At ICP TECHNOLOGICAL SOLUTIONS S.L., (hereinafter, ICP) we have always been concerned with the protection of personal data. Therefore, we have updated our Privacy Policy in order to comply with the General Data Protection Regulation (Regulation (EU) 2016/679) and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD):

.Who is your personal data controller?

The data that ICP collects by different means (website, e-mail, electronic forms or forms and paper documents) as part of its operations are processed for the following purposes:

• Maintenance of the commercial and contractual relationship.
• Sending information about new products and services.
• Sending commercial communications.
• Management of the private area.
• Selection of candidates for a job.
• Facilities access control.
• Processing orders, repair requests or any type of request made by the user through any of the means of contact made available on the website.

.How long do we keep your data?

In the case of suppliers, customers, partners and staff, we retain their data for the duration of the contractual relationship with us and thereafter for the period established in current applicable legislation.

In relation to recruitment processes, the data will be kept for the duration of the process and, in the event that the CV is of interest, it will be kept for a period not exceeding one year, after which time it will be deleted or destroyed.

In the case of commercial surveys, the data will be kept until the data subject objects to the processing or withdraws their consent.

With regard to access control and video surveillance via security cameras, data will be retained for a maximum of 30 days.

.Why we use your personal data

Your personal data is processed by ICP on the following legal bases:

• Your consent or have been voluntarily provided by you by any means (paper forms, web forms, e-mail).
• The maintenance, development and execution of a contractual relationship that we have with you, in the case of: (i) provision of services; (ii) employment, commercial, administrative, among others.
• For legitimate interest, always respecting your right to the protection of your personal data, honour and privacy, for the development and dissemination of our services, to analyse the quality of the service offered and the degree of user satisfaction, as well as to carry out statistical studies and analyses.

.To whom will we communicate your data?

• Customer data will not be transferred to third parties, unless it is necessary for the provision of the requested service.
• Entities and suppliers that provide services to ICP for the proper execution of our services. These entities and suppliers are duly accredited and sign the corresponding data processing contract with us in compliance with the current data protection regulations. Some examples of services provided by our suppliers that may involve the processing of personal data on behalf of ICP include, but are not limited to: multidisciplinary professional services, logistics, legal advice, technology services, IT services, courier and delivery services, maintenance, security and surveillance, advertising and marketing, etc.
• No international data transfers shall be made.

.What channels do we use to obtain the data?

ICP obtains personal data through the following channels:

• E-mail
• Forms/ Questionnaires (Web, electronic or paper format)
• Exchange of business cards.
• Service agreements.

.What categories of data do we process?

We process the following categories of data, depending on the circumstances of your relationship with us:

• Identification data
• Employment details.
• Academic and professional data.
• Electronic Addresses
• Commercial information
• Economic, financial data.
• Sensitive data is not processed.

.Security measures:

We implement the necessary security measures to prevent theft, alteration or unauthorised access to data, taking into account the state of the art, the costs of implementation, and the nature, scope, context and purposes of the processing, as well as risks of varying likelihood and severity to the rights and freedoms of natural persons.

In the case of procurement of services, we require and ensure that the processor implements appropriate technical and organisational measures to ensure a level of security appropriate to the risks involved, as set out in art. 32 of the General Data Protection Regulation.

We also carry out Impact Assessments on those processing operations that we consider may have a risk to the rights and freedoms of individuals, in order to implement the necessary and appropriate measures to prevent a breach of confidentiality.

.WHAT ARE YOUR RIGHTS?

Everyone has the right to know whether ICP processes their personal data. You also have the right to:

• Access your personal data.
• Request the rectification of inaccurate data.
• Request its deletion if, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• Oppose the processing of your data for commercial purposes or for reasons related to your particular situation, requesting that they not be processed by ICP.
• In certain circumstances, request the limitation of the processing of your data, in which case we will only keep them for the exercise or defence of claims.
• Withdraw your consent, without affecting the lawfulness of any processing carried out by us prior to such withdrawal.

When you exercise your rights of deletion, opposition, limitation or withdraw your consent, ICP will stop processing your data, except for compelling legitimate reasons or the exercise or defence of possible claims.

All these rights may be exercised by contacting us at the following addresses, INFORMATION, CONTROL & PLANNING LTD, Maidstone Rd – Kingston, MK10 0BD Milton Keynes – United Kingdom or at the following e-mail address: proteccion.datos@icp.es indicating in the Subject: ATT. DATA PROTECTION.

Likewise, if you are not satisfied with the way in which we have dealt with your rights, you may file a complaint with the Spanish Data Protection Agency, through the website www.aepd.es.

.WHAT CAN YOU DO IF YOU DO NOT WANT TO RECEIVE COMMERCIAL COMMUNICATIONS?

In accordance with the LSSI, you can unsubscribe from any of the subscription services, as well as express your opposition to receiving advertising information, by sending the word UNSUBSCRIBE to the following address proteccion.datos@icp.es