Privacy Policy

Through this privacy policy RIERA CONSULTING ABOGADOS Y ASEOSRES FISCALES, SL wishes to inform all persons who browse and access the website www.rieraconsulting.es about the processing of personal data.

Access to the website does not require prior registration. Before sending any request for information through the contact form on this website, the user must accept the privacy policy, in order to provide express and informed consent for the processing of data for the purposes indicated.

RIERA CONSULTING ABOGADOS Y ASEOSRES FISCALES, SL, in accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as with Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights, in its capacity as Data Controller of the personal data provided, provides you with the following information:

1. Data Controller

• Responsible: RIERA CONSULTING ABOGADOS Y ASEOSRES FISCALES, SL – hereinafter RIERA CONSULTING
• TAX IDENTIFICATION NUMBER: B535556221
• Address: C/ Moratín 21 Entlo. Pta. Izda. Oficinas 2-4 – 03008 Alicante
• E-mail: [email protected]

2. Contact form

A contact form is available on our website that can be used to contact us electronically. If a user uses this option, we will receive and store the data entered in the data entry screen:

• Name
• E-mail address

Purpose of processing
To manage the use of the functionalities made available through the Website, including responding to requests and/or queries made.

Legitimation

• The basis that legitimizes the processing of personal data, in case you are a customer, is the execution of a contract, under Article 6.1.b) of the GDPR.
• The basis that legitimizes the processing of personal data is the consent given by the person concerned through the acceptance box provided for this purpose, under Article 6.1.a) of the RGPD.

Retention period
The data will not be kept longer than necessary for the purpose for which they were collected, unless there is a legal obligation.

Communication of data
Data will not be communicated to other third parties, except by legal obligation or with the express consent of the data subject.

International Data Transfers
No International Data Transfers are made to third countries outside the European Union.

3. Work with us

On our website there is a contact form available for the user to send us your resume. The information requested is as follows:

• Name
• E-mail address
• CV: (i): Identification data: name and surname, ID card number, postal address, telephone, e-mail, signature, image/voice, date of birth and marital status. (ii) Personal characteristics: family details, sex, nationality and mother tongue. (iii) Academic or professional details: academic studies, professional association, membership number, professional experience, other CV details. (iv) Work details: profession, job positions, other CV details.

Purpose of processing
Your data will be processed confidentially and exclusively for the purpose of processing your application. The data will be transmitted in encrypted form. In the event of any changes to your data, please inform us in writing as soon as possible in order to keep your data up to date.

Legitimacy
The basis that legitimizes the processing of personal data is the consent given by the person concerned through the acceptance box provided for this purpose, under Article 6.1.a) of the RGPD.

Retention period
The data will not be kept longer than necessary for the purpose for which they were collected, unless there is a legal obligation.

Communication of data
Data will not be communicated to other third parties, except by legal obligation or with the express consent of the data subject.

International Data Transfers
No International Data Transfers are made to third countries outside the European Union.

4. Rights of the interested party

When your personal data is processed, the User shall be considered a data subject within the meaning of the GDPR and, as such, shall have the following rights vis-à-vis the data controller:

Right of access
You can ask the controller to confirm whether your personal data is processed by him/her.

If your data is being processed, you can request information from the data controller about:

1. the purpose of the processing of personal data;
2. the categories of personal data that will be processed;
3. the recipients or categories of recipients to whom your personal data has been or will be disclosed;
4. the period for which the personal data will be kept or, when this is not possible, the criteria used to determine this period;
5. the existence of the right to rectification or erasure of personal data concerning him/her, of the right to limit the processing by the controller or of the right to object to such processing;
6. the existence of the right to file a complaint with a supervisory authority;
7. all available information on the origin of the data when the personal data have not been obtained from the data subject;
8. the existence of automated decision-making, including profiling, in accordance with Art. 22(1) and (4) of the GDPR and, at least in such cases, meaningful information about the logic applied, as well as the significance and expected effects of such processing on the data subject.

You have the right to request information on whether your personal data has been transferred to a third country or to an international organization. In this context, you can request to be informed under Article 46 of the GDPR concerning the transfer of data.

Right of rectification

If the personal data concerning you is inaccurate or incomplete, you have the right to rectify or complete it with the data controller. The data controller will rectify it without delay.

Right to limitation of processing

The User may request the limitation of the processing of his/her personal data when any of the following conditions are met:

• If you contest the accuracy of your personal data within a period of time that allows the data controller to verify the accuracy of the data;
• That the processing is unlawful and the User opposes the deletion of the personal data and requests instead the limitation of its use;
• The controller no longer needs the personal data for the purposes of the processing, but the User needs them to formulate, exercise or defend claims;
• If the User has objected to the processing pursuant to art. 21, para. 1 of the RGPD, while it is being verified whether the legitimate reasons of the data controller prevail over its own.

Where the processing of personal data has been restricted, with the exception of their retention, such data may only be processed with your consent or for the purpose of making, exercising or defending claims or protecting the rights of another natural or legal person or for reasons of substantial public interest of the European Union or a Member State.

If the processing has been limited in accordance with the above conditions, you will be informed by the data controller before the limitation is terminated.

Right to suppression

You may request the controller to immediately delete your personal data and the controller will be obliged to delete this data without delay if any of the following circumstances apply:

• That the personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
• If the User revokes his or her consent, on which the data processing was based pursuant to Art. 6 para. 1 sentence 1 letter a) or Art. 9 para. 2 letter a) GDPR, and there is no other legal basis for the processing.
• If the User objects under Art. 21, para. 1 of the GDPR to the processing and there are no compelling legitimate grounds for the processing or objects to the processing under Art. 21, para. 2 of the GDPR.

