Privacy policy

BASIC INFORMATION

Data Controller:

IDOVEN 1903, S.L. (“IDOVEN”) B88119862;
Calle Francisco Campos, 22 - PLT BJ, Madrid, 28002, Madrid dpo@idoven.ai

Purposes of the processing of personal data:

1. Manage and maintain the commercial relationship.
2. Responding to requests for information.
3. Management of selection processes.
4. To send its own or third party commercial communications, always through IDOVEN.
5. Contact you to inform you of available positions in IDOVEN that may fit your profile.

Data retention periods:

As long as the commercial relationship is maintained or its deletion is not requested by the data subject, data must not be deleted because they are necessary for compliance with a legal obligation or for the formulation, exercise or defence of claims.

Source

User-supplied

Bases of legitimacy:

-The execution of the contract with the user.
-The legal obligations of IDOVEN.
-The legitimate interest of IDOVEN.
-The user's consent.

Data transfers

All transfers are necessary for the fulfilment of the aforementioned purposes or are carried out in compliance with a legal obligation. Public administrations, suppliers for the provision of the services requested, collaborating companies and entities.

Rights of the data subject:

They may be exercised by e-mail: dpo@idoven.ai, or at IDOVEN's registered office: Calle Francisco Campos, 22 - PLT BJ, Madrid, 28002, Madrid.
We inform you that you may exercise, where appropriate, the rights of access, rectification or erasure, limitation of processing, opposition, the right to data portability or not to be subject to a decision based solely on automated processing, as well as the right to withdraw the consent given.
You can lodge a complaint with the Spanish Data Protection Authority: www.aepd.es.
Further information can be found in the full Privacy Policy in this document.

UK Privacy Notice

Further information can be found at the end of this document in "ANNEX 1 - PRIVACY POLICY FOR USERS ACCESSING FROM THE UNITED KINGDOM".

1. Identification of the controller

IDOVEN 1903, S.L. is responsible for the processing of your personal data.
‍
IDOVEN 1903, S.L., is a company with registered offices at Calle Francisco Campos, 22 - PLT BJ, Madrid, 28002, Madrid and its VAT number is B88119862 (hereinafter, “IDOVEN”).

IDOVEN is committed to the fundamental right to the protection of your personal data and this privacy policy aims to inform you about the processing of your personal data and your rights.

We inform you that IDOVEN has a Data Protection Officer (DPO) in accordance with the GDPR, who is at your disposal for any doubts or queries you may have in relation to this matter, and who can be contacted via dpo@idoven.ai.

If you are accessing IDOVEN from the United Kingdom (UK), you can find information specific to you about data protection regulations in the UK in Annex 1 of this Policy.

2. What information will we collect from you?

a) Data that you provide directly to us:

We collect information about you when you contact us through the channels provided for this purpose, such as the contact form or the recruitment form.

When you contact us through these channels, we will ask you for your details: first and last name, e-mail address, country, academic and professional data.

All fields marked with an asterisk (*) in the forms provided must be completed, the omission of any of them may make it impossible for us to provide you with the services requested.
‍
So that the information you provide us with is always up to date and does not contain errors, you must inform IDOVEN as soon as possible of any changes to your personal data.

Likewise, by clicking on the "I accept" button (or equivalent) incorporated in the aforementioned forms, you declare that the information and data you have provided are accurate and truthful.

b) Indirectly derived data:

When you browse, various cookies and other tracking devices may be installed on your device, as explained in our Cookie Policy. This data may include technical data associated with the device and browsing information about the user's device or browser, such as general location data, user interactions with the site, user IP address, browsing data, etc.

3. What is the origin of the data?

We consider that all data processed by IDOVEN have been freely provided to us.

In the event that the personal data provided is that of a third party, you guarantee that you have informed them of this Privacy Policy and obtained their authorisation to provide their data to IDOVEN for the purposes indicated in this policy.

