Privacy Policy

Data Protection Policy

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter GDPR), Avalora Canarias SL (hereinafter Avalora Canarias SL) provides this Privacy Policy regarding the processing and protection of personal data.

Data controller details:

Avalora Canarias SL
NIF: B42773093
Registered office: Rambla Medular, 50. Local 2. Palmas, Las Palmas, Las
Email: avaloracanarias@avaloracanarias.es

SCOPE OF APPLICATION

This Policy shall apply to all personal data collected and used by Avalora Canarias SL:

  • To those who provide their data by filling out any form on the website www.avaloracanarias.es, or via chat, email, or any other means.
  • To those who formalize a contractual relationship with Avalora Canarias SL by contracting its products and services.
  • To those who use any other service present on the website that involves the communication of data to Avalora Canarias SL or access to data by Avalora Canarias SL for the provision of its services.
  • To any others who, directly or indirectly, have given their express consent for their data to be processed by Avalora Canarias SL for any of the purposes set out in this Policy.

The use of Avalora Canarias SL products and services requires the express acceptance of this Policy.

Avalora Canarias SL is committed to using the personal data provided in accordance with the purposes indicated in this Data Protection Policy, respecting its confidentiality, as well as fulfilling its obligation to store it and adapting all measures to prevent alteration, loss, unauthorized processing, or access.

PERSONAL DATA

Remember that before you start using any of our services, you must read this Policy, as well as the Terms of Use.

The User expressly accepts the processing and inclusion of data collected during navigation through the Portal, or provided by filling out any form, applications, devices, offices, and agents, as well as those derived from the commercial relationship, among others. During the data collection process, and in each place on the Portal where such data is requested, the User will be informed, either through a hyperlink or by including the appropriate mentions in the form itself, of the mandatory or optional nature of the data collection. The User is advised that to register, it will be considered mandatory to provide data relating to identity (name, surname, D.N.I.), address, telephone, and email.

Failure to provide certain information marked as mandatory may mean that it is not possible to manage your registration as a user or the use of certain features or services available through www.avaloracanarias.es

Avalora Canarias SL, in its capacity as data controller, informs users of the existence of various processing operations and files in which the personal data communicated to Avalora Canarias SL is collected and stored.

The personal data collected refers to any information or data that can identify you directly (for example, first or last name) or indirectly (for example, your identity document), email addresses, private postal addresses, mobile phone, usernames, profile images, personal preferences, user-generated content, financial information, among others. It could also include unique numerical identifiers such as your computer’s IP address or your mobile device’s MAC address, as well as information we obtain through cookies.

PURPOSES OF THE COLLECTION AND PROCESSING OF PERSONAL DATA

The purposes of said collection and processing of personal data are as follows:

  1. To register your sign-up as a user on the Website and to attend to inquiries and requests for information regarding products and services made by the user, which will be managed through any of the contact methods made available to the user on the company’s website.
  2. To maintain the contractual relationship established with the client, in accordance with the nature and characteristics of the contracted services, with Avalora Canarias SL contacting the client through the email address, telephone, or other means indicated by the latter.
  3. Sending communications to Avalora Canarias SL subscribers (advertising, newsletter…), through electronic means or other means indicated by the client, unless the client expressly expresses their opposition at the time of registration. Regardless of whether the client has chosen to receive commercial information from Avalora Canarias SL or not, the client may change their decision at any time, as each communication includes a link with the option to unsubscribe.
  4. To manage and process job applications from those users who send their curriculum vitae to the company, and/or data on job searches; such data will be processed to participate in personnel selection procedures.
  5. For the maintenance of historical, statistical, and accounting records of commercial relationships.
  6. In compliance with the provisions of Law 25/2007, of October 18, on the conservation of data relating to electronic communications and public communications networks, Avalora Canarias SL informs the user that it will proceed to retain and conserve certain traffic data generated during the course of communications, as well as, where appropriate, to communicate said data to the competent bodies whenever the legal circumstances provided for in said Law occur.
  7. For all those other purposes that expressly appear in the contractual relationship applicable to the corresponding product or service contracted by the client and expressly accepted by them.