• That your personal data has been unlawfully processed.
• Personal data must be deleted in order to comply with a legal obligation under European Union law or the law of the Member States to which the controller is subject.
• That your personal data have been obtained in connection with the provision of information society services offered in accordance with art. 8, para. 1 of the GDPR.

If the Data Controller has made its personal data public and is obliged to delete it under Art. 17, para. 1 GDPR, it shall take appropriate measures, including technical measures, taking into account the available technology and implementation costs to inform the data controllers of the personal data that the User, as a data subject, has requested the deletion of all links to this personal data or copies or replicas of this personal data.

The right of erasure does not exist to the extent that the processing is necessary.

• to exercise freedom of expression and information;
• to comply with a legal obligation requiring the processing of data required by European Union or Member State law to which the controller is subject or in order to carry out a task carried out in the public interest or in order to exercise a public authority vested in the controller;
• for reasons of public interest in the field of public health, in accordance with Art. 9(2)(h) and (i) and Art. 9(3) of the GDPR.
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with art. 89, para. 1 of the GDPR, insofar as the law referred to in section a) may make it impossible or seriously undermine the achievement of the purposes of this processing, or
• to formulate, exercise or defend claims.

Right to information

If you have exercised your right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to inform all recipients to whom your personal data have been disclosed of this rectification, erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort.

The User has the right to be informed by the person in charge about who these recipients are.

Right to data portability

You have the right to receive personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. In addition, you have the right to transmit this data to another controller without being prevented from doing so by the controller to whom you have provided it, when

1. the processing is based on consent pursuant to Art. 6 para. 1 sentence 1 letter a) GDPR or Art. 9 para. 2 letter a) GDPR or on a contract pursuant to Art. 6 para. 1 sentence 1 letter b) GDPR and
2. the processing is carried out by automated means.

In exercising this right, the User shall also have the right to have personal data transmitted directly from one data controller to another insofar as this is technically possible. The freedoms and rights of other persons may not be adversely affected by this.

This right to data portability shall not apply to any processing of personal data that is necessary for the performance of a task carried out in the public interest or for the exercise of official authority vested in the controller.

Right of opposition

The User has the right to object at any time, for reasons arising from his or her particular situation, to personal data concerning him or her being processed pursuant to art. 6, para. 1, sentence 1, letters e) or f) of the GDPR; this shall also apply to profiling based on these provisions.

The controller shall cease processing your personal data unless it can demonstrate compelling legitimate grounds for such processing which override your interests, rights and freedoms or the processing is intended for the purpose of making, exercising or defending claims.

If the processing of your personal data takes place in order to carry out direct marketing actions, the User shall have the right to object at any time to the processing of the data for the purpose of such advertising; this shall also apply to profiling insofar as it is associated with such direct marketing.
If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

The User has the option of exercising his right to object by means of automated procedures using technical specifications in connection with the use of information society services, regardless of the provisions of Directive 2002/58/EC.

Right to revoke the declaration of consent to data protection

The User has the right to revoke his or her declaration of consent regarding data protection at any time. The revocation of consent shall not affect the lawfulness of the processing that took place on the basis of the consent given prior to its revocation.

Automated individual decisions, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on the User or similarly significantly affects the User. This does not apply if the decision

1. is necessary for the conclusion or performance of a contract between the User and the data controller;
2. is authorized by the legislation of the European Union or of the Member States to which the controller is subject and where such legislation contains reasonable measures to safeguard his or her rights and freedoms and legitimate interests, or
3. if it is based on your explicit consent.

However, these decisions will not be based on the special categories of personal data specified in Art. 9(1) of the GDPR, unless Art. 9(2)(a) or (b) of the GDPR applies and appropriate measures have been taken to safeguard your rights and freedoms and your legitimate interests.

With respect to the cases referred to in points 1 and 3, the data controller shall take appropriate measures to safeguard their rights and freedoms and legitimate interests, including at least the right to obtain the intervention of a person on behalf of the controller, to express their point of view and to challenge the decision.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, the User shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his residence, place of work or place of alleged infringement, if he considers that the processing of personal data concerning him is in breach of the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of lodging a judicial remedy in accordance with Art. 78 of the GDPR.

5. Where can the User exercise his/her rights?

The User may exercise his/her rights by sending a letter to C/ Moratín 21 Entlo. Pta. Izda. Oficinas 2-4 – 03008 Alicante, or e-mail [email protected].

6. Is it mandatory to provide all the information requested in the contact section?

As for the forms on the Website, the User must complete those marked as “required”. Failure to complete the required personal data or to do so partially may mean that RIERA CONSULTING will not be able to attend to your requests and, consequently, RIERA CONSULTING will be exonerated from any liability for the non-provision or incomplete provision of the requested services.

The personal data that the User provides to RIERA CONSULTING must be current so that the information in the records is up to date and error free. The User is responsible for the accuracy of the data provided.

7. What security measures does the company have in place?

RIERA CONSULTING informs that the processing of personal data is carried out at all times in accordance with the applicable regulations on data protection and information society services.

RIERA CONSULTING has implemented the necessary technical and organizational security measures to ensure the security of the User’s personal data and avoid its alteration, loss, treatment and/or unauthorized access in accordance with the state of technology, the nature of the data stored and the risks to which they are exposed, whether from human action or the physical or natural environment, in accordance with the provisions of current regulations.