1. Data protection policy

This data protection policy is applicable to all processing of personal data carried out by the controller, both through the website www.aritmos.com and for all other processing.

Therefore, before providing us with personal data, it is essential that you are aware of our data protection policy.

If you have any questions about the data protection policy, please contact us at the following e-mail address: seguridad@aritmos.com

The user declares to have been informed of this personal data protection policy, accepting the processing of personal data by the responsible for the purposes described.

The applicable regulations are as follows:

a. GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons.

b. LOPDGDD: Organic Law 3/2018, of December 5 Organic Law on the Protection of Personal Data and Guarantee of Digital Rights.

c. LSSI: Law 34/2002, of July 11, 2002, on Information Society Services and Electronic Commerce.

2. The identity of the person in charge

The person in charge of the treatment is Informàtica del Segre, S.L., with CIF B25035080, address in Térmens street, 8 – 25190, Lleida, telephone +34 973 188 300, e-mail seguridad@aritmos.com, registered in the Mercantile Registry of Lleida folio 184, volume 188, page I-2002, inscription 3.

3. Processing of personal data

The following is a description of the processing of personal data that we are responsible for.

a. Customers

Identity of the responsible: Informàtica del Segre S.L. with address in Polígon Activa Park, street Térmens, number 8, C.P. 25190, telephone 973 188 300 and e-mail seguridad@aritmos.com.

The purpose of the treatment: To establish and execute the legal relationship with the client related to the contracted services or products, the fulfillment of the legal, accounting, fiscal obligations and all those related or linked to the established legal relationship, to answer their doubts or questions and for the management, control, administration, extension, execution and improvement of the relationship.

Advertising purpose: The data will be processed for advertising purposes in order to send you advertising by any means, including e-mail, sms, ems, mms, fax or equivalent means, of the products and/or services of the responsible party related to the IT, technology, security and training sector. If you wish your personal data to be processed for advertising purposes, please give your express consent by ticking the appropriate box.

The legitimacy of the processing: The execution of a contract and consent.

Data collected: Name, surname, ID card number, professional contact address, e-mail address, VAT number.

Recipients: In general, the data controller will not transfer personal data to third parties, unless there is a legal obligation or we have the express consent of the data subject.

Specifically, personal data may be transferred to:

a. Public Administrations, Judges and Courts for the fulfillment of the legal obligations to which the responsible party is subject due to its activity.

b. To financial institutions for the fulfillment of the obligations arising from the contract between the person in charge and the interested party.

c. To third parties in all those cases in which it is necessary for the development, fulfillment, execution and control of the contract between the person in charge and the interested party.

d. To data processors, access which in no case will involve a transfer of data, when it is necessary to access your personal data for the provision of services that the data controller has contracted with such data processors, and with which it has signed a data processor contract.

Retention periods: the data controller will process personal data only for the time necessary to carry out the purposes for which they were collected, as long as the consent granted is not revoked. Once the relationship has ended, the information will be kept blocked for the legally established periods that are necessary for the formulation, exercise or defense of possible claims and then proceed to its deletion, unless there is a cause for conservation.

Rights: The interested party may exercise the rights of access, rectification, deletion, to request that the processing of their personal data be limited, to oppose the processing, to request portability, to not be subject to profiling or automated individual decisions and to revoke the consent given without retroactive effect, by sending a written communication to the address of the responsible party, providing the ID card or official document proving the identity of the interested party, indicating the request or right being exercised.

The data subject may file a complaint with the Spanish Data Protection Agency through the website www.agpd.es.

The full text of the data protection policy, with the rest of the information of article 13 of the RGPD, can be consulted on the following website: https://aritmos.com/politicas-de-privacidad/.

b. Potential customers

Identity of the responsible: Informàtica del Segre S.L. with address in Polígon Activa Park, street Térmens, number 8, C.P. 25190, telephone 973 188 300 and e-mail seguridad@aritmos.com.

The purpose of the processing: Your personal data will be processed for the purpose of responding to your doubts or questions, arising from your contact with the responsible.

The legitimacy of the processing: The execution of a contract and consent.

Data collected: Name, surname, ID card number, professional contact address, e-mail address, VAT number.

Recipients: In general, the data controller will not transfer personal data to third parties, unless there is a legal obligation or we have the express consent of the data subject.

