Privacy and data protection policy

Privacy and data protection policy
  1. Collection, Processing, and Use of Personal Data on the Web:

Based on the provisions of the General Data Protection Regulation 2016/679 (GDPR) and Organic Law 3/2018, on Personal Data Protection and guarantee of digital rights (LOPDGDD), we inform you that to use some of the services offered by our website, it may be necessary for you to provide certain personal data that will be incorporated into automated files.

In compliance with the new provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, and Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights, regarding the protection of individuals regarding the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC, we inform you that the data controller is:

IBEROVALIA INVEX S.L.
VAT: B88064019
Registered address: C/ Profesor Waksman 5, 10 D, Madrid.
Registered in the Registro Mercantil de Madrid, tomo 37404, folio 103, inscripción 2, hoja M-666847.
Email: [email protected]
Website: www.kripteria.com

To make any observations regarding possible infringements of intellectual or industrial property rights, as well as regarding any of the contents of the website, you can do so by contacting the company through any of the aforementioned means.

The contents of the Website are intended to inform users of the services offered by the company as a result of the requests, procedures, or transactions that the User carries out through the website. The data subject to processing will be those that you provide us through the forms contained on the page at any given time or through the emails that the User directs to the email addresses identified therein, as well as any others that are generated during the maintenance of the corresponding relationship.

All fields marked as mandatory in any of the forms must be completed necessarily, so that the omission of any of them may result in the impossibility of us attending to your request or providing you with the corresponding services.

Additionally, during the collection of this data, your consent may be requested for other purposes that are not directly related to the service or the corresponding relationship. If you do not agree with such additional processing, please mark the corresponding checkbox accordingly.

Information Requesters: The personal data used in these cases comes from the interested party themselves, who provide it to IBEROVALIA INVEX S.L. by completing the contact form on the Website, making a phone call, or sending an email.

This data is used with the purpose of resolving inquiries and providing information to those who request it or expressly authorize it, mainly through email.

The person accessing this Website (hereinafter, the User) ensures that they have reached the minimum legal age established by the General Data Protection Regulation 679/2016 (16 years) or by the national regulation applicable to grant consent in relation to Information Society Services.

By accessing this Website, the User expressly accepts all the clauses of its legal information, this privacy policy, and its cookie policy, as well as all those particular conditions set forth for the use of certain services. In case of not accepting any of the aforementioned clauses, the User must refrain from accessing this Website.

  1. Purpose of Processing Personal Data:

2.1. What purposes will we process your personal data for?

At IBEROVALIA INVEX S.L., we will process your personal data collected through the Website for the following purposes:

  • Accounting and fiscal management: management of billing, tax obligations, bonuses, etc., for the clients and/or suppliers of the company.
  • Handling of complaint management (customer service).
  • Data protection rights processing.
  • Management of relationships with contacts – web users through the web.
  • Newsletters and bulletins. Sending advertising related to our products and services by electronic means.

We also remind you that you can object to the sending of commercial communications through any means and at any time by contacting IBEROVALIA INVEX S.L.

The fields in these records are mandatory, and it will be impossible to fulfill the stated purposes if these data are not provided.

2.2. How long will the collected personal data be retained?

The provided personal data will be kept as long as their communication is managed and/or you do not request their deletion, and for the minimum time necessary to comply with legal obligations or possible legal responsibilities arising from the services provided.

  1. Legitimization:

The processing of your data is carried out based on the following legal bases that legitimize it:

  • Freely given, specific, informed, and unequivocal consent, as we inform you by making available this privacy policy, which after reading it, if you agree, you can accept through a declaration or a clear affirmative action, such as checking a box provided for this purpose.

If you do not provide us with your data or do so incorrectly or incompletely, we will not be able to process your request, making it completely impossible for us to provide the requested information or carry out the contracting of services.

  1. Guarantee:

The User guarantees that the data provided are true, accurate, complete, and up-to-date, being responsible for any direct or indirect damage or harm that may be caused as a result of the breach of this obligation. In the event that the provided data belong to a third party, the User guarantees that they have informed said third party and obtained their authorization to provide their personal data to IBEROVALIA INVEX S.L.

  1. Data Retention:

Your data will be retained as long as the contractual relationship is maintained or for the years necessary to comply with legal obligations, as long as you do not request their cessation, or for the time necessary to achieve the purposes for which they were collected.

  1. Recipients:

Your data will be kept under strict security measures that guarantee their confidentiality and security. Likewise, they will only be transferred to the entities and for the following purposes:

  • Entities and providers that provide services to IBEROVALIA INVEX S.L. for the correct execution of these services. These entities and providers are duly accredited and sign with us the corresponding data processing contract in compliance with the current data protection regulations.
  • Official bodies and entities in compliance with current regulations and laws.

Any international data transfer when using American applications will comply with the Privacy Shield agreement, which ensures that American software companies comply with European data protection policies regarding privacy.

The data will not be communicated to any third party outside of IBEROVALIA INVEX S.L., except as previously described, except for legal obligation or prior authorization.

Recipients outside the European Union: IBEROVALIA INVEX S.L. does not transfer personal data to third parties or contract with service providers outside the European Union.

  1. Rights:

As an interested party who has provided us with your personal data, you have the full right to obtain confirmation as to whether IBEROVALIA INVEX S.L. is processing your personal data, and specifically, you are entitled to exercise the following rights recognized by data protection regulations, as provided therein:

  • Right of ACCESS to your personal data.
  • Right to request the RECTIFICATION of inaccurate data.
  • Right to request DELETION when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
  • In certain circumstances, you may request the LIMITATION OF THE PROCESSING of your data, in which case we will only keep them for the exercise or defense of claims.
  • In certain circumstances and for reasons related to your particular situation, the interested parties may exercise their right to OBJECT to the processing of their data. We will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.
  • In certain circumstances and for reasons related to your particular situation, you may request your right to DATA PORTABILITY.

You can exercise these rights or request additional information by providing a copy of an identification document and briefly explaining your case and the right you wish to exercise, by sending a letter to IBEROVALIA INVEX S.L. at the postal address located at C/ Profesor Waksman 5, 10 D, Madrid, or through the email address [email protected].

Additionally, in the event that any of your rights have been violated, the interested party has the right to file a complaint with the Spanish Data Protection Agency (AEPD), at C/ Jorge Juan, 6, 28001-Madrid, or through the electronic headquarters of the AEPD: https://sedeagpd.gob.es/sede-electronica-web/.

  1. Duration and Modification of the Privacy Policy:

IBEROVALIA INVEX S.L. reserves the right to modify, totally or partially, this Privacy Policy, by publishing the changes on the Website. Likewise, it may make, without prior notice, the modifications it deems appropriate, being able to change, delete, or add both the contents and services it provides, as well as the way in which they are presented or located. Consequently, the conditions/General Policies that are published at the time the User accesses them will be considered valid, and the User must read them periodically.

Regardless of the foregoing, IBEROVALIA INVEX S.L. may terminate, suspend, or interrupt, at any time and without prior notice, access to the contents of the Website, with no possibility for the User to demand any compensation.

Last updated on 02/22/2020.