Below, we inform you about the processing of your personal data through the privacy policy -hereinafter, policy-.

Servicios de Colaboración Integral, S.L.U -hereinafter, SCI-, with address at Paseo de la Alameda, No. 34, 7th floor, letter A, 46023 Valencia, with N.I.F B96067400, provides you with the privacy policy on the website located at the URL https://gruposci.es/ -hereinafter, website- with the aim of offering you information on how we will process your personal data and how we will protect your privacy and information. This policy is an integral part of the Legal Notice.

WE WOULD APPRECIATE IT IF YOU COULD TAKE A FEW MINUTES TO READ OUR PRIVACY POLICY, IT WON’T TAKE LONG AND YOU WILL BE INFORMED ABOUT HOW WE TREAT AND PROTECT YOUR PERSONAL DATA.

BRIEF INTRODUCTION

This policy applies to all users of the website -hereinafter, the user or users- whether or not they are clients of SCI, and it is made available at the URL https://gruposci.es/, as well as in the interactions that the user makes with SCI through the specified website.

SCI reserves the right to modify this policy to adapt it to future legislative, doctrinal, or jurisprudential developments that may be applicable, or for technical, operational, commercial, corporate, business reasons, and in any case whenever it deems appropriate. We will inform you of the changes or updates through the website or by other means deemed appropriate. In any case, it is recommended that each time you access this platform, you read this policy in detail because continuing to use the functionalities provided by SCI after being notified of the modifications will imply your agreement with them, except in cases where your express consent is required.

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?

The entity responsible for processing personal data is Servicios de Colaboración Integral, S.L.U -hereinafter, SCI-, with address at Paseo de la Alameda, No. 34, 7th floor, letter A, 46023 Valencia, with N.I.F B96067400.

WHO IS THE DATA PROTECTION OFFICER (DPO) OF SCI?

To ensure proper management in the processing of your data, SCI has appointed a Data Protection Officer -hereinafter, DPO-, whom you can contact regarding all issues related to the processing of your personal data, as well as for the exercise of your rights according to applicable regulations.

You can contact our DPO through the following contact details:

1. Postal address: calle Albacete, No. 3, Edificio Mízar, 1st floor, 28027 Madrid, Spain.
2. Email address: privacidad@eysaservicios.com.

FOR WHAT PURPOSE AND LEGAL BASIS DO WE PROCESS YOUR DATA?

