Privacy Policy
What do we use your data for?
We use the data you have provided to us online or through any other means to handle your queries and suggestions, provide you with the services or supply you with the requested products.
Why do we hold it?
We are entitled to process your data for different reasons. By filling in a form or sending an email in which you raise a query or suggestion, we have a legitimate interest in attending to it.
Once your query reaches us, an email is automatically generated with a link to our form. After answering the questions asked, the responses are automatically processed in our calculation engine and results are generated. These results will be downloaded internally in an anonymised CSV file.
Your responses will be used to apply advanced analytics and intelligence, with the aim of generating dissemination articles to share knowledge or to carry out benchmarking.
Who do we share your data with?
We will only share data with those partner companies necessary to handle the requests received and provide our services or supply you with products. They could also be shared with banking institutions and bodies required by law. Under no circumstances do we sell your data to third parties.
What rights do you have?
You have the right to access, rectify or erase your personal data. You can also object to its use, request portability of your data and avoid being subject to automated decisions.
In the processing of your personal data, we apply the following principles to ensure the greatest possible protection:
● Principle of lawfulness, fairness and transparency: We will always require your consent for the processing of your personal data for one or several specific purposes, informing you in advance with complete transparency.
● Principle of data minimisation: We only request the data strictly necessary in relation to the purposes for which we require it.
● Principle of storage limitation: Data will be kept only for as long as necessary for the purposes of processing. We periodically review our lists and delete those records that have been inactive for a considerable period of time.
● Principle of integrity and confidentiality: We process your data in a way that ensures adequate security and confidentiality. We take all necessary precautions to prevent unauthorised access or misuse by third parties.
In this privacy policy you will find more detailed information about the use we make of the personal data of our customers, suppliers and users, regardless of the means they have used to communicate with us (online form, telephone, email or in person).
We like to be transparent about what we do with your personal data, so that you understand the implications of its use and the rights you have over it. Therefore, we keep our Privacy Policy, Legal Notice and Cookies Policy up to date, information that you can consult on our website.
If you have any questions or would like more information about our privacy policy, you can continue reading this document or contact us.
1. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?
The data controller is HUMAN DATA INSTITUTE, S.L.:
Identity: HUMAN DATA INSTITUTE, S.L. - B02764652
Address: Agustín de Foxá 40, 28036 - Madrid (Madrid)
Phone:
Web: www.dathum.com
Email: hello@dathum.com
Data Protection Officer: Aixa Corpore, S.L.
DPO Email: aixa4291@dpocanarias.com
HUMAN DATA INSTITUTE, S.L. informs the user that the data provided through browsing our website and the various data collection forms will be processed by HUMAN DATA INSTITUTE, S.L., and that such processing is recorded in the Register of Processing Activities managed by HUMAN DATA INSTITUTE, S.L. in accordance with the provisions of the GDPR.
Once your query is received, a standard email is automatically generated with a link to our form. After answering the questions asked, the responses are automatically processed in our calculation engine and results are generated. These results will be downloaded internally in an anonymised CSV file.
Your responses will be used to apply advanced analytics and intelligence, with the aim of generating dissemination articles to share knowledge or to carry out benchmarking.
2. WHAT IS YOUR PERSONAL DATA USED FOR?
At www.dathum.com, we process data from both users of our website and third parties who maintain relationships with us. To facilitate understanding of the processing we carry out on your data, we differentiate the purpose, types of data and legal basis according to the category of individuals whose data we process. Below we classify the persons whose data we process based on the type of relationship they maintain with HUMAN DATA INSTITUTE, S.L.
2.1. Website users
What data do we collect from our website users?
a) Data from users who complete any of the available forms. HUMAN DATA INSTITUTE, S.L. requests:
● Identifying data: name and surname, phone number, postal and email address
● Data relating to the request
b) Data from users who browse our website: Data provided by cookies and Google Analytics.
For what purposes will we process your personal data?
When the user accepts our privacy policy, they authorise us to use the personal data provided for the following processing:
● To send information and provide the requested service through the various forms available on our website.
