Legal Notice

1.- DATA CONTROLLER

Who is the data controller and how can you contact them?

DOCUGESTIO, S.L., commercially known as DOCUGESTIO, is a Spanish commercial company, registered in the Commercial Register of Lleida, Volume 427, Page 187, Sheet L-8003; with CIF B25367889; with its registered office located at Avinguda de Blondel, 11, 1st Floor, 25002 Lleida, Spain; telephone 973 20 13 00; email docugestio@docugestio.es

2.- PURPOSE.

What personal data do we collect?

Article 4 of the GDPR defines personal data as any information relating to an identified or identifiable natural person, in this case, the applicant for information.

Thus, both the data collected by DG, as well as any data that may be generated, collected, or provided throughout the relationship with applicants and/or clients, are those necessary and essential for the provision of our services, in development of DG’s corporate purpose and in accordance with the principle of data minimization.

In this regard, we collect: First and Last Name*; and Email Address*, as well as any other data that may be necessary for the execution of the professional services contract.

Please note that no inquiry can be processed without providing the aforementioned data marked with an asterisk.

What are the data used for?

• Your data will only be used to respond to your inquiry and to proceed with the provision of the requested services.

• They may also be used for the following purposes:

• Conduct statistical analysis and market studies to help improve our services and technology

• Manage the maintenance, development, control, and provision of any DG services.

• Identify, prevent, and detect fraud and/or money laundering and combat them.

• Perform checks and legislative updates.

How long will the data be kept?

Your data will be retained for as long as necessary to resolve your inquiry or request, as applicable, for the duration of the management process. In any case, they will be kept for a maximum period of two years from the date of receipt.

Once this period has passed, and if no longer necessary for the execution of the request, your data will only be properly blocked in accordance with Article 32 of the LOPDGDD (Spanish Data Protection Law), and stored and/or kept for potential judicial and/or police requirements for the time established by applicable regulations, and for a maximum period of ten years from the date of the request, in accordance with anti-money laundering regulations.

In the event that the user and/or client withdraws their consent for processing or requests the cancellation of the data, DG will block the requested data and only retain it in compliance with applicable legislation.

In any case, DG will delete personal data without undue delay when it is no longer necessary for the purposes for which it was collected or processed, in accordance with the principle of data retention limitation.

3.- LEGAL BASIS.

What legal basis do we have to process the data you have provided?

In accordance with Article 6.1 of the GDPR, the legal basis that justifies the lawfulness of the processing is the consent voluntarily given by the data subject in a free, specific, informed, and unambiguous manner, at the time of accepting this Privacy Policy, as well as the execution of the potential professional services contract within the framework of an assignment and the legitimate interest of the data controller in the event of any claims arising from it.

It should be noted that Article 4.11 of the GDPR establishes that consent for data processing is defined as “any indication of will, free, specific, informed, and unambiguous, by which the data subject accepts, either by a statement or a clear affirmative action, the processing of personal data concerning them.”

Taking the above into account, the applicant and/or client, by accepting this Privacy Policy, is making a positive action that explicitly expresses their consent, thereby accepting the Privacy Policy and the lawfulness of the processing of their data for the purposes outlined above.

How do we obtain consent?

Applicants on DG’s website and its clients freely and voluntarily consent to the processing of their data provided to DG, by entering the data in the designated form to manage inquiries or by signing the corresponding engagement letter, expressly accepting this Privacy Policy as outlined in the previous section. In doing so, the data subject has been specifically, unambiguously, and properly informed of their rights and obligations.

How can consent be revoked?

Every applicant has the right and the ability to withdraw their consent for the processing of their personal data, without affecting the lawfulness of any processing carried out prior to the withdrawal based on the consent given before its withdrawal.

4.- RECIPIENTS.

The data collected by DG through the applicant form will not be transferred to any third party, except to collaborating professionals within the framework of a duly formalized assignment.

5.- RIGHTS.

What rights do you have regarding your personal data?