4. Purposes of the processing and legal basis

IDOVEN acts as data controller for the processing of personal data for the following purposes and on the following legal basis:

Based on the management of the contractual or pre-contractual relationship:

To manage the purchase of the products we offer on our Website and to deal with any type of incident or request arising from the same, as well as to carry out any management related to after-sales service.
To provide you with the services you have requested and to deal with your requests for information, as well as to facilitate the exercise of your rights.
Evaluate CVs received and manage selection processes.

Depending on the applicable legal obligations:

To enable users to exercise their data protection rights.
Comply with the regulations applicable to IDOVEN.

Based on the specific, free and unequivocal consent that you give us at the time of collecting your data:

To carry out segmentation and profiling tasks based on their interests and by analysing the use of the services offered, such as browsing history or bookings made through the website or the App, in order to adapt offers and promotions to each customer, offering personalised services and information.
When we do not find vacancies that match your profile, we may contact you and offer you vacancies that match your profile provided that you fill in the form available in the contact section.

Based on the existence of a legitimate interest of IDOVEN:

To keep you informed about IDOVEN's products and services, related to the products or services that we provide and that may be of interest to you.
Conduct periodic reviews of our services and conduct satisfaction surveys to evaluate and improve the quality of the service we provide.
Conduct internal reviews and, if necessary, contact the customer in case of possible fraud, identity theft or reasonable suspicion.

However, if you do not wish your data to be processed for any of the aforementioned purposes, you may object at any time by contacting us at at dpo@idoven.ai, as indicated in the Exercise of rights section of this Privacy Policy.

5. Data transfers

All transfers of personal data that we carry out are necessary for the fulfilment of the above-mentioned purposes, or are carried out in order to comply with a legal obligation:

To the Administrations and the Administration of Justice, as well as to the Fuerzas y Cuerpos de Seguridad del Estado in compliance with the legal obligations applicable to us.
Payment service providers (banks, payment gateways, etc.), in case the customer makes a payment through the service offered by one of these companies.
Providers of IT services (storage, hosting, CRMs and maintenance) necessary for the maintenance of the website and the processing of your data collected through it.

We signed with all of them the agreements required by the regulations.

Where there are suppliers outside the European Economic Area , we ensure that safeguards are in place to ensure that the data can be transferred securely and in a compliant manner (either because we have signed up to the Standard Contractual Clauses approved by the European Commission or because we rely on one of the other valid safeguards such as binding corporate rules or one of the exceptions in the rules).

6. Rights management

We inform you that you may exercise the following rights:

The right of access to your personal data in order to know which personal data are being processed and the processing operations carried out on them.
The right to rectify any inaccurate personal data.
The right to have your personal data deleted, where possible.
The right to request the restriction of the processing of your personal data where there are doubts as to the accuracy, lawfulness or necessity of the processing, in which case we may retain the data for the exercise or defence of claims.
The right to object to automated decision-making, including profiling.
The right to object to the processing of your personal data where the legal basis allowing us to process your personal data is legitimate interest.
The right to portability of your data where the legal basis allowing us to process your data is the existence of a contractual relationship or your consent.
Right to withdraw the consent given to IDOVEN.

You can exercise your rights at any time and free of charge in the following ways:

By sending an e-mail to dpo@idoven.ai, indicating the right you wish to exercise.
By sending a written request to Calle Francisco Campos, 22 - PLT BJ, Madrid, 28002, Madrid, indicating the right you wish to exercise.
In addition, when you receive any communication from us, by clicking on the unsubscribe section that will contain such communication, you will be able to unsubscribe from all previously accepted commercial communications.

If we have doubts about your identity, we may request additional information to verify it.

‍We also inform you that you have the right to lodge a complaint with the Spanish Data Protection Agency, the Spanish Data Protection Authority, if you consider that we have failed to comply with applicable data protection legislation in relation to the processing of your personal data.

We also inform you that you can register on the Robinson List at www.listarobinson.es: the advertising exclusion system managed by the Spanish Digital Economy Association (ADIGITAL), where you can register to show your opposition to your data being used for the purpose of sending you commercial communications.

