BASIC INFORMATION

Data Controller: 

• IDOVEN 1903, S.L. (“IDOVEN”) B88119862; 
• Calle Francisco Campos, 22 - PLT BJ, Madrid, 28002, Madrid dpo@idoven.ai

Purposes of the personal data processing: 

1. Manage and maintain the business relationship.
2. Respond to requests for information.
3. Management of selection processes.  
4. Send commercial communications of our own or of third parties, always through IDOVEN.

Data retention periods: As long as the commercial relationship is maintained or its elimination is not requested by the data subject, they should not be deleted because they are necessary for the fulfilment of a legal obligation or for the formulation, exercise and defense of claims.

Source

Provided by the user

Bases of legitimacy: 

-The execution of the contract with the user.
-The legal obligations of IDOVEN.
-The legitimate interest of IDOVEN.
-The user’s consent.

Data transfers

All are necessary for the fulfilment of the above mentioned purposes or are carried out in compliance with a legal obligation. Public administrations, suppliers for the provision of the requested services, companies and collaborating entities.

Data subject’s rights

• They will be exercised by email: dpo@idoven.ai, or at the registered office of IDOVEN: Calle Francisco Campos, 22 - PLT BJ, Madrid, 28002, Madrid.
• We inform you that you can exercise, where appropriate, the rights of access, rectification or deletion, limitation of processing, opposition, to the portability of the data or not to be subject to a decision based solely on the automated processing, as well as to withdraw the consent given.
• You can file complaints at the Spanish Data Protection Authority: www.aepd.es.
• More information is in the complete Privacy Policy of this document.

UK Privacy Notice

• More information can be found at the end of this document within “ANNEX 1 – PRIVACY POLICY FOR USERS ACCESSING FROM THE UK”

1. Identification of the Controller

IDOVEN 1903, S.L. is the Controller of the processing of your personal data.
‍
IDOVEN 1903, S.L., is a company domiciled at Calle Francisco Campos, 22 - PLT BJ, Madrid, 28002, Madrid and its Tax ID number is B88119862 (hereinafter, “IDOVEN”).

IDOVEN is committed to the fundamental right to the protection of your personal data and this privacy policy is intended to inform you about the processing of your personal data and of your rights.

We inform you that IDOVEN has a Data Protection Officer (DPO) in accordance with the GDPR, who is at your disposal for any doubts or queries you may have in relation to this matter, and whom you may contact through dpo@idoven.ai.

If you are accessing IDOVEN from the United Kingdom (UK), you can find specific information for you regarding data protection regulations in the UK in Annex 1 of this Policy.

‍

2. What information will we collect from you?

a) Data you provide directly to us:

We collect information about you when you contact us through the channels provided for this purpose, such as the contact form or the recruitment form.

When you contact us through these channels, we will ask for your data: name and surname, email address, country, academic and professional data.

All the fields marked with an asterisk (*) in the forms provided will be mandatory, the omission of any of them could lead to the impossibility of us being able to provide the services requested.
‍
In order to ensure that the information provided is always up to date and free of errors, you must notify IDOVEN as soon as possible of any changes to your personal data.

Likewise, by clicking on the “I accept” (or equivalent) button incorporated in the aforementioned forms, you declare that the information and data you have provided are accurate and truthful.

b) Data obtained indirectly:

When you browse, various cookies and other tracking devices may be installed on your device, as explained in our Cookie Policy.

‍

3. What is the origin of the data?

We consider that all the data processed by IDOVEN has been provided to us freely.

In the event that the personal data provided is from a third person, you guarantee that you have informed them of this Privacy Policy and have obtained their authorisation to provide the data to IDOVEN for the purposes indicated in the present policy.

‍

4. Purposes of the processing and legal basis

IDOVEN acts as the controller of the personal data for the following purposes and with the following legal basis:

Based on the management of the contractual or pre-contractual relationship:

1. To manage the acquisition of the products that we offer on our Website and to attend to any type of incident or request derived from the same, and carry out any management related to the after-sales service. 
2. To provide you with the services you have requested and to attend to your requests for information, as well as to facilitate the exercise of your rights. 
3. To evaluate the CVs received and manage the selection processes.

Based on the applicable legal obligations:

1. Allow users to exercise their data protection rights.
2. Comply with the regulations applicable to IDOVEN.

Based on the explicit, free and unequivocal consent that you give us at the time of collecting your data:

1. Carry out segmentation and profiling tasks according to your interests and through the analysis of the use of the offered services, such as browsing history or reservations made through the website or the App, in order to adapt the offers and promotions to each client, offering personalized services and information.

Based on the existence of a legitimate interest of IDOVEN:

1. To keep you informed about the products and services of IDOVEN, related to the products or services that we carry out and that may be of interest.
2. To carry out periodic reviews of our services and carry out satisfaction surveys to evaluate and improve the quality of the service we provide.
3. Carry out internal reviews and, if necessary, contact the client in the event that a possible fraud or identity theft is detected or there are well-founded suspicions.

However, if you do not want your data to be processed for any of the aforementioned purposes, you can object at any time by contacting us at dpo@idoven.ai as indicated in the Exercise of Rights section of this Privacy Policy.