Specifically, personal data may be transferred to:

a. Public Administrations, Judges and Courts for the fulfillment of the legal obligations to which the responsible party is subject due to its activity.

b. To financial institutions for the fulfillment of the obligations arising from the contract between the person in charge and the interested party.

c. To third parties in all those cases in which it is necessary for the development, fulfillment, execution and control of the contract between the person in charge and the interested party.

d. To data processors, access which in no case will involve a transfer of data, when it is necessary to access your personal data for the provision of services that the data controller has contracted with such data processors, and with which it has signed a data processor contract.

Retention periods: the data controller will process personal data only for the time necessary to carry out the purposes for which they were collected, as long as the consent granted is not revoked. Once the relationship has ended, the information will be kept blocked for the legally established periods that are necessary for the formulation, exercise or defense of possible claims and then proceed to its deletion, unless there is a cause for conservation.

Rights: The interested party may exercise the rights of access, rectification, deletion, to request that the processing of their personal data be limited, to oppose the processing, to request portability, to not be subject to profiling or automated individual decisions and to revoke the consent given without retroactive effect, by sending a written communication to the address of the responsible party, providing the ID card or official document proving the identity of the interested party, indicating the request or right being exercised.

The data subject may file a complaint with the Spanish Data Protection Agency through the website www.agpd.es.

The full text of the data protection policy, with the rest of the information of article 13 of the RGPD, can be consulted on the following website: https://aritmos.com/politicas-de-privacidad/.

c. Suppliers

Identity of the responsible: Informàtica del Segre S.L. with address in Polígon Activa Park, street Térmens, number 8, C.P. 25190, telephone 973 188 300 and e-mail seguridad@aritmos.com.

The purpose of the treatment: To establish and execute the legal relationship related to the services or products contracted with the supplier, the fulfillment of the legal, accounting, fiscal obligations and all those related or linked to the established legal relationship, to answer your doubts or questions and for the management, control, administration, extension, execution, and improvement of the relationship.

The legitimacy of the processing: The execution of a contract and consent.

Data collected: Name, surname, ID card number, professional contact address, e-mail address, VAT number.

Recipients: In general, the data controller will not transfer personal data to third parties, unless there is a legal obligation or we have the express consent of the data subject.

Specifically, personal data may be transferred to:

a. Public Administrations, Judges and Courts for the fulfillment of the legal obligations to which the responsible party is subject due to its activity.

b. To financial institutions for the fulfillment of the obligations arising from the contract between the person in charge and the interested party.

c. To third parties in all those cases in which it is necessary for the development, fulfillment, execution and control of the contract between the data controller and the data subject.

d. To data processors, access which in no case will involve a transfer of data, when it is necessary to access your personal data for the provision of services that the data controller has contracted with such data processors, and with which it has signed a data processor contract.

Retention periods: the data controller will process personal data only for the time necessary to carry out the purposes for which they were collected, as long as the consent granted is not revoked. Once the relationship has ended, the information will be kept blocked for the legally established periods that are necessary for the formulation, exercise or defense of possible claims and then proceed to its deletion, unless there is a cause for conservation.

Rights: The interested party may exercise the rights of access, rectification, deletion, to request that the processing of their personal data be limited, to oppose the processing, to request portability, to not be subject to profiling or automated individual decisions and to revoke the consent given without retroactive effect, by sending a written communication to the address of the responsible party, providing the ID card or official document proving the identity of the interested party, indicating the request or right being exercised.

The data subject may file a complaint with the Spanish Data Protection Agency through the website www.agpd.es.

The full text of the data protection policy, with the rest of the information of article 13 of the RGPD, can be consulted on the following website: https://aritmos.com/politicas-de-privacidad/.

d. Human Resources

Identity of the responsible: Informàtica del Segre S.L. with address in Polígon Activa Park, street Térmens, number 8, C.P. 25190, telephone 973 188 300 and e-mail seguridad@aritmos.com.

The purpose of the processing: Management of the labor relationship with employees.

Advertising purpose: The data will be processed for advertising purposes in order to send you advertising by any means, including e-mail, sms, ems, mms, fax or equivalent means, of the products and/or services of the responsible party related to the IT, technology, security and training sector. If you wish your personal data to be processed for advertising purposes, please give your express consent by ticking the appropriate box.

