Consentio's Privacy Policy

Consentio Platform, S.L. (“CONSENTIO”, “We” ) is the owner of the Website https://www.consentio.co/ (hereinafter the “Website”) and the Platform https://webapp.consentio.co/ (hereinafter the “Platform”) and is the Data Controller of User's personal data.

By this Privacy Policy, and in compliance with Articles 12 and 13 of Regulation (EU) 2016/679 ("RGPD") and Article 11 of Ley Orgánica 3/2018, de 5 de Diciembre, de Protección de datos personales y garantía de los derechos digitales ("LOPDPGDD";), CONSENTIO informs Users who use of the Website, of the processing of those personal data that may be collected through
this and processed by CONSENTIO.

CONSENTIO has designate a DPM to manage the personal data of the Data Subject. The contact
details of the DPM are:

Guillaume Humbert

gdpr@consentio.com

1. GENERAL INFORMATION ABOUT US

The entity responsible for your data is Consentio Platform, S.L.., with CIF Number B66734690, registered office at Av Diagonal 571, Floor 2, 08029 Barcelona, Spain. All communications regarding the processing of your personal data shall be directed to gdpr@consentio.com

2. DATA PROCESSED THROUGH USING THE WEBSITE
The following data is processed by CONSENTIO as Data Controller

3. DATA PROCESSED THROUGH USING OUR PLATFORM

A- The following data is processed by CONSENTIO as Data Controller


B- CONSENTIO may also process personal data for which the User is responsible as Data Controller, (i.e. CONSENTIO acting as Data Processor).

CONSENTIO shall be the data processor of the Personal Data of the Users collected and processed through the Platform, including the information regarding Users geolocation, statics concerning usage of the Platform.

When providing Personal Data, CONSENTIO shall be considered a data processor acting on behalf of the Client. In this respect, CONSENTIO shall comply with the obligations set out in the Data Processing Agreement, available here.

The data processed by Consentio as Data Processor are the following:


4. DATA DISCLOSURE

CONSENTIO informs that, in order to comply with the purposes described above, will not transfer the User's personal data to third parties. Notwithstanding the foregoing, CONSENTIO may give access to such personal data to its technology service providers with whom it has signed a processor contract and, if located in jurisdictions that generally do not provide adequate safeguards in relation to the processing of personal data, such contracts have been signed including the appropriate safeguards, including the Standard Contractual Clauses approved by the European Commission.

Furthermore, personal data collected by CONSENTIO may be disclosed to external consultants, in the course of due diligence, in the context of a merger or acquisition involving either Party. As well as to public administrations and State security forces, by virtue of their competences.

5. SECURITY AND CONFIDENTIALITY

CONSENTIO undertakes to adopt the necessary technical and organizational measures in accordance with the applicable regulations in order to guarantee the security of personal data and to prevent the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or the unauthorized communication of or access to such data. Personal data shall be treated as confidential by CONSENTIO, which undertakes to inform and to ensure by a legal or contractual obligation that such confidentiality is respected by its employees, partners, and any person to whom it makes the information accessible.

6. DATA RETENTION

CONSENTIO only keeps personal data for as long as it is necessary to fulfill the purposes for which we have collected them, even to comply with legal, accounting or information requirements.

To determine the appropriate retention period for personal data, CONSENTIO considers the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes of processing personal data and the applicable legal requirements.

7. COMMERCIAL COMMUNICATIONS

When the User subscribes to the newsletter or when registering at the Platform, the User will receive electronic commercial communications in accordance with applicable law, including alerts, notifications, newsletters, offers and promotions about CONSENTIO services. If the User do not wish to receive information related to the CONSENTIO services, the User may
unsubscribe from any of our "Unsubscribe"; communications or let us know by sending a notification to gdpr@consentio.com

8. DATA PROTECTION RIGHTS

The User may exercise the rights of access, rectification, deletion, opposition, and, if applicable, limitation of processing and portability of data by sending an email to gdpr@consentio.com

Furthermore, the User may lodge a complaint to a supervisory authority, and in particular, to the Agencia Española de Proteccion de Datos (www.aepd.es) if the User considers that the rights set out above in this Privacy Policy have been violated or if the User considers that the processing of personal data concerning him/her violates the applicable regulations.

9. CHANGES OF THIS PRIVACY POLICY

CONSENTIO reserves the right to modify this Privacy Policy at any time. Changes or updates to the Privacy Policy will be explicitly notified to the User through a notice on the Website, together with the updated version of the Privacy Policy.

10. APPLICABLE LAW

Unless a specific local regulation sets forth to the contrary, the Privacy Policy is governed by the laws of Spain.

Last version: November 23, 2022