines. Además, mantendremos tus datos exactos y actualizados, conservándolos de forma que se permita su identificación sólo durante el tiempo necesario para cumplir los fines del tratamiento.

En el marco de lo dispuesto en el Propósito y Valores del Grupo Lãberit perseguimos el desarrollo sostenible de las comunidades en las que llevamos a cabo nuestras actividades y el bienestar de los clientes, estudiantes, proveedores, personas trabajadoras, y terceros interesados haciéndoles partícipes de nuestro proyecto empresarial y de nuestra estrategia de responsabilidad social. Es por ello que, con el fin de conocer y compartir sus inquietudes, Grupo Lãberit realiza eventos en los que invita a dichos grupos de interés.

Grupo Lãberit ha implementado las medidas técnicas y organizativas necesarias para proteger tus datos de pérdidas accidentales o de su alteración, acceso, uso o divulgación no autorizados, habiendo asimismo establecido procedimientos para reaccionar ante cualquier incidente de seguridad que pudiera afectar a tus datos personales.

Mediante el presente aviso de privacidad te informamos acerca del modo en que se llevará a cabo el tratamiento de tus datos personales con ocasión de tu participación en un evento o formación organizada por Grupo Lãberit.

En el caso de proceder a actualizar este aviso de privacidad te lo comunicaremos a través de este sitio web.

Si vas a acudir acompañado al evento, antes de facilitarnos los datos personales de dichos acompañantes, debes informarles sobre el tratamiento de sus datos conforme a este aviso de privacidad.

¿Quién es el responsable del tratamiento de tus datos personales?

El responsable del tratamiento de tus datos personales es la sociedad del Grupo Lãberit que organice el evento. Tales sociedades del Grupo Lãberit son las relacionadas en el sitio web corporativo: Conócenos – Lãberit

¿Qué datos personales tratamos y de dónde los obtenemos?

Los datos personales que tratamos pertenecen a las siguientes categorías:

  • Datos de carácter identificativo y de contacto: nombre y apellidos, DNI/NIE/Pasaporte o documento de identidad análogo, dirección postal y/o electrónica, teléfono o matrícula de vehículo e imagen y voz (planos generales).
  • Datos relativos a características personales: fecha y lugar de nacimiento, edad, sexo, nacionalidad, idiomas y, en caso de que los invitados acudan con familiares, datos de familia.
  • Datos académicos y profesionales: experiencia profesional, pertenencia a colegios o asociaciones profesionales o formación y titulaciones.
  • Datos referentes a circunstancias sociales: pertenencia a clubes o asociaciones o aficiones y estilos de vida.
  • Detalles de empleo: profesión y cargos profesionales.
  • Información comercial: creaciones artísticas, literarias, científicas o técnicas.
  • Otros datos: fecha y hora de acceso al Evento.

En ocasiones, habida cuenta de las características del evento, Lãberit pondrá a disposición de los invitados una dirección de correo para que puedan remitir datos relacionados con su salud o características físicas o antropométricas, por ejemplo datos de alergias, requerimientos alimentarios especiales o problemas de movilidad, que fueran precisos para la adopción de las medidas necesarias para garantizar la adecuada participación de aquéllos en dicho evento.

Los datos anteriores pueden proceder de diversas fuentes:

  • El propio interesado quien los proporciona al completar el formulario de inscripción al evento y/o al asistir al mismo o en el marco de cualquier otro evento en el que haya participado con anterioridad. Asimismo, es posible que la entidad organizadora disponga previamente de los datos con motivo, por ejemplo, de la relación contractual o comercial entablada con los propios interesados.
  • Otras entidades del Grupo Lãberit distintas a la que organiza el Evento.
  • Entidades privadas a las que los interesados representan o en las que prestan sus servicios.
  • Administraciones Públicas y entidades educativas.

¿Con qué finalidades tratamos tus datos? La información facilitada se tratará con las siguientes finalidades:

  1. Envío de la invitación al evento.
  2. Gestión de tu participación en el evento y organización y logística del mismo.
  3. Control de accesos al evento.
  4. Captación de imágenes y vídeos para la elaboración de materias audiovisuales y su posterior difusión en medios de comunicación corporativos onliney offline (p. ej. página web corporativa, intranet y perfiles en redes sociales).
  5. En algunos casos, para realizar una encuesta de satisfacción sobre el evento.

What is the legal basis for processing your data?

The legal basis for processing your personal data for the purposes indicated in section a) is the legitimate interest of Grupo Lãberit in creating a contact network for the development and maintenance of public relations and/or networking with its stakeholders, as well as for the exchange of opinions on matters related to its business project and social responsibility strategy, in order to contribute to the development of the communities where it operates.

The legal basis for processing your personal data for the purposes indicated in section b), once you have requested to participate in the event through your registration, is the legitimate interest of Grupo Lãberit in the proper management and execution of said event, ensuring it proceeds with full guarantees and that all attendees can participate appropriately. In the specific case of data related to health or physical/anthropometric characteristics, the legal basis is the consent you provide when communicating such information to us.

