Privacy Policy

Online platform privacy policy:

In accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April (“General Data Protection Regulation” or “GDPR”), this Privacy Policy applies to the processing of personal data carried out by STRAIGHT AND NARROW, SL, hereinafter SYSTEM ACTION, as the Data Controller, in relation to the data provided by users and/or clients (natural persons) as a result of requesting information on the services and/or products it provides and markets through its website, or collected in any of the sections of the website.

RESPONSIBLE FOR THE PROCESSING OF YOUR DATA.

• Company Name: STRAIGHT AND NARROW, SL

• Trademark: SYSTEM ACTION

• Address: C/ MILA I FONTANALS, 80 – CP 08205 SABADELL (BARCELONA)

• CIF: B67172155

• Email: COMUNICACION@SYSTEMACTION.ES

PURPOSES OF THE TREATMENT.

Your personal data will be used for the general purpose of managing and controlling the established business relationship and, specifically, for:

▪ Manage full access to and proper use of services and/or products by their users.

▪ To communicate with users in response to incidents, requests, comments and questions that they make to us through the services and/or products, as well as the contact forms on our website (including emails and/or telephone calls).

▪ To provide, update, maintain and protect the services and/or products and activities.

▪ To offer new services and/or products, special offers or updates.

▪ In your case, manage personnel selection processes in selection processes for workers and/or collaborators.

▪ Communications: We may send you emails, messages, and other types of communication regarding the services and/or products, technical issues, and changes to them. These communications are considered part of the services and/or products, and you cannot opt ​​out of them.

▪ Commercial Communications (Marketing): We may use your data to contact you, both electronically and non-electronically, to conduct surveys, obtain your feedback on the service provided, and, occasionally, to notify you of changes, important developments in services and/or products, offers and/or promotions of our services and/or products or of third-party companies related to us. These commercial offers will, in all cases, be expressly and separately authorized by the user, who may revoke their consent to receive these notifications at any time using the mechanism implemented for this purpose in the notifications themselves, or through their customer account preferences.

We will not process your personal data for any purpose other than those described above unless required by law or by court order.

Retention period: The personal data provided will be stored and processed while the relationship of provision of services and/or products is maintained, without prejudice to the possibility of exercising your right of deletion, in which case SYSTEM ACTION will block your data for the time that its legal obligations persist.

The personal data of individuals interested in receiving information about services and/or products will be kept in the system indefinitely until the interested party requests its deletion.

LEGITIMATION OF THE PROCESSING.

The legal basis for processing the data is the legitimacy based on the consent of the interested party given for the purposes described above, which will be requested at the time of:

▪ before processing your data,

▪ proceed to register as a client or,

▪ proceed to send communications about SYSTEM ACTION products.

Information requests that you send us require that the interested party voluntarily provide us with the necessary data in order to assist you or provide you with the services and/or products.

However, the interested party may freely refuse to provide us with this data or, subsequently, revoke the consent previously given to process their data, although this refusal will imply that we cannot attend to their request.

Likewise, we may process your data based on SYSTEM ACTION's legitimate interest in maintaining and retaining its customers and/or users and better meeting their previously expressed expectations or interests, e.g., improving products, managing requests, inquiries or complaints, offering products similar to those contracted, informing about promotions, etc., without prejudice to SYSTEMACTION's compliance with the rest of the obligations relating to sending commercial communications electronically.

SYSTEM ACTION understands that by providing us with this data, the interested party guarantees and is responsible for the truthfulness, accuracy and completeness of the data and expressly accepts and consents to its processing for the purposes described above.

RECIPIENTS OF ASSIGNMENTS OR TRANSFERS.

In general, SYSTEM ACTION will not transfer your personal data to third parties unless we are legally obliged to do so or you have expressly authorized us to do so when using our services and/or products.

By accepting the Terms and Conditions for the services and/or products, you expressly consent to these transfers. If you revoke your consent, we will no longer be able to provide you with the services.

RIGHTS OF INTERESTED PARTIES.

Everyone has the right to obtain confirmation as to whether or not SYSTEM ACTION processes personal data concerning them. In particular, you may exercise the following rights with SYSTEM ACTION:

▪ Right of access: allows the interested party to know and obtain information about their personal data being processed.

▪ Right of rectification: allows correcting errors, modifying data that is inaccurate or incomplete and ensuring the accuracy of the information being processed.

▪ Right to erasure: allows you to request the deletion of the data being processed when it is no longer necessary for the execution or provision of the service.

▪ Right to object: the right of the interested party to prevent the processing of their personal data or to have it stopped, except for legitimate reasons or for the exercise or defense of possible claims, in which case we will keep them blocked for the corresponding period while the legal obligations persist.

▪ Right to object to receiving advertising: Interested parties may object to receiving commercial communications from SYSTEMACTION. In this case, they can revoke their consent to receive these notifications at any time using the mechanism implemented for this purpose in the communications themselves, or through their customer account preferences.

▪ Restriction of processing: In certain circumstances, interested parties may request the restriction of the processing of their data, in which case it will only be kept for the exercise or defense of claims.

▪ Data portability: interested parties may request to receive the data concerning them that they have provided to us or that – where technically possible – we send it to another data controller of their choice, in a structured, commonly used and machine-readable format.

▪ Right not to be subject to automated individual decisions (including profiling): right not to be subject to a decision based on automated processing which produces legal effects or significantly affects you.

Possibility of withdrawing consent: Likewise, the interested party has the right to withdraw the consent given at any time, without this affecting the lawfulness of the processing based on the consent given at the time of providing us with their data.

If you wish to exercise any of the rights described above, please send us a letter with all your details, including your ID, to: SYSTEM ACTION, C/ MILA I FONTANALS, 80 – CP 08205 SABADELL (BARCELONA), or send us an email to COMUNICACION@SYSTEMACTION.ES indicating the type of right you wish to exercise.

Possibility of filing a complaint with the Supervisory Authority: SYSTEM ACTION also informs you of your right to file a complaint with the Spanish Data Protection Agency (www.agpd.es) if you consider that the processing does not comply with current regulations.

ADDITIONAL INFORMATION.

Retention of certain data: SYSTEM ACTION informs that, in compliance with the provisions of Law 25/2007, of October 18, on the retention of data relating to electronic communications and public communications networks, it must retain and store certain traffic data generated during the development of communications in order to transfer them to the legitimate authorities, when the legal circumstances provided therein occur.

Data collected: As with most products delivered over the Internet, our servers automatically collect information when you use our web services. This log data may include your IP address, the device ID used to access the products, your operating system, and your device settings.

Security measures: We adopt the necessary data protection measures to prevent the loss of information, alteration of data, or access by unauthorized personnel.