1. Contact, management, and processing of user inquiries and requests on the website. The contact form on the website is enabled for this purpose.
   • Purpose: The personal data of users who contact SCI through any of the contact channels provided on the website for the purpose of receiving inquiries or requests from users will be processed to maintain contact between the parties, manage website users, provide customer or user support services, and manage and process requests.
   • Data processed: (i) identifying data, such as your name and surname; (ii) contact data, such as your contact phone number, email address; and (iii) professional data, such as the company you work for.
   • Legal basis: the management and processing of the legal relationship between the user and SCI, i.e., in managing your request, maintaining contact between the parties, and, where applicable, providing the service requested by the user.
2. Management of cookies on the website.
   • Purpose: If you accept our cookie policy, particularly those for analytics, personalization, advertising, and social networks, users’ personal data may be processed by SCI for the purpose of (i) tracking and analyzing user behavior on the website, such as counting visits and traffic sources to evaluate and improve web performance; (ii) providing better website functionality and personalization, such as allowing the user to access a series of criteria on their terminal like language, browser type used to access, etc.; (iii) managing advertising; and (iv) managing social network services that we have added to allow users to share our content, as well as creating a profile of user interests by monitoring their browsing across other websites. More information on the cookies we use can be found in our cookie policy.
   • Data processed: browsing data, such as the IP address and the domain from which access is obtained, date and time of the visit, etc.
   • Legal basis: the user’s express and explicit consent for the processing of their personal data for one or more specific purposes. In some cases, the legitimate interest of SCI or third parties will also apply, related to the proper technical usability, management, maintenance, development, and evolution of the website, tools, network, and associated information systems (ex art. 6.1 f) of the GDPR).
3. Sending newsletters and information about events.
   • Purpose: We will process your data to offer you commercial information about our products and services, our quarterly newsletter, and information about event invitations such as trade fairs, congresses, etc.
   • Data processed: (i) identifying data, such as your name and surname; and (ii) contact data, such as your phone number or email address.
   • Legal basis: Your consent or legitimate interest provided that the legal requirements for this are met. For example, within the legal limits established, SCI may have a legitimate interest in generating interest and promoting the contracting of its products, as well as improving its image.
4. Sending invitations and managing your registration/participation in the event, organization, and logistics.
   • Purpose: Managing your data when you contact SCI through the contact channels provided, whether through the contact form, phone call, meeting/contact in person, sending emails from the user, or through any other means.
     Additionally, your data will be processed to maintain contact between the parties and manage the inquiries you make through the enabled channels.
   • Data processed: (i) identifying data, such as your name and surname; (ii) contact data, such as your phone number or email address; and (iii) professional data, such as the company you belong to, the role/function you perform in the work environment.
   • Legal basis: (i) the legitimate interest of SCI in creating and developing a network of contacts for the development and maintenance of public relations and/or networking with its stakeholders, as well as for the exchange of opinions on sectoral interest issues, or related to the activity, to contribute to the development of the communities in which its business is conducted.
     To manage your registration and/or participation in the event, (i) will be the consent you provide when registering through the previously enabled corporate channels; and, (ii) in the management and processing of the legal relationship established between the user and SCI with the invited user, or the person invited to participate as a speaker or panelist, i.e., in managing your request, maintaining contact between the parties, holding the event, ensuring it is conducted with the due guarantees, and that all attendees can participate under the specified conditions.
5. Capturing corporate images and videos.
   • Purpose: capturing images and videos for the creation of audiovisual material and its subsequent dissemination in online and offline corporate media, e.g., corporate website, social media profiles, etc.
   • Data processed: (i) photographs; (ii) video recordings.
   • Legal basis: (i) If it is general shots and ambient sound, the legitimizing basis will be the legitimate interest of SCI in publishing and promoting the “SCI” image and brand with the aim of giving it visibility and enhancing its public image within the EYSA group in line with its ideals and values materialized through the organization of events; (ii) if it is images or recordings captured during the event, directly or indirectly by SCI, where close-ups are taken in which your image and/or voice can be directly recognized, the processing of your data will be legitimized by your consent. Posing intentionally for a photograph implies your consent, i.e., looking directly and intentionally at the camera and/or technology intended for image capture or recording. In addition to consenting to the processing of images, you also consent to the free transfer of your image for the use of technical means currently known and those that may be developed in the future, for the maximum period allowed by law and without geographical limitation. If you do not want to appear in any image and/or recording, we advise you to avoid posing and the areas that may be designated as specific photo zones.
6. Access control.
   • Purpose: managing your data to verify your identity and authorized access to our facilities and, in the case of access to SCI corporate events, verify identity and authorized access to the event. It is about exercising due diligence to preserve the safety of people and facilities.
   • Data processed: (i) identifying data, such as your name, surname, and identity document number.
   • Legal basis: the legitimate interest of SCI in verifying the identity of visitors or, in the case of events, the attendees who have previously registered.
7. Video surveillance.
   • Purpose: (i) ensuring the safety of people, property, or facilities and, if applicable, investigating security incidents that may occur; and, (ii) access control to facilities.
   • Data processed: the image of people accessing or attempting to access the premises through the installed cameras.
   • Legal basis: to ensure the safety of people, property, or facilities, as well as access control to facilities, the legitimizing basis will be the legitimate interest pursued by the data controller.
8. Fraud prevention.
   • Purpose: users’ personal data will be processed to comply with established legal and corporate norms, as well as to cooperate with competent authorities to prevent crimes or fraud.
   • Data processed: identifying and contact data, as well as data related to commercial transactions.
   • Legal basis: the legitimate interest of SCI, which consists of ensuring reasonable use of the resources provided on the website and reducing the risk of becoming victims of fraud or scam operations. If you wish to obtain more information about the legitimate interest of SCI concerning this purpose, you can request information at privacidad@eysaservicios.com.

When the basis that legitimizes the processing of your personal data is your consent, we remind you that you have the right to revoke it at any time easily and for free by writing to privacidad@eysaservicios.com.

WHAT SOURCES DO THE PROCESSED DATA COME FROM?

The data that SCI processes as a result of your interactions through our website originate from the following sources:

1. Data provided by the user through the completion of the spaces to manage communication with the users made available by SCI.
2. Data provided and/or generated as a result of the development, processing, and management of the relationship you establish with SCI.
3. Data generated as a result of the user’s navigation and use of the website.

Additionally, SCI will process those data directly obtained from you.

HOW LONG DO WE KEEP YOUR DATA?

The personal data provided will be kept for the period determined based on the following criteria: (i) legal obligation of conservation and; (ii) request for deletion by the interested party in cases where applicable. You can request additional information about the retention periods at privacidad@eysaservicios.com.

In general, when personal data are no longer necessary for the purposes for which they were collected, they will be blocked, remaining available to the competent authorities for the possible clarification of legal responsibilities in accordance with applicable regulations, and cannot be used for other purposes. Once the legal periods corresponding to the statute of limitations for possible legal actions have passed, your data will go from being blocked to being deleted and may also, if applicable, be anonymized securely by SCI (anonymized/non-personal data).

WHAT ARE THE CONSEQUENCES OF NOT PROVIDING US WITH YOUR DATA AND WHAT SHOULD YOU GUARANTEE?

We avoid requesting more data than strictly necessary for each purpose; consequently, we will request the minimum and essential data to carry out the personal data processing.

