The Company treats the following personal data to which it has access by the following means:

When a User accesses any of the sections or subdomains of the Web platform, the Company collects the navigation data associated with each one of the Users. In such a way, all the actions carried out by the user within the website associated with the user ID, IP address, general information about the device and its operating system/browser, date and time, as well as the IDs of the rest of the elements associated with that action are collected.

The User can check our Cookie Policy through the Web at www.orderdata.com/cookies

When you send us a communication, we collect the metadata of the same (time and date of the call or e-mail, identity of the sender and receiver, technical data) and the data incorporated in any communication between the User and the Company.

When a data source of the Customer is integrated in our Data Plaform, we collect any personal data included in such data (as defined in the Terms of Use), which are processed by the company on behalf of the Customer.

In any case it is forbidden to provide the Company with any content that contravenes any prohibition and limitation established in the Terms & Conditions (in particular, but not limited to, the prohibition to use personal data -both of the User and of third parties- containing sensitive information relating to identifiable or identified persons, such as: racial origin; membership of a trade union; religion, ideology or sexual orientation; health data; or data relating to criminal records, procedures and sanctions or fines arising from these or from the non-compliance with monetary obligations).
‍
The user guarantees (a) the authenticity and veracity of all data (especially but not only those that are personal data) communicated through the web, (b) that the data shared by him is personal data and that it reflects his own image or a third interested party’s from which he has permission to use such data, (c) and that he will keep updated the information provided to the Company, so that it responds at all times to their real situation, him being the sole responsible for false or inaccurate statements made, as well as for the damage caused by it to the Company or any third party.

We will not treat your personal data for any other purpose than those described except by legal obligation or injunction. Your data will be kept for the duration of the commercial relationship between us or until you exercise your right of cancellation or opposition, or limitation to treatment. However, we will keep certain personal identification and traffic data for a maximum period of 2 years in the event that it is required by the Judges and Courts or to initiate internal actions arising from improper use of the website.

You will not be subject to decisions based on automated processing that produce effects on your data.

Likewise, we inform that our information retention policies comply with the terms established by the different legal responsibilities for the purpose of prescription:

By virtue of the specified on the article 30 of the Commercial Code, and except for other criteria, all the documents and / or information of the company will be kept for 6 years.

This affects all accounting, tax, labor or commercial documentation, including correspondence.

The company must also set minimum deadlines depending on the type of data and according to the different prescription periods, which must be known by each of the departments.

This table lists the prescription terms that affect or may affect the organization.

The legal basis for the processing of data is your consent given to carry out the purposes described above, which will be requested at the time the user places an order on the platform and accepts the conditions of service.

Failure to provide the personal data requested or not to accept this data protection policy means the impossibility of placing an order, subscribing, registering or receiving information about the Company’s products and services.

In cases where there is a prior contractual relationship between the parties, the legitimacy for the development of administrative, fiscal, accounting and labour obligations that are necessary under current legislation will be the prior existence of the commercial relationship established between the parties.

In any case, the booking of a service and with it the placing of an order, is made freely and voluntarily from the Web/App of the Company, and is considered as the establishment of a contractual relationship between the Company and the user. This relationship is based on the provision of information about the Company’s services, contracted services and other related services by the Company to the user. Therefore, the sending of informative communications that fall into this category is considered part of the service contracted by the user at the time of booking a service on the Web/App. This is without prejudice to the fact that the user may, at any time, unsubscribe from the communications.

Any communication sent will be incorporated into the information systems of The Company. By accepting these conditions, terms and policies, the User expressly consents the Company to perform the following activities and / or actions, unless the User indicates otherwise:

The user is informed that the means enabled by the company to communicate with customers and others affected is the corporate phone, corporate mobile phones and corporate email.

If you send personal information through a means of communication other than those indicated in this section, the Company will be exempt from any liability in relation to the security measures of such chosen means of communication.

The Company carries out transfers to third parties that proceed to the treatment and manipulation of the data as well as international transfers with the same purpose. The user expressly accepts the transfer of his data to other subdivisions of the Company as long as it is limited to the purposes indicated in this document and especially to the contents in the first clause.

Also, the Company will provide information to law enforcement agencies under court order or by obligation of a legal rule, without prejudice to blocking or cancelling your account if there may be evidence of the commission of a crime by the user. The information provided will be only that which is currently available to the provider. The information you provide us through the web will be hosted on the servers of the Company.

As an interested party, you can request the exercise of the following rights before the Company by submitting a letter to the address of the heading or sending an email to hello@orderdata.com, indicating as subject: “GDPR: Rights affected”, and attaching a photocopy of your ID card or any analogous document in law.

Rights:

As a user, you have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of the processing carried out prior to the withdrawal of consent. You also have the right to lodge a complaint with the supervisory authority if you consider that your data protection rights may have been violated (agpd.es).

Through this Privacy Policy we inform you that the photographs, videos and other type of content that are posted on the Web or App platform are the property of the Company, including those of minors, for which the Company has obtained the prior consent of parents, guardians or legal representatives by signing the forms made to that effect by the centres in which minors are part.

