Privacy polcy

1. Who will process my data?

Controller: VESTIGERE CONSULTING AND INVESTIGATION, S.L.

Tax number: B87738597

Address: C/ Alcalá 20 – 5th floor, 28014 – MADRID

Contact number: +34 910 666 262

2. What will my data be used for?

If you exercise a data protection right: to allow us to respond to the exercise of your rights as part of our data protection obligations.

If you are notified of a security breach: to manage and assess any security breaches arising.

If you have a business or administrative relationship with us: if you are party to a contract as a self-employed person or as a private individual, to maintain and develop the contractual relationship. If, as a party to a contract, you are the representative or contact person for a legal entity: to maintain contact with the entity that you represent or work for.

If you are a private individual or a contact person for a legal entity or an individual entrepreneur: to handle communication and respond to any questions and queries that we receive.

3. Storage period and criteria – how long will be my data be stored?

If you exercise a data protection right: your data will be stored for three years from the date on which that right was fulfilled.

If you are notified of a security breach: your data will be stored for three years from the date on which that right was fulfilled.

If you have a business or administrative relationship with us: if you are party to a contract as a self-employed person or as a private individual, your data will be stored for the time required to fulfil the purpose for which they were collected, to determine future liabilities and to respond to any future complaints made against the company. If you are the representative or contact person for a legal entity: your data will be stored for as long as you continue to represent or work for the entity or until you request their deletion.

If you are a private individual or a contact person for a legal entity or an individual entrepreneur who is a recipient of our commercial offers: your data will be stored until you exercise your right of opposition.

4. Legitimacy – what is your legitimate interest in processing my personal data?

If you exercise a data protection right: because processing is necessary for compliance with the data controller’s legal obligations under Article 6.1.c of General Data Protection Regulation (EU) 2016/679.

If you are informed of a security breach: because processing is necessary for compliance with the data controller’s legal obligations under Article 6.1.c of General Data Protection Regulation (EU) 2016/679.

If you have a business or administrative relationship with us: if you are party to a contract as a self-employed person or as a private individual, the purpose of processing your data is to maintain and develop the contractual relationship. We are authorised to process your data under Article 9.2.c of General Data Protection Regulation (EU) 2016/679 where this processing is necessary to execute a contract or to apply pre-contractual measures at your request. If, as a party to a contract, you are the representative or contact person for a legal entity: we are authorised to process your data as this processing is necessary for the data controller or a third party to fulfil legitimate interests under Article 6.1.f of General Data Protection Regulation (EU) 2016/679.

If you are a contact person for a legal entity or an individual entrepreneur who is a recipient of our commercial offers: because processing is necessary for the data controller or a third party to fulfil legitimate interests under Article 6.1.f of General Data Protection Regulation (EU) 2016/679, as long as these interests are not overridden by the interests or fundamental rights and freedoms of the data subject requiring protection of their personal data.

5. Obligation to provide data – am I obliged to provide my data?

If you have a business or administrative relationship with us as a supplier and you must sign a contract: you are obliged to provide your data because they are necessary to complete the hiring process. If you do not provide your data, we will not be able to sign the contract.

6. Who will my data be disclosed or transferred to?

If you exercise a data protection right: your data may be disclosed to the Spanish Data Protection Agency in compliance with the data controller’s legal obligations under Article 6.1.c of General Data Protection Regulation (EU) 2016/679.

If you are informed of a security breach: your data may be disclosed to the Spanish Data Protection Agency in compliance with the data controller’s legal obligations under Article 6.1.c of General Data Protection Regulation (EU) 2016/679. Your data may also be disclosed to the law enforcement authorities.

If you have a business or administrative relationship with us: if you are party to a contract as a self-employed person or as a private individual, your data will be sent to banks and building societies for the payment and collection of invoices and costs in compliance with the contractual obligations of both parties. The relevant declarations will be made to the Spanish Inland Revenue under Law 58/2003 of 17 December on General Taxation. If, as a party to a contract, you are the representative or contact person for a legal entity: we will not disclose your data to third parties unless we are legally obliged to do so. We will not transfer your data to third countries or international organisations.

If you are a contact person for a legal entity or an individual entrepreneur who is a recipient of our commercial offers: your data will not be disclosed to third parties nor will we transfer your data to third countries or international organisations unless required to do so by law. We may transfer or disclose your data to other companies in the group with your express consent.

7. What are my rights regarding the processing of my data and how can I exercise them?

Right of access: The right to obtain information about whether or not VESTIGERE CONSULTING AND INVESTIGATION, S.L is processing your personal data.

Right to rectification: The right to request modification or rectification of your data if they are inaccurate.

Right to erasure: The right to request deletion of your data in the event of illegal data processing, disappearance of the original purpose of the processing or collection, revocation of consent or opposition to data processing.

Right to restriction of processing: If you contest the accuracy of your data, you may request that processing is restricted while we verify them, or if you have exercised your right to object to the processing of your data, you may restrict their processing while we verify whether our legitimate reasons as data controllers prevail over your rights.

Right to conservation of your data: If the processing is unlawful and we oppose the deletion of your data by requesting the limitation of its use or if the data is needed to formulate, exercise or defend against claims.

Right to data portability: In a structured, machine-readable format in common use, where portability is technically possible and where data have been used/processed with consent or under contract.

To exercise these rights, please write to info@vestigere.com and attach a copy of your ID document.

You also have the right:

To revoke consent: in the event that processing of your data is legitimated by consent, you have the right to revoke that consent.
To submit a complaint: you can contact the Data Protection Officer or submit a complaint to the Spanish Data Protection Agency.