Privacy Policy
What do we use your data for?
We use the data you have provided to us online or through any other means to respond to your enquiries and suggestions, provide the services or supply the products you have requested.
Why do we hold it?
We are entitled to process your data for various reasons. When you fill in a form or send an email with an enquiry or suggestion, we have a legitimate interest in responding to it.
Once your enquiry reaches us, an email is automatically generated with a link to our form. Once you answer the questions posed, your responses are automatically processed through our calculation engine and results are generated. These results will be downloaded internally in an anonymised CSV file.
Your responses will be used to apply advanced analytics and intelligence, with the aim of generating publication articles to share knowledge or to carry out benchmarking.
Who do we share your data with?
We will only share data with those partner companies necessary to handle the requests received and provide our services or supply the products. Data may also be shared with banking entities and bodies required by law. Under no circumstances do we sell your data to third parties.
What rights do you have?
You have the right to access, rectify or delete your personal data. You can also object to its use, request the portability of your data and avoid being subject to automated decisions.
In processing your personal data, we apply the following principles to ensure maximum protection:
● Principle of lawfulness, fairness and transparency: We will always require your consent to process your personal data for one or more specific purposes, informing you in advance with full transparency.
● Principle of data minimisation: We only request the data strictly necessary in relation to the purposes for which we require it.
● Principle of storage limitation: Data will be kept only for as long as necessary for the purposes of processing. We periodically review our lists and delete those records that have been inactive for a considerable time.
● Principle of integrity and confidentiality: We process your data in a way that ensures adequate security and confidentiality. We take all necessary precautions to prevent unauthorised access or improper use by third parties.
In this privacy policy you will find more detailed information about how we use the personal data of our clients, suppliers and users, regardless of the means they have used to contact us (online form, telephone, email or in person).
We like to be transparent about what we do with your personal data, so that you understand the implications of its use and the rights you have over it. For this reason, we keep our Privacy Policy, Legal Notice and Cookies Policy up to date, information which you can consult on our website.
If you have any questions or wish to obtain more information about our privacy policy, you can continue reading this document or contact us.
1. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?
The data controller is HUMAN DATA INSTITUTE, S.L.:
Identity: HUMAN DATA INSTITUTE, S.L. - B02764652
Address: Agustín de Foxá 40, 28036 - Madrid (Madrid)
Telephone:
Website: www.dathum.com
Email: hello@dathum.com
Data Protection Officer: Aixa Corpore, S.L.
DPO Email: aixa4291@dpocanarias.com
HUMAN DATA INSTITUTE, S.L. informs the user that the data you provide through browsing our website and through the various data collection forms will be processed by HUMAN DATA INSTITUTE, S.L., and that such processing is recorded in the Register of Processing Activities managed by HUMAN DATA INSTITUTE, S.L. in accordance with the provisions of the GDPR.
Once your enquiry is received, a standard email is automatically generated with a link to our form. After answering the questions posed, the responses are automatically processed through our calculation engine and results are generated. These results will be downloaded internally in an anonymised CSV file.
Your responses will be used to apply advanced analytics and intelligence, with the aim of generating publication articles to share knowledge or to carry out benchmarking.
2. FOR WHAT PURPOSES IS YOUR PERSONAL DATA USED?
At www.dathum.com, we process data from both users of our website and third parties who maintain relationships with us. To facilitate understanding of how we process your data, we differentiate the purpose, types of data and legal basis according to the category of persons whose data we process. Below, we classify the persons whose data we process based on the type of relationship they maintain with HUMAN DATA INSTITUTE, S.L.
2.1. Website users
What data do we collect from our website users?
a) Data from users who fill in any of the available forms. HUMAN DATA INSTITUTE, S.L. requests:
● Identifying data: name and surname(s), telephone, postal and email address
● Data relating to the request
b) Data from users browsing our website: Data provided by cookies and by Google Analytics.
For what purposes will we process your personal data?
When the user accepts our privacy policy, they authorise us to use the personal data provided for the following processing activities:
● To send information and provide the service requested through the various forms available on our website.