In addition, we inform you that you can sign up for the Robinson List at www.listarobinson.es: the advertising exclusion system managed by the Spanish Association for the Digital Economy (ADIGITAL), where you can register in order to show your opposition to your data being used for the purpose of sending you commercial communications.

7. Data retention period

We will keep your personal data for the duration of the contractual relationship and, after the end of the contractual relationship, we will keep it blocked for the duration of the statute of limitations for applicable legal actions. After that, the data will be deleted.

If you have given us your data for a process selection , we will keep your data for the duration of the selection process at IDOVEN. In any case, your data will not be stored for more than 24 months.

If you have given us your consent to send you commercial communications or to notify you of vacancies that may fit your profile, we will keep your data until you withdraw your consent or ask us to delete your data.

If we rely on legitimate interest to send you marketing communications, we will process your data for this purpose until you opt out of receiving them.

8. Security and confidentiality

To prevent unauthorised access to or unauthorised disclosure of personal data, we have put in place appropriate technical and physical measures and management processes to safeguard and secure your information.

9. Minors

Minors under 18 years of age may not make use of the services available through the Website without the prior authorisation of their parents, guardians or legal representatives, who shall be solely responsible for all acts carried out through the Website by the minors in their care. In this regard, and to the extent that IDOVEN cannot control whether or not the users are minors, it will be the parents and guardians who will provide the necessary mechanisms to prevent minors from accessing the Web Site and/or providing personal data without their supervision.

10. Privacy policy update

We make every effort to keep our privacy policy up to date. If we make changes, these will be clearly identifiable in a visible way (e.g. we may communicate changes to you by email).

This privacy policy has been revised and published on 05/09/2025.

This privacy policy has been revised and published on 05/09/2025.

ANNEX 1 – PRIVACY POLICY FOR USERS ACCESSING FROM THE UK

This Privacy Notice supplements our general Privacy Notice and has been developed specifically for individuals accessing and using our services from the United Kingdom.

For more information about the organisation's acquisition, use and sharing of personal data, please see our main notice, and for variations to that notice and key details in relation to UK legislative requirements, please see below:

Who are we?

IDOVEN 1903, S.L. (hereinafter "IDOVEN") is registered as a company in Spain with CIF B88119862 with registered office at Calle Francisco Campos, 22 - PLT BJ, Madrid, 28002, Madrid.

In order to provide personal data processing services in the UK, we have registered with the Information Commissioner's Office (ICO) under registration number ZB561367 and have engaged 8foldGovernance (a specialist information governance consultancy service provider) to act as our UK representative.

What does this mean for your data protection rights?

Your rights in relation to your data as a UK resident are set out in our main notice and are summarised below for your convenience. You may contact us to exercise any of these rights by emailing us at the following address: dpo.uk@idoven.ai .

Your right of access: you have the right to ask us for copies of your personal information.
Your right to rectification: you have the right to ask us to rectify personal information that you believe to be inaccurate. You also have the right to ask us to complete information which you consider to be incomplete.
Your right to erasure: you have the right to ask us to erase your personal information in certain circumstances.
Your right to restrict processing: you have the right to ask us to restrict the processing of your personal data in certain circumstances.
Your right to object to processing: you have the right to object to the processing of your personal data in certain circumstances.
Your right to data portability: you have the right to request that we transfer the personal information you have provided to us to another organisation, or to you, in certain circumstances.
Your right to withdraw consent at any time.

International Transfers

As Idoven is a Spanish company based in Madrid, personal data may be transferred outside the UK where necessary. Where personal data is transferred outside the UK, appropriate technical and organisational security measures will be implemented. All international transfers will only take place if they comply with the relevant legislation.

How to claim

We strive to meet the highest standards when collecting and using personal information. For this reason, we take very seriously any complaints we may receive in this regard. We encourage people to let us know if they believe that any collection or use of information by us is unfair, misleading or inappropriate.

You can do this again by contacting us by email at dpo.uk@idoven.ai and you can also contact our Data Protection Officer (DPO).

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) for any complaints about data processing in the UK. For more information, see the ICO website: www.ico.org.uk.