This privacy policy applies to the processing of personal data of clients and/or users of the website www.becad.org whose Controller of data processing is BECADI 2023 SL.
Confidentiality and data protection
This Privacy Policy provides information on the rights that assist you by virtue of the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT and of the COUNCIL, of April 27, 2016, relating to the protection of natural persons in regarding the processing of personal data and the free circulation of these data and repealing Directive 95/46/EC (General Data Protection Regulation) and the LOPD GDD 3/2018.
By providing us with their data, the client and/or user declares that they have read and are aware of this Privacy Policy, giving their unequivocal and express consent to the processing of their personal data in accordance with the purposes and terms expressed here.
BECADI 2023 SL may modify this Privacy Policy to adapt it to new legislation, jurisprudence or interpretation of the Spanish Data Protection Agency. These privacy conditions may be complemented by the Legal Notice and Cookies Policy that are collected for certain products or services.
Responsible for the treatment
The Data Controller is BECADI 2023 SL, with CIF or tax identification number B13989181, located at the following address Paseo Reina Elisenda de Montcada 11, 08034 Barcelona. You can contact us through our telephone number 964 729 688 or via email dpd@becad.org. Our entity is registered in the Mercantile Registry of Barcelona: Volume 48890, Folio 153, Section 8, Sheet B-599959, Registration 2nd.
Purpose
What will we use your personal data for?
At BECADI 2023 SL we will process your personal data to be able to interact with you and provide you with the services you have contracted from us. For more detail, we inform you below of the specific purpose for which we will process your personal data:
- Maintenance of the professional relationship and provision of the contracted service. Start the professional relationship with our client and provide consulting and training services on evaluation scales of human functioning and disability.
- Sending offers and promotions linked to our sector, provided you have given us your explicit consent. This advertising may be directed through digital means: email, WhatsApp, SMS, RRSS or any other electronic or physical means, present or future, that allows us to carry out commercial communications. This way we will update you with all our training events and news in this area that may be of interest to you.
- In turn, and if you have requested it through our link, we will send the online newsletter with news and updates on our products and services.</strong li>
- Preparation of a budget adjusted to your needs in accordance with your request received by any of the means made available to you on our website.
- Manage communications by email with interested parties who have contacted us so that we can clarify any questions about our services, prices or availability.
- Manage the payment for the purchase of our consulting services acquired through our online sales platform. In turn, we may send you communications in relation to your order: order confirmation, delivery date notification, delivery confirmation, or any follow-up necessary to complete the consulting service that you have contracted from us.
Why do we need to use your personal data?
Your personal data is necessary to be able to relate to you and provide you with the requested services:
- Provision and management of consulting and training services in evaluation scales of human functioning and disability, including the management of administration services that involve them: creation of the interview, previous and pilot studies, evaluations of capacity and performance, attention to queries, attention to incidents, etc.
- Billing, collection and accounting of our consulting services.
- The processing of data related to diagnosis or treatment is not planned. The data collected will be anonymized, collecting only age and gender data.
- In no case will we process data related to health. And images (photographs or videos) will not be collected or processed for medical or scientific dissemination purposes.
Your personal data is necessary to be able to interact with you and provide you with the requested services. The fields marked with an asterisk (*) in the contact forms made available to you are mandatory. We will not be able to provide you with an effective service if you do not authorize us to use them. To do this, we provide you with a series of consent boxes where you can freely, clearly and simply make a decision.
By checking the corresponding boxes and entering data in the fields, marked with an asterisk (*) in the contact form or presented in download forms, you expressly and freely and unequivocally accept that your data is necessary to respond to your request, by the provider, the inclusion of data in the remaining fields being voluntary. You guarantee that the personal data provided to the CONTROLLER are true and you are responsible for communicating any modification thereof.
The CONTROLLER informs that all data requested through the website are mandatory, since they are necessary to provide an optimal service to the USER. If all data is not provided, it is not guaranteed that the information and services provided are completely tailored to your needs.
What is the legitimacy for the processing of your data?
Depending on the purposes of collecting our data, the processing of your data is necessary:
- Manage the professional relationship that you have signed and contracted with us.
- Execution of a contract (enabled by article 6.1.b GDPR)
- Consent of the interested party (included by article 6.1.a RGPD)
- Sending commercial communications and newsletter
- Consent of the interested party (enabled by article 6.1. RGPD)
- Consent of the interested party (enabled by article 20 LSSICE)
- Legitimate interest (enabled by article 6.1.f GDPR)
- Making a budget adjusted to your needs.
- Execution of a contract and/or pre-contractual relationship (enabled by article 6.1.b RGPD)
- Manage email communications with interested parties.
- Consent of the interested party (included by article 6.1.a RGPD)
- Legitimate interest (enabled by article 6.1.f GDPR)
Likewise, all data collected is necessary for the provision of the service. However, those data that are marked with an asterisk (*) will be mandatory. In the event that the mandatory data is not provided, BECADI 2023 SL will not be able to provide you with the contracted service.
Recipients
Who will know the information we have requested?