● To organise, communicate and hold events or similar activities.
● To carry out statistical studies to assess the success of campaigns and understand how the user became aware of a service provided by HUMAN DATA INSTITUTE, S.L. This data is collected for statistical purposes and is for internal use.
How do we obtain your data?
We obtain your data through:
● The form completed by the user for the purpose specified therein. This form is subject to acceptance of this privacy policy by means of a checkbox.
● Browsing data obtained from cookies that the user accepts upon first accessing www.dathum.com.
What is the legal basis for processing your data?
● Express consent of the user (Article 6.1.a. GDPR), expressed by completing forms, ticking the box accepting commercial communications and participating in our blog.
● Legitimate interest for the creation of browsing profiles and detecting preferences through the installation of cookies.
● The performance of a contract or the adoption of pre-contractual measures when the client makes a request through the various forms available on our website or requests information about the services provided by HUMAN DATA INSTITUTE, S.L.
2.2. Suppliers
What data do we collect from our suppliers?
● Identifying data: name and surname(s), telephone, postal and email address
● Employment and professional data
● Activities and businesses
How do we obtain your data?
We obtain your data through:
● The signing of the contract binding us.
● Acceptance of the submitted quotation.
● Receipt of invoices from the supplier.
● The signing of the Data Processing Agreement where applicable.
For what purposes will we process your personal data?
● To manage information relating to our suppliers of goods and services and their representatives.
● To maintain the contractual relationship.
● To manage payments and collections under contracts.
What is the legal basis for processing your data?
● Performance of a contract or pre-contract to send information and manage the service provided.
● Legitimate interest in managing the data of supplier representatives.
2.3. Clients
What data do we collect from our clients?
a) Data from clients who fill in any of the forms available on www.dathum.com as well as at the physical premises of HUMAN DATA INSTITUTE, S.L.:
● Name and surname(s), telephone, postal and email address
● Data relating to the request
b) Data from clients who register on our platform:
● Name and surname(s), postal and email address, telephone, billing address.
c) Data from clients who make a booking or order at our premises in person:
● Name and surname(s), postal and email address, telephone, billing address
d) Data from our clients obtained through our contracts and quotations
e) Data from clients who make a purchase online or in person:
● Title, name, surname(s), postal and email address, telephone, billing address.
● Products purchased / services provided and payment method, invoice or purchase receipt.
How do we obtain your data?
If you are an online client, we obtain your data through:
● Through the information request, quotation or order form.
● Through cookies accepted on www.dathum.com.
If you are a face-to-face client:
● Through the client registration form.
● Through acceptance of the submitted quotation or the signing of the contract.
For what purposes will we process your personal data?
● To generate and manage the documentation associated with your requests and purchases.
● To provide you with information about offers, products and services related to your purchase.
● To process your booking or online purchase through our platform.
What is the legal basis for processing your data?
● Performance of a contract or pre-contract, to manage information and provide the service.
● User consent, to send newsletters and commercial communications.
● Legitimate interest, to send information about exclusive promotions, news and satisfaction surveys.
2.4. Job applicants and candidates.
What data do we collect from applicants?
● Name and surname(s), telephone, postal and email address.
● Academic and employment data.
● Attached documents provided by the candidate.
How do we obtain your data?
● By receiving a CV at our premises or through the 'Work with us' form on our website.
For what purposes will we process your personal data?
● Exclusively for open or future selection processes, in the case of a talent pool
What is the legal basis for processing your data?
● User consent, by registering in our database to participate in active or future selection processes.
2.5. Social Media Contacts
What data do we collect?
● Identifying data on the social network. HUMAN DATA INSTITUTE, S.L. will not request additional data beyond that included in the user's profile.
For what purposes will we process your personal data?
● To manage enquiries, requests or petitions.
● To interact with users who form part of our follower community.
What is the legal basis for processing your data?
● Performance of a contract or pre-contract, depending on the social network used and its privacy policies.
3. FOR HOW LONG DO WE RETAIN YOUR DATA?
3.1. Website users
● Data processed on the basis of the website user's consent will be retained for as long as it remains relevant for the purpose for which it was collected and the consent has not been revoked.
