Privacy Policy

Privacy Policy

In compliance with the principle of transparency and the duty to inform established under the applicable EU and national data protection regulations, IMPACT HUB S.L.U. hereby informs data subjects of the circumstances and conditions under which their personal data are processed, as well as of the rights to which they are entitled.

 

This Privacy Policy forms part of the General Terms and Conditions governing this Website.

 

Who is the data controller?

IMPACT HUB S.L.U.

B85461572
C/ Gobernador 26, 28014 Madrid (Spain).

Telephone: +34 911 924 854

Email: madrid@impacthub.net

 

We reserve the right to amend or adapt this Privacy Policy at any time. We recommend that you review it periodically in order to remain informed.

 

If you fall within any of the following categories, please consult the corresponding information section:

 

CLIENTS

What personal data do we process?

We will process the identification and contact details of the representatives of our corporate clients for the purpose of managing the contractual relationship with the legal entities they represent. If you are a natural person, we will process your identification, contact and financial data solely for the purpose of managing the contractual relationship entered into with you.

For what purposes will we process your personal data?

  • To prepare quotations and follow up on them through communications between both parties.
  • To provide the contracted services and to manage and maintain the commercial relationship with our clients.
  • To provide information through electronic means relating to your requests.
  • To provide commercial information or information on events through electronic means, provided that we have your explicit consent or where this falls within our legitimate interest.
  • To issue invoices and comply with the corresponding tax obligations.
  • To carry out the relevant transactions.
  • To perform control and collection procedures.

What is the legal basis for processing your data?

  • The existence of a contractual relationship between the parties or the implementation, at the request of the data subject, of pre-contractual measures.
  • Compliance with a legal obligation applicable to the Data Controller.
  • Consent given by the data subject or by his/her legal representative.
  • The Data Controller’s legitimate interest.

For how long will we retain personal data?

Personal data will be retained for the duration of the relationship between the parties and, once it has ended, duly blocked for the applicable statutory limitation periods arising therefrom.

 

WEBSITE OR EMAIL CONTACTS

What data do we collect through the Website?

If you provide information via a contact form, we will process your identification and contact details, as well as any other data you voluntarily include in such form.
In addition, we may process your IP address, the type of operating system or browser used, and the duration of your visit, in a pseudonymised manner.

For what purposes will we process your personal data?

  • To manage the requested service, to respond to your enquiry/request, or to process your application.
  • To provide commercial information or information on events through electronic means.
  • To carry out analyses and improvements on the IMPACT HUB S.L.U. website in relation to the products or services offered, as well as to enhance the commercial strategy.

What is the legal basis for processing your data?

The user’s consent or the existence of a contractual relationship between the parties.

In those cases in which a request requires the completion of a form and the clicking of the “submit” button, such action necessarily implies that the user has been informed and has expressly consented to the content of the clause attached to said form or has accepted the Privacy Policy.

All of our forms include an asterisk (*) to indicate mandatory fields. If you do not provide such information, or if you do not check the box accepting the Privacy Policy, the submission of the form will not be permitted.

For how long will we retain personal data?

For as long as you remain connected with us or until you exercise a right that entails the erasure of your data, in which case the data will remain duly blocked for the legally established limitation periods.

 

SUPPLIERS

What personal data do we process?

We will process the identification and contact details of the representatives of our suppliers for the purpose of managing the contractual relationship with the legal entities they represent.

For what purposes will we process your personal data?

  • Preparation/approval of quotations and follow-up thereof through communications between both parties.
  • Monitoring the contracted services and managing the commercial relationship.
  • Issuing invoices and complying with the relevant tax obligations.
  • Providing commercial or event-related information through electronic means, provided that we have your express consent or that this falls within our legitimate interest.
  • Carrying out the relevant transactions, as well as control and collection procedures.

What is the legal basis for processing your data?

