Privacy policy

Basic information on data protection. Data controller: Kea IT Consulting S.L.U.

Purposes of processing

  • Informative website.
  • Manage requests for information.

Legitimacy of processing

  • Explicit consent of the data subject.
  • Legitimate interest for data processing.
  • Compliance with legal obligations.

Data retention

The data will be kept for the period strictly necessary to fulfil the established purposes, as long as the data subject does not withdraw his/her consent, as well as for the fulfilment of legal obligations.

Addressees

The personal data collected through the website will not be disclosed to third parties, except to those who provide services to Kea IT Consulting S.L.U. in order to manage the provision of services, the contractual and/or pre-contractual relationship with the interested parties, or to process the requests made by them.

Rights of data subjects

Access, rectification, opposition, erasure (‘right to be forgotten’), restriction of processing, portability and not to be subject to individualised decisions.

Websites:

Main website: https://www.keaitc.com/

Additional information

Additional detailed information on Data Protection can be found in the attached clauses below.

Additional information on data protection

In accordance with Articles 13 and 14 of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, ‘GDPR”), and Articles 6 and 11 of Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter, “LOPDGDD”), which regulate the right to information in data collection, we inform you of the following.

What personal data do we collect?

The personal data that the user can provide are:

  • Contact information: email address.
  • Any other information you choose to share with us.
  • Failure to provide the requested personal data or refusal to accept this data protection policy will make contact via the website impossible.

Why and for what purpose do we process your data?

Depending on the purposes, we will need to process certain data, which, in general, will be as follows:

  • The website is fully informative about Kea IT Consulting S.L.U. services.
  • The collection and automated processing of data through email contact Kea IT Consulting S.L.U. is carried out to manage your request.

The personal data obtained through any of the channels of the website will form part of the Register of Processing Activities and Operations (RAT) owned by Kea IT Consulting S.L.U. This will be updated periodically in accordance with the provisions of the RGPD; Kea IT Consulting S.L.U. has implemented all relevant security measures in this regard. Users are informed of the possibility of withdrawing their consent if it was granted for a specific purpose, without affecting the lawfulness of the processing based on consent prior to its withdrawal.

What is the legitimacy for the processing of your data?

The processing of your data may be based on the following legal grounds:

  • Explicit consent of users in their communication with us by e-mail.
  • Legitimate interest in relation to the following purposes:
    • Compliance with legal obligations for the prevention of fraud, cooperation with public authorities and/or possible claims by third parties.
    • Profiling through user navigation on the website.

Kea IT Consulting S.L.U.‘s legitimate interest is to ensure that our website is secure, as well as to help us understand users’ needs, expectations and level of satisfaction, and therefore improve our services. All actions are carried out with the aim of increasing user satisfaction and guaranteeing a unique browsing experience and possible contracting.

How long do we keep your data?

The processing of the data for the purposes described will be maintained for the time necessary to fulfil the purpose for which they were collected, as well as to comply with the legal obligations arising from the processing of the data. This does not affect the need to keep the data for the formulation, exercise or defence of possible claims, as permitted by the applicable legislation.
Kea IT Consulting S.L.U. undertakes to cease the processing of personal data when the retention period has ended, as well as to appropriately block the data in our databases.

To whom is your data communicated?

In general, Kea IT Consulting S.L.U. will not transfer personal data to third parties, except in situations where the data may be transferred to collaborators who provide services to Kea IT Consulting S.L.U. In these cases, we ensure that the recipients respect confidentiality and take appropriate measures to protect personal data. Kea IT Consulting S.L.U. seeks to guarantee the security of personal data when it is sent outside the company. The third parties that Kea IT Consulting S.L.U. engages are obliged to ensure that the information is processed in accordance with current data protection regulations. In cases where the law may require the disclosure of personal data to public bodies or other parties, only the data strictly necessary to comply with such legal obligations will be disclosed. Kea IT Consulting S.L.U. shares data with external suppliers, as data processors, to carry out certain services.

Where is your data stored?

In general, data is stored in Spain, within the European Union (EU). To ensure an adequate level of protection for data sent to third countries outside the EU, Kea IT Consulting S.L.U. will take the necessary technical and organisational measures.

What rights do you have and how can you exercise them?

You may address your communications and exercise your rights by writing to the following e-mail address:

In accordance with data protection regulations, you may request:

  • Right of access: You may request information about the personal data we hold about you.
  • Right of rectification: You may notify us of any changes to your personal data.
  • Right to erasure and right to be forgotten: You can request the deletion of personal data after it has been blocked.
  • Right to restriction of processing: This refers to limiting the processing of personal data.
  • Right to object: You can withdraw your consent to the processing of data or object to the further processing of your data.
  • Right to data portability: In some cases, you can request a copy of your personal data in a structured, commonly used and machine-readable format for transmission to another data controller.
  • Right not to be subject to automated decisions: You can ask not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or significantly affect you.

In some cases, your request may be refused if you request the deletion of data necessary for compliance with legal obligations. In addition, if you have a complaint about the processing of data, you can lodge a complaint with the competent data protection authority.

Who is responsible for the accuracy and veracity of the data provided?

The user is solely responsible for the veracity and correctness of the data included through any of the forms on the website, exonerating Kea IT Consulting S.L.U. from any liability in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated. Users undertake to provide complete and correct information in the forms they fill in. Kea IT Consulting S.L.U. is not responsible for the veracity of the information that is not of its own elaboration or that comes from another source, so it does not assume any responsibility for hypothetical damages that may arise from the use of such information. Kea IT Consulting S.L.U. is exonerated from liability for any damage that the user may suffer as a result of errors, defects or omissions in the information provided by Kea IT Consulting S.L.U., provided that this information comes from sources outside the company.

What security measures do we implement to protect your personal data?

Kea IT Consulting S.L.U. has adopted the legally required levels of security for the protection of personal data and endeavours to install those additional technical means and measures within its reach to prevent the loss, misuse, alteration, unauthorised access and theft of personal data provided to Kea IT Consulting S.L.U. However, users must be aware that security measures on the Internet are not impregnable. Therefore, Kea IT Consulting S.L.U. is not responsible for hypothetical damages that may arise from interferences, omissions, interruptions, computer viruses, telephone breakdowns or disconnections in the operational functioning of this electronic system, caused by reasons beyond Kea IT Consulting S.L.U.’s control. delays or blockages in the use of this electronic system caused by deficiencies or overloads in the telephone lines, in the Internet system or in other electronic systems, as well as damage that may be caused by third parties through illegitimate intromissions beyond the control of Kea IT Consulting S.L.U.

How do we use cookies?

The Kea IT Consulting S.L.U. website uses cookies to optimise and personalise your browsing experience. Cookies are physical information files that are stored in the user’s own device, and the information collected through cookies facilitates browsing and improves the user’s experience. The data collected through cookies may be shared with the creators of these cookies, but in no case will the information obtained be associated with personal data or data that can identify the user. However, if the user does not want cookies to be installed on their hard drive, they have the option of configuring their browser to block the installation of these files. For more information, please consult our Cookies Policy.

Internal security policy

Security breaches can be caused by employees, third parties or technical errors. We are therefore legally obliged to notify affected persons if their personal data has been seriously compromised within 72 hours. In addition, users will be notified as soon as the security breach is resolved.

Modification of the privacy policy

This privacy policy is subject to change. We recommend that you periodically review the privacy policy.