Who is the Processing Controller?

The personal data that as the case may be are furnished will be processed by POP IN GROUP, S.L. (hereinafter, POPIN_), whose contact data are the following:

Registered office: Calle Colombia, 64, 5A (Madrid)

Tax Identification Code: B-85166338

Email for data protection purposes: rgpd@popingroup.com

For what purpose do we process the data? What data do we process? Why do we process the data? And… Until when will we process the data?

These personal data will be processed for different purposes, depending on the reason why they were furnished and of the relationship existing with POPIN_, as the case may be.

Thus, we shall use the data to:

1.Manage the trade relations between POPIN_ and its customers or suppliers.

If you are a customer or supplier of POPIN_, your data will be processed to manage the relationship. Both parties need the data to be able to communicate and get information on the procedures used by each party in the regular performance of their activities.

In such case, that is, whether you are a customer of POPIN_ or a service provider, the data processed by POPIN_ are all identification related (name, surname(s), postal address, electronic mail, postcode, telephone no. …).

Specifically, the data from customers of POPIN_ shall be used:

1. To contact you in cases where there is an incident or an important communication regarding the services you contracted, as the case may be.
2. To send out surveys to find out about your degree of satisfaction with POPIN_, with the goal of improving its services.
3. Unless the customer states otherwise, to send information on products similar to those that were contracted.

The legal grounds for the data processing specified in section a) lie in the execution of the contract existing between the parties (contract for the provision of services). The legal grounds for the processing in sections b) and c) are the legitimate interest of POPIN_ and, specifically in the case of section c), what is established in article 21.2 of the Information Society and Electronic Commerce Services Act (LSSI).

Your data will therefore be conserved for as long as the trade relationship between the two parties remains in force.

If you are a customer of ours, we shall process your data during the time necessary to manage the advisory services provided to you.

We also inform you that said data may be disclosed to third parties involved in the development of the existing relationship for the exclusive purpose of their being able to correctly execute the functions entrusted to them (technology service suppliers, suppliers of and collaborators in marketing and advertising services) and during a strictly necessary period to perform their task, and the data will not be processed or conserved by them beyond what is defined herein.

2.Reply to queries, applications or requests by users that are sent via the contact email furnished on the Website (info@popingroup.com) and subsequently monitor those replies.

In other words, if you wish to contact us to make a query or request and you send us an email to the address info@popingroup.com, your data (the identification data that, as the case may be, you furnish us with via the email and address from which you are writing to us) will be processed by POPIN_ with the purpose of replying to your request or query.

Obviously, we would not have your data and would not be able to answer you if you had not written to us first, therefore the basis of the consent to carry out this processing is the very consent you gave us by voluntarily contacting us.

In any event, these data will be conserved by POPIN_ during the necessary time to reply to your application or query and to close the matter altogether. Subsequently, if within a term of two months following our reply to the contact has not led to a trade relationship between us, the data will be erased.

3.Manage user participation in applicant selection processes when they have sent a résumé to POPIN_ using the email provided for that purpose on the Website (rrhh@popingroup.com).

In this case, aside from the identification data on the résumé and in the email address used to send it, the academic and professional data included there will also be processed: training/degrees, student history, job experience, membership in trade associations…

Said data will be processed as indicated by POPIN_, because the very act of sending a résumé sets forth your express consent. Now you may withdraw your consent at any time, but in that case, we shall not be able to consider your résumé as an applicant in our hiring procedures.

In any event, if unfortunately, we have not contacted you to join our team and two years elapse since you sent us your résumé, we shall erase your data as indicated by the laws in force.

 

4. Comply with the legal obligations applying to POPIN_, as well as conducting statistical studies allowing us to design improvements in the services we provide.

 

5. Manage the use of the Website and carry out statistical analyses on browsing on the Website as provided in our Cookie policy.

On some occasions, POPIN_ may receive a user’s IP address. The IP address is a code that identifies a user’s connection to the internet at a concrete moment (this IP address may be static (always the same) or dynamic (it varies depending on each moment). In any event, said datum does not allow the user to be identified as such, because that code does not identify the holder of said IP address. In principle, only the user’s internet access provider would be able to identify the holder of an IP address, so for POPIN_ this will always be anonymous information.