The data will be processed on the legal basis of the consent of the person providing it. This consent may be withdrawn at any time, although this will not affect the lawfulness of the processing carried out previously. Providing the data is voluntary, although, if not provided, it cannot be processed for the indicated purposes.

Regarding clients, the data will be processed on the basis of the existing legal relationship between the parties as a result of the provision of services offered. For the contracting of services offered by Avalora Canarias SL, the delivery of data is mandatory, and only those personal data necessary to establish the contractual relationship and enable the provision of services and their remuneration by clients will be collected; otherwise, it cannot be carried out.

Avalora Canarias SL warns that the User’s responsibility for the veracity of the data entered is exclusive; therefore, except for the existence of a legally constituted representation, no user and/or client may use the identity of another person and communicate their personal data. Thus, the data provided to Avalora Canarias SL must be personal data corresponding to their own identity, and must be adequate, relevant, current, accurate, and true. In this sense, the user and/or client will be solely responsible for any direct or indirect damage caused to third parties or to Avalora Canarias SL by the use of another person’s data or their own data when it is false, erroneous, not current, inadequate, or irrelevant. Likewise, the user and/or client who communicates the personal data of a third party will be responsible for having obtained the corresponding authorization from the data subject themselves, as well as for the consequences otherwise. Any data provided about a minor will require the prior consent or authorization of their parents, tutors, or legal representatives, who will be considered responsible for the data provided by the minors in their care.

PERSONAL DATA RETENTION PERIOD

Avalora Canarias SL will retain personal data for the time strictly necessary for the purpose for which it was collected with your express consent, in order to satisfy your needs. The data will be kept for as long as the service provision relationship is maintained and, even after, until any legal and accounting liabilities that may arise from it expire.

Subsequently, it will be kept for statistical or historical purposes, unless the user requests its deletion through one of the channels indicated above. In the event that the data is processed to send commercial communications or for a statistical purpose, it may be stored indefinitely, unless the user objects.

Regarding users who have sent their CV through the Website, their data will be kept until their job application is resolved or for a longer period in the event that new jobs arise that fit their profile. In any case, your data will be stored for a maximum period of two years from the date it was provided. In the event that you are hired, your data will be kept for the duration of your employment relationship.

When we no longer need to use your personal data, it will be deleted from our systems and records or anonymized so that we can no longer identify it.

RECIPIENTS OF PERSONAL DATA

The recipients of personal data owned by Avalora Canarias SL will be the following:

 

  • The staff of Avalora Canarias SL in the performance of their duties and collaborators who are necessary for the proper provision of the requested services.
  • The providers of Avalora Canarias SL who intervene in the provision of services, in the event that this is necessary for their provision.
  • Judicial or administrative bodies, as well as State Security Forces and Corps, in the event that Avalora Canarias SL is required under current legislation to provide information related to its clients and services.
  • Any others who, due to the nature of the service, must access the data provided with it, such as the data processor when it does not coincide with the owner, in accordance with the clauses applicable to the corresponding product or service contracted by the client and expressly accepted by them.

 

USER RIGHTS AND THEIR EXERCISE

Avalora Canarias SL guarantees users, at all times, the exercise of their rights of access, rectification, deletion, opposition, limitation, and portability regarding the personal data provided, under the terms set out in the GDPR.

Users may exercise these rights in the following ways:

 

  • Whether they are clients of Avalora Canarias SL or not, Website users may exercise such rights by sending an express request, with a copy of their ID, addressed to the attention of the Data Protection Department, specifying the right they wish to exercise, to any of the following channels:

 

In accordance with the provisions of Art. 12.5 GDPR, in cases of manifestly unfounded or excessive requests due to their repetitive nature, Avalora Canarias SL reserves the right to charge a fee for the administrative costs derived or the right to refuse to act regarding them.

INTERNATIONAL DATA TRANSFERS

In those Avalora Canarias SL products and services where international transfers are required to enable their provision, this circumstance will be recorded and expressly accepted by the client and/or user in the legal relationship.

