Owner: MAILTECK, S.A.
NIF: A-31501901
Address: Avenida de la Recomba nº 14 – 28914 – Leganés, Madrid
Telephone: 913 044 941
Email: info@mailteck.com
Contact with DPO: dpo@mailteck.com

Owner: Customer Communications Tecknalia, S.L.
NIF: B-86414000
Address: Avenida de la Recomba nº 12-14 - 28914 Leganés (Madrid)
Telephone: 91 689 56 65
Email: info@customercomms.com
Contact with DPO: dpo@customercomms.com

At GRUPO MAILCOMMS, the information that you have provided has been collected by one of the GRUPO MAILCOMMS companies, in order to manage and process the request made: GRUPO MAILCOMMS will only process the data provided for the purposes described above and they will not be further processed in a way incompatible with those purposes.

In order to be able to offer you products and services according to your interests and to improve your user experience, we will produce a “commercial profile”, based on the information provided. However, automated decisions will not be made based on that profile.

The personal data provided will be kept as long as the commercial relationship is maintained, or its deletion is not requested by the interested party, for a period of 5 years from the last confirmation of interest.

The data subject, by providing their data through the channels that the GRUPO MAILCOMMS companies facilitate to collect contact information (contact form, commercial visit, etc.).

• Collaborating and participated companies for commercial purposes.
• By legal requirement when a rule so requires.

• General confirmation: Any person is entitled to obtain confirmation on whether GRUPO MAILCOMMS are processing personal data that concerns them.
• ARCO Rights: Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• Limitation of the processing: In certain circumstances, the interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defence of legal claims.
• Objection to processing: In certain circumstances and or reasons relating to their particular situation, the interested parties may object to the processing of their data.
  Therefore, GRUPO MAILCOMMS will stop processing the data, except for compelling legitimate grounds, or the exercise or defence of potential legal claims.
• Portability of the data: In certain circumstances and or reasons relating to their particular situation, the interested parties may request to receive the personal data provided in the contact form, in a structured, commonly used and machine-readable format and have the right to transmit those data to another data controller without hindrance.
• Claim before a public body: if your right to protection of personal data is violated, you can file a claim with the Spanish Agency for Data Protection (www.aepd.es).
• Channel to exercise your rights: Data subjects may exercise their rights recognised in the regulations against and before each of the data controllers, via the addresses enabled as DPO in the section «Data Controller».

• Personal data has been obtained from the channels that GRUPO MAILCOMMS companies provide to collect contact information (Contact form, Commercial visit, etc.)
• The categories of data to be processed are identification data (name, surname(s), email, etc.)
• MAILCOMMS GROUP, doesn’t process especially protected data

Version: 3 | Date: 10/01/2022

ANNEX I: INFORMATION SECURITY AND PRIVACY MANAGEMENT SYSTEM POLICY

This Information Security and Privacy Policy shows the commitment of the Management by providing the organization with resources, responsibilities and procedures that allow it to guarantee compliance with current regulations, as well as the integrity, confidentiality and availability of information and systems, being crucial for the security, privacy and continuity of our organization, as well as that of our clients.

Grupo MailComms, aware that the security and privacy of information relating to our customers is a highly valuable resource, has established an Information Security and Privacy Management System in accordance with the requirements of the ISO/IEC 27001 standards. :2013 and ISO/IEC 27701:2019 to guarantee the continuity of information systems, minimize the risks of damage and ensure compliance with the objectives set.

Additionally, for the Certified Electronic Delivery service, based on the nature of the service itself, the provisions established in the European eIDAS Regulation that regulates Trust Services have been followed, and specifically the ETSI 319 401 and ETSI 319 standards. 521 for Providers of Certified Electronic Delivery Services that contain specific precepts for the provision of this type of service. In this sense, the Policy that will govern this service will be the Certification Practices Statement (hereinafter CPS).

The purpose of the Security and Privacy Policy is to establish the framework of action necessary to protect information resources against threats, internal or external, deliberate or accidental, in order to ensure compliance with the confidentiality, integrity and availability of the information. information.

The effectiveness and application of the Information Security and Privacy Management System is the direct responsibility of the Information Security and Privacy Committee, which is responsible for the approval, dissemination and compliance with this Security and Privacy Policy. An Information Security and Privacy Management System Manager has been appointed in their name and representation, who has sufficient authority to play an active role in the Information Security and Privacy Management System, supervising its implementation. , development and maintenance.

Additionally, and to comply with current data protection regulations, a Data Protection Officer (DPO) has been appointed in order to guarantee the security and privacy of personal data, especially taking into account the activity of the company.

The Information Security and Privacy Committee will proceed to develop and approve the risk analysis methodology used in the Information Security and Privacy Management System.

Any person whose activity may, directly or indirectly, be affected by the requirements of the Information Security and Privacy Management System, is obliged to strictly comply with the Security and Privacy Policy and additionally, for the Certified Electronic Delivery Service. , must comply with the DPC.

Grupo MailComms will implement all the necessary measures to comply with the applicable regulations regarding security and privacy in general and computer security, regarding computer policy, the security of buildings and facilities and the behavior of employees and third parties associated with Grupo MailComms in the use of computer systems and processing of personal data. The necessary measures to guarantee the security and privacy of the information through the application of norms, procedures and controls must allow to ensure the confidentiality, integrity, availability of the information, essential for:

• Comply with current legislation, regulations and regulations regarding privacy and information systems and with all contractual requirements regarding data protection and trusted electronic services, as well as those deemed appropriate to carry out with the aim of achieve continuous improvement of the organization.
• Ensure the confidentiality of the data managed by Grupo MailComms.
• Ensure the availability of information systems, both in the services offered to customers and in internal management.
• Ensure response capacity in emergency situations, restoring the operation of critical services in the shortest possible time.
• Avoid undue alterations in the information.
• Promote awareness and training in security and privacy of information and in the field of electronic trust services.
• Promote and participate in achieving the continuous improvement of the information security and privacy management system and trusted electronic services.

The Information Security and Privacy Policies and the CPS must be reviewed at planned intervals, at least annually and whenever significant changes occur in the organization, in order to ensure that their suitability, adaptation and effectiveness are maintained.