‍

Scope of the policy

When you access and use this website, participate in the blog, or use any other means that involves the processing of personal data, you agree to accept this Privacy Policy, as well as the provisions contained in the Legal Notice and Cookies Policy.

BIRSARY provides you with information so that, prior to filling in your personal data, you can access the Privacy Policy and any other relevant information regarding Data Protection.

‍

Fundamental principles

• We will never request personal information unless it is truly necessary to provide the services that are requested.
• We will never share users' personal information with anyone, except to comply with the law or with your express permission.
• We never use your personal data for any purpose other than that expressed in this privacy policy.

‍

What we use your information for

For the maintenance of some of our services, as well as for other purposes set forth in this Privacy Policy.

Specifically, BIRSARY processes your personal data for the following purposes:

‍

In which cases we will request your data

• To register you as a customer in BIRSARY.
• To provide any of the services and/or products we offer.
• To attend the consultations, suggestions, complaints, etc. that you send us.

‍

Your data will be communicated to other recipients

We guarantee that your data will only be disclosed to:

• Competent Public Bodies, Tax Agency, State Security Forces and Corps, Judges and Courts, when the Clinic has the legal obligation to provide them.
• Financial institutions in the case of financing of services rendered.
• Third parties necessary for the provision of the contracted service: transport companies, call centers, outsourced professionals, etc.

In no case your personal data is shared with third party companies without obtaining your prior consent.

‍

How you can exercice your rights

As the right holder of your personal information, you have control over that data. In this way, we also ensure that the information is accurate and truthful.

The rights that can be exercised are:

• Right of Access: you may consult if we are processing personal data concerning you at BIRSARY.
• Right of Rectification and Deletion: you may access your personal information and request the rectification or deletion of your data when it is inaccurate or you consider that it is no longer necessary for the purposes for which it was collected.
• Right of opposition: you may oppose the processing of your data, unless, for compelling legitimate reasons, or in the exercise or defense of possible claims, we keep them properly blocked for the corresponding periods while legal obligations subsist.
• Right of Limitation to the processing: you may request the limitation of the processing of your personal information while the accuracy or lawfulness of your data is being challenged, during the exercise or defense of possible claims or litigation.
• Right of Portability: you may request the portability of the data you have provided to us to another data controller, under certain circumstances.

You may exercise your rights free of charge.

How can you complain to the Control Authority?

If a user considers that there is a problem with the way in which BIRSARY is treating their data, they can address their complaints to the Data Protection Committee (contact@birsary.com) or to the corresponding data protection supervisory authority, being the Spanish Data Protection Agency the one indicated in the case of Spain.

‍

Security

At BIRSARY we maintain the highest levels of security required by law to protect your personal data against accidental loss and against unauthorized access, processing or disclosure, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed. When we receive your data, we use rigorous procedures and security features to prevent any unauthorized access.

The actions described in this section and aimed at ensuring an adequate level of security for the detected risk shall include, if necessary, the following measures:

• Pseudonymization and encryption of personal data.
• Measures capable of ensuring the permanent confidentiality, integrity, availability and resilience of processing systems and services.
• Measures capable of restoring availability and access to personal data quickly in the event of a physical or technical incident.
• Existence of a process of regular verification, evaluation and assessment of the effectiveness of technical and organizational measures to ensure the security of processing.
• Periodic assessment of the risk of accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorized disclosure of or access to such data.
• Measures to ensure that any person acting under the authority of BIRSARY and having access to personal data may only process such data on instructions from BIRSARY.

‍

Confidentiality

The personal data that may be collected will be treated with absolute confidentiality, committing ourselves to keep them secret and guaranteeing the duty to keep them by adopting all necessary measures to prevent their alteration, loss and unauthorized access or treatment, in accordance with the provisions of the applicable legislation.

‍

Acceptance and consent

The user declares to have been informed of the conditions on protection of personal data, accepting and consenting to the processing thereof by BIRSARY in the manner and for the purposes stated in this privacy policy.

‍

Changes in the privacy policy

BIRSARY reserves the right to modify this policy to adapt it to new legislation or case law, as well as industry practices. In such cases, BIRSARY will announce on this page the changes introduced with reasonable notice before their implementation.

‍

Commercial mailings

In accordance with the provisions of Law 34/2002 of Services of the Information Society and electronic commerce, BIRSARY undertakes not to send commercial communications without properly identifying them.

‍

Responsability

The user will be solely responsible for the completion of the forms with false, inaccurate, incomplete or outdated data.

‍

Cookies

Our website uses "cookies" to collect information about how you use the Website. For more detailed information on how BIRSARY uses cookies, please see Cookie Policy .

‍

Data transfers to third countries

If we will count on the collaboration of suppliers who may have access to your data and who will process the referred data in the name and on behalf of BIRSARY. The selection of suppliers follows an exhaustive process of verification of compliance, in order to ensure an adequate control in terms of data protection. In addition, a contract will be signed in which these suppliers undertake to implement appropriate technical and organizational measures, to process personal data only in accordance with the documented instructions of the joint controllers. If among the data processors there is one located outside the European Economic Area, the co-responsible parties will sign with them the Standard Contractual Clauses, which will provide adequate guarantees and will protect at all times the access that such third parties may have to your data.

‍

Last version: January 2023