● Data processed on the basis of legitimate interest will be retained for the time necessary to fulfil the purpose for which it was collected, always ensuring the protection of the rights and freedoms of the data subjects.
● Data processed on the basis of the performance of a contract or pre-contractual measures will be retained for as long as the contractual relationship is in force and for the additional time required by legal obligations.
3.2. Suppliers
● Data processed on the basis of legitimate interest will be retained for as long as it is necessary for the purpose for which it was collected, always ensuring respect for the rights and freedoms of the data subjects.
● Data processed on the basis of a contract or where processing is authorised by a legal obligation will be retained for as long as the contractual relationship is in force and, thereafter, for the legally prescribed period. In such cases, data cannot be deleted by the data subject except under the legally established circumstances for blocking.
3.3. Clients
● Data processed on the basis of the client's consent will be retained for as long as it remains relevant for the purpose for which it was collected and the consent has not been revoked.
● Data processed on the basis of legitimate interest will be retained for as long as it is necessary for the purpose that motivated its collection, always ensuring the protection of the rights of the data subjects.
● Data processed on the basis of a contract or where processing is authorised by a legal obligation will be retained for as long as the contractual relationship is in force and, thereafter, for the legally established period. In such cases, data cannot be deleted by the data subject except under the legally established circumstances for blocking.
3.4. Job applicants and candidates
● Data processed on the basis of the job applicant's consent will be retained for as long as the selection process they applied for remains open.
● If the candidacy is not linked to a specific selection process but is instead added to our talent pool, the maximum retention period will be one year, at which point the CV will be deleted and destroyed, unless the data subject requests its retention and updating.
3.5. Social Media Contacts
● Data processed from social media contacts will be retained for as long as the user and HUMAN DATA INSTITUTE, S.L. maintain a connection on the platform (for example, through the 'follow', 'like' or similar option).
● Since this data does not directly depend on HUMAN DATA INSTITUTE, S.L., the rectification or deletion of the information must be managed directly by the user through the settings of their profile on the corresponding social network.
3.6. Processing for scientific, historical or statistical research
Regardless of the legal basis that authorised the collection of data, such data may be processed for scientific, historical or statistical research purposes, always applying appropriate safeguards and respecting the rights and freedoms of the data subjects.
4. ADDITIONAL INFORMATION ON DATA PROCESSING
Only persons aged 14 or over may provide data through our website and email. If you are under this age, you must have the consent of your parents or legal guardians.
The User guarantees the authenticity and accuracy of all data communicated to HUMAN DATA INSTITUTE, S.L., declares that they are over 14 years of age, and will be solely responsible for any false or inaccurate statements made.
In the case of making a service booking or online purchase, the data subject must be over 18 years of age, the legally established age in the civil code for reaching legal adulthood and capacity to act.
Personal data processed by HUMAN DATA INSTITUTE, S.L. may be mandatory or voluntary. Special category data will not be requested through web forms to ensure your privacy. If it is necessary to collect special category data to provide a service, this will be requested through another channel. The data to be requested in the forms are:
● Identifying data: name and surname(s), telephone, postal and email address.
● Data relating to the request.
● Data from users who subscribe to receive commercial communications and information.
Voluntary information is that which the user is not required to provide in order to contact us.
Fields marked with an asterisk (*) or the word (required) in our forms are mandatory; failure to provide them will make it impossible to provide the service or address your request.
If you provide us with data belonging to third parties, you declare that you have their consent and undertake to inform them of the information we provide you in this clause, thereby releasing HUMAN DATA INSTITUTE, S.L. from any obligation. Notwithstanding this, HUMAN DATA INSTITUTE, S.L. may carry out verifications to confirm that the third party has been informed, adopting the due diligence measures established in data protection regulations.
5. TO WHICH RECIPIENTS WILL YOUR DATA BE DISCLOSED?
Data will not be transferred to third parties except where required by law or where necessary to address your request.
The recipients to whom your data may be disclosed include:
● Public Administrations and Bodies where required by tax, labour, Social Security or other applicable regulations.