You need to be informed that the lack of provision of your personal data could lead to the impossibility of: (i) correctly navigating our website, such as disabling technical cookies; (ii) processing your specific request or application, such as insufficiently completing the forms that may be enabled on the website.

In any case, the information and personal data you provide must be: (i) sufficient, although adjusted, limited, and proportionate to the website forms; (ii) accurate, updated, and truthful, to adequately verify your identity and access the website services.

SCI informs you that when personal data is collected through a form made available on our website, it will be necessary to register at least the data indicated in the form as mandatory marked with an (*). If such data considered necessary are not provided, SCI will not be able to manage the requested service or query.

If you provide data of a third party, you will guarantee that you have previously informed the third party of the entire content of this privacy policy and obtained their consent for the processing of their data by SCI.

We inform you that you will be responsible for the data and personal information you provide to SCI and, if applicable, for the services you require or contract.

To provide your personal data, through any enabled means such as, for example, through our website, you are over eighteen (18) years of age. By providing data to SCI, you declare and guarantee that you are over eighteen (18) years of age, assuming such a decision’s responsibility.

DO WE SHARE YOUR PERSONAL DATA WITH THIRD PARTIES?

In general, we do not make your data available to third parties. SCI does not carry out any data transfer or communication unless there is a reasonable need or prior consent. In this regard, your personal data may be communicated to the following recipients:

1. Purpose: your data will be communicated to other organizations of the EYSA Group of which SCI is a subsidiary, when necessary for the proper organization of events -including their security-, for internal administration purposes, or for publishing audiovisual material captured during events on the websites of each organization. Your data may also be transferred to public administration bodies when necessary for the organization of events in which such bodies participate.
   Legal basis: the legitimate interest of SCI in the proper management and holding of the event so that it is carried out with full guarantees and that all attendees can participate appropriately.
2. Purpose: when certain accommodation, transport, and/or travel agency service providers are required.
   Legal basis: the application of pre-contractual measures at the request of the interested party and the legitimate interest of SCI in the proper management and holding of the event, allowing it to be carried out with full guarantees and that all attendees can participate appropriately in it.
3. Purpose: to comply with a judicial procedure, legal obligation, data may be transferred to public administrations in the cases provided for by law, to the Security Forces and Corps of the State, and to the Courts and Tribunals.
   Legal basis: Compliance with a legal obligation.
4. Purpose: access control. It is possible that we may have to communicate your personal data to the access control point of the building where our facilities are located to verify your identity and authorized access.
   Legal basis: legitimate interest.

Similarly, third-party SCI providers may access your personal information to provide services, such as the necessary technical infrastructure of the website. In any case, third-party providers are configured as data processors and operate following the instructions and on behalf of SCI in compliance with applicable regulations.

ARE INTERNATIONAL TRANSFERS OF YOUR PERSONAL DATA MADE?

We inform you that, in general, no international transfers of your personal data are planned, with SCI adopting the necessary measures and guarantees in this area in accordance with the applicable personal data protection regulations. Notwithstanding the foregoing, in our cookie policy, you will find information on the use of cookies by third parties that may carry out international transfers of personal data. You can consult the privacy information of the third parties that serve cookies on this website through our Cookie Policy.

WHAT RIGHTS DO YOU HAVE, WHAT DO THEY MEAN, AND HOW CAN YOU EXERCISE THEM?

You can exercise the rights of access, rectification, deletion, portability, restriction of processing, and opposition through the following means:

• Written letter addressed to calle Albacete, No. 3, Edif. Mízar, 1st floor – 28027 Madrid – Spain. It should contain the express reference to “data protection.”
• To the email address privacidad@eysaservicios.com.

In both cases, the rights holder must prove their identity, and, only if you have not previously provided data that allows us to identify you, or the circumstances require enhanced accreditation, such as access to certain personal data, or the provided means are not sufficient, such as the email address you registered with, we may request additional information such as a copy of the front of your identity document.

SCI will provide the requested information within a maximum period of one (1) month from the receipt of the request. This period may be extended by another two (2) months if necessary, considering the complexity and number of requests.

SCI informs you that if you consider your data protection rights to have been violated, you can file a complaint with the competent Data Protection Authority (in Spain, the Spanish Data Protection Agency www.aepd.es).

In any case, we recommend that before filing any complaint with the AEPD, you contact SCI’s Data Protection Officer (privacidad@eysaservicios.com) to analyze the specific situation and respond to your request or exercise with an effective and amicable solution.

ARE SECURITY MEASURES APPLIED TO PROTECT YOUR PERSONAL DATA?

Considering the nature, scope, context, and purposes of the processing, as well as the risks of varying probability and severity for your rights and freedoms, SCI applies appropriate technical and organizational measures to ensure the security and protection of your personal data, which SCI will review and update when necessary or as circumstances require.

VALIDITY AND MODIFICATION OF THE PRIVACY POLICY

This policy is effective from July 16, 2024.