privacy policy

1. How do we collect personal data? What data do we process?

DATFOR collects information from Users when they use those Website functionalities that require the provision of certain personal data. Specifically, DATFOR will record the following information:

• “Request a demo” form and/or email communications: personal data (including, but not limited to, first name, last name, email address, and mobile phone number) voluntarily provided by the User through the form or by sending an email.

• Newsletter subscription and commercial communications: personal data (including, but not limited to, first name, last name, and email address) voluntarily provided by the User through the subscription form available on the Website.

• Registered User profile(s): personal data (including, but not limited to, first name, last name, email address, and mobile phone number) provided or updated by the User through the profile enabled on the Website.

The use of the various forms and/or functionalities available on the Website is voluntary. However, certain fields are required in order to properly process requests. Failure to provide the information requested in mandatory fields will prevent DATFOR from handling the User’s request.

2. For what purposes do we process your data?

The personal data provided by Users through the forms and functionalities available on the Website will be processed for the following purposes and legal bases:

• Consent of the data subject (Art. 6.1(a) GDPR)

• To manage and respond to requests submitted by Users through the “Request a demo” web form and/or by sending emails to the addresses provided on the Website.

• With the User’s prior authorization, to send newsletters and commercial communications by electronic means regarding the services offered by DATFOR.

• Performance of a contract (Art. 6.1(b) GDPR)
• To manage and maintain the legal relationship established between DATFOR and its clients.
• To allow access to the functionalities of the service plan contracted with DATFOR and to manage the registered User profile.
• Compliance with legal obligations (Art. 6.1(c) GDPR)
• To comply with the legal obligations applicable to DATFOR as a result of the processing activities described above.

3. To whom will we disclose your data?

As a general rule, DATFOR will not disclose personal data to third parties except where required to comply with legal obligations applicable to DATFOR.

Notwithstanding the foregoing, DATFOR may allow access to personal data to service providers contracted to support the operation of the Website or the functionalities offered through it. In all cases, DATFOR ensures that such entities provide appropriate guarantees to protect personal data in accordance with applicable legislation.

The engagement of these service providers may involve the transfer of personal data to companies located outside the European Union (EU), provided that appropriate international data transfer mechanisms or safeguards are implemented to ensure the protection of personal data.

In particular, DATFOR discloses personal data to the following entities (located outside the EU):

• Service portal development (data analytics platform)
  CARTO DB, Inc.
  307 Fifth Avenue, Floor 9
  New York, NY 10016, USA
  https://carto.com/legal/

• User authentication services (Auth0)
  Okta, Inc.
  100 First Street, Sixth Floor
  San Francisco, California 94105, USA
  https://www.okta.com/trustandcompliance/#dataprocessingaddendum

• Database storage and/or data analytics services within Google Cloud infrastructure (BigQuery, Cloud SQL, and Firebase)
  Google Ireland
  Gordon House
  Barrow Street, Dublin 4, Ireland
  https://cloud.google.com/terms/data-processing-addendum

4. How long will we retain your data?

Personal data will be retained by DATFOR as follows:

• “Request a demo” form and/or email communications: only for the time necessary to manage and respond to each specific User request.

• Newsletter and/or commercial communications: until the User withdraws the consent given to receive them.

• Registered Users: for the entire duration of the contractual relationship, in accordance with the relevant service agreement entered into between DATFOR and the User.

Once these periods have elapsed, Users’ personal data may be blocked and retained solely for the purpose of addressing potential liabilities arising from the processing, and only for the applicable statutory limitation periods. Once these periods have expired, the personal data will be deleted.

5. How can I update my personal data?

The User guarantees that the personal data provided to DATFOR through this Website are accurate, truthful, up to date, and complete. Registered Users are responsible for updating or modifying their data through their user profile using the editing options enabled by DATFOR at any given time.

6. What happens if I provide DATFOR with third-party data?

As a general rule, Users are prohibited from providing personal data relating to third parties. However, if a User provides personal data of third parties, the User must, prior to including or communicating such data to DATFOR, inform those individuals about the content of this Privacy Policy. The User guarantees that they have obtained the prior consent of such third parties for the communication of their personal data to DATFOR for the purposes set out in this Privacy Policy.

7. What are your rights?

Users have the right to withdraw their consent at any time. They may also exercise their rights of access, rectification, erasure, and data portability, as well as the rights to restriction of processing, objection to processing, and not to be subject to decisions based solely on automated processing, where applicable.

To exercise these rights, Users may contact DATFOR through the following channels, always enclosing a copy of their ID or another document proving their identity:

• By post: xxxx

• By email: info@datfor.com

If a User believes that a situation may constitute a breach of the applicable data protection regulations, they may file a complaint with the Spanish Data Protection Agency.

8. Updates and changes to the Privacy Policy

DATFOR reserves the right to make changes to this Privacy Policy. Any such changes will be communicated to Users through notices on the Website, by email, or by any other appropriate means depending on the circumstances.

Access to and use of the Website grants the status of User and implies knowledge of and acceptance of the conditions included in this Privacy Policy.