Who is the Data Controller of your data?

SOTHIS, address: c/ Charles Robert Darwin, 13 – Parque Tecnológico cp. 46980 Paterna (Valencia) and Tax Identification Number B-98086598 is the Data Controller of the data you provided and guarantees the security and confidential processing thereof, in accordance with the provisions of the General Data Protection Regulation (“GDPR”) and any other applicable legislation.

Likewise, in order to inform, advise, supervise compliance with the provisions of the GDPR, and act as a point of contact with the supervisory authority, SOTHIS has appointed a Data Protection Delegate, who can be contacted via email at dpo.gdpr@sothis.tech.

For what purposes and on what grounds do we process your personal data?

The collection and processing of the user’s personal data shall be carried out, depending on the relationship with the user, for the following purposes:

User/customer e-mail:

SOTHIS shall process the personal data collected for the purpose of allowing the management of the negotiation and, where appropriate, to respond to the requests you have made to us. Legal basis: The legal basis for processing is the adoption of pre-contractual measures..

Invitations to events:

SOTHIS shall process your personal data for the purpose of organising the aforementioned event, which will be kept for one year from the date of the event, as well as, if you give your consent, to take and reproduce your image on social networks, websites, multimedia platforms, magazines, reports and any other corporate resource, with a view to promoting events organised by companies that are part of SOTHIS. In this case, the data shall be kept without time limit, unless you request deletion or revoke your consent.

Management of the contractual customer relationship:

Development, control and maintenance of the contractual relationship and for the performance and management of the services and products contracted with SOTHIS, contact, invoicing, collection and debt management, customer service and complaint management, among others and, in general, the fulfilment of the obligations of the Contract. Legal basis: This processing is necessary for the execution of the contract.

Making enquiries or requests for information:

They shall be used for the purpose of managing, maintaining, developing and monitoring the existing business relationships between the parties, including the evaluation, assessment and monitoring thereof. Legal basis: This processing is necessary for the performance of the contract or for the implementation of pre-contractual measures at the user’s request.

Sending, both by ordinary and electronic means,  information about SOTHIS’ activities and services, provided that the Customer has given their consent to do so, either through the form or through the calls that SOTHIS makes to verify their consent in these cases. Legal basis: This processing is necessary for the satisfaction of SOTHIS’s legitimate interests, given that there is a legal regulation, Law 34/2002, of 11 July, on information society services and electronic commerce, as well as the European Regulation on Electronic Commercial Communications, and the Customer may object to this processing at any time.

How did we obtain your data?

The data that SOTHIS processes as a result of the interactions carried out by the user are the data provided by the user by filling in the forms made available, by filling in the spaces made available for contracting or by any other means by which the user communicates with SOTHIS.

Data generated as a result of the development, processing and maintenance of the relationship established between the user and SOTHIS.

How long will we keep your data?

The personal data provided by the user to contract products and services shall be processed by SOTHIS for as long as the contractual relationship remains in force and will end once all contractual obligations are fulfilled, such as attention to requests for information and customer complaints and billing review, without prejudice to the obligations of data blocking and/or data retention resulting from the applicable regulations in each case.

To which recipients will your data be communicated?

Your data shall only be passed on to Public Administrations for the fulfilment of legal obligations or to suppliers who need access to them in order to provide their SOTHIS services, with whom the confidentiality and data processing contracts required by the regulations have been signed.

What are your rights when you provide us with your data?

Users may exercise their rights of access, rectification or, where appropriate, request the deletion of their data when they are no longer necessary for the purposes for which they were collected, among other reasons.

The user may request the limitation of the processing of their data in the circumstances established in art. 18 of the GDPR, in which case they will only be kept for the exercise or defence of possible claims.

The user may withdraw the consent given at any time by objecting to the processing of his/her data for a specific purpose, without this affecting the lawfulness of the processing based on the consent prior to its withdrawal, or object to it, in which case his/her personal data shall only be kept for the exercise or defence of possible claims.

The user may contact SOTHIS to challenge any decision that he/she believes may affect his/her rights and freedoms or legitimate interests and that is based on an automated decision, including profiling. This right allows you to challenge such a decision and to obtain a direct response from the managers of SOTHIS.

The user may ask SOTHIS for the portability of their personal data, obtaining an electronic copy of the data either by sending it to the e-mail address provided or by clicking on the corresponding section on the SOTHIS website.

All these rights may be exercised in writing to the following address: c/ Charles Robert Darwin, 13 – Parque Tecnológico cp. 46980 Paterna (Valencia), Spain or by sending your request to the following e-mail address:  rgpd@sothis.tech. The request must state the name and surname of the data subject, a photocopy of his/her identity card and, where appropriate, of the person representing him/her; the specific request; address for the purpose of notifications, date and signature of the data subject.

In the event that the user does not obtain the desired response or satisfaction, SOTHIS informs him/her of his/her right to file a complaint before the Spanish Data Protection Agency, with address at C/Jorge Juan nº6, 28001 Madrid. More information at www.agpd.es.

Security Measures

Access to SOTHIS’ digital platforms takes place in a secure environment. To verify that you are on our Company’s website, please check that the top status line shows https://www.sothis.tech. Make sure that the “URL” address begins with “https”, where the “s” identifies that the content is being offered by a secure server with SSL protocol.

SOTHIS has adopted appropriate data protection measures and has implemented the necessary measures to protect the rights and freedoms of data subjects and to prevent their alteration, loss, unauthorised processing and/or access, taking into account the state of the art, the costs of implementation, the nature, scope, context and purposes of the processing, as well as risks of varying likelihood and severity. In any case, it must take into consideration that Internet security measures are not impregnable.

If you have any questions concerning the protection of personal data, you can contact us on our phone number (+34) 900 923 533.

Nov 2019

SOTHIS