Right of Access:

This is the right to obtain information about your own personal data. Specifically, exercising this right allows you to: know if your data is being processed, the purpose of the processing, the source of the data, and any communications made or planned regarding this data.

Right of Rectification:

This is the right granted by the GDPR to individuals to request that DG correct any data that is inaccurate or incomplete in its files.

Right of Erasure (Right to be Forgotten):

This is the right to have data erased when it is deemed inadequate or excessive.

Right of Opposition:

This is the right to request that DG no longer process your personal data or cease processing it, unless there are overriding legitimate reasons or in cases where consent is not necessary for processing, such as in commercial prospecting files or when data is used solely for automated decision-making based on the processing of your data.

Right of Limitation:

This is the right of the data subject to request the suspension of their data when:

– The accuracy of the data is disputed

– While the right of opposition is being resolved

– For the formulation, exercise, or defense of claims.

Right to Data Portability:

This is the right to request and receive the personal data provided to DG in a structured, commonly used, and machine-readable format.

Right to Deletion or Right to be Forgotten:

This is the right to prevent the dissemination of personal information online when its publication does not meet the requirements of adequacy and relevance as outlined in the regulations.

In addition to the above rights, you also have the following rights:

To file a complaint with the Control Authority if you believe that the processing of your personal data does not comply with the provisions of the Regulation.

To withdraw consent, i.e., to request that DG no longer process your data, with the understanding that exercising this right will not affect the lawfulness of any processing that took place prior to its withdrawal. This right cannot be applied to data already processed, only to future processing or treatments.

To better understand the content of the above rights, you can visit the Spanish Data Protection Agency (AEPD) website at https://www.aepd.es/es/derechos-y-deberes/conoce-tus-derechos

, where you can also access the models for exercising these rights as described in the aforementioned link.

.

How can you exercise your rights?

To exercise the rights described above, which you are entitled to under the GDPR, please send:

A written communication to the file controller’s address: DOCUGESTIO, S.L., Avinguda de Blondel, 11, 1st Floor, 25002 – Lleida

An electronic communication to the file controller’s email address: docugestio@docugestio.es , indicating in the subject line of the email the phrase “Exercise ARCO Rights / LOPD.”

In both cases, you must attach a copy of your ID card or an equivalent identification document, or, if applicable, proof of the requested change or correction, in order to process your request.

6.- SOURCE.

It is reiterated in this section that DG does not process any specially protected data, and only data as outlined in section two of this Privacy Policy will be processed.

Cookies

We use our own and third-party cookies to improve our services, for statistical purposes, and to display advertising related to your preferences based on your browsing habits. For more information about cookies and to configure your browser and/or delete them, you can click on the following link from the Spanish Data Protection Agency.

http://www.agpd.es/portalwebAGPD/canaldocumentacion/publicaciones/common/Guias/Guia_Cookies.pdf

Responsibilities

By making this site available to the user, we aim to offer a wide range of quality content, using technological means with the utmost diligence. However, we will not be responsible for the presence of viruses or other elements that may damage the user’s computer system. Additionally, we inform you that Docugestio S.L. may provide access to other websites through links. The purpose of these links is solely to facilitate your search for resources that may interest you on the Internet. However, these pages do not belong to Docugestio S.L., and although Docugestio has reviewed their lawful content on the day the link was published on its website, it is not responsible for their content, the operation of the linked page, or any potential damages resulting from access to or use of the linked page.

The user is prohibited from taking any action on our portal that would cause excessive strain on the operation of our computer systems, such as introducing viruses, installing robots, or software that alters the normal functioning of our website or could cause damage to our computer systems.

The user is fully aware that merely browsing this website, as well as using its services, implies acceptance of these terms of use.

Everything related to our website is exclusively governed by Spanish law. In the event of any discrepancy or difference between the parties regarding the interpretation and content of this website, all parties submit, with express waiver of any other jurisdiction, to the courts and tribunals of Lleida.