AVALORA CANARIAS SL AS DATA PROCESSOR

 

  • Avalora Canarias SL will act as a data processor regarding the personal data for which the client is the controller or processor, when this is necessary for the proper provision of the contracted services, according to the following terms:
  • Avalora Canarias SL will process personal data only following documented instructions from the controller, not using it for a purpose other than that appearing in this Data Protection Policy and/or in the conditions set out in the applicable contract.
  • Avalora Canarias SL, upon completion of the assignment, will delete all personal data once the provision of processing services ends, and will delete existing copies unless the retention of personal data is required under applicable regulations. Avalora Canarias SL may keep said data blocked during the period in which liabilities may arise from its relationship with the client.
  • Avalora Canarias SL guarantees that persons authorized to process personal data are committed to respecting the confidentiality of the personal data to which they have access as a processor, both during and after the termination thereof, committing to use said information only for the intended purpose and adopting the measures required by the personal data controller.
  • In the event that Avalora Canarias SL must access processing resources located at the client’s facilities, the client will be responsible for establishing and implementing the security policy and measures, as well as communicating them to Avalora Canarias SL, who undertakes to respect them and demand compliance from the persons in their organization who participate in the provision of services.
  • When Avalora Canarias SL accesses the data processing resources under the client’s responsibility remotely, the client must establish and implement the security policy and measures in their remote processing systems, with Avalora Canarias SL being responsible for establishing and implementing the security policy and measures in its own local systems.
  • When the service is provided by Avalora Canarias SL at its own premises, Avalora Canarias SL will record in its Record of Activities the circumstances relating to data processing in the terms required by the GDPR, including the security measures corresponding to said processing.
  • Access to and/or processing of data by Avalora Canarias SL, without prejudice to the specific legal or regulatory provisions in force that may apply in each case, will be subject to the necessary security measures to:
  • Ensure permanent confidentiality, integrity, availability, and resilience of processing systems and services.
  • Restore availability and access to personal data quickly in the event of a physical or technical incident.
  • Regularly verify, evaluate, and assess the effectiveness of the technical and organizational measures implemented to ensure the security of the processing.
  • Pseudonymize and encrypt personal data, where appropriate.
  • The client authorizes Avalora Canarias SL, in its capacity as data processor, to subcontract with third parties, in the name and on behalf of the client, storage services, custody of data backup copies and security, and those that are necessary to enable the provision of the contracted services, respecting in all cases the obligations imposed by the GDPR and its implementing regulations. At any time, the client may contact Avalora Canarias SL to know the identity of the entities subcontracted for the provision of the indicated services, which will act in accordance with the terms provided in this document and after formalizing a data processing contract with Avalora Canarias SL in accordance with Art. 28.4 of the GDPR.
  • The client authorizes Avalora Canarias SL to perform the actions indicated below, provided they are necessary for the execution of the provision of services. Said authorization is limited to the action(s) necessary for the provision of each service and with a maximum duration linked to the validity of the applicable contractual Conditions:
  • To carry out the processing of personal data on portable devices only by users or user profiles assigned to the provision of services.
  • To carry out processing outside the premises of the client or Avalora Canarias SL, only by users or user profiles assigned to the provision of services.
  • The entry and exit of media and documents containing personal data, including those included in and/or attached to an email, outside the premises under the control of the client responsible for the processing.
  • The execution of data recovery procedures that Avalora Canarias SL is obliged to perform.
  • Avalora Canarias SL is not responsible for the breach of obligations derived from the GDPR or the corresponding regulations on data protection by the user and/or client in what corresponds to their activity and which is related to the execution of the contract or commercial relations that bind them to Avalora Canarias SL. Each party must face the responsibility derived from its own breach of contractual obligations and the regulations themselves.
  • Avalora Canarias SL will make available to the controller all information necessary to demonstrate compliance with legal obligations, as well as to allow and contribute to the performance of audits, including inspections, by the controller or another auditor authorized by said controller.

 

SUPERVISORY AUTHORITY

The data protection supervisory authority in Spain is the Spanish Data Protection Agency, whose contact details are available on its website, specifically at www.agpd.es.

Users and/or clients may contact this body or any other competent authority if they consider that the processing carried out regarding their personal data has not been performed in accordance with current legislation.

CONTACT

If you have any questions about the way we process and use your personal data or wish to exercise any of the rights provided, you can let us know by sending an email to avaloracanarias@avaloracanarias.es, or by writing to us at the following address: Rambla Medular, 50. Local 2. Palmas, Las Palmas, Las.