PRIVACY POLICY EX ARTICLE 13 OF REGULATION (EU) N. 2016/679:
Disruptive Humans, S.L. adopts the necessary measures to ensure the security, integrity, and confidentiality of the data under the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and, where not provided for therein, by Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, Royal Decree 1720/2007, of December 21, approving the Regulation implementing the Organic Law on the Protection of Personal Data, and Law 34/2002, of July 11, on Information Society Services and Electronic Commerce.
This Privacy Policy describes what personal information we collect, the purposes for which we use it, and, in general, the processes and ways we treat it.
RESPONSIBLE FOR THE DATA TREATMENT
The entity responsible for the processing of your data is:
- Disruptive Humans, S.L.
- Address: Paseo de la Castellana 259C, Torre de Cristal, Floor 33 North, 28046, Madrid
- Tel.+34 91 191 10 90
You may contact us regarding the Protection of Personal Data at the following e-mail address: privacy@behumans.com
CATEGORIES OF PERSONAL DATA PROCESSED
Disruptive Humans, S.L. collects and processes, among others, the following data: e-mail address, name, surname, curriculum vitae, addresses, country, telephone number, IP address, connection data, navigation data (if authorized by the user) and correspondence maintained through the site.
PURPOSES OF THE PROCESSING OF PERSONAL DATA
The personal data provided by any means will be incorporated into the records of the processing activities of Disruptive Humans, S.L. within the framework of the following purposes:
- To provide the services described on the website, answer the corresponding queries through the contact form and/or provide the information provided by the user, by any means;
- To manage the commercial relationships established with users and/or clients; and to comply with the contractual or extra-contractual obligations assumed by Disruptive Humans, S.L.
- Manage your participation in recruitment processes. This includes sending your CV for evaluation and keeping you informed of future vacancies by mail, telephone, e-mail, or other means of communication.
- For marketing and advertising: to send recommendations about products, services, and directly related offers that may be of interest to you.
The user declares that all data provided are authentic and correct, and undertakes to keep them updated, being responsible for any direct or indirect damage that may arise from this breach. If the data provided belongs to a third party, the user guarantees that he/she has been informed of this Privacy Policy and has given his/her authorization to provide us with his/her data.
THIRD-PARTY RECIPIENTS OF PERSONAL DATA
In general, Disruptive Humans, S.L. will not communicate this personal data to third parties, except when the provision of a service implies the need for a contractual relationship with a data processor and it is strictly necessary for the management and maintenance of the relationship between the user and the aforementioned company, with the prior express authorization of the user. This will only be done for the time necessary to allow the execution of the commissioning contract and under the same conditions and the same responsibilities required of the data controller. At the end of the assignment, the processor shall return the personal data to the controller and delete any copies in its possession.
Therefore, Disruptive Humans, S.L. may disclose your data to the third parties listed below for the strict purposes described in this Privacy Policy:
- Providers of essential services: when our activity requires it to develop our services.
If we are required by law or regulation to disclose your personal information to comply with any legal obligation, we will need to share your information. - Companies and/or consultants that help us in the management of resumes in our selection processes.
The complete and updated list of the subjects to whom the Personal Data may be communicated or who may become aware of them as Processors or Authorized Persons may be requested from the Data Controller.
In any case, the Personal Data provided will not be disseminated and, therefore, will not be communicated to undetermined subjects in any way.
TRANSFER OF DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS
There are no transfers of Personal Data to third countries or international organizations.
LEGAL BASIS FOR TREATMENT
The legal bases for the processing of your data for the purposes described in the previous section are as follows:
- The consent is given by the user through the contact form.
- The consent is given by the user to receive commercial communications.
- The user and/or customer has provided his/her data within the framework of a contractual or pre-contractual relationship, the processing of such data being necessary for the fulfillment and/or execution of a contract.
- You have given your consent to apply for a job through the appropriate form or by submitting your resume through any means. You are free to withdraw your consent by contacting us. However, withdrawal of this consent will prevent your participation in the recruitment process.