POPIN_ will always conserve your data during the time that is strictly necessary to comply with each of the functions that have been determined. Once these periods end, your data will be conserved and duly protected during the time in which any liabilities deriving from the processing may arise, in compliance with the regulations in force from time to time. Once the time elapses for any possible legal action, we shall erase your data.

POPIN_ does not send advertising-related commercial communications on its services by way of a Newsletter. In any event, if at any time POPIN_ decides to send out a Newsletter, it would do so in conformity with what is established in the laws in force, and it would only send it to users who expressly requested to receive it.

Also, POPIN_ informs that its social media will be used to publish events, campaigns or any other types of advertising information on the services it provides or the actions it carries out, and the user accepts to become a recipient of said information solely due to their being a “friend” or “follower” of POPIN_ on social media.

If you do not wish to receive this information in your social media profiles, we advise you to “unfollow” us.

 

Where do we store your data?

The personal data that are furnished will be stored using the adequate protection guarantees required by the applicable regulations.

 

What rights do you have regarding the processing of your data?

According to the provisions in the General Data Protection Regulation, as the user and holder of the data being processed by POPIN_, you may:

• access your personal data.
• request the rectification of your inexact data.
• request the erasure of your data and exercise your right to be forgotten.
• request the limitation of processing of your data.
• object to the processing of your data.
• request the portability of your data.
• file a complaint with the Spanish Data Protection Agency, if you consider that the processing of your personal data is not suited to the regulations or if you are unable to exercise any of your rights (aepd.es).

Users may exercise all these rights by writing to the registered office of POPIN_ included in this document or by sending an email to rgpd@popingroup.com, stating the reason for their request and attaching a copy of their Spanish ID Card or any other identification document that is valid for this purpose.

Users are responsible for the information that they provide to POPIN_, through any means provided for the purpose, being true. For the purpose herein, users shall be answerable for the truthfulness of all the data they communicate and shall keep the information they furnished conveniently updated, such that it always reflects their actual situation. Users will be liable for any false or inexact information they provide and for any damages caused by this to POPIN_.

If users decide to furnish the personal data of third parties, they undertake, under their sole responsibility, to obtain beforehand the third party’s consent for their data to be processed by POPIN_ and shall have informed them beforehand of all the provisions in article 14 of the General Data Protection Regulation.

 

What security measures do we apply to protect your data?

POPIN_ will never share the personal data furnished by users with third parties without first having obtained the consent of the holder of the data unless there is a legal obligation to do so.

POPIN_ shall guarantee the security and confidentiality of the personal data furnished to it. For such purpose, POPIN_ has implemented technical and organizational security measures that are necessary to prevent the unauthorized alteration, loss, processing, or access, in accordance with what is established in the applicable regulations.

POPIN_ shall apply the following principles to the processing of your data:

• Principle of lawfulness, loyalty, and transparency: POPIN_ shall request consent for the processing of the personal data of users by informing in a clear and transparent manner of the specific purposes for which they will process the data, providing any other information required by the regulations.
• Principle of data minimization: POPIN_ shall only request and process the personal data that are strictly necessary in relation to the purposes for which they are requested.
• Principle of limitation of the conservation period: the data shall be maintained during no more than the time necessary for the processing purposes, according to that purpose. POPIN_ shall inform about the applicable conservation period in each case.
• Principle of integrity and confidentiality: the user’s data shall be processed guaranteeing adequate security and confidentiality.

Modification of the Privacy Policy

POPIN_ reserves the right to modify this policy in order to adapt it to new developments in the fields of legislation and case law, and to practice or decisions adopted by the Spanish Data Protection Agency or the Article 29 Working Party of the European Data Protection Board. In such cases, POPIN_ will announce, on its website or by the means it considers most appropriate, any changes that are introduced. In any event, we advise you to revise this policy, which is permanently available on our website, every time you visit.