Privacy Policy
This policy sets out how the personal information of all individuals who interact with GRC Solutions through this website will be treated and protected. Please read all sections of the Legal notice, the cookies policy ad this privacy policy before using this webiste.
n accordance with the provisions of EU Regulation 2016/679, of the European Parliament and of the Council of 27 April 2016 (RGPD) and the Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights, grcsols.com, informs you that, by accepting this Privacy Policy, you give your express, informed, free and unequivocal consent for the Data you provide, and on which the security, technical and organizational measures provided for in the current regulations are applied, to be processed by grcsols.com, as data controller.
Who are we?
Trade name: GRC Solutions
Company name: SOLER SOLUTIONS SL
Tax ID: B13742580
E-mail: info@grcsols.com
Address: Plaza Pablo Ruiz Picasso 1, Madrid 28020 (Spai)
What data do we collect?
For the purposes established in this Privacy Policy, grcsols.com collects and treats the Personal Data detailed below, which will depend on the different products or services requested in this Web:
Contact information: e-mail, name and telephone number.
Contractual data: data on contractual transactions, VAT number, products and services purchased, financial transactions, payment data.
Navigation data: IP address, type and identification of the device, type of browser, domain through which you access the Web Site, navigation data, activity on the Web Site.
What is the legal basis for the processing?
We treat your personal data with the following legal bases: The execution of a contract with grcsols.com, to contract services, publish ads and manage the requested services. The consent of the user in relation to the contact, the subscription to contents and the sending of commercial communications, via mail, cookies or messaging systems. The legitimate interest of the person in charge of the treatment to protect the users of the web of grcsols.com of abuses and frauds in the use of our services.
For what purpose do we collect them?
In this website, there are different forms, in each of them, the information collected will be used in the following way:
Information form: The personal data entered in the form will be used to contact the applicant for information about our products and services.
Contact form: There is also a contact form for inquiries, demonstrations or personalized advice. In this case the e-mail address will be used to respond to them and send the information that the user requires through the web.
How long do we keep the data?
Data of potential customers: the data will be kept in any case for the duration of the business relationship established and, once concluded, two years, unless the user requests its deletion before.
Customer Data: The period of retention of personal data will vary depending on the service that The Client contracts. In any case, it will be the minimum necessary, and may be maintained for up to: 4 years: Law on Infractions and Penalties in the Social Order (obligations regarding affiliation, registrations, cancellations, contributions, payment of salaries…); Arts. 66 et seq. General Tax Law (accounting books…).5 years: Art. 1964 of the Civil Code (personal actions without special term).6 years: Art. 30 of the Commercial Code (accounting books, invoices…).10 years: Art. 25 of the Law for the Prevention of Money Laundering and Financing of Terrorism.
What rights do I have over my data?
Any person has the right to obtain confirmation if grcsols.com is treating personal data that concern him/her or not. The persons concerned have the right to: Request access to personal data relating to the data subject. Request its rectification or suppression. Request its cancellation. Request the limitation of your treatment. Opposing treatment. Request data portability. If you have given your consent for any specific purpose, you have the right to withdraw the consent given at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal. In case you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Supervisory Authority through its website: https://www.aepd.es/es.
To exercise these rights, you may write to info@grcsols.com. There is a form for the exercise of your rights, you can request it by email or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.
These forms must be electronically signed or be accompanied by a photocopy of the ID card. If you are represented by someone, you must attach a copy of your ID, or it must be signed with your electronic signature. Forms may be submitted in person, by letter or by mail to the address of the person in charge at the beginning of this text.
How would we notify and declare a breach?
At grcsols.com we take security measures appropriate to the level of risk to protect personal information from loss, misuse and unauthorized access, disclosure, alteration and destruction, taking into account the risks involved in processing and the nature of personal information; however, if grcsols.com determines that your service data has been misappropriated (including by an employee of grcsols.com, exposed by a security breach or improperly acquired by a third party, grcsols.com will promptly inform you of such security breach, misappropriation or acquisition.
To whom do we communicate your data?
Many tools used on this website to manage data are contracted to third parties. To provide services strictly necessary for the development of the activity, grcsols.com shares data with the following providers under their corresponding privacy conditions:
Solution providers: if you are interested in purchasing a solution with us, we will need to provide your details to the provider for the purchase of the licenses.
Third-party service providers (e.g., payment processing services, order processing, analytics, management, marketing campaigns, website management, and e-mail distribution and other similar service providers) in order for them to perform business functions on behalf of grcsols.com.
The web development and maintenance company, or the hosting company, may have occasional access to this site. They have signed a service contract that obliges them to maintain the same level of privacy that applies to the processing carried out on this website.
Any international transfer of data derived from the use of tools or service providers will be subject to the Privacy Shield agreement, which guarantees that American software companies comply with European data protection policies on privacy, secrecy and data security.
Do we segment and/or profile your data?
The registration of personal data provided at the time of subscription, contact, interaction with the website and any other data provided during navigation, including information provided by cookies in relation to browsing habits, will be used to be segmented or categorized in order to apply them to the activity related to (general administration management, information, marketing of advertising space, analysis of proposals requested by users/customers, statistical study of services and content used, tastes and preferences, and surveys or forms).
Profiling, by analyzing your automated individual choices, consists of using your Personal Data to evaluate certain personal aspects, such as (analyzing and predicting your financial situation, personal preferences, interests, behavior, location, movements and attitudes).
Being the logic applied to obtain these profiles the use of statistical procedures and being the consequences of this treatment of your data by profiling, sending personalized communications of your interest with content related to web development, digital marketing and analytics. The data we use in profiling and that we show to advertisers are not data that allow us to identify the users, only the type of audience we have, their age, country, gender, etc. are shown in a graph.
What is our commitment to the secrecy and security of your data?
grcsols.com commits to the use and treatment of the user’s personal data, respecting its confidentiality, according to the purpose of those; as well as to comply with its obligation to keep them and to adapt all the measures to avoid the alteration, loss, treatment or non authorized access, in accordance with the established in the current data protection regulations.
This website includes an SSL certificate. It is a security protocol that makes your data travel in an integral and secure way; that is, the transmission of data between a server and the web user, and in feedback is fully encrypted or encrypted.
grcsols.com cannot guarantee the absolute impregnability of the Internet network, nor, therefore, the violation of the data by means of fraudulent accesses to them by third parties. With respect to the confidentiality of processing, grcsols.com will ensure that any person who is authorized to process the customer’s data (including its staff, collaborators and service providers), will be under the appropriate obligation of confidentiality (whether a contractual or legal duty).
Upon becoming aware of any Security Incident, grcsols.com shall notify Customer without undue delay and shall provide timely information related to the Security Incident as it becomes known, or upon Customer’s reasonable request.