PRIVACY POLICY
Following the principles of lawfulness, fairness and transparency, we make this Privacy Policy available to you.
Who is the data controller?
| Controller | Sipay Plus, SL. |
| NIF | B60462314 |
| Registered office | Calle San Rafael 1, Portal 2, 2ºC, 28108, Alcobendas, Madrid |
| Email for exercising rights | dpo@sipay.es |
| Telephone | 914 841 028 |
| Data Protection Officer | dpo@sipay.es |
For what purpose do we process your personal data?
At Sipay Plus, SL., depending on the category of data subject concerned, we process the information you provide us for the following purposes:
| Data subjects | Purposes of processing |
| Potential customers | To manage the potential commercial and/or professional relationship, manage the sending of requested information and/or resolve the queries raised, and provide offers of our services and/or products of interest to you. |
| Clientes | To manage the commercial and/or professional relationship and provide offers of our services and/or products of interest to you. |
| Suppliers | To manage the commercial and/or professional relationship. |
| Candidates | To manage the personnel selection process. |
| Website users | To manage the analysis of your browsing data |
What is the legal basis for processing your data?
The legal basis for processing your personal data, depending on the category of data subject concerned, may be:
| Interesados | Legal basis (Article 6 of the GDPR) |
| Potenciales clientes | Art. 6.1.b GDPR: taking steps at the request of the data subject prior to entering into a contract (quotes, engagement letters, service offers…). |
| Art. 6.1.f GDPR: Legitimate interest (sending requested information, responding to the queries raised…). | |
| Art. 6.1.a GDPR: consent of the data subject (providing offers of our services and/or products). | |
| Clientes | Art. 6.1.b GDPR: performance of a contract to which the data subject is party. |
| Proveedores | Art. 6.1.b GDPR: performance of a contract to which the data subject is party. |
| Candidatos | Art. 6.1.a GDPR: consent of the data subject. |
| Usuarios web | Art. 6.1.a GDPR: consent of the data subject. |
The data we request from you is adequate, relevant and strictly necessary, and you are in no case obliged to provide it to us, but failure to provide it may affect the purpose of the service or make it impossible to provide.
How long will we keep your personal data?
Your data will be kept for the minimum time necessary for the correct provision of the service offered, as well as to address the liabilities that may arise from it and any other legal requirement.
To which recipients will your data be disclosed?
Sipay Plus, SL., for the correct provision of the services, may disclose your data to:
|
Additionally, we inform you that certain data, by virtue of the applicable regulations or the contractual relationship maintained by Sipay Plus, SL., may be disclosed to:
- Banks and financial institutions for the collection of payment for the contracted services and/or purchased products.
- Public administrations with competence in the sectors of Sipay Plus, SL.’s activity, when so established by the applicable regulations
Are international data transfers carried out?
Sipay Plus, SL. may carry out international transfers of data resulting from the acceptance of cookies from this Website:
Google LLC and Google Ireland Limited transfer data to the United States on the basis of the user’s consent when accepting cookies.
By accepting the cookies of these entities, the user consents to their personal data that may be collected through the loading and reading of cookies being transferred to the United States, a country that offers a level of protection comparable to the European one, only in those US companies included in the EU-US data privacy list, under what is known as the “Data Privacy Framework” (hereinafter, “DPF”).
In the event that the US companies are not adhered to the DPF, they will be understood not to guarantee a level of protection comparable to the European one.
If the user does not consent to this international transfer of data to the United States, they must reject these cookies, and the functionalities or services offered with these cookies will not be provided or obtained.
You can find out about the transfers to third countries that, where applicable, are carried out by the third parties identified in the cookie policy in their respective policies.
What are your rights when you provide us with your data?
The data protection rights that data subjects may exercise, where applicable, are:
| Right | What does it involve? |
| Right of access | To check what personal data the Data Controller processes. More information, here. |
| Right of rectification | To modify the personal data processed by the Data Controller when it is inaccurate, incorrect or incomplete. More information, here. |
| Right to object | To request that the Data Controller not process your personal data for certain specific purposes. More information, here. |
| Right of erasure | To request that the Data Controller delete your personal data. More information, here. |
| Right to restriction | To request that the Data Controller restrict the processing of your personal data. More information, here. |
| Right to data portability | When processing is carried out by automated means, to receive your personal data in a structured, commonly used, machine-readable and interoperable format, and to be able to transmit it to another data controller. More information, here. |
| Right not to be subject to automated individual decisions. | This right aims to ensure that you are not subject to a decision based solely on the processing of your data, including profiling, that produces legal effects concerning you or similarly significantly affects you. More information, here. |
| Right to lodge a complaint with the competent authority | To lodge a complaint against the Data Controller with the Spanish Data Protection Agency (AEPD) if the User considers that the entity has processed their personal data in breach of the regulations. |
The holders of the personal data obtained may exercise their personal data protection rights by sending a written communication to the registered office of Sipay Plus, SL. at Calle San Rafael 1, Portal 2, 2ºC, 28108, Alcobendas, Madrid or to the email address enabled for this purpose: dpo@sipay.es.
You can use the following templates to exercise your rights:
More information on exercising your rights on the official website of the Spanish Data Protection Agency (hereinafter, “AEPD”), at the following link.
Can I withdraw consent?
You have the possibility and the right to withdraw the consent given at the time for any specific purpose, without this affecting the lawfulness of the processing based on the consent prior to its withdrawal.
Where can I complain if I consider that my data is not being processed correctly?
If any data subject considers that their data is not being processed correctly by Sipay Plus, SL. or that requests to exercise their rights have not been satisfactorily addressed, they may lodge a complaint with the relevant data protection authority, the Spanish Data Protection Agency (AEPD) being the appropriate one within the national territory. More information on its website: www.aepd.es.
Security and updating of your personal data.
In order to safeguard the security of your personal data, we inform you that all the necessary technical and organizational measures have been adopted to guarantee the security of the personal data supplied. All of this is to prevent its alteration, loss, and/or unauthorized processing or access, as required by the regulations, although absolute security does not exist.
It is important that, so that we can keep your personal data up to date, you inform us whenever there is a change to it.
Confidentiality
Sipay Plus, SL. informs you that your data will be processed with the utmost care and confidentiality by all personnel involved in any of the phases of processing. We will not transfer or disclose your data to any third party, except in legally provided cases, or unless the data subject has expressly authorized us to do so.
