1.- RESPONSIBLE

1.1.- Who is responsible for the processing of your data?

Identity: Alquibalat S.L., with registered office at Calle Ramón Aguinaga 12, 31016 Pamplona (NAVARRA), with CIF number B-31 585318 and registered in the Mercantile Registry of Navarra, in volume 752, folio 196 and page NA-15480. Hereinafter BALAT.

Email: balat@balat.es

Telephone: 948 18 87 86

2.- PURPOSE

2.1.- What is the Controller going to use my data for?

The data that you provide us may be used by the Responsible for one or more of the purposes that we will indicate below that will be determined by factors such as your relationship with us (eg job applicant, client, etc.) or by the means employed for the submission of data (eg contact form, etc.). Next, we expose the treatments to which this privacy policy refers, without prejudice to the fact that there may be others for which you are informed or request the appropriate authorization:

Sending commercial communications related to the services offered by the Responsible.

• Send you commercial communications related to the activities and services that we offer in the Responsible Party and that fall within the reasonable expectation of you in relation to the previously contracted services. This treatment may cease in the event that you object to it.

Information requests.

• When you contact us, for example, through the contact form on the website, by phone, fax, e-mail, messaging services, social networks, telephone or even in person, to request information or consultation on a subject, make a suggestion, complaint or claim, we will treat your data in order to meet the request for information and / or consultation that you have made, with the management and scope that it requires. This operation may include the use of the data received for the preparation of service and / or collaboration proposals, in the event that this is indeed the request.

Cookies:

• In the event that when you start visiting this website you have agreed to receive cookies, the website’s cookie policy will apply to you. We recommend that you visit the aforementioned policy in which you can find out, among other issues, the cookies used, their purpose and configuration options that you can adopt on your page display devices for, for example, deletion.

2.2.- How long will my data be kept?

The retention periods of the data that you provide us are closely linked to the treatment in question.

In this regard, indicate what general nature we will process the data while maintaining the legal relationship that takes place or does not oppose the treatment.

Once the aforementioned period has expired, we will keep your data on one side, as long as the regulations impose it on us and on the other hand, until the full prescription of actions that may occur is exhausted. These terms may be conditioned, among other factors, by the Law applicable to the relationship between the parties.

Thus, to calculate the conservation period it will be necessary to take as a starting point the period indicated in section 2.2.2 regarding the specific treatment and add the period that could affect it at the level of regulation prescription and prescription of actions.

2.2.1.- Deadlines related to the treatments:

• Treatments related to the sending of commercial communications directly related to the services provided by the Responsible.
  Treatments related to requests for information. We will process your data for the time necessary to attend and manage your request for information.
• Cookies: according to the type of cookies, expressed in the corresponding policy.

2.2.2.- Deadlines imposed by the regulations and prescription of actions:

• Civil Code (article 1964): 5 years.
• Law 28 of Law 1/1973, of March 1, 3 or 10 years in general. Likewise, Law 39 of Law 1/1973, of March 1, and the term contained therein of 30 years may also be applicable to the relationship between the parties.
• Commercial Code: 6 years documentation conservation obligations imposed by article 30.

3.- LEGITIMATION OF THE TREATMENT

3.1.- Why can the Controller process my data? What legitimizes it?

Depending on the relationship that is established and therefore the purpose of the treatment, the legal basis for it may be different. Below, we expose the different situations that may arise and what legal basis is applicable depending on the treatment:

Purposes related to the sending of commercial communications

• Sending commercial communications: In accordance with the regulations currently in force and having weighed our interests and your rights, we indicate that we have a legitimate interest to process your data in order to send you commercial communications related to the services contracted by you with us (without prejudice to who may object to this treatment at any time)

Attention to information requests

• Respond to requests for information: This treatment is legitimized by virtue of the consent given by you at the time of sending your request for information and / or assistance.

Cookies:

We are legitimized for this treatment by the consent given by you at the beginning of the navigation on our website.

3.2.- Consequences of the withdrawal of consent or opposition in the processing of your data. Mandatory and optional fields.

In the event that your authorization is requested at any time for the treatment of a purpose that requires consent, its non-granting (or its eventual withdrawal later) will not have consequences for you in any case. Neither will your opposition to the processing of your data for purposes based on legitimate interest (for example, the use of your data as a client to send commercial communications) have any type of consequence.

In some data collection forms you can clearly see that some fields are marked as mandatory (with an asterisk) and the rest are absolutely voluntary. Thus, the non-completion of voluntary fields will not have any consequence, being able to complete them if you are interested in it.

4.- RECIPIENTS

4.1.- Will my data be transferred to third parties?

In general, except under legal obligation, your data will not be disclosed to any third party without your express and affirmative consent.

4.2.- Service providers related to the website.

