Privacy Policy

Koncare Biotech S.L. undertakes to protect the privacy of users who access this website and/or any of its services. The use of the website and/or any of the services offered by Koncare Biotech S.L. implies acceptance by the user of the provisions contained in this Privacy Policy and that their personal data will be treated as stipulated therein. Please note that although there may be links from our website to other websites or social networks, this Privacy Policy does not apply to the websites of other companies or organisations to which the website is redirected. Koncare Biotech S.L. does not control the content of third party websites, nor does it accept any responsibility for the content or privacy policies of these websites.

Questions about privacy

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, (RGPD), and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), we offer you the following information on the processing of your personal data:

Who is responsible for the processing of your data?

Identity: Koncare Biotech S.L.

VAT NUMBER: B19325638

Address: C/ San Cesareo, 9 28021 Madrid – Spain

Tel.: +34 691 55 03 29/ +34 910 145 724

Email: info@koncare.es

For what purposes do we process your personal data?

• We process the information provided to us to manage our security services.
• In the event that you contact us via the contact form on our website, we will process it in order to deal with your enquiry.
• We may also use your information to inform you about our activities, products or services where you are already a customer of ours or, if you are not, where you have given us your consent to do so.
• When you enter our premises, your image may be recorded by video surveillance cameras for security screening purposes.
• If you send us a CV, we will process the data for the purpose of managing our CV database for recruitment purposes.

How long will we keep your data?

The personal data provided will be kept for as long as you are a user of our services or wish to receive information, given that you may object to the processing of your data for promotional purposes when you provide it to us or at any time thereafter by notifying us, and then for the periods established to comply with our legal obligations, which in the case of accounting and tax documentation for commercial purposes will be 6 years, in accordance with Art. 30 of the Commercial Code, and for tax purposes will be 4 years, in accordance with Articles 66 to 70 of the General Tax Law.

• Images captured by the video surveillance system will be kept for one month.
• In the case of CVs, the data will be kept for one year.

What is the legitimacy for the processing of your data?

For the management of the contractual relationship with the data subject, we will base the processing of the data on the execution of the contract or within the framework of the pre-contractual relationship.

For the sending of commercial information we will base the processing on your consent, although if you are already our customer, we may send you information about our products and services, always providing a simple and free means to unsubscribe, in accordance with the provisions of article 21.2 of Law 34/2002, of 11 July, on information society services and electronic commerce.

With regard to information sent by minors under 14 years of age, it will be an essential requirement that the information be sent with the consent of the minor’s parent, guardian or legal representative in order for the personal data to be processed. If this is not the case, the legal representative of the minor will inform us as soon as he/she becomes aware of it.

With regard to the collection of data in the capture of images by the video surveillance system, the legitimacy is given by the legitimate interest of preserving the security of persons and property.

To whom will your data be communicated?

The data will not be communicated to third parties, unless required by law or necessary to fulfil the purpose of the processing.

What are your rights when you provide us with your data?

• Any person has the right to obtain confirmation as to whether or not we are processing their personal data.
• Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• In certain circumstances, data subjects may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defence of claims.
• Also, in certain circumstances and for reasons relating to their particular situation, data subjects may object to the processing of their data. In this case, we will stop processing the data, except for compelling legitimate reasons or for the exercise or defence of possible claims.
• Data subjects also have the right to data portability.
• Every data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
• Finally, data subjects have the right to lodge a complaint with the competent supervisory authority.

How can you exercise your rights?

By sending a letter with a copy of a document that identifies you to our physical or e-mail address.

How did we obtain your data?

The personal data that we process comes from the data subject. The interested party guarantees that the personal data provided are true and is responsible for communicating any changes to them. The data marked with an asterisk are obligatory in order to be able to provide the requested service.

What data do we process?

The categories of data that we may process in the provision of our services are:

• Data of an identifying nature
• Postal or e-mail addresses

In the case of the video surveillance system:

• Image

In the case of curricula, too:

• Personal characteristics
• Academic and professional

The data is limited, as we only process the data necessary for the provision of our services and the management of our business.

Do we carry out international data transfers?

The use of Google analytics cookies (including youtube cookies) and Facebook marketing cookies involves a transmission of data to these companies located in the United States of America. The United States and the European Union have a Privacy Framework agreement approved by Commission Implementing Decision of 10.7.2023 in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council. More information can be found in the privacy policy of Google and Meta (facebook).

Do we use cookies?

We use cookies while browsing our website with the user’s consent.

The user can configure their browser to be notified of the use of cookies and to prevent their use. Please visit our cookie policy.

What security measures do we apply?

We apply the security measures established in article 32 of the RGPD, therefore, we have adopted the necessary security measures to ensure a level of security appropriate to the risk of the data processing we carry out, with mechanisms that allow us to guarantee the confidentiality, integrity, availability and permanent resilience of the processing systems and services.

Some of these measures are:

• Informing staff of data processing policies.
• Carrying out regular backup copies.
• Controlling access to data.
• Regular verification, evaluation and assessment processes.

How do we process data on behalf of third parties?

The type of data, the category of interested parties and the treatments that we may carry out on behalf of our clients will be established in the corresponding data processing contract.