  • The existence of a contractual relationship between the parties or the implementation of pre-contractual measures.
  • Compliance with a legal obligation applicable to IMPACT HUB S.L.U.
  • Consent given by the supplier’s legal representative.
  • IMPACT HUB S.L.U.’s legitimate interest.

For how long will we retain personal data?

Personal data will be retained for the duration of the relationship between the parties and, once it has ended, duly blocked for the applicable statutory limitation periods arising therefrom.

NEWSLETTER CONTACTS

What data do we collect through the Newsletter?

Identification data (first and last name) and contact data (email address).

For what purposes will we process your personal data?

To send periodic updates, promotions, and information of interest.

What is the legal basis for processing your data?

Consent given by the data subject or their legal representative. In cases where the data subject subscribes, it will be necessary to check a box and click the “submit” button. This action necessarily implies that the data subject has been informed and has expressly consented to receive the newsletter.

For how long will we retain personal data?

Until the revocation of the consent given, which may be exercised at any time without retroactive effect, with the data remaining duly blocked for the legally established limitation periods.
The data subject will always have the option to unsubscribe in any communication.

 

JOB APPLICANTS

What personal data do we process?

We will process the data you provide to us in the context of a recruitment process or unsolicited application. Generally, we will process your identification data, contact details, Curriculum Vitae, and information relating to your professional and/or academic experience.

For what purposes will we process your personal data?

  • Organizing recruitment processes for employee hiring.
  • Scheduling interviews and evaluating your application.
  • Storing your Curriculum Vitae for future recruitment processes in case you are not selected for the process for which you applied.

What is the legal basis for processing your data?

  • Implementation of pre-contractual measures at the request of the data subject.
  • Consent given by the data subject or their legal representative for the retention of the Curriculum Vitae and data relating to their professional and/or academic experience.

For how long will we retain personal data?

Until the completion of the recruitment process and, if we have authorization, for a maximum period of one (1) year, with the data remaining duly blocked for the legally established limitation periods once the aforementioned periods have expired.

QUALITY SURVEYS

What data will we process?

Your identification data and any data derived from the responses provided in the survey.

For what purposes will we process your personal data?

To assess the level of quality in the service or product provided, as well as to improve the services or products offered.

What is the legal basis for processing your data?

Your consent, which may be revoked at any time without retroactive effect.

For how long will we retain personal data?

Until the revocation of the consent given, which may be exercised at any time without retroactive effect, with the data remaining duly blocked for the legally established limitation periods.

 

VIDEO SURVEILLANCE

What personal data do we process?

We will process your image and, in the case of outdoor cameras or parking areas, the license plate of your vehicle.

For what purposes will we process your personal data?

To ensure the security of property, facilities, and individuals.

What is the legal basis for processing your data?

The legal basis legitimizing the processing is the performance of a task carried out in the public interest.

For how long will we retain personal data?

For a period of one (1) month from the date of capture, except in the event of incidents, in which case the data may be retained for a longer period until the resolution of the incident or until the recordings are communicated to the State Security Forces and Corps or the competent authorities.

 

ETHICS CHANNEL

What data will we process?

If you identify yourself, we may process the following data: first name, last name, email, telephone number, and any personal data of third parties that you provide in the communication.

For what purposes will we process your personal data?

  • To manage the communications.
  • To adopt the corresponding corrective measures.
  • If necessary, to inform you of the outcome of the procedure.

What is the legal basis for processing your data?

The legal basis legitimizing the processing is the compliance with a legal obligation applicable to the Data Controller.

For how long will we retain personal data?

Data will be retained for the period strictly necessary to clarify the reported facts. In any case, after three (3) months from the receipt of the communication, or, if no acknowledgment of receipt was sent to the informant, three (3) months from the expiration of the seven-day period following the submission of the communication, except in cases of particular complexity requiring an extension of the period, in which case it may be extended for a maximum of an additional three (3) months, the provided data will be deleted unless they are being investigated in a different legal framework.