● To organise, communicate and hold events or similar activities.
● To prepare statistical studies to assess the success of campaigns and find out how the user came to know about a service provided by HUMAN DATA INSTITUTE, S.L. This data is collected for statistical purposes and is for internal use.
How do we obtain your data?
We obtain your data through:
● The form completed by the user for the purpose specified therein. This form is subject to acceptance of this privacy policy by means of a checkbox.
● The browsing data obtained from cookies that the user accepts when first accessing www.dathum.com.
What is the legal basis for processing your data?
● Express consent of the user (Article 6.1.a. GDPR), expressed by completing forms, ticking the box for accepting commercial communications and participating in our blog.
● Legitimate interest for creating browsing profiles and detecting preferences through the installation of cookies.
● Execution of a contract or adoption of pre-contractual measures when the customer makes a request through the various forms available to the user on our website or requests information about the services provided by HUMAN DATA INSTITUTE, S.L.
2.2. Suppliers
What data do we collect from our suppliers?
● Identifying data: name and surname, phone number, postal and email address
● Employment and professional data
● Activities and businesses
How do we obtain your data?
We obtain your data through:
● Signing the contract binding us.
● Acceptance of the submitted quote.
● Receipt of invoices from the supplier.
● Signing the Data Processing Agreement if applicable.
For what purposes will we process your personal data?
● Managing information relating to our goods and services suppliers and their representatives.
● Maintaining the contractual relationship.
● Managing payments and receipts under contracts.
What is the legal basis for processing your data?
● Execution of a contract or pre-contract to send information and manage the service provided.
● Legitimate interest in managing data of supplier representatives.
2.3. Customers
What data do we collect from our customers?
a) Data from customers who complete any of the forms available at www.dathum.com as well as at the physical premises of HUMAN DATA INSTITUTE, S.L.
● Name and surname, phone number, postal and email address
● Data relating to the request
b) Data from customers who register on our platform:
● Name and surname, postal and email address, phone number, billing address.
c) Data from customers who make a booking or order at our premises in person:
● Name and surname, postal and email address, phone number, billing address
d) Data from our customers obtained through our contracts and quotes.
e) Data from customers who make a purchase online or in person:
● Title, name, surname, postal and email address, phone number, billing address.
● Products purchased/services provided and payment method, invoice or purchase receipt.
How do we obtain your data?
If you are an online customer, we obtain your data through:
● Through the request form for information, quotes or orders.
● Through cookies accepted at www.dathum.com.
If you are an in-person customer:
● Through the customer registration form.
● Through acceptance of the submitted quote or signing of the contract.
For what purposes will we process your personal data?
● Generating and managing documentation associated with your requests and purchases.
● Providing you with information about offers, products and services related to your purchase.
● Processing your reservation or online purchase through our platform.
What is the legal basis for processing your data?
● Execution of a contract or pre-contract, to manage information and provide the service.
● User consent, for sending newsletters and commercial communications.
● Legitimate interest, for sending information about exclusive promotions, news and satisfaction surveys.
2.4. Job applicants and candidates.
What data do we collect from applicants?
● Name and surname, phone number, postal and email address.
● Academic and employment data.
● Supporting documents submitted by the candidate.
How do we obtain your data?
● Through submission of a CV at our premises or via the 'Work with us' form on our website.
For what purposes will we process your personal data?
● Exclusively for open or future selection processes, in the case of a job pool.
What is the legal basis for processing your data?
● User consent, by registering in our database to participate in active or future selection processes.
2.5. Social Media Contacts
What data do we collect?
● Identifying data on the social network. HUMAN DATA INSTITUTE, S.L. will not request additional data beyond what is included in the user's profile.
For what purposes will we process your personal data?
● Handling queries, requests or petitions.
● Engaging with users who form part of our community of followers.
What is the legal basis for processing your data?
● Execution of a contract or pre-contract, depending on the social network used and its privacy policies.