We inform you that the Company can have presence in social networks. The treatment of the data that is carried out of the people that become followers in our social networks will be governed by this section, as well as by those conditions of use, privacy policies and regulations of access set out by each particular social network and which will have been previously accepted by the user.

The Company will treat your data for the purpose of correctly managing your presence on the social network, informing you of activities, products or services of the provider, as well as for any other purpose that the regulations of the Social Networks allow. It is forbidden to publish any Contents which:

In addition, the Company reserves the right to remove, without prior notice from the corporate social network, those contents that are considered inappropriate.

The communications sent through the social networks will be incorporated into a file owned by the Company, being able to send you information of interest.

You can access more information, as well as consult the companies that are part of our group, in this privacy policy.

In any case, if you send personal information through any social network, the Company will be exempt from responsibility in relation to the security measures applicable to such platform, having the user to consult their corresponding particular conditions.

The data you provide will be treated confidentially. The Company has adopted all the technical and organisational measures and all the necessary levels of protection to guarantee the security in the treatment of the data and to avoid its alteration, loss, theft, treatment or unauthorised access, in accordance with the state of the technology and the nature of the data stored. Likewise, it is also guaranteed that the treatment and registration in files, programs, systems or equipment, premises and centres comply with the requirements and conditions of integrity and security established in current legislation.

The User, while using the services provided by the Company through the web and while using the actual web may include, through User Content, any personal data of third parties or their own (“Content Data”). This User is solely responsible for these Content Data, as “Responsible of Treatment”. The Company provides a service of treatment of this information in the name and account of the User, as “Treatment Manager” in order to allow the use of the Platform and provide the services offered through the Platform.

To the extent that the Company is “Treatment Manager”, the Company (a) implements technical and organizational measures to safeguard the Content Data of any access, loss, destruction, theft, use or unauthorized or unlawful disclosure; (b) treats only the Content Data in accordance with the instructions provided by the User, which include the configuration of his User Account and indications (“clicks” on the Platform) regarding this particular material, (c) does not use the Content Data for purposes other than those related to the development of the Services or according to the instructions provided by the user, (d) does not communicate the Content Data, not even for conservation by third parties (this does not preclude that if a User’s instruction is that a User Content should be public and logically subject to recommendations the Company complies with that instruction and allows access to Users of such Content Data and may even recommend the display of such User Content).

Upon expiration or termination of this Agreement by reason of termination of the User Account of the User responsible for these Content Data, we will stop using any Content Data and destroy it. The Company reserves the right to save such stored Content Data before removing it for as long as the Company may be subject to liability as a result of such data processing. If you detect that another User uses in the Company your old Content Data without being authorized, you must inform the Company of it, since the Company does not monitor, edit or control the User Content.

The User responsible for the Content Data authorizes us as the Treatment Manager to allow access and treatment of such Content Data to one or more service providers (data hosting and messaging), as a subcontractor on your behalf, if we reasonably consider that such access and treatment is necessary for the development of the Services. These providers process the data for the sole purpose of providing the aforementioned services which we have indicated, and are currently the Google group (whose subsidiaries with possible access to the data would be: (i) Google Ireland Limited, with offices at Gordon House, Barrow Street, Dublin 4, Ireland, (ii) Google Asia Pacific Pte Ltd., with offices at 8 Marina View Asia Square 1 #30-01 Singapore 018960, or (iii) Google Inc, with offices at 1600 Amphitheatre Parkway, Mountain View, California 94043, (in Ireland, Singapore and the U.S.A. respectively); the Amazon group (whose subsidiaries with possible access to data are (i) Amazon.com, Inc. in the U.S.A. and (ii) Amazon Web Service Ireland Ltd. in Ireland); or the Facebook group (whose subsidiaries with possible access to data are (i) Facebook, Inc, with offices at 1601 S California Ave; Palo Alto, California 94304 and (ii) Instagram, Inc. with offices at 1601 Willow Rd; Menlo Park, California 94025). The countries outside the European Economic Area where data may be processed (all of them except Ireland) may not have personal data protection standards equivalent to those in Spain/Europe). Before such processing takes place, we will ensure that you have entered into a contract with such third parties that is sufficient to commit you to processing personal data in accordance with the applicable provisions of this Policy.

The User responsible for the Content Data declares and guarantees to have all the necessary consents of the persons whose personal data will be treated in accordance with this clause (including the International Transfer of data from this subcontracting or to other users of the Platform from other countries to which it has access). The User responsible for the Content Data will indemnify the Company and exempt him from liability in relation to any claim, damage or loss that may suffer that is related to the processing of personal data of third parties treated in accordance with this clause.

The Company reserves the right to modify this policy to adapt it to any new legislation or jurisprudence. In any case, the modification of the privacy policy will be notified to the users.

To all effects the relations between the Company and the Users of its services are subject to the Spanish legislation and jurisdiction, to which the parties expressly submit, being competent for the resolution of all the conflicts derived or related to its use the Courts and Tribunals of Barcelona.