 

SOCIAL MEDIA

What personal data do we process?

We will use the data available on your user profile, as well as any data you provide when contacting us through our social media profiles.

For what purposes will we process your personal data?

  • To process and respond to your enquiries, requests, or applications.
  • To manage the requested service.
  • To publish your image on our profiles, at your request.
  • To engage with you and create a community of followers.

What is the legal basis for processing your data?

The legal bases legitimizing the processing are the voluntary consent of the data subject to contact us and, where applicable, the acceptance of a contractual relationship within the relevant social media environment. The processing of data within the Social Network will be carried out in accordance with its Privacy Policies.

For how long will we retain personal data?

We can only access or remove your data in a restricted manner due to the nature of a specific profile. We will process your data for as long as you follow us, are friends with us, or interact with “like,” “follow,” or similar buttons.

Any corrections to your data or restrictions on information or publications must be carried out through your profile or user settings within the social media platform itself.

 

ADDITIONAL INFORMATION ON THE PROCESSING OF YOUR DATA

Do we include personal data of third parties?

No, as a general rule we only process the data provided to us by the data subjects themselves. If you provide data of third parties, you must beforehand inform them and obtain their consent; otherwise, you release us from any liability arising from the failure to comply with this requirement.

What about data of minors?

We do not process data of minors under the age of 14. Therefore, please refrain from providing such data if you are under that age, or, where applicable, from providing data of third parties who are under that age. IMPACT HUB S.L.U. is exempt from any liability arising from non-compliance with this provision.

What security measures do we apply?

You may rest assured that we have adopted an optimal level of protection for the personal data we process and have implemented all technical measures and means at our disposal, in accordance with the state of the art, to prevent loss, misuse, alteration, unauthorized access, and theft.

To whom will your data be disclosed?

Your data will not be disclosed to third parties, except when required by law or with your prior consent. Notwithstanding the foregoing, your data may be communicated to the Spanish Tax Agency and to banks and financial institutions for the collection of the services provided or products purchased.

IMPACT HUB S.L.U. also informs you that your personal data may be shared with the group of companies to which IMPACT HUB S.L.U. belongs. This group of companies is the Agartha Group, whose parent company is Agartha Real Estate SL. You may consult its Privacy Policy at the following link: https://agartharealestate.com/aviso-legal-y-politica-de-privacidad/

To fulfill the purposes indicated in this Privacy Policy, we will collaborate with service providers who may have access to your personal data. IMPACT HUB S.L.U. has entered into the corresponding data processing agreement with these providers, which imposes, among other obligations, the following: to implement appropriate technical and organizational measures; to process personal data only for the agreed purposes; and to act solely in accordance with the instructions provided by IMPACT HUB S.L.U.

What rights do you have?

You have the right to:

  • Access your personal data.
  • Request the rectification of your data if it is inaccurate.
  • Request the deletion of your data.
  • Withdraw the consent you have given.
  • Request the limitation of the processing of your data.
  • Not be subject to automated decisions.
  • Receive your data in a structured, commonly used, and machine-readable format (data portability).
  • Lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) at www.aepd.es

If you modify any data, we kindly ask that you inform us so that your records can be kept up to date.

How to exercise your rights

  • We provide forms to exercise your rights, which you may request at the postal or email addresses indicated at the beginning of this document, or, if you prefer, you may use the forms provided by the Spanish Data Protection Agency or third parties.
  • The forms may be submitted in person, sent by post, or emailed to the address of the Data Controller, as provided at the beginning of this text.
  • In the event of reasonable doubt regarding your identity, we may be required to request additional identification information in order to process your request.

Response time for the exercise of rights

We will respond within one (1) month from receipt of your request, which may be extended by an additional two (2) months where necessary, taking into account the complexity of the request. You will be notified of any such extension in a timely manner.

Do we process cookies?

If we use cookies other than those strictly necessary, you may consult the Cookies Policy at the corresponding link, available at the top of our website.