3. HOW LONG DO WE KEEP YOUR DATA?
3.1. Website users
● Data processed based on the consent of the website user will be retained for as long as it remains relevant to the purpose for which it was collected and consent has not been revoked.
● Data processed based on legitimate interest will be retained for the time necessary to fulfil the purpose for which it was collected, always ensuring the protection of the rights and freedoms of the data subjects.
● Data processed based on the execution of a contract or pre-contractual measures will be retained for as long as the contractual relationship is in force and for the additional time required by legal obligations.
3.2. Suppliers
● Data processed based on legitimate interest will be retained for as long as it is necessary for the purpose for which it was collected, always ensuring respect for the rights and freedoms of the data subjects.
● Data processed based on a contract or where its processing is legitimised by a legal obligation will be retained for as long as the contractual relationship is in force and, thereafter, for the legally prescribed period. In such cases, the data cannot be deleted by the data subject except in the legally established blocking circumstances.
3.3. Customers
● Data processed based on customer consent will be retained for as long as it is relevant to the purpose for which it was collected and consent has not been revoked.
● Data processed based on legitimate interest will be retained for as long as necessary for the purpose that motivated its collection, always ensuring the protection of the rights of the data subjects.
● Data processed based on a contract or where its processing is legitimised by a legal obligation will be retained for as long as the contractual relationship is in force and, thereafter, for the legally established period. In such cases, the data cannot be deleted by the data subject except in the legally established blocking circumstances.
3.4. Job applicants and candidates
● Data processed based on the consent of the job applicant will be retained for as long as the selection process they applied for remains open.
● If the application is not linked to a specific selection process but is instead added to our job pool, the maximum retention period will be one year, at which point the CV will be deleted and destroyed, unless the data subject requests its retention and update.
3.5. Social Media Contacts
● Data processed from social media contacts will be retained for as long as the user and HUMAN DATA INSTITUTE, S.L. maintain a connection on the platform (for example, through the 'follow', 'like' or similar option).
● Since this data does not depend directly on HUMAN DATA INSTITUTE, S.L., the rectification or deletion of information must be managed directly by the user through their profile settings on the corresponding social network.
3.6. Processing for scientific, historical or statistical research
Regardless of the legal basis that supported the collection of data, it may be processed for scientific, historical or statistical research purposes, always applying appropriate safeguards and respecting the rights and freedoms of the data subjects.
4. ADDITIONAL INFORMATION ON DATA PROCESSING
Only persons over 14 years of age may provide data through our website and email. If you are under this age, you must have the consent of your parents or legal guardians.
The User warrants the authenticity and currency of all data communicated to HUMAN DATA INSTITUTE, S.L. and declares that they are over 14 years of age, and shall be solely responsible for any false or inaccurate statements made.
In the event of making a service reservation or online purchase, the data subject must be over 18 years of age, the age legally established in the civil code for reaching legal majority and capacity to act.
The personal data processed by HUMAN DATA INSTITUTE, S.L. may be mandatory or voluntary. Through web forms, data of special categories will not be requested in order to guarantee your privacy. If it is necessary to collect special category data to provide a service, you will be asked for it through another channel. The data that will be requested in the forms is:
● Identifying data: name and surname, phone number, postal and email address.
● Data relating to the request.
● Data from users who wish to receive commercial communications and information.
Voluntary information is that which the user is not required to provide in order to contact us.
Fields marked with an asterisk (*) or the word (required) in our forms are mandatory, and failure to provide them will make it impossible to provide the service or attend to your request.
In the event that you provide us with data about third parties, you declare that you have their consent and undertake to pass on the information we provide you in this clause, holding HUMAN DATA INSTITUTE, S.L. harmless from any type of obligation. However, HUMAN DATA INSTITUTE, S.L. may carry out checks to verify that the third party has been informed, adopting the due diligence measures established in data protection regulations.
5. TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?
Data will not be transferred to third parties except where legally required or where it is necessary to handle your request.
Among the recipients to whom your data may be communicated are:
● Public Administrations and Bodies when required by tax, employment, Social Security or any other applicable regulations.
