This Privacy Policy is part of the General Terms and Conditions governing the website https://grupoenvera.org (hereinafter, the Website).

Last update: May 2018 In accordance with the regulations on the protection of personal data, and in accordance with the provisions of Articles 13 and 14 of EU Regulation 2016/679, General Data Protection Regulation, by means of this Privacy Policy, the User is informed of the following:

Responsible for the processing of personal data

GRUPO ENVERA (hereinafter "the Responsible"), with registered office at Calle Trespaderne, 9, 28042 (Madrid) and CIF G28641116, is responsible for the processing of data provided by users ("Users") through the Web.

You can contact GRUPO ENVERA by mail at the above address or by e-mail at gdpr@grupoenvera.org,

We reserve the right to modify or adapt this Privacy Policy at any time, so we encourage you to review it.

Data subject to processing

WEB CONTACTS, E-MAIL

The Responsible will treat the identification and contact data, as well as other data that the user includes in his request, that the user provides through the contact form, or when contacting the Responsible by email. In addition, GRUPO ENVERA may treat the IP, operating system or browser used by the user, and even the duration of the visit, anonymously. Thus, the data will be processed for the following purposes:

• Respond to inquiries, requests or petitions.
• Manage the requested service, answer requests, or process requests.
• Information by electronic means, related to a request.
• Perform analysis and improvements on the Web, on the products and services of GRUPO ENVERA.
• Improve commercial strategy.

In the case of Partners, collaborators and/or donors, in addition to the identification and contact data provided by the user when registering as such, the Responsible Party will process their ID, town, and data related to the chosen payment method, as well as the fee paid and its frequency in order to manage the economic contribution made as a donor/collaborator/partner.

In any of the cases, the data processing is based on the acceptance and consent of the interested party, or on the execution of a contract. In those cases where to make a request it is necessary to fill out a form and check a box of acceptance of this policy, such affirmative act by the user will necessarily imply that he/she has been informed and has expressly consented to the processing of his/her data based on this privacy policy.

SOCIAL NETWORK CONTACTS

The personal data available in the RRSS profiles, as well as those that the user provides to the Responsible when contacting him through this channel, will be processed for the purpose of:

• Respond to inquiries, requests or petitions.
• Manage the requested service, answer the request, or process a request.
• Establish a user-responsible relationship, and create a community of followers.

In this case the treatment is based on the acceptance of a contractual relationship in the environment of the social network concerned, and in accordance with their privacy policies, so it is advisable that the user consult them.

GRUPO ENVERA will only be able to consult or cancel the data in a restricted way by having a specific profile. These will be treated as long as the user allows through the different interactions that each RRSS allows. Any rectification of the data or restriction of information or publications, the user must do it through the configuration of your profile on the social network itself.

JOB SEEKERS/INTERNSHIPS

The Web has an employment portal whose use by the user requires registration as a candidate through the form "REGISTER CANDIDATE". The information required in this form (identification and contact data), as well as the information that the Candidate already registered may provide in their CV when applying for any job offer (professional, academic data, etc.), will be processed by the Responsible for the following purposes:

• Organization of selection processes for the hiring of employees.
• Appointment for job interviews
• CV analysis and application evaluation

The legal basis for the treatment described is the unequivocal consent of the candidate, who to send the CV must register as a candidate and accept this policy. After one year from the receipt of a curriculum vitae, GRUPO ENVERA will proceed to its secure destruction.

Processing of third party data

As a general rule, the Responsible will only process the data provided by their owners. In case of receiving data from third parties, it must previously inform and request their consent to such persons, or otherwise GRUPO ENVERA will be exempt from any liability for failure to comply with this requirement.

Data of minors

GRUPO ENVERA treat data from children under 14 years without the consent of their legal representatives. Therefore, the user must refrain from providing them if you do not have that age or, where appropriate, to provide data of third parties who do not have the aforementioned age. The Data Controller disclaims any liability for failure to comply with this provision.

Commercial communications by electronic means

GRUPO ENVERA will not send commercial communications by electronic means if the user does not give prior express consent to do so. In case of having consented, the user may object at any time.

Security measures we apply

GRUPO ENVERA has adopted an optimal level of information security, putting the means and adopting the appropriate technical and organizational measures according to the state of technology to prevent the loss, misuse, alteration, unauthorized access or theft of Personal Data.

Communication to third parties

The personal data of users may be transferred to:

• State Agency of the Tax Administration and to banks and financial entities for the collection of the service rendered or product acquired; by virtue of legal obligation.
• Data processors necessary for the provision of the service, who will have signed a service provision contract that obliges them to maintain the same level of privacy as that of the data controller.

In the event that any of the assignments involve an international transfer of data when using American applications, it will be adhered to the Privacy Shield agreement, which guarantees that American software companies comply with European data protection policies regarding privacy.

User's rights

All users can exercise their rights of access, rectification, suppression and opposition as well as the rest of rights that the RGPD recognizes, or contact for any issue related to the protection of personal data by sending a communication to the Data Protection Officer of the ENVERA GROUP, either by e-mail to gdpr@grupoenvera.org, indicating in the subject "Data Protection", or in writing to the postal address indicated above.

You may also use the e-mail address above to revoke your consent or to express your refusal to the processing of your data at any time.

The user may always contact the Controller if he/she considers that there is any problem in the processing of his/her data by the Controller, and the Controller will try to solve it with the utmost diligence; or, in any case, the Spanish Data Protection Agency, as the corresponding data protection authority for Spain.

In order to facilitate the process, and to comply with the principle of data accuracy, if any data is modified, the Data Controller appreciates the communication of such modification.

Depending on the right exercised, GRUPO ENVERA will take a maximum of one month to respond from receipt of the request, and two months if the issue is very complex, in which case the user will be notified.

Cookies

The Web uses Cookies, if you want more information, you can do so by accessing our Cookies Policy.

Retention of personal data

• Personal data will be kept for as long as the user remains linked to the data controller.
• Once unlinked, the data processed for each purpose will be kept for the legally stipulated periods, including the period in which a judge or court may require them in accordance with the statute of limitations for legal actions.
• The data processed will be kept until the expiration of the aforementioned legal terms, if there is a legal obligation to maintain them, or if there is no such legal term, until the interested party requests their deletion or revokes the consent given.
• GRUPO ENVERA will keep all the information and communications related to the provision of the service, while the guarantees of the products or services last, to attend possible claims.