- The user and/or customer has given informed consent for the installation of tracking systems that report on browsing habits following the Cookies Policy.
- The obligation on the part of DISRUPTIVE HUMANS, S.L. to comply with a legal obligation to which we are subject or which is necessary for the performance of a task carried out in the public interest.
SPECIAL CATEGORIES OF PERSONAL DATA
According to Articles 9 and 10 of Regulation (EU) no. 2016/679, data that can be qualified as “Special categories of personal data”, meaning data revealing “racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data intended to uniquely identify a natural person, data concerning health or data concerning the sex life or sexual orientation of a natural person” could be provided by the Data Subject. These data will be processed exclusively following the explicit consent given and based on reasons of special public interest, complying in any case with the provisions of the applicable regulations.
TREATMENT MODALITY
The processing of the data provided is based on the principles of lawfulness, transparency, purpose limitation and conservation, data minimization, accuracy, integrity, and confidentiality, and will be carried out, in any case, subject to the provisions in this regard in the EU Regulation 2016/679 and Organic Law 3/2018 of December 5, 2018, on the Protection of Personal Data and guarantee of digital rights,
In particular, the processing will be carried out using paper, IT, and telematic tools, also under the provisions of Article 29 of EU Regulation 2016/679 and, in any case, with appropriate means to ensure its security and confidentiality under the provisions of Article 32 of the same EU Regulation No. 2016/679.
AUTOMATED DECISIONS
There is no automated decision-making process, not even for profiling purposes, following Article 13.2 letter f), of EU Regulation n. 679/2016
COOKIES
You can find information about the cookies used and their functions in our Cookie Policy.
RETENTION OF YOUR PERSONAL DATA
Disruptive Humans, S.L. will keep your personal data only for as long as it is necessary for the purpose for which it was originally collected.
Once the aforementioned period has elapsed, the data will be automatically deleted, without prejudice to its subsequent retention when necessary to comply with certain obligations or legal provisions or requests and/or orders issued by the Public Administrations and/or Control Authorities.
Concerning data related to marketing communications, we will stop processing them when you withdraw your consent. However, the withdrawal of such consent will not affect the lawfulness of any processing previously carried out.
EXERCISE OF DATA PROTECTION RIGHTS
At any time, the data subject may exercise, by Articles 15 to 22 of EU Regulation No. 2016/679, the following rights:
- request confirmation of the existence of Personal Data of your ownership that are subject to processing;
- obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the Personal Data have been or will be disclosed, and, where possible, the storage period;
- obtain the rectification and cancellation of the data;
- obtain the limitation of the treatment;
- to obtain data portability, i.e. to receive the data from the Data Controller in a structured, commonly used and machine-readable format, and to transmit it to another Data Controller without hindrance;
- object to the processing at any time, even in the case of processing for direct marketing purposes;
- object to an automated decision-making process involving natural persons, including profiling;
- request from the Data Controller access to your Personal Data for rectification, cancellation, limitation of processing, or opposition to it, in addition to the right to data portability;
- withdraw consent to the processing of your data at any time, without prejudice to the lawfulness of the processing carried out before its revocation;
- file a complaint with a supervisory authority.
For the exercise of his/her rights and for all questions concerning the processing of the data provided, as well as to receive more detailed information on the subjects and/or categories of subjects to whom the data are communicated or who are aware of them as Processors or Authorized Persons, the data subject may contact the Data Controller at the registered office of BeDisruptive, or by sending an e-mail to privacy@behumans.com
To allow the correct management of the above-mentioned request, they will have to be indicated in the same one:
- Your personal data: name, address, e-mail address, etc.
- The details of the request: new e-mail address, modification of data, etc
RIGHT TO CLAIM
If the data subject considers that the processing of personal data concerning him/her is carried out in violation of the provisions of EU Regulation 679/2016, he/she has the right to complain to the Spanish Data Protection Agency, as provided by Article 77 of the Regulation itself, or to appeal to the competent judicial body per Article 79 of EU Regulation n. 679/2016.