Privacy Policy

Data Controllers

PERSON RESPONSIBLE FOR THE PROCESSING: IT Event Services Spain, S.L.
TAX ID: B15653991
Address for the provision of services: C/Anabel Segura, 10, Edificio, 3º 28108 Alcobendas (Madrid)

E-mail for the exercise of rights: info@logievents.com

Purposes and legal bases

In addition to the basic information on data protection provided through each of the data collection channels, additional information is provided below on the purposes, legal bases and other information on the following files or processing operations:

Customers

Personal data will be processed for the purposes of accounting, tax, administrative and collection management and for the maintenance of the commercial relationship. The legitimate basis is the performance of a contract to which the data subject is a party, as well as compliance with legal obligations (art. 6.1.c) RGPD).

Potential customers

The purpose of the data collection is the assessment and forwarding of an offer according to the customer's needs. The legitimising basis is the application of pre-contractual measures.

Human resources

The data will be processed for the purpose of managing the relationship with the staff, which involves accounting, tax and administrative management; payroll management, training management; management of occupational risk prevention and time control, among others.

The legal basis that legitimises the processing is the performance of a contract to which the data subject is a party (art. 6.1.b) RGPD), as well as compliance with legal obligations (art. 6.1.c) RGPD).

Management of Curriculum Vitae

The data will be collected for the purpose of managing selection processes. The legitimate basis is the application of pre-contractual measures, if the selection process is called by the company, or consent if the delivery of the CV is voluntary and without prior call.

Suppliers

The data will be processed for the purpose of managing the contractual relationship, which involves accounting, fiscal and administrative management and the management of payment for services, among others. The legal basis that legitimises this processing is the performance of a contract to which the data subject is a party (art. 6.1.b) RGPD), as well as compliance with legal obligations (art. 6.1.c) RGPD).

Web users

Personal data will be processed for the purpose of managing contact requests, complaints, suggestions, claims. The legitimate basis is the consent of the data subject.

Data retention period

In addition to the basic information on data protection provided through each of the data collection channels, additional information is provided below on the purposes and legitimate bases of the following files or processing:

  • Customers: the data will be kept until the end of the contractual relationship and will be kept, duly blocked, during the periods of limitation of the liabilities that may be enforceable (6 years).
  • Potential customers: the data will be kept for 1 year.
  • Personal: the data will be kept until the end of the contractual relationship and will be kept, duly blocked, for the period of limitation of any liabilities that may be required (6 years).
  • Curriculum Vitae: the data will be kept for 1 year.
  • Suppliers: the data will be kept until the end of the contractual relationship and will be kept, duly blocked, during the periods of prescription of the responsibilities that may be enforceable (6 years).
  • Web users: the data will be kept for as long as their request (contact) is processed.


Profiling and international data transfers

Profiling and international data transfers will not be carried out.

Rights of data subjects

Data protection legislation grants a series of rights to data subjects or data subjects. These rights are as follows:

  • Right of access: the right to obtain information on whether their own data are being processed, the purpose of the processing being carried out, the categories of data being processed, the recipients or categories of recipients, the storage period and the origin of such data.
  • Right of rectification: the right to obtain the rectification of inaccurate or incomplete personal data.

Right of erasure: the right to obtain the erasure of data in the following cases:

  • When the data are no longer necessary for the purpose for which they were collected.
  • When the data subject withdraws consent.
  • When the data subject objects to the processing.
  • When the data must be erased in compliance with a legal obligation.
  • When the data have been obtained by virtue of an information society service on the basis of Art. 8(1) of the European Data Protection Regulation.

Right to object: the right to object to a specific processing operation.
Right of limitation: the right to obtain the limitation of the processing of data in the following cases:

  • When the data subject contests the accuracy of the personal data, for a period of time that allows the company to verify the accuracy of the data.
  • Where the processing is unlawful and the data subject objects to the erasure of the data.
  • When the company no longer needs the data for the purposes for which they were collected, but the data subject needs them for the formulation, exercise or defence of claims.
  • Where the data subject has objected to the processing while it is being verified whether the legitimate reasons of the company prevail over those of the data subject.

Interested parties may exercise the aforementioned rights by writing to the company at the following address: info@logievents.com, indicating in the subject line the right they wish to exercise, or if they prefer, send their request to the company's postal address. You can access the application forms of the Spanish Data Protection Agency.

In this regard, the entity will respond to your request as soon as possible and taking into account the deadlines established in the data protection regulations. On the other hand, it should be borne in mind that the data subject or data owner may at any time file a complaint with the Spanish Data Protection Agency www.aepd.es.

Security

The security measures adopted by the entity are those required in accordance with the provisions of article 32 of the GDPR. In this regard, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons, it has established the appropriate technical and organisational measures to ensure the level of security appropriate to the existing risk.

In any case, the entity has implemented sufficient mechanisms to:

  • Guarantee the permanent confidentiality, integrity, availability and resilience of the processing systems and services.
  • Restore availability and access to personal data quickly in the event of a physical or technical incident.
  • Regularly verify, evaluate and assess the effectiveness of the technical and organisational measures implemented to ensure the security of the processing.

Pseudonymise and encrypt personal data, where appropriate.