The legitimacy of the treatment: The execution of a contract.

Data collected: Name, ID card number, social security number, address, e-mail, telephone/mobile phone, marital status, date and place of birth, age, sex, nationality, bank account, profession, experience, training and skills.

Recipients: In general, the data controller will not transfer personal data to third parties, unless there is a legal obligation or we have the express consent of the data subject.

Specifically, personal data may be transferred to:

a. Public Administrations, Judges and Courts for the fulfillment of the legal obligations to which the responsible party is subject due to its activity.

b. To financial institutions for the fulfillment of the obligations arising from the contract between the person in charge and the interested party.

c. To third parties in all those cases in which it is necessary for the development, fulfillment, execution and control of the contract between the person in charge and the interested party.

d. To data processors, access which in no case will involve a transfer of data, when it is necessary to access your personal data for the provision of services that the data controller has contracted with such data processors, and with which it has signed a data processor contract.

Retention periods: the data controller will process personal data only for the time necessary to carry out the purposes for which they were collected, as long as the consent granted is not revoked. Once the relationship has ended, the information will be kept blocked for the legally established periods that are necessary for the formulation, exercise or defense of possible claims and then proceed to its deletion, unless there is a cause for conservation.

Rights: The interested party may exercise the rights of access, rectification, deletion, to request that the processing of their personal data be limited, to oppose the processing, to request portability, to not be subject to profiling or automated individual decisions and to revoke the consent given without retroactive effect, by sending a written communication to the address of the responsible party, providing the ID card or official document proving the identity of the interested party, indicating the request or right being exercised.

The data subject may file a complaint with the Spanish Data Protection Agency through the website www.agpd.es.

The full text of the data protection policy, with the rest of the information of article 13 of the RGPD, can be consulted on the following website: https://aritmos.com/politicas-de-privacidad/.

e. Access control

Identity of the responsible: Informàtica del Segre S.L. with address in Polígon Activa Park, street Térmens, number 8, C.P. 25190, telephone 973 188 300 and e-mail seguridad@aritmos.com.

The purpose of the processing: to control access and internal security management of the responsible party’s facilities through the data provided for access control to the responsible party’s buildings.

The legitimacy of the processing: Legitimate interest in ensuring the security of persons, goods and facilities by the controller, which justifies the processing of data through access control.

Data collected: name, surname, telephone number and ID number.

Recipients: In general, the data controller will not transfer personal data to third parties, unless there is a legal obligation or we have the express consent of the data subject.

Specifically, personal data may be transferred to:

a. Public Administrations, Judges and Courts for the fulfillment of the legal obligations to which the responsible party is subject due to its activity.

b. To financial institutions for the fulfillment of the obligations arising from the contract between the person in charge and the interested party.

c. To third parties in all those cases in which it is necessary for the development, fulfillment, execution and control of the contract between the person in charge and the interested party.

d. To data processors, access which in no case will involve a transfer of data, when it is necessary to access your personal data for the provision of services that the data controller has contracted with such data processors, and with which it has signed a data processor contract.

Retention periods: the data controller will process personal data only for the time necessary to carry out the purposes for which they were collected, as long as the consent granted is not revoked. Once the relationship has ended, the information will be kept blocked for the legally established periods that are necessary for the formulation, exercise or defense of possible claims and then proceed to its deletion, unless there is a cause for conservation.

Rights: The interested party may exercise the rights of access, rectification, deletion, to request that the processing of their personal data be limited, to oppose the processing, to request portability, to not be subject to profiling or automated individual decisions and to revoke the consent given without retroactive effect, by sending a written communication to the address of the responsible party, providing the ID card or official document proving the identity of the interested party, indicating the request or right being exercised.

The data subject may file a complaint with the Spanish Data Protection Agency through the website www.agpd.es.

The full text of the data protection policy, with the rest of the information of article 13 of the RGPD, can be consulted on the following website: https://aritmos.com/politicas-de-privacidad/.

f. Personnel selection

Identity of the responsible: Informàtica del Segre S.L. with address in Polígon Activa Park, street Térmens, number 8, C.P. 25190, telephone 973 188 300 and e-mail seguridad@aritmos.com.

