In line with the principles of lawfulness, fairness and transparency, we make this Privacy Policy available to you.
Controller of your personal data
Identity of the Controller: MAV-VERGEZ CONSULTING, S.L.
Trading name: Vérgez Consulting
NIF/CIF: B56810492
Address: Cavanilles, 5 5 A, 28007 Madrid, Spain
Email: maria@vergezconsulting.com
Activity: Consultancy specialising in children’s rights
Registration details: Commercial Registry, Volume 46104, Folio 151, Sheet M-810067, first registration.
For what purpose do we process your personal data?
At Mav-Vergez Consulting, S.L., depending on the category of data subject concerned, we process the information you provide us with for the following purposes:
| Data subjects | Processing purposes |
|---|---|
| Potential clients | To manage the potential commercial and/or professional relationship, manage the sending of requested information and/or respond to queries, and provide offers of our services and/or products of interest to you. |
| Clients | To manage the commercial and/or professional relationship and provide offers of our services and/or products of interest to you. |
| Suppliers | To manage the commercial and/or professional relationship. |
| Candidates | To manage the recruitment process. |
What is the lawful basis for the processing of your data?
The lawful basis for the processing of your personal data, depending on the category of data subject concerned, may be:
| Data subjects | Lawful basis |
|---|---|
| Potential clients | Art. 6.1.b GDPR: application, at the data subject’s request, of pre-contractual measures (quotations, engagement letters, service offers, etc.).Art. 6.1.f GDPR: legitimate interest (sending requested information, responding to queries, etc.).Art. 6.1.a GDPR: consent of the data subject (provision of offers of our services and/or products). |
| Clients | Art. 6.1.b GDPR: performance of a contract to which the data subject is a party. |
| Suppliers | Art. 6.1.b GDPR: performance of a contract to which the data subject is a party. |
| Candidates | Art. 6.1.a GDPR: consent of the data subject. |
The data we request from you are adequate, relevant and strictly necessary, and you are under no obligation to provide them, but failure to do so may affect the purpose of the service or make it impossible to provide.
For how long will we retain your personal data?
Your data will be retained for the minimum time necessary for the proper provision of the service offered, as well as to address any responsibilities that may arise from it and any other legal requirement.
To which recipients will your data be disclosed?
Mav-Vergez Consulting, S.L. will not disclose your data to any third party unless you are expressly informed of this.
In addition, we inform you that certain data, by virtue of current legislation or the contractual relationship you have with Mav-Vergez Consulting, S.L., may be disclosed to:
- Banks and financial institutions for the collection of contracted services and/or purchased products.
- Public administrations with competence in the sectors of activity of Mav-Vergez Consulting, S.L., when so established by current legislation.
Are international data transfers carried out?
Data may be transferred to Microsoft Inc. for the OneDrive cloud system and to Google LLC for the “Jamboard” service. However, to ensure the security and confidentiality of the data, appropriate measures have been adopted by means of an adequacy decision. You may request further details by writing to maria@vergezconsulting.com.
We use WhatsApp as a means of contact with our clients, which results in an international data transfer, as regulated in its privacy policy (link to WhatsApp’s privacy policy: https://www.whatsapp.com/legal/updates/privacy-policy-eea/). The safeguard used for these transfers is the use of standard contractual clauses, as indicated in the aforementioned privacy policy. Using WhatsApp as a means of contact implies acceptance of that privacy policy.
What are your rights when you provide us with your data?
The data protection rights that data subjects may exercise, where applicable, are:
- Right to request access to personal data relating to the data subject.
- Right to rectification or erasure.
- Right to object.
- Right to request the restriction of processing.
- Right to data portability.
- Right not to be subject to decisions based solely on automated data processing.
Holders of the personal data obtained may exercise their data protection rights by sending a written communication to the registered office of Mav-Vergez Consulting, S.L. or to the email address provided for this purpose: maria@vergezconsulting.com.
Templates, forms and further information on your rights are available on the website of the national supervisory authority, the Spanish Data Protection Agency (Agencia Española de Protección de Datos, “AEPD”), www.aepd.es.
Can I withdraw my consent?
You have the right and the possibility to withdraw your consent for any specific purpose given at the time, without this affecting the lawfulness of the processing carried out on the basis of the prior consent before its withdrawal.
Where can I lodge a complaint if I consider that my data are not being processed correctly?
If any data subject considers that their data are not being properly processed by Mav-Vergez Consulting, S.L., or that requests to exercise their rights have not been satisfactorily addressed, they may lodge a complaint with the relevant data protection authority. In national territory, this is the AEPD, www.aepd.es.
Security and updating of your personal data
With the aim of safeguarding the security of your personal data, we inform you that all the technical and organisational measures necessary to ensure the security of the personal data provided have been adopted. This is to prevent its alteration, loss, and/or unauthorised processing or access, as required by current legislation, although absolute security does not exist.
It is important that, so that we can keep your personal data up to date, you inform us whenever any modification of it occurs.
Confidentiality
Mav-Vergez Consulting, S.L. informs you that your data will be treated with the utmost care and confidentiality by all personnel involved in any of the processing stages. We will not transfer or disclose your data to any third party, except in cases legally provided for, or unless the data subject has expressly authorised us to do so.