The personal data that you provide us by any of the means enabled for this purpose will be treated in accordance with the following privacy policy.

1. Identity of the Controller

ZABALA INNOVATION CONSULTING, S.A.,
Paseo Santxiki, 3 bis
E-31192 Mutilva (Navarra)

NIF: A31419773.
Phone: +34 948 198 000
Email: gdpr@zabala.es.

2. Processing

2.1. Relationship with the User

Processing
Your data will be processed for the management of the relationship as a Platform User. This relationship may range from your registration in our Platform to the management and collection of the services you request, as well as any due use made in it.

Legal basis
6.1.b) The processing is necessary for the execution of a contract in which the data subject is party.
6.1.c) Compliance with a legal obligation: commercial, tax and money laundering regulations.
6.1.a) The data subject consented to the treatment/processing.

Storage period
Your data will be stored for the duration of the relationship and once it has ended, for as long as there is legal liability for the controller.

2.2. Requests for information or consultation. Claims

Processing
To deal with any requests for information, queries or claims that may be received, with the management and scope that they require.

Legal basis
6.1.a) The data subject gave his/her consent for the processing.

Storage period
We will process your data for the time necessary to deal with and manage your request for information.

2.3. Commercial communications and Newsletters

Processing
Manage the sending of commercial communications by electronic means related to the activities and services of the organization.

Legal basis
6.1.a) The data subject consented to the processing.
6.1.f) Legitimate interest.

Storage period
We will store the data for as long as you wish to continue to receive such communications and do not object.

2.4. Cookies

If you have accepted to receive cookies at the beginning of your visit to this website, the website’s cookies policy will apply to you. The data obtained during navigation is used for the following purposes.

Processing
Collect information for analytical purposes about you, your browsing and your behaviour.

Legal basis
6.1.a) The data subject consented to the processing.

Storage period
According to the type of cookies, expressed in the corresponding policy.

If at any time you are asked to give your permission for processing of a purpose that requires consent, the non-granting of such permission (or its possible withdrawal at a later date) will not have any consequences for you in any case in terms of acceding to Kaila services. Nor will your opposition to the processing of your data for purposes based on legitimate interest (for example, your rejection to use your data as a customer for sending commercial communications) have any consequences.

On some data collection forms you will clearly see that some fields are marked as mandatory (with an asterisk) while the rest are absolutely voluntary. Therefore, not filling in voluntary fields will not have any consequence, and you can fill them in if you are interested in doing so.

3. Recipients

3.1. Will my data be communicated or transferred to third parties?

On a general basis, and unless legally obliged to do so, your data will not be communicated or transferred to any third party without your express consent. In any case, some communications and/or transfers of data to third parties may be imposed by certain regulations. Other communications and/or transfers will be a necessary consequence of the provision of the service, for example, the communication of your data to the STRIPE payment platform for the payment of resources, projects, etc., downloaded through the platform. In these cases, we state our commitment to formalize with this or other third parties, where appropriate, the mandatory processing agreement as required by the legislation in force.

Hosting. The web page is hosted by the provider DINAHOSTING.

Electronic mail. The e-mail service is provided by DRIP.

4. Rights

4.1. What are my data protection rights? General information.

With respect to the personal data collected for its processing, you have the possibility to exercise your rights of access, rectification, erasure and portability. Likewise, we inform you that in certain circumstances you will have the right to request the restriction or opposition of the processing of your data in which case the controller will cease processing and will only keep the data in the event that there is any regulatory obligation that imposes it or until the prescription of the actions that could concur.

If you want more information about the mentioned rights, we invite you to continue reading or to visit the infographic prepared by the Spanish Agency of Protection of Information accessible through the following hyperlink.

4.2. How and where can I exercise my rights?

We will be pleased to answer any questions or complaints you may have regarding data protection. Likewise, you may address your claim or exercise your rights through any of the contact channels indicated in the heading of this data protection policy.

Similarly, you can also contact the supervisory authority that you consider appropriate to file your complaint (for example, in the country where you have your habitual residence, place of work or where you consider that the alleged infringement has taken place). For the appropriate purposes, we inform you that in Spain the Supervisory Authority is the Spanish Data Protection Agency, and you can exercise your rights through the forms that this entity has enabled for this purpose and that are available at its website.