The purpose of the processing: management of the interested party’s candidacy to the published selection processes, or to other vacant positions according to his/her professional profile that may arise in the future within the activities of the responsible party.

Legitimacy of the processing: provision of the data subject’s consent for registration in the personnel selection service.

Data collected: name, surname, telephone, e-mail, CV, cover letter and any other personal data associated with the curriculum or professional profile.

Recipients: In general, the data controller will not transfer personal data to third parties, unless there is a legal obligation or we have the express consent of the data subject.

Specifically, personal data may be transferred to:

a. Public Administrations, Judges and Courts for the fulfillment of the legal obligations to which the responsible party is subject due to its activity.

b. To financial institutions for the fulfillment of the obligations arising from the contract between the person in charge and the interested party.

c. To third parties in all those cases in which it is necessary for the development, fulfillment, execution and control of the contract between the person in charge and the interested party.

d. To data processors, access which in no case will involve a transfer of data, when it is necessary to access your personal data for the provision of services that the data controller has contracted with such data processors, and with which it has signed a data processor contract.

Retention periods: the data controller will process personal data only for the time necessary to carry out the purposes for which they were collected, as long as the consent granted is not revoked. Once the relationship has ended, the information will be kept blocked for the legally established periods that are necessary for the formulation, exercise or defense of possible claims and then proceed to its deletion, unless there is a cause for conservation.

Rights: The interested party may exercise the rights of access, rectification, deletion, to request that the processing of their personal data be limited, to oppose the processing, to request portability, to not be subject to profiling or automated individual decisions and to revoke the consent given without retroactive effect, by sending a written communication to the address of the responsible party, providing the ID card or official document proving the identity of the interested party, indicating the request or right being exercised.

The data subject may file a complaint with the Spanish Data Protection Agency through the website www.agpd.es.

The full text of the data protection policy, with the rest of the information of article 13 of the RGPD, can be consulted on the following website: https://aritmos.com/politicas-de-privacidad/.

g. Video surveillance

Identity of the responsible: Informàtica del Segre S.L. with address in Polígon Activa Park, street Térmens, number 8, C.P. 25190, telephone 973 188 300 and e-mail seguridad@aritmos.com.

The purpose of the treatment:

Ensure the safety of people, property and facilities.

Compliance with emergency plans

Use of video surveillance as a means of company control both of the employee’s access and presence in the workplace, and to verify compliance with their work obligations and duties.

Legitimacy of the processing: Legitimate interest

Data collected: Images.

Recipients: In general, the data controller will not transfer personal data to third parties, unless there is a legal obligation or we have the express consent of the data subject.

Specifically, personal data may be transferred to:

a. Public Administrations, Judges and Courts for the fulfillment of the legal obligations to which the responsible party is subject due to its activity.

b. To financial institutions for the fulfillment of the obligations arising from the contract between the person in charge and the interested party.

c. To third parties in all those cases in which it is necessary for the development, fulfillment, execution and control of the contract between the person in charge and the interested party.

d. To data processors, access which in no case will involve a transfer of data, when it is necessary to access your personal data for the provision of services that the data controller has contracted with such data processors, and with which it has signed a data processor contract.

Retention periods: the data controller will process personal data only for the time necessary to carry out the purposes for which they were collected, as long as the consent granted is not revoked. Once the relationship has ended, the information will be kept blocked for the legally established periods that are necessary for the formulation, exercise or defense of possible claims and then proceed to its deletion, unless there is a cause for conservation.

Rights: The interested party may exercise the rights of access, rectification, deletion, to request that the processing of their personal data be limited, to oppose the processing, to request portability, to not be subject to profiling or automated individual decisions and to revoke the consent given without retroactive effect, by sending a written communication to the address of the responsible party, providing the ID card or official document proving the identity of the interested party, indicating the request or right being exercised.

The data subject may file a complaint with the Spanish Data Protection Agency through the website www.agpd.es.

The full text of the data protection policy, with the rest of the information of article 13 of the RGPD, can be consulted on the following website: https://aritmos.com/politicas-de-privacidad/.

h. Contacts through the web form

Identity of the responsible: Informàtica del Segre S.L. with address in Polígon Activa Park, street Térmens, number 8, C.P. 25190, telephone 973 188 300 and e-mail seguridad@aritmos.com.