‍

5. Data transfers

All transfers of personal data that we carry out are necessary for the fulfilment of the above-mentioned purposes, or are made in order to fulfil a legal obligation:

1. To public administrations and the administration of justice, and to law enforcement agencies in compliance with the legal obligations applicable to us.
2. Companies providing payment services (banks, payment gateways, etc.), in case the customer makes a payment through the service offered by one of these companies. 

We sign with all of them the agreements required by the regulations.

In the cases where outside the EEE suppliers exist, we guarantee that the necessary safeguards are in place to ensure that the data can be transferred securely and comply with the regulations (either because we have signed the Standard Contractual Clauses approved by the European Commission, or because we make use of one of the other valid safeguards such as binding corporate rules or any of the exceptions contained in the regulations).

‍

6. Rights management

We inform you that you will be able to exercise the following rights:

1. Rights of access to your personal data to know which ones are being processed and the processing operations carried out with them.
2. Right to rectify any inaccurate personal data.
3. Right to delete your personal data, where possible. 
4. Right to request limitation of the processing of your personal data when the accuracy, legality or necessity of the data processing is in doubt, in which case, we may retain the data for exercise or defence of claims. 
5. Right to object to automated decision making, including profiling.
6. Right to object to the processing of your personal data when the legal basis that enables us to process them is the legitimate interest. 
7. The right to the portability of your data when the legal basis that enables us to process them is the existence of a contractual relationship or your consent. 
8. Right to withdraw the consent granted to IDOVEN.

You can exercise your rights at any time and for free in the following ways:

9. By sending an e-mail to dpo@idoven.ai, indicating the right you wish to exercise.
10. By sending a written request to the address Calle Francisco Campos, 22 - PLT BJ, Madrid, 28002, Madrid, indicating the right you wish to exercise. 
11. In addition, when you receive any communication from us, by clicking on the unsubscribe section that will contain that communication, you can unsubscribe from all previously accepted commercial communications.

In the case where we have doubts about your identity, we could request some additional information to verify it.

We also inform you that you have the right to file a complaint at the Spanish Data Protection Agency, Spanish Data Protection Authority if you believe that we have breached the applicable data protection legislation regarding the processing of your personal data.  

In addition, we inform you that you can sign up for the Robinson List at www.listarobinson.es: the advertising exclusion system managed by the Spanish Association for the Digital Economy (ADIGITAL), where you can register in order to show your opposition to your data being used for the purpose of sending you commercial communications.

‍

7. Data retention period

We will maintain your personal data during the contractual relationship and, once it is terminated, we will keep them blocked during the prescription periods of the applicable legal actions. After that, the data will be deleted.

‍

8. Security and confidentiality

In order to prevent unauthorized access or unauthorized disclosure of personal data, we have undertaken appropriate technical and physical measures and management processes to safeguard and secure your information.

‍

9. Minors

Minors under 18 years of age may not use the services available through the Website without the prior authorization of their parents, guardians or legal representatives, who shall be solely responsible for all acts performed through the Website by the minors in their care. In this regard, and to the extent that IDOVEN is not able to control whether or not users are minors, it shall be the parents and guardians who shall enable the necessary mechanisms to prevent minors from accessing the Website and/or providing personal data without their supervision.

‍

10. Update of the privacy policy

We do our best to keep our privacy policy fully updated. If we make changes, they will be clearly identifiable in a conspicuous manner (for example: we may communicate changes to you by email).

This privacy policy has been reviewed and published as of February 1, 2024.

‍

ANNEX 1 – PRIVACY POLICY FOR USERS ACCESSING FROM THE UK

This Privacy Notice supplements our overarching Privacy Notice and has been developed specifically for individuals accessing and using our services from the UK.

For details of the organisation's acquiring, use and sharing of personal data please refer to our main notice and for variations to that notice and key detail in relation to the UK legislative requirements please see below:

Who we are? 

IDOVEN 1903, S.L. (hereinafter "IDOVEN") is registered as a company in Spain with the CIF B88119862 residing at Calle Francisco Campos, 22 - PLT BJ, Madrid, 28002, Madrid.

To enable us to offer services that process personal data in the UK we have registered with the Information Commissioner's Office (ICO) under registration no.ZB561367 and engaged 8foldGovernance (a provider of consultancy services, specialising in information governance) to act as our UK representative.

What does this mean for your Data Protection Rights? 

The rights available to you in respect of your data as someone residing in the UK are laid out in our main notice and summarised below for convenience. You can contact us to take up any of these rights via email to the following email address: dpo.uk@idoven.ai . Whilst our main privacy notice refers to providing an ID card, in the case of UK residents without an ID card we will accept an electronic copy of a passport or driving licence.  

● Your right of access - You have the right to ask us for copies of your personal information. 

● Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 

● Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances. 

● Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. 

● Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.

● Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

International Transfers

As Idoven is a Spanish company based in Madrid, personal data may be transferred outside of the UK when necessary. When personal data is transferred outside of the UK, the appropriate technical and organisational safeguards will be in place. All international transfers will only take place if it is compliant with the relevant legislation.

How to make a complaint

We strive to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we may receive about this very seriously. We encourage people to inform us if they think that any collection or use of information by us is unfair, misleading or inappropriate. 

You can again do this by contacting us via email at dpo.uk@idoven.ai and you may also contact our Data Protection Officer (DPO).  

If you remain dissatisfied, you have the right to make a complaint to the Information Commissioner’s Office (ICO) for any complaints of data processing within the UK. Please see the ICO’s website for more information: www.ico.org.uk.

‍