Privacy Policy

This privacy policy establishes the basis on which we will treat any personal information we may obtain, respecting at all times the principles of legality, loyalty and transparency, as well as the other obligations and guarantees established in the current legislation on personal data protection.

1. WHO PROCESSES YOUR DATA?

The present policy will be applicable to Certtun by VOTTUN SL, with CIF B67319046 and with headquarters at Av/ Alcalde Barnils 64-68, 08850 Sant Cugat del Vallés and contact [email protected]; and to its international subsidiaries and trade names (collectively referred to as VOTTUN).

2. WHY DO WE PROCESS YOUR DATA?

Certtun by VOTTUN processes personal data to manage contractual relations and to carry out the services and activities of the organization, as well as to provide interested parties and customers with information on activities, products and services related to Certtun by VOTTUN. For these purposes, Certtun by VOTTUN informs you of the legitimate bases that will allow the various processing operations:

I. Manage contractual relationships

VOTTUN will process your personal data for the provision of the contracted service(s), as well as to maintain and manage the contractual relationship with the customer.

II. Certtun by VOTTUN's Legitimate Interest

Legitimate interest constitutes a legitimate basis for processing, provided that such interest in processing customer data is within reasonable expectations based on the relationship you have or have had as a customer of Certtun by VOTTUN. We will process your personal data on the basis of our legitimate interest for the following purposes:

  • With due observance of the Information Society Services Law, Certtun by VOTTUN may send you commercial communications, including by electronic means, in order to keep you informed about products and services.
  • Software licenses, as well as informative sessions on related news.
  • Sending of the newsletter of novelties.
  • Training and informative actions, related conferences, publications and subscriptions.
  • Certification of people, partner companies and related actions.

III. Express consent of the interested party

Express consent constitutes a legitimate basis for processing that will allow Certtun by VOTTUN to process your personal data for the purposes described below, after obtaining the corresponding authorization for this purpose:

  • Processing for direct marketing purposes of data provided when registering for a conference or information session, or when downloading free guides, ebooks or similar products through our website.
  • Processing of images of attendees at conferences/events organized by Certtun by VOTTUN for informative and informational purposes, except in the case of capturing general overviews.
  • Processing of data of candidates who apply for a selection process through the Certtun by VOTTUN website.

You are also informed that you may revoke the consent granted whenever you wish by contacting Certtun by VOTTUN through the channels provided for this purpose and informed in this Privacy Policy.

IV. Compliance with legal obligations

We will process your personal data in order to ensure an optimal level of compliance with current legal obligations, as well as to cooperate with legal or administrative authorities when necessary.

3. DATA WE WILL PROCESS

The data to be processed by Certtun by VOTTUN within the framework of the relationship with the data subject and depending on the purpose of the processing shall include, but not be limited to, the following categories:

  • Private contact data and identification data (name and surname, address, email, landline or cell phone number, ID card or similar document, IP address).
  • Data related to employment and organization (company, department, position, responsibilities, functions).
  • Data relating to professional and training circumstances (career, job data, period of employment, tasks, activities, studies, qualifications, evaluations).
  • Financial data for billing management (bank account).
  • Data relating to photographs and videos on personal image.

4. CONSERVATION OF DATA

In compliance with the principle of limitation of the retention period, the data collected will be processed only and exclusively for the time necessary and for the purposes for which they were collected at any given time. It will be understood that the retention of the data is justified when:

  • A legal and/or administrative rule imposes the obligation to keep the data for a certain period of time.
  • It is necessary to respond to the contractual relationship.
  • The data will be used for historical and/or statistical purposes.
  • The legitimate interests of the owner of the data or third parties could be harmed.
  • They are necessary to guarantee the traceability and follow-up of a client's certification.
  • The retention period is specifically defined in the certification scheme being audited.
  • They are necessary for Certtun by VOTTUN to demonstrate compliance with the requirements established in the ISO 17021-1 standard.
  • The data and documentation serve as proof of an activity or service provided, during the statute of limitations.
  • A longer retention period has been agreed upon by the interested parties.

5. CATEGORIES OF RECIPIENTS

Certtun by VOTTUN will only exchange personal data with trusted third party recipients for any of the purposes set forth in the Privacy Policy, for the purpose of maintaining and executing the contractual relationship.

  • Necessary for the provision of the service. Occasionally, Certtun by VOTTUN may use trusted suppliers who may have access to personal data for the provision of contracted services.
  • Data communications between Certtun by VOTTUN companies. Communications between group companies shall be based on the legitimate interest of VOTTUN.
  • Fulfillment of a legal obligation. Certtun by VOTTUN may also disclose your personal information to third parties duly authorized by law when necessary to comply with the law.

Under no circumstances will the Customer's personal data be shared with third parties, except with the prior information and express consent of the interested party.

6. INTERNATIONAL DATA TRANSFERS

From time to time, personal data may be transferred to, stored, and processed in a country that does not provide an adequate level of protection for personal data under European Union law. Certtun by VOTTUN verifies in any case the existence of adequate safeguards in compliance with the applicable legal requirements in order to ensure that your data is adequately protected.

7. HOW DO WE PROTECT YOUR PERSONAL DATA?

Certtun by VOTTUN is committed to keeping your Personal Data secure, taking all reasonable precautions to do so. We implement all necessary technical and organizational measures in accordance with this Personal Data Protection Policy and applicable laws and regulations to protect your Personal Data against any unauthorized access, modification or disclosure.

8. RIGHTS OF THE INTERESTED PARTY

In accordance with the provisions of the applicable regulations, Certtun by VOTTUN informs the customer or user that he/she has the following rights:

  • Access: allows the owner of the data to obtain information on whether or not Certtun by VOTTUN is processing personal data concerning him/her.
  • Rectification: allows you to correct errors and modify data that are inaccurate or incomplete.
  • Deletion: allows data to be deleted and no longer processed by Certtun by VOTTUN, unless there is a legal obligation to keep it.
  • Limitation: under the legally established conditions, allows the processing of data to be stopped.
  • Opposition: in certain circumstances and for reasons relating to their particular situation, data subjects may object to the processing of their data.
  • Portability: allows the data subject to receive his or her personal data and to be able to transmit it directly to another controller.

Certtun by VOTTUN guarantees the adoption of the necessary measures to ensure the exercise of these rights free of charge. You may contact us through:

  • Email: [email protected]
  • Post: Av/ Alcalde Barnils 64-68, 08850 Sant Cugat del Vallés — VOTTUN customer management department.

Likewise, and especially when the interested party considers that he/she has not obtained full satisfaction in the exercise of his/her rights, he/she may file a complaint with the national supervisory authority — in Spain, the Spanish Data Protection Agency (AEPD).