The purpose of the treatment: the attention of the consultations and requests of contact of the user received through the web, the management of the requested service and to give answer to the same ones.

The legitimacy of the treatment: the consent given by the user to the responsible by clicking on the corresponding box.

Data collected: name, phone, email, inquiry, IP address, operating system and duration of visit.

Recipients: In general, the data controller will not transfer personal data to third parties, unless there is a legal obligation or we have the express consent of the data subject.

Specifically, personal data may be transferred to:

a. Public Administrations, Judges and Courts for the fulfillment of the legal obligations to which the responsible party is subject due to its activity.

b. To financial institutions for the fulfillment of the obligations arising from the contract between the person in charge and the interested party.

c. To third parties in all those cases in which it is necessary for the development, fulfillment, execution and control of the contract between the person in charge and the interested party.

d. To data processors, access which in no case will involve a transfer of data, when it is necessary to access your personal data for the provision of services that the data controller has contracted with such data processors, and with which it has signed a data processor contract.

Retention periods: the data controller will process personal data only for the time necessary to carry out the purposes for which they were collected, as long as the consent granted is not revoked. Once the relationship has ended, the information will be kept blocked for the legally established periods that are necessary for the formulation, exercise or defense of possible claims and then proceed to its deletion, unless there is a cause for conservation.

Rights: The interested party may exercise the rights of access, rectification, deletion, to request that the processing of their personal data be limited, to oppose the processing, to request portability, to not be subject to profiling or automated individual decisions and to revoke the consent given without retroactive effect, by sending a written communication to the address of the responsible party, providing the ID card or official document proving the identity of the interested party, indicating the request or right being exercised.

The data subject may file a complaint with the Spanish Data Protection Agency through the website www.agpd.es.

The full text of the data protection policy, with the rest of the information of article 13 of the RGPD, can be consulted on the following website: https://aritmos.com/politicas-de-privacidad/.

i. Newsletter

Identity of the responsible: Informàtica del Segre S.L. with address in Polígon Activa Park, street Térmens, number 8, C.P. 25190, telephone 973 188 300 and e-mail seguridad@aritmos.com.

The purpose of the treatment: The remission of information, news, reminders and promotions that may be of interest, related to the activities of the responsible.

The legitimacy of the processing: provision of the data subject’s consent.

Data collected: e-mail address, name and surname.

Recipients: In general, the data controller will not transfer personal data to third parties, unless there is a legal obligation or we have the express consent of the data subject.

Specifically, personal data may be transferred to:

a. Public Administrations, Judges and Courts for the fulfillment of the legal obligations to which the responsible party is subject due to its activity.

b. To financial institutions for the fulfillment of the obligations arising from the contract between the person in charge and the interested party.

c. To third parties in all those cases in which it is necessary for the development, fulfillment, execution and control of the contract between the person in charge and the interested party.

d. To data processors, access which in no case will involve a transfer of data, when it is necessary to access your personal data for the provision of services that the data controller has contracted with such data processors, and with which it has signed a data processor contract.

Retention periods: the data controller will process personal data only for the time necessary to carry out the purposes for which they were collected, as long as the consent granted is not revoked. Once the relationship has ended, the information will be kept blocked for the legally established periods that are necessary for the formulation, exercise or defense of possible claims and then proceed to its deletion, unless there is a cause for conservation.

Rights: The interested party may exercise the rights of access, rectification, deletion, to request that the processing of their personal data be limited, to oppose the processing, to request portability, to not be subject to profiling or automated individual decisions and to revoke the consent given without retroactive effect, by sending a written communication to the address of the responsible party, providing the ID card or official document proving the identity of the interested party, indicating the request or right being exercised.

The data subject may file a complaint with the Spanish Data Protection Agency through the website www.agpd.es.

The full text of the data protection policy, with the rest of the information of article 13 of the RGPD, can be consulted on the following website: https://aritmos.com/politicas-de-privacidad/.

j. Social Networking

Identity of the responsible: Informàtica del Segre S.L. with address in Polígon Activa Park, street Térmens, number 8, C.P. 25190, telephone 973 188 300 and e-mail seguridad@aritmos.com.

The purpose of the processing: registration and monitoring of the corporate accounts of the social networks of the responsible party.

The legitimacy of the treatment: the consent given by the user when registering in the social network.

