Data controller:
ID FINANCE INVESTMENTS, S.L. (hereinafter, IDFINANCE) with CIF: B66862442 and address at Calle Tuset 5-11, 3rd floor. 08006 – Barcelona, telephone number 934617231 and email: [email protected].
The purpose of this Privacy Policy is to provide information on the rights of both the User and the Visitor under the General Data Protection Regulation (“RGPD”) and Ley Organica 3/2018, of December the 5th, on the Protection of Personal Data and guarantee of digital rights (“LOPDGDD”).
Likewise, we inform you that IDFINANCE has a designated Data Protection Delegate with whom you can make contact through the following address ([email protected]).
What information is collected?
The data that we may collect about you through our forms are: name and surname, email address, mobile phone number, home address, ID card number, date of birth and other information contained in your CV such as academic record, professional career, recommendations, qualifications, skills, competences, etc., as well as information about your use and navigation of the website.
For what purpose is your personal data processed?
At IDFINANCE we want to be transparent and inform you about the processing we carry out with your data and the purposes for which we process such data.
1. Contact and Customer Service
i. Provide customer service by answering your questions and responding to your queries and requests for information.
2. Sending communications and information by electronic means
i. Sending communications in order to keep you informed about news related to IDFINANCE and its services.
3. Management of personnel selection processes
i. Process your job application, your participation in the personal selection processes and / or the sending of the CV by you as an applicant / candidate.
ii. Send you information by electronic or telephonic means about new selection processes, job opportunities and / or vacancies in IDFINANCE.
4. Complaints channel management
i. Processing the complaints received and investigating the veracity of the facts reported.
ii. Propose resolutions on communications and complaints related to possible criminal acts or regulatory and ethical breaches received through this channel.
iii. Inform you about the outcome of the procedure, as well as, where appropriate, adopt disciplinary measures and/or take legal or other appropriate actions before the corresponding bodies.
iv. Comply with other legal obligations applicable to IDFINANCE.
5. Maintenance of suppression lists to avoid being contacted
i. Maintain a deletion list with the confirmation of those users who have requested the deletion of their data or their opposition to the treatment thereof.
6. Analysis of use, operation and improvement of the website
i. Recognize your user when you access the web again.
ii. Adapt the web to the type of device used.
iii. Adapt the website to the personalization criteria chosen by the user and remember them.
iv. Study possible website improvements to optimize the usability experience and implement them.
How is your data collected?
We collect the data you provide us directly through the contact form, the form for sending your CV, as well as the complaints channel available on the IDFINANCE website.
How long is your data kept?
We inform you that we keep your personal data for a maximum period of twelve (12) months, in view of possible future selection processes, provided that you do not state otherwise or exercise your right of cancellation or become part of our workforce.
Subsequently, the personal data provided will be retained for the legally stipulated statute of limitation for actions that may arise. Once the maximum period of data retention is reached, IDFINANCE will anonymize or delete your personal data.
In relation to the data provided through the complaints channel, and in compliance with the provisions of article 24 of the LOPDGDD, they will be kept in the complaints system only for the time necessary to decide on the appropriateness of initiating an investigation into the reported facts.
In any case, after three (3) months from the introduction of the data, they will be deleted from the complaints system, unless the purpose of the conservation is to leave evidence of the functioning of the crime prevention model established by IDFINANCE. The reports that have not been followed up will be recorded in an anonymised form, without the obligation of blocking provided for in article 32 of the LOPDGDD.
What is the legitimacy for the processing of your data?
IDFINANCE will process your data based on the following lawful basis:
1) Consent.
Both the sending of communications and information by electronic means, and the management of personnel selection procedures are based on the consent that you are expressly requested to give by ticking the box on the forms on the website. We inform you that you can withdraw your consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
Consents may be revoked at any time by sending an email to [email protected].
2) Fulfillment of a legal obligation
The legal basis for the processing in the case of the management of the whistleblowing channel lies in compliance with a legal obligation laid down by Directive (EU) 2019/1937 of the European Parliament and of the Council of 23 October 2019 on the protection of persons reporting breaches of Union law, with the aim of becoming aware of possible criminal acts or regulatory and ethical breaches, as well as acts or conducts that could be contrary to the general or sectoral regulations that are applicable to IDFINANCE, pursuant to the provisions of article 24 of the LOPDGDD.
To which recipients will your data be communicated?
Your personal data may be communicated to third parties when such communication is necessary for the proper provision of their services, including:
– Entities of the IDFINANCE business group for internal administrative purposes.
– Judges and Courts, Public Treasury, Government and Public Administration Agencies, State Security Forces and Corps, etc. when there is a legal obligation.
– Data processors with whom IDFINANCE has signed the corresponding data processor agreements that include the due guarantees.
International transfers of your personal data may be made to IDFINANCE’s service providers. These providers may be located in states outside the European Economic Area. Where it has not been declared that they have a level of protection equivalent to that of the European level, IDFINANCE will adopt the corresponding standard contractual clauses.
IDFINANCE contracts its virtual infrastructure according to a Cloud Computing model through Amazon Web Services (AWS) whose servers are located within the European Economic Area.
IDFINANCE guarantees that the companies receiving your personal data have the same security measures and have signed the corresponding data processing agreements.
What automated decisions do we make about your personal data?
IDFINANCE does not make decisions that may significantly affect you based solely on the automated processing of your data. All the decision-making processes of our entity related to your candidacies are carried out with human intervention.
How do we protect your data?
IDFINANCE, with the aim of making this Data Protection Policy effective and efficient, has adopted the technical and organizational security measures that are required by current legislation on the protection of personal data.
All necessary means and mechanisms have been established to prevent the alteration, loss, misuse, unauthorized access or theft thereof, taking into account the state of technology. However, you should bear in mind that measures on the Internet, due to their naturalization and global nature, are not impregnable.
The data protection regulations grant data subjects the possibility of exercising a series of rights that allow them to guarantee and protect in a real and effective way their right to honor and personal and family privacy.
Which are your data protection rights?
We inform you that you can exercise the following rights:
1. Right of access to your personal data to know which are being processed and the processing operations carried out with them;
2. Right to rectification of any personal data that is inaccurate or incomplete;
3. Right to erasure of personal data, where possible;
4. Right to request the limitation of the processing of your personal data when the accuracy, lawfulness or necessity of the data processing is in doubt, in which case, we may retain the data for the exercise or defense of claims.
5. Right to object to the processing of your personal data, when the legal basis that enables us to process it is the legitimate interest. IDFINANCE will stop processing your data unless it has a compelling legitimate interest or for the formulation, exercise, or defense of claims.
6. Right to data portability, right of the interested party to receive personal data that concerns him, which he has provided to IDFINANCE, in a structured format, commonly used and machine-readable, and to transmit them to another data controller without being prevented from doing so by the data controller to whom he/she had provided it, provided that the conditions established in article 20 of the General Data Protection Regulation are met.
7. Right to revoke the consent given at any time to process your data, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
We remind you, by legal imperative, of your right to file a complaint with the Spanish Data Protection Agency, if you consider that the data processing is not in accordance with European regulations.
You can exercise your rights by sending an email to the email address [email protected].
This Privacy Policy may need to be updated; therefore it is necessary to review this policy periodically and if possible each time you access the Website in order to be adequately informed about the type of information collected and its processing. You can find the Privacy Policy at the bottom of the Website. However, we will inform you of any modification of this privacy policy that affects the processing of your personal data.
Last updated: Octubre de 2023