Privacy policy

From Cristina Bouzas Vording we understand that it is essential to maintain a transparent relationship with you, therefore, below, we present our Privacy Policy, so that at all times you are properly informed about how we collect and securely treat any data you provide us.

Your data will be processed in accordance with current legislation and, in particular, in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of individuals with regard to the processing of personal data and on the free movement of such data. Also with regard to the Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights.

A careful reading of our Privacy Policy will provide you with the necessary information to know how we will use the data you provide us with.

1 WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

If you, or an authorised person, have provided us with your data, we inform you that Cristina Bouzas Vording, CIF: ESB36516276 is responsible for the processing of the same. These data will be treated in accordance with the provisions of current regulations on personal data protection.

It is possible that there are other people responsible for the processing that we carry out, in which case we will always inform you who is responsible for the processing of the data, as well as their identification details.

The Website may include hyperlinks or links that allow access to websites of third parties other than www.scientiatranslations.com, and which are therefore not operated by Cristina Bouzas Vording. The owners of these websites will have their own data protection policies, being themselves, in each case, responsible for their own processing and their own privacy practices.

From Cristina Bouzas Vording we are committed to the fulfilment of the obligation of secrecy of personal data and its duty to keep them. For that we adopt the necessary measures to avoid its alteration, loss, treatment or unauthorised access in accordance with the established in the Regulation.

2 WHERE DO WE REPORT?

Since we inform through the website www.scientiatranslations.com in the section corresponding to the privacy policy. More information in “Legal Notice”.

3 WHAT PERSONAL DATA DO WE PROCESS?

The personal data we process are:

Those that you choose to provide us with voluntarily.
Data derived from your communications with us.
The information corresponding to your own browsing in the case of Online Services, (IP address or information derived from cookies or similar devices (you can see our Cookies Policy on the website).
Information that is available in publicly accessible sources, to which we can legitimately have access.
The data arising from the contractual or pre-contractual relationship you have with us, including your image, always informing you in this case of the possibility of capturing your image.
Those provided to us by third parties about you, where there is a legitimate basis for doing so or where we have obtained your consent to do so.
The data of third parties that you provide to us, subject to the consent of the third party in question. You can find more information in the activity log section of this privacy policy.

4 HOW DO WE PROCESS THE DATA?

In Cristina Bouzas Vording we always treat your personal data in strict compliance with current legislation. In addition, we inform you that we have the appropriate technical and organisational measures to guarantee an optimal level of security, guaranteeing that only those persons with authorisation will have access, that we will keep them complete, avoiding any intentional or accidental loss and that we have reinforced the systems and services of data processing.

However, because Cristina Bouzas Vording cannot guarantee the impregnability of the Internet or the total absence of hackers or others who fraudulently access personal data, so it is committed to communicate without undue delay when a breach of security of personal data that is likely to involve a high risk to the rights and freedoms of individuals occurs. In accordance with Article 4 of the GDPR, a personal data breach is any breach of security resulting in the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or in unauthorised disclosure of or access to such data.

The operations, management and technical procedures that we carry out in automated or non-automated form and that make possible the collection, storage, modification, transfer and other actions on personal data are considered to be the processing of personal data.

5 WHAT IS THE LEGITIMACY OF THE PROCESSING?

The basis for the legitimisation of the processing of Personal Data shall be that resulting from the contractual or pre-contractual relationship, the employment relationship or any other relationship required for the processing of data, such as express consent.

6 HOW DO WE MANAGE ELECTRONIC COMMUNICATIONS?

In accordance with the provisions of Law 34/2002 of 11 July, on Information Society Services and Electronic Commerce, and Directive 2002/58/EC, we inform you that you may receive communications and information of a commercial nature through this electronic communication system (e-mails, automated response messages from forms and other communication systems) when you have given us your consent or when these are commercial communications referring to products or services similar to those previously provided by the party responsible for the processing of your data.

In the event that you do not wish to receive communications and information of this nature, you can notify us by this same means indicating in the subject “LOW COMMERCIAL COMMUNICATIONS” so that your personal data can be removed from our database. Your request will be acted upon within 1 month of being sent. In the event that we do not receive an express reply from you, we will understand that you accept and authorise our company to continue sending the aforementioned communications.

In the event of receiving such communications by these means, we inform you that the messages are addressed exclusively to the addressee and may contain privileged or confidential information. If you are not the addressee indicated, we notify you that unauthorised use, disclosure and/or copying is prohibited under current legislation.