Data collected: personal data provided by the user or the social network when becoming a follower of the same, such as name, surname, ID number, address, email address and contact telephone number.

Recipients: In general, the data controller will not transfer personal data to third parties, unless there is a legal obligation or we have the express consent of the data subject.

Specifically, personal data may be transferred to:

a. Public Administrations, Judges and Courts for the fulfillment of the legal obligations to which the responsible party is subject due to its activity.

b. To financial institutions for the fulfillment of the obligations arising from the contract between the person in charge and the interested party.

c. To third parties in all those cases in which it is necessary for the development, fulfillment, execution and control of the contract between the data controller and the data subject.

d. To data processors, access which in no case will involve a transfer of data, when it is necessary to access your personal data for the provision of services that the data controller has contracted with such data processors, and with which it has signed a data processor contract.

Retention periods: the data controller will process personal data only for the time necessary to carry out the purposes for which they were collected, as long as the consent granted is not revoked. Once the relationship has ended, the information will be kept blocked for the legally established periods that are necessary for the formulation, exercise or defense of possible claims and then proceed to its deletion, unless there is a cause for conservation.

Rights: The interested party may exercise the rights of access, rectification, deletion, to request that the processing of their personal data be limited, to oppose the processing, to request portability, to not be subject to profiling or automated individual decisions and to revoke the consent given without retroactive effect, by sending a written communication to the address of the responsible party, providing the ID card or official document proving the identity of the interested party, indicating the request or right being exercised.

The data subject may file a complaint with the Spanish Data Protection Agency through the website www.agpd.es.

The full text of the data protection policy, with the rest of the information of article 13 of the RGPD, can be consulted on the following website: https://aritmos.com/politicas-de-privacidad/.

k. legal notice e-mail

This message and its attachments are addressed exclusively to the addressee, it contains confidential information that constitutes a trade secret (law 1/2019, trade secrets), information that the person responsible has an interest in protecting, so its disclosure is legally prohibited. If you are not the addressee, you have received it by mistake or you are not authorized, please know that you cannot read, copy, save, disclose or make use of it, so please notify as soon as possible to seguridad@aritmos.com or forward it to the sender’s address, and then proceed to delete the mail and its attachments without reading them. Violation of this notice may involve the commission of a crime of disclosure of secrets of Article 197 and following of the Penal Code (Law 10/1995).

In accordance with the regulations on the protection of personal data, we inform you that the personal data collected or generated during communication with the data controller, such as the e-mail address and any other information contained therein, will be processed by the data controller for the purpose of handling your request, both within the framework of a business relationship (contractual obligation) or potential relationship, as well as in the event of receiving an e-mail spontaneously on your part (legitimate interest). The data will be kept for as long as the relationship remains in force and thereafter for as long as there are legal or contractual liabilities. You may exercise your rights of access, rectification, deletion, limitation, portability and opposition at the address of the data controller. For more information you can review the data protection policy on this website: https://aritmos.com/politicas-de-privacidad/

5. Security measures

The responsible has implemented the appropriate technical and organizational measures to ensure an adequate level of security, as well as to prevent the loss, misuse, alteration and unauthorized access of the data provided by the user.

6. Quality and updating of personal data

We inform you that it is mandatory that you provide us with the personal data we request, since the consequence of not doing so is that we will not be able to process your personal data.

The user is also obliged to ensure that the data provided to the data controller are current, real and true, and therefore, to inform the data controller of any update or modification of the same.

If the user communicates personal data of a third party, he/she is obliged in advance to inform him/her in accordance with the terms of articles 13 and 14 of the GDPR, to obtain his/her prior, express and written consent and to process the data for the purposes authorized by the third party.

The User is solely responsible for any damage or harm caused to the responsible party or third parties by the processing of personal data of a third party, or their own when it is false, erroneous, not current, inadequate, excessive or irrelevant.

7. Minors

The contents of this website are intended for people of legal age, so people under 18 years of age are not allowed to provide us with personal data.

8. Modification of the Data Protection Policy

The responsible party may update or modify the data protection policy at any time, according to the applicable legislation, jurisprudential developments or business practice, by publishing the modification of the same on this website.

Version 8, publication date April 2021

All rights reserved © Informàtica del Segre, S.L. 2021, Lleida