OohTrace

Privacy Policy

Privacy Policy

This Privacy Policy forms part of the General Conditions governing the present Website.

 

Who is the data controller with respect to your data?

TRACE RESEARCH TECHNOLOGIES, S.L.U.

Pge. Buigas 4,

08193 Bellaterra

B02970069

You can contact us by either of the above means.

E-mail: info@oohtrace.com

 

We reserve the right to change or adapt the present Privacy Policy at any time. We recommend that you review this Policy, and if you have registered and you access your account or profile, you will be informed of any changes.

If you belong to any of the following groups, please consult the drop-down information:

 

+ Website or Email Contacts

What information do we gather through the Website?

We may process your IP, what operating system or browser you use, and even the duration of your visit, anonymously.

If you provide us with information in the contact form, you will be identifying yourself in order that we may contact you, should this be necessary.

  • Reply to your consultations, applications or requests.
  • Manage the requested service, reply to your application or process your request.
  • Information by electronic means related to your request.
  • Commercial information or information on events by electronic means, provided this is expressly authorized.
  • Analyze and improve the Website, in relation to our products and services. Improve our commercial strategy.

Acceptance and consent by the interested party: In those cases in which, in order to make a request, it is necessary to fill out a form and click on the send button, by doing so this implies that you have been informed and have expressly consented to the contents of the clause annexed to said form or privacy policy acceptance.

All of our forms have the symbol * next to the information which is mandatory. If you do not provide the information in these fields or fail to mark the checkbox accepting the privacy policy, the information will not be able to be sent. Normally, the following formula is used:  “I am over the age of 14 and have read and accept the Privacy Policy.”

 

+ Newsletter Contacts

What information do we gather through the newsletter?

Through the Website, you can subscribe to the Newsletter, if you provide us with an email address to which the newsletter will be sent.

We store only your email in our database, and will periodically send you emails until you request to be removed from the email list, or until we no longer send emails.

You will always have the option to remove yourself from the list in any communication.

  • Manage the requested service.
  • Information by electronic means related to your request.
  • Commercial information or information on events by electronic means, provided this is expressly authorized.
  • Analyze and improve the Website, in relation to our products and services. Improve our commercial strategy.

 

Acceptance and consent by the interested party: In those cases in which you subscribe, it will be necessary to accept a checkbox and click on the send button. By doing so, this necessarily implies that you have been informed and have expressly consented to receiving the newsletter.

If you fail to mark the checkbox accepting the privacy policy, the information will not be able to be sent.

 

+ Clients

What information of yours do we use?

  • Preparation of the estimate and follow-up by communications between both parties.
  • Information by electronic means related to your request.
  • Commercial information or information on events by electronic means, provided this is expressly authorized.
  • Manage the administrative, communications and logistics services provided by the Data Controller.
  • Invoicing and filing of the pertinent taxes.
  • Carry out the corresponding transactions.
  • Control and collection procedures.

 

+ Suppliers

What information do we as service provider use?

  • Information by electronic means related to your request.
  • Commercial information or information on events by electronic means, provided this is expressly authorized.
  • Manage the administrative, communications and logistics services provided by the Data Controller.
  • Invoicing.
  • Carry out the corresponding transactions.
  • Invoicing and filing of the pertinent taxes.
  • Control and collection procedures.

The legal basis is the acceptance of a contractual relationship, or in the absence thereof, your consent by contacting us or offering your products through a given channel.

 

+ Social Network Contacts

What information do we use from social networks?

  • Reply to your consultations, applications or requests.
  • Manage the requested service, reply to your application or process your request.
  • Have a relationship with you and create a community of followers.

 

The [legal basis is the] acceptance of a contractual relationship in the context of the corresponding social network and in accordance with its Privacy Policies:

How long do we keep personal data?

We are only able to consult or remove your data in a restricted way, given that this is a specific profile. We will process this data for as long as you allow, following us as friends or by clicking on “like”, “follow”, or similar buttons.

Any rectification of your data or restriction on information or publications you wish to make must be done through the your profile or username configuration in the social network itself.

 

+ Jobseekers

What information do we use from your CV?

  • Organization of selection processes for hiring employees.
  • Set job interview dates and evaluate your candidacy.
  • If you give us your consent, we can transfer your CV to collaborating or related companies for the sole purpose of helping you find a job.
  • If you mark the privacy policy acceptance checkbox, you are giving us your consent to transfer your job application to entities comprising our group of companies in order for them to include you in their personnel selection processes.

Likewise, we inform you that once one year has elapsed from the date of receipt of your curriculum vitae, we will securely destroy it.

The legal basis is your unequivocal consent, by sending us your CV.