7 HOW LONG DO WE KEEP YOUR DATA?

The personal data relating to natural persons that from Cristina Bouzas Vording we collect by any means, will be kept as long as the interested party does not request its deletion. Likewise, they will be kept as long as the relationship that originated the processing of the data is maintained, respecting in any case the legal periods of conservation. At the end of this period, the personal data will be eliminated from all the systems of Cristina Bouzas Vording.

8 WILL YOUR DATA BE COMMUNICATED TO THIRD PARTIES?

There will be no assignment, transmission or transfer of personal data, except those already reported, which are not the result of a legal obligation. If your data is requested from us by the Public Administration or Autonomous Institutions within the scope of the functions expressly attributed to them by law, your data will be transmitted.

If there is an assignment, transmission or transfer of personal data outside of the aforementioned cases, you will be informed beforehand so that, if necessary, you can give us your consent.

But in order to be able to organise ourselves correctly, to have good operations and procedures that guarantee a good management, from Cristina Bouzas Vording it may be necessary to hire the services of consultants, professionals, or other service companies to process data under our indications.

This treatment on behalf of third parties is regulated in a contract that is in writing or in some other legally admitted form and that allows accrediting its celebration and content, expressly specifying that the person in charge of the treatment will treat the data according to our instructions and will not apply them or use them with a different purpose to the one that appears in this contract, nor communicate them, not even for their conservation, to other persons.

9 WHAT ARE YOUR RIGHTS?

Data protection regulations give you the following rights:

Right of access: This is the right of the User to obtain confirmation of whether or not Cristina Bouzas Vording is processing his personal data and, if so, to obtain information about his specific personal data and the processing that Cristina Bouzas Vording has carried out or carries out, as well as, among others, the available information about the origin of said data and the recipients of the communications carried out or foreseen of the same.
Right of rectification: This is the User’s right to have his or her personal data amended if it proves to be inaccurate or, having regard to the purposes of the processing, incomplete.
Right of erasure (“the right to be forgotten”): This is the right of the User, unless otherwise provided by law, to obtain the erasure of his or her personal data when the personal data are no longer necessary for the purposes for which they were collected or processed; the User has withdrawn his or her consent to the processing and the processing has no other lawful basis; the User objects to the processing and there is no other legitimate reason to continue the processing; the personal data have been processed unlawfully; the personal data must be erased in compliance with a legal obligation; or the personal data have been obtained as a result of a direct offer of information society services to a child under 14 years of age. In addition to erasure, the Controller shall, taking into account available technology and the cost of its implementation, take reasonable steps to inform controllers who are processing the personal data of the data subject’s request for erasure of any link to those personal data.
Right to restriction of processing: This is the User’s right to restrict the processing of his or her personal data. The User has the right to obtain the limitation of processing when he/she contests the accuracy of his/her personal data; the processing is unlawful; the Controller no longer needs the personal data, but the User needs it to make claims; and when the User has objected to the processing.
Right to data portability: Where processing is carried out by automated means, the User shall have the right to receive from the Controller his or her personal data in a structured, commonly used and machine-readable format and to transmit it to another controller. Where technically feasible, the Controller shall transmit the data directly to such other controller.
Right of opposition: This is the User’s right not to have his or her personal data processed or to stop Cristina Bouzas Vording from processing them.
Right not to be subject to a decision based solely on automated processing, including profiling: This is the User’s right not to be subject to an individualised decision based solely on automated processing of his or her personal data, including profiling, unless otherwise provided for by law.

If you would like more information regarding the processing of your data, rectify any data that is inaccurate, oppose and/or limit any processing that you consider unnecessary, or request the cancellation of the processing when the data is no longer necessary, you can write to Cristina Bouzas Vording by e-mail to info@scientiatranslations.com.

This communication shall contain the following information: the name and surname of the user, the request, the address and supporting data.
The exercise of rights must be carried out by the user himself. However, they may be exercised by a person authorised as the authorised person’s legal representative. In this case, documentation must be provided to accredit this representation of the interested party.

Likewise, we would like to inform you that you can withdraw the consent given without affecting the lawfulness of the processing already carried out, by sending your request to the same address indicated in the previous paragraph. In this case, your request must be accompanied by a copy of your ID card or document proving your identity.