● Companies responsible for data processing (providers of fraud detection and prevention, technology services, customer service, advertising and marketing services, and, in general, third-party providers necessary for the provision of services offered by HUMAN DATA INSTITUTE, S.L. such as messaging and transport service providers, etc.)
6. ARE INTERNATIONAL DATA TRANSFERS MADE?
www.dathum.com is hosted in Ireland, a country within the European Union, in the territory of the European Economic Area, or which complies with the guidelines established in Articles 46 and 47 of the GDPR, therefore, there will be no international transfers of data provided by users on the website.
Our website only accesses user data through the following means:
● The contact forms available to the user on the website.
● The cookies the user has previously accepted.
However, international data transfers may occur in the context of the transfers or disclosures mentioned above. For this purpose, HUMAN DATA INSTITUTE, S.L. will use the tools established in Articles 46 and 49 of the GDPR, thus ensuring the protection of data in the event of transfer to countries without an adequacy decision from the European Commission.
In any case, third parties with whom certain personal data is shared must demonstrate, in advance, the adoption of adequate technical and organisational measures for their correct protection. Transfers to third countries will only be made where there is a legally binding instrument in accordance with Articles 46 et seq. of the GDPR.
By accepting this privacy policy, the user accepts that an international data transfer may take place in accordance with the indicated guarantees. If the requirements established in the GDPR are not met, the data subject may grant their express consent to the international transfer or a contract may be executed in their interest. Otherwise, authorisation must be requested from the Supervisory Authority.
Furthermore, some services provided by and for HUMAN DATA INSTITUTE, S.L. may involve the transfer of personal data to third countries outside the EU, in cloud computing services offered by international providers such as Google or Microsoft. In such cases, compliance with the aforementioned guarantees will be verified.
HUMAN DATA INSTITUTE, S.L. does not under any circumstances sell its users' data to third parties.
7. WHAT RIGHTS DO YOU HAVE AND HOW CAN YOU EXERCISE THEM?
The user may exercise the following rights before HUMAN DATA INSTITUTE, S.L.:
● Access their personal data
● Rectify it when it is inaccurate or incomplete
● Request the erasure or deletion of data when, among other reasons, it is no longer necessary for the purposes for which it was collected
● Object to its processing
● Request restriction of processing of their data when any of the conditions provided for in the regulations apply
● Request portability of their data in the cases provided for in the regulations
● Prevent being subject to automated decisions
● Revoke the consents granted
To exercise their rights, the user must send a written request indicating the right they wish to exercise, accompanied by an identity document and postal or email address for notification purposes. This request can be made through:
● Post to: HUMAN DATA INSTITUTE, S.L., Agustín de Foxá 40, 28036 - Madrid (Madrid).
● Email to: hello@dathum.com
HUMAN DATA INSTITUTE, S.L. must respond to the exercise of rights request within one month of receiving the request. This period may be extended by a further two months if necessary, taking into account the complexity and number of requests. We will inform you of any extension within one month of receiving the request, indicating the reasons for the delay.
Furthermore, data subjects have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) when they consider that HUMAN DATA INSTITUTE, S.L. has infringed their data protection rights. More information at www.aepd.es.
8. IS MY DATA SECURE?
HUMAN DATA INSTITUTE, S.L. has a current contract with the Hosting company Amazon Technologies Inc. for the hosting of its website.
HUMAN DATA INSTITUTE, S.L. guarantees the adoption of appropriate measures to ensure the confidential processing of your data given its reserved nature and undertakes that such data will remain secret, handling it with the utmost confidentiality, and declares that it has implemented in its information system the security policies corresponding to the type of data handled in accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
9. LINKS TO OTHER WEBSITES
If you choose to leave our website through links to other websites not belonging to our organisation, HUMAN DATA INSTITUTE, S.L. will not be responsible for the privacy policies of such websites nor for the cookies they may store on the user's computer. We are HUMAN DATA INSTITUTE, S.L. and we process your data as Data Controller. This means we are responsible for how we use and protect your personal data.
