Privacy Policy
GLAM SOFTWARE 2012, S.L. is committed to protecting the privacy of users who access this website and/or any of its services. The use of the website and/or any of the services offered by GLAM SOFTWARE 2012, S.L. implies acceptance by the user of the provisions contained in this Privacy Policy and that their personal data is treated as stipulated therein. Please keep in mind that although there may be links from our website to other websites or social networks, this Privacy Policy does not apply to the websites of other companies or organizations to which the website is redirected. GLAM SOFTWARE 2012, S.L. does not control the content of third-party websites, nor does it accept any responsibility for the content or privacy policies of these websites.
Basic information on data processing Regulation (EU) 2016/679
| Responsible for the treatment | GLAM SOFTWARE 2012, S.L. NIF: B55144273 C. Pic de Peguera, 11 (Ed. Giroempren B – 2.12), 17003 Girona Email: info@glamerp.com |
| Purpose of treatment | Offer, provide and invoice our management software development services. |
| Legitimation |
|
| Recipients | The data will not be communicated to third parties, unless required by law or necessary to fulfill the purpose of the processing. |
| People rights | Interested parties have the right to exercise their rights of access, rectification, limitation of processing, deletion, portability and opposition, by sending their request to our address. |
| Data retention period | As long as the business relationship is maintained or during the years necessary to comply with legal obligations. |
| Claim | Interested parties can contact the AEPD to present the claim they consider appropriate. |
| Additional Information | Additional detailed information can be found below in the “Privacy Questions”. Preguntas sobre privacidad |
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, (GDPR), we offer you the following information about the processing of your personal data:
Who is responsible for the processing of your data?
Identity: GLAM SOFTWARE 2012, S.L.
NIF: B55144273
Address: C. Pic de Peguera, 11 (Ed. Giroempren B – 2.12), 17003 Girona
Tel.: 972183310
Email: info@glamerp.com
For what purpose do we process your personal data?
- We process the information provided to us to provide and bill our management software development services.
- If you contact us through the contact form on our website, we will process them to manage your query.
- If you give us your consent, we may also process your data to send you information about our activities, products or services.
- If you send us a resume, we will process the data in order to manage the CV base for personnel selection.
How long will we keep your data?
- The personal data provided will be kept as long as you are a user of our services or want to receive information, and then, during the periods established to comply with our legal obligations.
- In the case of resumes, the data will be kept for one year.
What is the legitimacy for the processing of your data?
The legitimacy to process them is found in the execution of the service contract and in the consents you give us.
Regarding information that is sent by minors under 16 years of age, it will be an essential requirement that it be done with the consent of the parent, guardian or legal representative of the minor so that the personal data can be processed. If this is not the case, the legal representative of the minor will inform us as soon as he or she becomes aware of it.
To which recipients will your data be communicated?
The data will not be communicated to third parties, unless required by law or necessary to fulfill the purpose of the processing.
For the provision of domain registration services, you are informed that the data relating to the ownership of the registered domain name, administrative, technical and payment contacts, will be communicated to ICANN or other competent registration organization.
What are your rights when you provide us with your data?
- Anyone has the right to obtain confirmation as to whether or not we are processing their personal data.
- The interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. .
- In certain circumstances, interested parties may request the limitation of the processing of their data; in this case, we will only keep them for the exercise or defense of claims.
- Also, in certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. In this case we will stop processing the data, except for compelling legitimate reasons or for the exercise or defense of possible claims.
- Data subjects also have the right to the portability of their data.
- Finally, interested parties have the right to file a claim with the competent
- Control Authority.
How can you exercise your rights?
Sending a letter attaching a copy of a document that identifies you, to our physical or electronic address.
How have we obtained your data?
The personal data we process comes from the interested party himself. The interested party guarantees that the personal data provided is true and is responsible for communicating any modification thereof. The data marked with an asterisk will be mandatory in order to provide you with the requested service.
What data do we process?
The categories of data that we can process in the provision of our services are:
- Identification data
- Postal or electronic addresses
In the case of resumes, also:
- Personal characteristics
- Academics and professionals
In the case of domain registration:
- Data relating to the ownership of the registered domain name, administrative, technical and payment contacts.
The data is limited, since we only process the data necessary to provide our services and manage our activity.
