Privacy policy

1. Data controller

2. Purposes and legal basis

You may withdraw your consent at any time and free of charge by writing to [email protected], without affecting the lawfulness of processing carried out before its withdrawal.

3. Data we process

Depending on the purpose, VOTTUN may process, among others, the following categories of data:

• Identification and contact data: first name, surname(s), address, email, phone number, national ID (DNI) or similar document, IP address.
• Professional data: company, department, position and duties.
• Academic and professional data: career history, education, qualifications and assessments.
• Financial data for invoicing (bank account).
• Image: photographs and videos taken at activities and events organised by VOTTUN.

We also use data derived from the use and contracting of our products and services to analyse how they perform.

4. Obligation to provide data

The website forms indicate which fields are mandatory. If they are not provided, VOTTUN will not be able to handle the request.

5. Data retention

We keep data only for as long as necessary for the purpose for which it was collected and for as long as consent remains in force. Afterwards, we will keep it blocked for the legally required periods.

Application data is kept for one year from its last update and then deleted, unless you tell us otherwise.

6. Recipients

We do not disclose data to third parties except with prior information and express consent. Depending on the applicable regulations or the contractual relationship, data may be disclosed to:

• Competent public authorities, where required by law.
• State Law Enforcement Agencies (Fuerzas y Cuerpos de Seguridad del Estado), in accordance with the law.
• Banks and financial institutions, for the collection of payment for services.
• Other legal professionals, where required by law or for the performance of the contracted services.

7. International transfers

If we transfer data outside the European Economic Area, we apply the safeguards set out in Chapter V of the GDPR, such as standard contractual clauses or other appropriate mechanisms.

8. Your rights

You may exercise the following rights free of charge:

• Access: find out whether we process your data and obtain a copy.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask us to stop processing it, unless there is a legal obligation or legitimate grounds.
• Restriction: suspend the processing, keeping the data only for claims.
• Objection: object to the processing on grounds relating to your particular situation.
• Portability: receive your data in a structured format and transmit it to another controller.

Write to us at [email protected] or by post to Avenida Alcalde Barnils 64-68, mód. C1, Edificio Testa, 08174 Sant Cugat del Vallès (Barcelona), for the attention of customer management, providing proof of your identity.

If you are not satisfied, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001 Madrid · www.aepd.es).

9. Security

We apply the technical and organisational measures necessary to protect your data against unauthorised access, modification or disclosure, taking into account the state of the art, the nature of the data and the risks. Our providers are contractually bound to apply appropriate levels of security.

10. Changes to this policy

We may amend this policy to adapt it to the criteria of the supervisory authority or to legislative or case-law developments.