In the event that you consider that there is a problem or infringement of the regulations in force in the way in which your personal data are being processed, you will have the right to effective judicial protection and to lodge a complaint with a supervisory authority, in particular, in the State in which you have your habitual residence, place of work or place of the alleged infringement. In the case of Spain, the supervisory authority is the Spanish Data Protection Agency (https://www.aepd.es/) – C/ Jorge Juan, 6 28001-Madrid – FAX: 914483680- TELF: 901 100 099- E-mail: ciudadano@agpd.es

10 WHAT IS THE PURPOSE AND BASIS OF LEGITIMACY FOR THE DATA PROCESSING AND HOW LONG WILL THE DATA BE KEPT?

The purposes of the data processing carried out by any or all of the Controllers listed above are set out below.

TREATMENT ACTIVITY	PURPOSE OF PROCESSING	BASIS OF LEGITIMACY	CONSERVATION PERIOD
Labour management	Personnel management for the formalisation of an employment contract, file control, payroll management.	Contractual relationship	5 years from the end of the contract
Tax and accounting management	Processing necessary for the fulfilment of tax and accounting obligations	Relación contractual Obligación legal para el/la responsable Intereses legítimos prevalentes del responsable o de terceros	5 years from the end of the contract The time required to meet legal obligations
Contact management	Processing of data in order to be able to communicate with data subjects	Contractual relationship Overriding legitimate interests of the controller or of third parties Express consent of the data subject	5 years from the end of the contract Until cancellation and/or objection by the holder Until relevant loss of use
Prevention of occupational hazards	Compliance with current legislation on occupational risk prevention and health surveillance.	Contractual relationship Legal obligation for the person in charge	Until the end of the contractual relationship The period of time legally established by the specific regulations
Video surveillance	Capture of images by the video surveillance system and/or alarm system with image capture, to protect the assets of the institution	Overriding legitimate interests of the controller or third parties	1 month
Job applicant management	Recruitment and filling of jobs through CV management, personal interviews and assessment tests.	Vital interests of the data subject or of other persons Express consent of the data subject	1 year maximum
Organisation of events and activities	Management and coordination of activities and events related to the entity’s activity. Control of attendance and participants.	Contractual relationship Express consent of the person concerned	Until cancellation and/or objection by the owner Time necessary to meet legal obligations
Information communication and notifications	Dissemination of activities and notifications of relevant information related to the entity’s activity.	Overriding legitimate interests of the data controller or of third parties Express consent of the data subject	Until cancellation and/or objection by the holder
Multimedia management	Processing of images and/or videos for dissemination in the media and social networks and the promotion of activities	Express consent of the data subject	Until cancellation and/or objection by the owner Until relevant loss of use
Customer management	Processing of the data necessary for the maintenance of the commercial/contractual relationship with customers, invoicing, after-sales service, sending promotions and advertising and customer loyalty.	Contractual relationship Commercial relationship	5 years from the end of the contract The period legally established by the specific regulations.
Sending advertising	Sending commercial information, notifications about events and events of interest, offers, information about products and services, to customers and/or potential customers.	Express consent of the data subject	Until cancellation and/or objection by the owner Until relevant loss of use
Labour control	Monitoring of employee attendance at the workplace (holidays, absences, time recording).	Contractual relationship Legal obligation for the controller Overriding legitimate interests of the controller or of third parties	Until the end of the contractual relationship
Biometric data management	Facility access control, shift control and other related processing based on the identification of the holder by a bio-metric data.	Contractual relationship Overriding legitimate interests of the controller or third parties	Until the end of the contractual relationship
Supplier management	Analysis, valuation, contracting, order management and management of payments to suppliers	Contractual relationship	5 years from the end of the contract The period legally established by the specific regulations.
Project Management	Management of client and partner data necessary for the management and processing of consultancy projects.	Contractual relationship Express consent of the person concerned	Until cancellation and/or opposition by the holder The period of time legally established by the specific regulations.

11 ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

It is necessary that the User has read and agrees with the conditions on the protection of personal data contained in this Privacy Policy, as well as that he/she accepts the processing of his/her personal data so that the Data Controller can proceed in the manner, during the periods and for the purposes indicated. The use of the Web Site will imply the acceptance of the Privacy Policy of the same.

Cristina Bouzas Vording reserves the right to modify its Privacy Policy, according to its own criteria, or motivated by a legislative, jurisprudential or doctrinal change of the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User. The User is recommended to consult this page periodically to keep abreast of the latest changes or updates.

This Privacy Policy was updated to adapt to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and to Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights.

This Privacy Policy document has been revised on : 03/06/22