● Data processing companies (fraud detection and prevention providers, technology services, customer service, advertising and marketing services, and in general, third-party providers necessary for the provision of the services offered by HUMAN DATA INSTITUTE, S.L., such as courier and transport service providers, etc.)
6. ARE INTERNATIONAL DATA TRANSFERS MADE?
www.dathum.com is hosted in Ireland, a country within the European Union and the European Economic Area, or which complies with the guidelines established in Articles 46 and 47 of the GDPR; therefore, no international transfers of data provided by users on the website will take place.
Our website only accesses user data through the following channels:
● The contact forms available to the user on the website.
● Cookies that the user has previously accepted.
However, international data transfers may occur in the context of the disclosures or communications mentioned above. For this purpose, HUMAN DATA INSTITUTE, S.L. will use the instruments established in Articles 46 and 49 of the GDPR, thus ensuring data protection in the event of transfer to countries that do not have an adequacy decision from the European Commission.
In any case, the third parties with whom certain personal data is shared must, in advance, demonstrate the adoption of adequate technical and organisational measures for its proper protection. Transfers to third countries will only be made where there is a binding legal instrument in accordance with Articles 46 et seq. of the GDPR.
By accepting this privacy policy, the user accepts that an international data transfer may take place in accordance with the guarantees indicated. If the requirements established in the GDPR are not met, the data subject may grant their express consent to the international transfer or a contract may be executed in their interest. Otherwise, authorisation must be sought from the Supervisory Authority.
Furthermore, some services provided by and for HUMAN DATA INSTITUTE, S.L. may involve the transfer of personal data to third countries outside the EU, in cloud computing services offered by international providers such as Google or Microsoft. In such cases, compliance with the aforementioned guarantees will be verified.
HUMAN DATA INSTITUTE, S.L. does not under any circumstances sell its users' data to third parties.
7. WHAT RIGHTS DO YOU HAVE AND HOW CAN YOU EXERCISE THEM?
The user may exercise the following rights against HUMAN DATA INSTITUTE, S.L.:
● Access their personal data
● Rectify it when it is inaccurate or incomplete
● Request the deletion or cancellation of data when, among other reasons, it is no longer necessary for the purposes for which it was collected
● Object to its processing
● Request the restriction of processing of their data when any of the conditions provided for in the regulations apply
● Request the portability of their data in the cases provided for in the regulations
● Prevent being subject to automated decisions
● Revoke any consents granted
To exercise their rights, the user must send a written request indicating the right they wish to exercise, accompanied by a document proving their identity and a postal or email address for notification purposes. This request can be made through:
● Post to: HUMAN DATA INSTITUTE, S.L., Agustín de Foxá 40, 28036 - Madrid (Madrid).
● Email to: hello@dathum.com
HUMAN DATA INSTITUTE, S.L. must respond to the request to exercise rights within one month of receipt of the request. This period may be extended by a further two months if necessary, taking into account the complexity and number of requests. We will inform you of any extension within one month of receipt of the request, indicating the reasons for the delay.
Furthermore, data subjects have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they consider that HUMAN DATA INSTITUTE, S.L. has violated their data protection rights. More information at www.aepd.es.
8. IS MY DATA SECURE?
HUMAN DATA INSTITUTE, S.L. has a contract in place with Amazon Technologies Inc. for the hosting of its website.
HUMAN DATA INSTITUTE, S.L. guarantees the adoption of appropriate measures to ensure the confidential processing of your data given its reserved nature, and undertakes to keep such data secret, treating it with the utmost discretion, and declares that it has implemented in its information system the security policies corresponding to the type of data handled, in accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
9. LINKS TO OTHER WEBSITES
If you choose to leave our website by following links to other websites not belonging to our organisation, HUMAN DATA INSTITUTE, S.L. will not be responsible for the privacy policies of those websites or the cookies they may store on the user's computer. We are HUMAN DATA INSTITUTE, S.L. and we process your data as Data Controller. This means that we are responsible for how your personal data is used and protected.