Do we include third-party personal data?

No, as a general rule we only process the data provided to us by the data subjects. If you provide us with third-party data, you must first inform said persons and request their consent; otherwise, you exempt us from any liability for breach of this requisite.

And what about data with regard to minors?

We do not process data concerning minors under the age of 14. Therefore, please refrain from providing us with such data if the minor has not reached that age, or, if applicable, refrain from providing data on third parties who have not reached said age. TRACE RESEARCH TECHNOLOGIES, S.L.U., holds itself harmless against any liability owing to breach of this precaution.

Do we make email communications?

  • Such communications will only be made in order to manage your application, in the case where you have provided us with this means of contact.
  • If we make commercial communications, these will have been authorized in advance by you.

 

What security measures do we apply?

You can rest assured: We have adopted the optimal level of protection for the Personal Data which we handle, and we have installed all of the technical means and measures available to us in accordance with the state of technology in order to prevent the loss, misuse, alteration, unauthorized access or theft of Personal Data.

Who will your data be sent to?

Your data will not be transferred to third parties, unless this is required by law. Specifically, your data will be sent to the Spanish Tax Authorities and to banks and financial institutions for payment of the service provided or product acquired, and likewise to the data processors required for the execution of the agreement

In the case of purchase or payment, if you choose a given application, website, platform, bank card or other online service, your data will be transferred to that platform or will be processed in the platform environment, at all times with the maximum security.

When we order them to do so, the website development and maintenance company or the hosting company will have access to our website. Said companies will have signed a service provider contract which requires them to keep the same level of privacy as we do.

Any international data transfer when using American applications will be adhered to the Privacy Shield framework, which guarantees that the American software companies comply with the European data protection policies in matters of privacy.

 

What are your rights?

  • To know whether or not we are processing your data.
  • To access your personal data.
  • To request that your data be rectified if it is inaccurate.
  • To request erasure of your data if it is no longer required for the purposes for which it was collected, or to withdraw the consent you previously granted.
  • To request the restriction of processing of your data, in certain instances, in which case we will only keep the data in accordance with the laws in force.
  • To data portability, with your data being provided to you in a structured, common use, or machine readable format. If you prefer, we can send the data to the new data controller designated by you. This is valid only in certain cases.
  • To file a claim with the Spanish Data Protection Agency or competent control authority, if you feel that we have not attended to you properly.
  • To withdraw any consent to data processing which you may have granted, at any time.

 

If you make any changes to your data, please notify us so that we can keep your data up to date.

Would you like a form in order to exercise your rights?   

  • We have forms for you to be able to exercise your rights, which you can request from us by email; or if you prefer, you can use those prepared by the Spanish Data Protection Agency or by third parties.
  • These forms are required to be signed electronically, or to be sent together with a photocopy of your ID Card.
  • If someone is representing you, you must attach a copy of that person’s ID card or have the person sign with his or her electronic signature.
  • Forms may be presented in person, or sent by letter or email to the address of the Data Controller found at the beginning of this text.

 

How long do we take to reply to your Exercise of Rights?

This depends on the right, but no longer than one month from the time of your request, and two months if the matter is highly complex, and we will let you know if we need more time.

Do we use cookies?

If we use any type of cookies other than those which are strictly necessary, you can consult our cookie policy in the corresponding link from our website home page.

 

How long do we keep your personal data?

  • Your personal data will be kept for as long as you continue to associate with us.
  • Once you dissociate yourself, the personal data processed for each purpose will be kept for the legally stipulated time periods, including the period during which a judge or court may require the data in accordance with the statute of limitations for judicial actions.
  • The processed data will be kept until the expiration of the aforementioned legal time periods, in the case where a legal obligation exists to keep the data; if said legal time period does not exist, then the data will be kept until the interested party requests its erasure, or revocation of the consent which had been granted.
  • We will keep all information and communications regarding your purchase or our service provision for the duration of product or service guarantees, in order to deal with any possible claims.
  • In each data processing or typology, we will provide you with a specific period, which you can consult in the following table:

 

File

Document

Retention

Clients

Invoices

10 years

Forms and coupons

15 years

Contracts

5 years

Marketing

Databases or website visitors

For the duration of the processing

Suppliers

Invoices

10 years

Contracts

10 years

Permits, licences, certificates

6 years from the expiration date of the permit, license or certification

Confidentiality and non-competition agreements

Always the term of duration of the obligation or of the non-disclosure

LOPD

Personal data processing, if different from the processing notified to the Spanish Data Protection Agency (AEPD)

3 years

Employee personal data stored in networks, computers and communications equipment used by these employees, access controls and internal management/administration systems

5 years