logo gestduque
Request a quote

PRIVACY POLICY OF WWW.GESTDUQUE.COM

1. Data Controller

In compliance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR), and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), the user is informed of the following:BOE+1

2. Data processed, origin and categories

The following can be addressed through the website and associated contact channels data categories:

  • Identifying information: name and surname.

  • Contact information: telephone, email, postal address.

  • Information regarding the query or request made (free text).

  • Basic billing and financial information in case a contract is formalized (Tax ID, billing address, limited bank details necessary for collection).

  • Connection and browsing data (IP addresses, logs, cookies – as detailed in the Cookies Policy).

All this data comes from the interested party (user) when filling out forms, sending emails or contacting GESTDUQUE by phone.

If the user provides data of third parties, they undertake to inform them beforehand and obtain their consent when necessary, responding to GESTDUQUE for any liability that may arise from it.

3. Purposes of the processing

GESTDUQUE will process user data for the following purposes: purposes:

  1. Handling inquiries and information requests

    • Manage and respond to inquiries, requests for information or quotes that the user makes through the web forms, email or telephone.

  2. Management of the pre-contractual and contractual relationship

    • Prepare and submit service proposals.

    • Formalize, maintain and execute the advisory, management and consulting services contracted by the client.

    • Manage billing, collections and payments associated with these services.

  3. Commercial communications related to GESTDUQUE services

    • Sending information about regulatory updates, services, activities or news related to the activity of GESTDUQUE, always in relation to advisory and management services, when the user has given their express consent or when there is a prior contractual relationship and the communication is compatible with the initial relationship, in accordance with article 21 of the LSSI-CE.

  4. Candidate management (in case of receiving a CV)

    • Evaluate and manage applications that interested parties send spontaneously through the website's contact channels.

  5. Website security and legal compliance

    • To ensure the security of the website, prevent fraudulent or illegal uses, and comply with applicable legal obligations in accounting, tax, money laundering, fraud prevention and other applicable regulations.

4. Legal basis for the processing

The legal bases that legitimize the processing of data by GESTDUQUE are:

  • Performance of a contract or application of pre-contractual measures (art. 6.1.b GDPR):
    For managing professional relationships with clients and potential clients, preparing budgets, carrying out professional tasks, and invoicing.

  • Compliance with legal obligations (art. 6.1.c GDPR):
    For compliance with tax, accounting, anti-money laundering or other regulations applicable to the advisory and management activity.

  • Consent of the interested party (art. 6.1.a GDPR):
    To respond to certain inquiries received when there is no prior relationship, to send commercial communications by electronic means when expressly requested or authorized, and to process CVs. The user may withdraw their consent at any time, without this affecting the lawfulness of the prior processing.

  • Legitimate interest of GESTDUQUE (art. 6.1.f GDPR):
    For website security management, IT maintenance, service quality improvement and, where applicable, sending commercial communications about similar services to clients with whom there is a prior relationship, always in accordance with the regulations on information society services and with the possibility of objection at any time.

5. Data retention periods

Personal data will be kept for the following periods:

  • Contact information and inquiries: for the time necessary to process the request and, where applicable, while a pre-contractual or contractual relationship arising from it is maintained.

  • Customer data: for the duration of the contractual relationship and, subsequently, for the periods necessary to address possible legal liabilities (generally, 5 or 6 years in civil, accounting and tax matters, as appropriate).

  • Data for commercial communications: until the interested party revokes their consent or objects to the processing.

  • Curriculum Vitae (CV) Information: for a maximum indicative period of 1 year from receipt, unless the interested party requests its deletion earlier.

  • Browsing data and cookies: in accordance with the Cookies Policy and applicable technical and legal regulations.

After the indicated periods have elapsed, the data may be blocked and kept only at the disposal of judges and courts, the Public Prosecutor's Office or the competent Public Administrations, during the limitation periods of any actions that may arise.

6. Data recipients

In general, GESTDUQUE will not transfer personal data to third parties, except:

  • When necessary for the provision of the requested service (for example, collaborations with other professionals, notaries, registries, public administrations, financial entities, insurance companies, etc., within the framework of managing procedures or files commissioned by the client).

  • When there is a legal obligation (Tax Administration, judicial bodies, control authorities, etc.).

  • Suppliers acting as those responsible for the treatment (web hosting services, IT support, management applications, etc.), with which the corresponding data processing agreements have been signed in accordance with Article 28 GDPR.Data Protection LOPD

International data transfers outside the European Economic Area are not foreseen, unless expressly indicated and there is an appropriate legal basis (adequacy decision, standard contractual clauses, etc.).

7. Rights of interested parties

The user may exercise the following rights at any time rights Regarding data protection:

  • Right of access: to obtain confirmation as to whether or not GESTDUQUE processes personal data concerning you and, if so, to access such data.

  • Right of rectification: request the correction of inaccurate or incomplete data.

  • Right to erasure (right to be forgotten): request the deletion of your data when, among other reasons, it is no longer necessary for the purposes for which it was collected.

  • Right to restriction of processing: request that the processing of your data be limited in certain circumstances.

  • Right to object: to object to the processing of your data for reasons related to your particular situation, in cases where the processing is based on the legitimate interest of GESTDUQUE, as well as to object at any time to receiving commercial communications.

  • Right to portability: to receive the personal data concerning you in a structured, commonly used and machine-readable format, and to transmit it to another controller when the processing is based on consent or a contract and is carried out by automated means.yousign.com

To exercise these rights, the user may contact the following in writing:

In both cases, indicating “Data protection”"in the subject or reference and including name and surname, copy of an identity document (DNI, NIE, passport) and the right you wish to exercise.

Likewise, the interested party has the right to submit a complaint to the Spanish Data Protection Agency (AEPD) If you believe that the processing of your personal data infringes data protection regulations: www.aepd.es.:contentReference[oaicite:5]{index=5}

8. Data Security

GESTDUQUE has adopted the necessary technical and organizational measures to ensure a level of security appropriate to the risk, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons.

However, users should be aware that internet security measures are not impenetrable.

9. Minors

GESTDUQUE's services are not intended for children under 14 years of age. If the user is under this age, prior consent from their parents, guardians, or legal representatives is required for the processing of their personal data.

GESTDUQUE will not be responsible for data of minors that, without being able to know that fact, have been provided without the consent of their parents or guardians.

10. Social networks

GESTDUQUE may have profiles on various social media platforms (e.g., Twitter, Facebook, LinkedIn, etc.). The processing of data from users who become followers of GESTDUQUE's official social media pages will be governed by this section, as well as by the terms of use, privacy policies, and regulations of each corresponding social media platform.

In these cases, GESTDUQUE will process the user's data in order to properly manage their presence on the social network, inform them of activities, products or services, as well as for any other purpose that the regulations of the social networks allow.

11. Privacy policy update

GESTDUQUE reserves the right to modify this Privacy Policy to adapt it to new legislation or case law, as well as changes in data processing procedures. Users are advised to review this policy periodically.

In any case, when the changes are significant or require new consent from the user, notification will be made through the website or, where appropriate, by email.