Hosting: the Responsible’s website is hosted by the provider ACENS TECHNOLOGIES, S.L.U.

5.- RIGHTS

5.1.- What rights do I have in terms of data protection? General information.

Regarding the personal data collected for its treatment, you have the possibility of exercising the rights of access, rectification, deletion and portability. Likewise, we inform you that in certain circumstances you will have the right to request the limitation or opposition of the processing of your data, in which case the Responsible will cease processing and will only keep them in the event that there is any regulatory obligation to do so. impose or until the prescription of the actions that could concur.

If you want more information about the aforementioned rights, we invite you to continue reading or visit the infographic prepared by the Spanish Data Protection Agency accessible through the following hyperlink.

5.2.- What do these rights consist of?

Right of access: This right allows the interested party to obtain from the Responsible party confirmation of whether or not personal data concerning him or her is being processed and, in such case, the right of access to personal data as well as the following additional information: a) the purposes of the treatment; b) the categories of personal data in question; c) the recipients or categories of recipients; d) the expected conservation period or the criteria used to determine this period; e) the existence of the right to request from the person in charge the rectification or deletion of personal data or the limitation of the processing of personal data relating to the interested party, or to oppose said treatment; f) the right to file a claim with a supervisory authority; g) information available on the origin of the data; h) the existence of automated decisions.

Right of rectification: This right empowers the interested party to urge the Responsible to rectify or complete inaccurate personal data without delay. It is important that the data contained in the databases are updated and in this sense we are at your disposal to rectify any errors or inaccuracies that may exist in them.

Right to deletion: At any time you have the right to request that we delete your personal data, a request that will be attended without delay unless any of the circumstances provided for in the General Data Protection Regulations concur, among which it stands out that we must keep your data to comply with a legal obligation or to be able to defend ourselves against a claim.

Right of portability: In the case of automated data processing based on consent, you may request that, in a structured, commonly used and machine-readable format, we send to another data controller the personal data about you that you have provided to us. facilitated.

Right of opposition: Through this right the interested party opposes the processing of their data by the person in charge. This right is not absolute, which implies that the person in charge may continue to process the data as long as he can prove legitimate reasons that prevail over the interests, rights of the interested party or for the formulation, exercise and defense of claims.

Right to limit the treatment: This right gives you, under certain circumstances that are indicated below, the right to request the person in charge to limit the treatment of your personal data. In the case of exercising this right, the person in charge may only process the data with the consent of the interested party. The circumstances under which this right can be exercised are the following:

1. the interested party challenges the accuracy of the personal data, for a period that allows the person in charge to verify the accuracy of the same;
2. the treatment carried out by the person in charge is illegal and the interested party opposes the deletion of personal data and requests instead the limitation of its use;
3. The person in charge no longer needs the personal data for the purposes of the treatment, but the interested party needs them for the formulation, exercise or defense of claims;
4. the interested party has opposed the treatment, while it is verified if the legitimate reasons of the person in charge prevail over those of the interested party.

5.3.- How and where can I exercise them?

We will be happy to answer any questions or complaints you have regarding data protection. Likewise, you may direct your claim or exercise your rights through any of the contact channels indicated in the heading of this data protection policy.

In the same way, you can also contact the control authority that you consider appropriate to file your claim (for example, in the country where you have your usual residence, place of work or where you consider that the alleged infringement has occurred). For the appropriate purposes, we inform you that in Spain the Control Authority is the Spanish Agency for Data Protection, and you can exercise your rights through the forms that this entity has enabled for this purpose and that are available at its electronic headquarters.

5.4.- How long can it take to process my request for the exercise of rights?

The reference period is one month from the receipt of your request. Notwithstanding the foregoing, said period may be extended for another two months if necessary, taking into account the complexity and number of requests. The Responsible Party will inform the interested party of any of said extensions within one month of receiving the request, indicating the reasons for the delay.

5.5.- Will the exercise of these rights entail an expense?

The exercise of rights will not entail an expense, except in cases in which manifestly unfounded or excessive requests are made, especially due to repetitive ones, the Responsible may charge a fee that compensates the administrative costs of attending to the request or refusing to act (the The fee may not imply an additional income for the person in charge, but must actually correspond to the true cost of processing the application).

6.- PROCEDURE IN CASE OF CARRYING OUT ILLICIT ACTIVITIES

In the event that any user or third party considers that there are facts or circumstances that reveal the illegal nature of the use of any content and / or the performance of any activity on the web pages included or accessible through the website, they must send a notification to the Responsible party, duly identifying yourself, specifying the alleged infractions and expressly declaring and under your responsibility that the information provided in the notification is accurate.

For all litigious issues that concern the Responsible website, Spanish law will apply, with the Courts and Tribunals of Pamplona being competent.