1.- DATA CONTROLLER

This website is the responsibility of RISK4ALL S.L., with NIF B88516257 and registered in the Mercantile Registry of Madrid, with registered office at Calle de la Ribera del Loira, 38, Edificio 4, 28042 Madrid (hereinafter, risk4all).

Contact details of the Data Protection Officer: dpo@risk4all.es

2.- MOTIVATION

Risk4all respects the privacy rights of its Users and recognizes the importance of protecting the personal data that risk4all collects about its Users.

The purpose of this document is to inform the Users of the website about the processing of personal data that is carried out on this website.

3.-PERSONAL DATA PROCESSED BY THE MERE ACCESS TO THE WEBSITE.

In general, risk4all collects data from Website Users in 2 ways:

IP address. The IP address is a code that identifies the User’s internet connection at a specific time. Only the User’s internet service provider can identify the subscriber who was assigned an IP address at a particular time.

By the very nature of the server that supports this website, the User’s IP address is automatically recorded along with the date and time of access.

Cookies and the like. These are files that are downloaded to the User’s browser and that can be read later by the website. In this way, cookies allow various functionalities, such as, for example, recognising a User who has already accessed the website before by assigning them a unique identification code and being able to analyse the use of the website in order to improve it.

However, it is not possible to find out the identity of the User with this data, unless he or she provides additional information through other means and these can be linked to his or her IP address or to the cookies he or she has downloaded.

In addition to the above, on this website you may find some forms for the collection of personal data. In each of these forms you will find specific information on the processing of the data you provide through them.

3.1. What is this data used for?

This data is used solely to manage the normal use of the website and to perform statistical analyses on the use of the website.

3.2. Data recipients.

Risk4all does not provide this information to any third party, unless it is required to do so by applicable law (e.g. an official request in the context of a police investigation) or they are providers who provide services to risk4all for the maintenance, management and analysis of this website.

3.3. Lawfulness of processing and storage period

The processing of the IP address is technically necessary to enable the connection to the website via the Internet.

You may also consent to the use of cookies when accessing the website.

IP addresses will be kept for a period of 1 year.

On the other hand, the information in the cookies will be kept for a maximum period of 2 years.

4.- OTHER PROCESSING OF PERSONAL DATA

  • Processing of data of professional contacts

The personal, identification, professional and contact data provided by you or by third parties will be processed by Risk4all for the purpose of managing and maintaining the contacts and relationships that occur as a result of the contractual or pre-contractual relationship that users have with Risk4all.

  • Legal basis: With exceptions, the legal basis that legitimises this processing will be your consent, the need to manage a contractual or similar relationship or the legitimate interest of Risk4all.
  • Retention period: The storage period of your data will be determined by the relationship you have with Risk4all.

 

  • Contact form

Risk4all will process the data provided through the contact form, in order to respond to the request made by the interested party. Likewise, if you tick the corresponding box identified in the form, we will send you commercial information about products, services, news or events related to information security.

  • Legal basis: The legal basis that legitimises the processing is the user’s consent expressed at the time of sending their contact request and, where appropriate, consenting to the sending of commercial information.
  • Retention period: The data will be processed for the time necessary to resolve the user’s contact request. They will then be blocked and kept for 3 years to attend to the possible responsibilities derived from the treatment. For the purpose of sending you commercial information, your data will be kept indefinitely until you revoke your consent or exercise your rights of opposition or deletion.

Please note that emails sent will include tiny, transparent links and images associated with your address. In this way, by downloading these images or accessing the links contained in the email, we will be able to know for statistical purposes whether you open the email or access the links sent. You can prevent these uses by configuring your email manager to prevent automated image downloads, as well as by not accessing links in the emails you receive.

You may withdraw the consent given and exercise your rights at any time, as indicated in the section on users’ rights of this Privacy Policy.

  • Event Registration

Risk4all will process the data provided through the event registration form, in order to effectively manage your participation and, if you do not object to this, to keep you informed about products, services, news or events related to our services, which may be of interest to you by any means of contact,  including electronic ones.

  • Legal basis: The legal basis that legitimises the processing is Risk4all’s legitimate interest in keeping participants in its events informed.
  • Retention period: Your data will be kept indefinitely until you exercise your rights of opposition or deletion.

Please note that emails sent will include tiny, transparent links and images associated with your address. In this way, by downloading these images or accessing the links contained in the email, we will be able to know for statistical purposes whether you open the email or access the links sent. You can prevent these uses by configuring your email manager to prevent automated image downloads, as well as by not accessing links in the emails you receive.

You can manage your communications preferences and exercise your rights at any time, as indicated in the user rights section of this Privacy Policy.

5.-RIGHTS OF USERS.

Data protection regulations guarantee Users the following rights:

  • Access: It allows the User to know what information is held, where it has been obtained, to whom it has been provided and with what uses it has been processed.
  • Rectification: Allows the User to rectify any erroneous or outdated data.
  • Deletion: Allows the User to stop processing their data.
  • Opposition: Allows the User to stop their data from being used for a specific purpose.
  • Limitation: It allows the User to restrict the processing of their data, but in such a way that they are kept for some subsequent purpose.
  • Portability: It allows the User to obtain a copy of their data in electronic format and, in certain circumstances, request that they be communicated to another service provider. It is only applicable for computerised processing carried out with the User’s consent or for the performance of a contract.
  • Revocation of consent: Allows the User to withdraw the consent that, if applicable, they have given for the processing of their data.

In order to exercise these rights, it is necessary to be able to link the data processed by Risk4all with the identity of the User requesting them. Therefore, in relation to the processing of their IP, in principle, risk4all cannot establish this link with any of the data it processes, unless the User can provide certain documentation that allows their identification (for example, a certificate from their Internet access provider indicating the IP address that the User was assigned on a specific date and time). In relation to the rest of the personal data that risk4all processes about users, they may exercise their rights of access, rectification, deletion, opposition, limitation or portability through the email address dpo@risk4all.es identifying themselves and indicating the right they wish to exercise.

If Users wish to have more information in this regard or consider that their right to data protection has been violated, they may contact the Spanish Data Protection Agency (www.aepd.es) or the Data Protection Officer of risk4all (dpo@risk4all.com).