Do we use cookies?
We use cookies while browsing our website with the user’s consent.
The user can configure their browser to be warned of the use of cookies and to prevent their use. Please visit our cookie policy.
What security measures do we apply?
We apply the security measures established in article 32 of the RGPD, therefore, we have adopted the necessary security measures to guarantee a level of security appropriate to the risk of the data processing we carry out, with mechanisms that allow us to guarantee confidentiality, integrity, permanent availability and resilience of treatment systems and services.
Some of these measures are:
- Information on data processing policies for staff.
- Making periodic backups.
- Data access control.
- Regular verification, evaluation and assessment processes.
How do we process data on behalf of third parties?
When in the provision of our services we process personal data for which our clients are responsible, we do so as data processors, in accordance with the provisions of article 28 RGPD and, therefore, in these treatments of the personal information:
a) We will process personal data only on documented instructions from the controller, including in relation to transfers of personal data to a third country or an international organisation, unless obliged under Union or Member State law in the that the manager is subject to. In this case, we will inform the controller of this legal requirement prior to processing, unless this law prohibits it for important reasons of public interest.
b) We guarantee that the persons authorized to process personal data have agreed to respect their confidentiality or are subject to a confidentiality obligation of a statutory nature.
c) We have adopted all the necessary security measures, in accordance with article 32 of the RGPD, having implemented mechanisms to:
- Guarantee the confidentiality, integrity, availability and permanent resilience of treatment systems and services.
- Restore availability and access to personal data quickly, in the event of a physical or technical incident.
- Verify, evaluate and assess, on a regular basis, the effectiveness of the technical and organizational measures implemented to guarantee the security of the treatment.
- Pseudonymize and encrypt personal data, if applicable.
d) We will respect the conditions indicated in sections 2 and 4 of article 28 of the RGPD to use another processor. In this sense, it is expressly stated that the Data Controller generally authorizes us to subcontract the contracted services. The data controller is informed that the companies with which he can subcontract hosting services are ARSYS INTERNET, SLU, SW HOSTING & COMUNICATIONS TECHNOLOGIES SL, and OVH HISPANO SLU.
We undertake to inform the data controller of any changes that are anticipated in the incorporation or replacement of other processors, giving him the opportunity to oppose these changes.
e) We will assist the person responsible, whenever possible, in accordance with the nature of the processing and through appropriate technical and organizational measures, so that they can comply with the obligation to respond to requests that aim to exercise the rights of the interested parties. established in Chapter III of the RGPD.
f) We will help the controller to guarantee compliance with the data security obligations established in articles 32 to 36 of the GDPR, taking into account the nature of the processing and the information made available to us.
g) At the controller’s option, we will delete or return all personal data upon completion of the provision of processing services and delete existing copies unless retention of personal data is required under Union or European Union law. Member states.
h) We will make available to the person responsible all the information necessary to demonstrate compliance with the obligations established in art. 28 of the GDPR, as well as to allow and contribute to the performance of audits, including inspections, by the controller or another auditor authorized by this controller.
The type of data that we will process will depend on the data that those responsible for the treatment want to process with our services. In general terms they can refer to:
- Identification data
- Personal characteristics data
- Academic and professional data
- Job Occupation Details
- Economic, financial and insurance data
- Commercial information
- Transactions of goods and services
The category of interested parties will depend on the type of treatment contracted. In general terms, the categories of interested parties are:
- Customers
- Potential customers
- Suppliers
- Staff
- Users
For its part, the treatments that we can carry out on behalf of those responsible for the treatment will depend on the contracted service. In general terms, the treatments can be:
- Organization
- Structuring
- Display
- Consultation
- Utilization
The client will be responsible for having obtained the personal data, which GLAM SOFTWARE 2012 S.L., treats as data processor, observing the legal requirements established in the regulations relating to the protection of personal data. GLAM SOFTWARE 2012 S.L., is not responsible for non-compliance, by the client, with the obligations derived from the RGPD and the rest of the regulations in force in the part that corresponds to its activity and that is related to the execution of the contracted services. or with any other commercial relationship with GLAM SOFTWARE 2012 S.L.
In the event that the services include Google’s G Suite product, Google will also process personal data on behalf of the Client, in accordance with its amendment to data processing.
"*" indicates required fields