The legal basis for the processing provided for in letter c) is the legitimate interest of Grupo Lãberit in ensuring the security of its facilities, as well as the individuals and property within them.

In the case of purpose d), the legal basis varies depending on the type of images:

  • General shots and ambient sound: The legal basis is the legitimate interest of Grupo Lãberit in the advertising and promotion of the “Lãberit” image and brand, as well as the organizing entity, both internally and externally. This is intended to provide greater visibility and establish a public image of Grupo Lãberit consistent with its values by broadcasting its activities and events. To this end, Grupo Lãberit uses its website and other appropriate online and offline media—such as social networks—to reach a wider audience and optimize its communication actions.
  • Close-ups or directly recognizable shots: If, during the events, Grupo Lãberit (directly or through third parties) captures shots in which you can be directly recognized, the processing of your image and voice is based on the consent you provide by attending the event. By attending, you authorize the transfer of these image rights free of charge, for use through currently known technical means and those developed in the future, for the maximum period allowed by intellectual property law and without geographical limitation.

For purpose e), the legal basis is the legitimate interest of Grupo Lãberit in understanding the opinions and satisfaction levels of event attendees to facilitate a process of constant improvement.

Finally, we inform you that when processing is based on the legitimate interest of Grupo Lãberit, a corresponding balancing test has been conducted between said legitimate interest and the rights of the Data Subject to ensure that necessary safeguards are in place to protect your rights.

How long do we keep your data?

  • Purpose a): Personal data will be kept as long as the data subject does not object to the processing.
  • Purpose b): For recurring guests, data is kept as long as they do not object. For guests of a specific event, data is kept until the conclusion of the event.
  • Purpose c): Data will be kept for one month from collection, unless longer retention is necessary due to incidents against people, property, or facilities.
  • Purpose d): Data will be kept as long as you do not object or withdraw consent. If you exercise your right to object or withdraw consent, images in which you appear will be immediately deleted.
  • Purpose e): Data will be processed until the conclusion of the survey result analysis.

After these periods, data will be kept, duly blocked, for the duration of:

  1. Legal prescription periods of obligations to which Grupo Lãberit may be subject.
  2. Potential legal liabilities derived from the relationship with the data subjects.

With whom will your data be shared?

Your data will be communicated to other entities within the Grupo Lãberit when necessary for the correct organization of Events—including security—for internal administrative purposes, or for the publication of audiovisual material on the websites of said entities. These entities are listed at Conócenos – Lãberit.

Data may also be communicated to Public Administration bodies when necessary for the organization of events involving such bodies.

Finally, when the event requires it, your data may be shared with accommodation providers, transport services, and/or travel agencies. The legal basis for these communications is the application of pre-contractual measures at the data subject’s request and the legitimate interest of Grupo Lãberit in the proper management of the event.

Regarding images and videos, due to their dissemination over the Internet, such data may be accessible to any third party viewing corporate online or offline media.

What are your rights?

You have the right to access your personal data undergoing processing, to request the rectification of inaccurate data or, where appropriate, to request its erasure when the data is no longer necessary for the purposes for which it was collected. You also have the right to exercise your rights to object to processing, to restrict processing, and to data portability. Furthermore, you have the right to withdraw your consent at any time; however, such withdrawal shall not affect the lawfulness of the processing based on consent before its withdrawal.

You may exercise your right to object to the taking of images or withdraw your consent during the event itself by informing the photographers and videographers and requesting that your image not be captured or recorded.

Regarding processing based on legitimate interests, you may request information concerning the conclusions of the balancing test conducted by Grupo Lãberit, as well as object to any such processing.

You may exercise these rights free of charge by contacting rgpd@laberit.com.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) through its website at www.aepd.es.

  • Complaint before the Supervisory Authority

If you believe there is an issue with the way SINASUITE is processing your data, you may direct your claims to the corresponding data protection authority, which in the case of Spain is the Spanish Data Protection Agency. The Agency’s web address is www.agpd.es.

  • Modification of the Privacy Policy

SINASUITE may modify this Privacy Policy at any time, with successive versions being published on the Website. In any case, SINASUITE will provide prior notice of any changes to this policy that affect users so they may accept them.

  • Security Measures and Policies

SINASUITE has established rigorous controls for the correct processing of personal data, implementing the necessary technological measures to ensure its integrity and confidentiality. We have established a series of policies aimed at providing the maximum guarantee of security, confidentiality, and integrity of your personal data.

These policies include, among others:

  • Identification and Record of Processing Activities Policy.
  • Data Protection Impact Assessment (DPIA) Policy.
  • Consent Acquisition Policy for Data Processing.
  • Exercise of Data Protection Rights Policy.
  • Security Breach Response Policy.
  • Data Quality Policy.
  • Data Retention Periods Policy.
  • Data Encryption Policy.
  • User Management and Control Policy.
  • Acceptable Use of Technological Resources Policy.
  • Clean Screen Policy.
  • Data Storage Media Management Policy.
  • Backup, Restoration, and Contingencies Policy.
  • International Data Transfer Protocol Policy.