Only our entity’s personnel, duly authorized, may have knowledge of the information we request.
No communication of personal data to third parties is planned except, if necessary for the development and execution of the purposes of the processing, to our service providers related to communications, with whom the CONTROLLER has signed confidentiality and data processing contracts. treatment required by current privacy regulations.
However, currently our website is hosted on OVH Cloud servers, managed by the company OVH Cloud España SL, whose servers are located within the European Union, (you can read its privacy policy by clicking here).
Likewise, those entities that need to have access to it so that we can provide our services may be aware of your personal information. Thus, for example, our bank will know your data if payment for our services is made by card or bank transfer. If you make a payment through our website in relation to the purchase of a product, then you are providing our third party payment processors (Stripe, bank, Paypal…) with your bank card details and other payment information with the in order to complete the transaction.
Likewise, those public or private entities to which we are obliged to provide your personal data in order to comply with any law will have knowledge of your information. Giving you an example, the Tax Law requires the Tax Agency to be provided with certain information on economic operations that exceed a certain amount.
In the event that, apart from the aforementioned assumptions, we need to disclose your personal information to other entities, we will previously request your permission through clear options that will allow you to decide in this regard.
Your data will not be transferred to any company. However, to have maximum transparency with you, we inform you that to send the commercial communications indicated above, we currently use the Mailrelay tool, you can consult its privacy policy by clicking here
How do we protect your personal data?
In accordance with the provisions of current regulations on the protection of personal data, BECADI 2023 SL is complying with all the provisions of the RGPD and LOPDGDD regulations for the processing of personal data under its responsibility, and manifestly with the principles described in the article. 5 of the RGPD, by which they are processed in a lawful, fair and transparent manner in relation to the interested party and adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
BECADI 2023 SL guarantees that it has implemented effective security measures based on the risks involved in the use of your information through appropriate technical and organizational policies established by the RGPD and the LOPDGDD in order to protect the rights and freedoms of USERS and has communicated the appropriate information to them so that they can exercise them.
BECADI 2023 SL has approved a Data Protection Policy and semi-annual compliance checks and annual audits are carried out to verify that your personal data is secure at all times.
Will we send your data to other countries outside the EU?
We inform you that your data will NOT be transferred internationally to any third country.
In the event that, in order to provide you with the service, it is essential to send your data to a country that is not as safe as Spain, we will always request your permission in advance and apply effective security measures that reduce the risks of sending your information. personnel to another country.
How long will we keep your personal data?
We will retain your data during our professional relationship and as long as we are required by current laws, in any case, no longer than necessary to maintain the purpose of the processing for which it was collected. Once the applicable legal deadlines have expired, they will be securely deleted with appropriate security measures to guarantee the anonymization of the data or the data will be completely destroyed.
Since a limitation on the retention period is not specifically specified in the RGPD or the LOPDGDD, it will be necessary to pay attention to the purpose for which the data was collected and the principle of proportionality, and, on the other hand, resort to other regulations to determine the retention periods of your personal data.
To have maximum transparency with you, we indicate that the general calculations with which we work are:
- Accounting and tax for commercial purposes: six (6) years.
- Labor or Social Security: four (4) years.
- Other clinical research data: minimum five (5) years from the consultation of each care process.
However, despite the existence of these general deadlines, we inform you that we will periodically review our systems to proceed to delete or eliminate data that is not legally necessary.
How have we obtained your data?
The personal data used by BECADI 2023 SL come from the interested party themselves.
What categories of data do we handle?
The categories of personal data that are processed:
- Identification data
- Name and surname
- DNI / NIE / Passport or equivalent document
- Postal and electronic addresses
- Date and place of birth
- Commercial information
- Economic data
- Bank account number
- Credit card number
BECADI 2023 SL NOT processes specially protected data.
Rights of interested parties
What are your data protection rights?
You can exercise any of your rights by writing to the email address listed in the “data controller” section.
You have the following rights recognized:
- Access
- Of rectification or deletion
- Opposition to treatment
- Data portability
You can contact us at any time to find out what information we have about you, rectify it if it is incorrect and delete it once our relationship ends, if this is legally possible.
You also have the right to request the transfer of your information to another entity. This right is called “portability” and can be useful in certain situations.
To request any of these rights, you must make a written request to our address, along with a photocopy of your ID, to be able to identify you.
In the offices of our entity we have specific forms to request these rights and we offer our help in completing them.
To learn more about your data protection rights, you can consult the website of the Spanish Data Protection Agency(www.aepd.es).
Can you withdraw your consent if you change your mind at a later time?
You can withdraw your consent if you change your mind about the use of your data at any time.
Thus, for example, if you were once interested in receiving advertising for our products or services, but you no longer wish to receive further advertising, you can let us know using the opposition to processing form available at the offices of our entity.
Control over data protection
Where can you make a complaint?
If you understand that your rights have been neglected by our entity, you can file a claim at the Spanish Data Protection Agency located at C/ Jorge Juan, 6. 28001 – Madrid. More information about the AEPD: https://www.aepd.es
LAST REVIEW: MAY 2024