The only information that G2ZERO S.L. obtains about a web user is information supplied voluntarily by the user. This means that you can visit the G2ZERO S.L. website without identifying who you are or revealing any information about yourself. Some services or tools may request specific user information, such as name and email address, and the user may decide whether to voluntarily supply that information.
We guarantee compliance with the current regulations on personal data protection, reflected in Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD GDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR).
The use of the website implies acceptance of this Privacy Policy as well as the conditions included in the Legal Notice.
Who is liable for handling your data?
- G2ZERO S.L. | B02924728
- Calle de las dos Doncellas 6 – Portal 9, 4ºA, GETAFE 28906, MADRID
- Spain
- Web: https://g2.idenet.eu
- Correo electrónico: contact@g2-zero.com
- Número de teléfono: +32471116416
The data controller hereby states its policy regarding the processing and protection of personal data, which shall apply to those who voluntarily communicate with the data controller via email, complete data collection forms, enter into a contractual relationship with the data controller, or use any other service on the website that involves communicating data to the data controller, or accessing and using the data controller’s services shall imply express acceptance of this policy.
Asimismo, estas condiciones serán de aplicación subsidiaria de aquellas otras que sobre la misma materia se establezcan, con carácter especial, y sean comunicadas sin carácter limitativo a través de los formularios de registro, contratos y/o condiciones de los servicios particulares, quedando las presentes políticas como complementarias de las anteriores en aquello no previsto expresamente y que no se contradiga.
Sending an email to the data controller, or communicating any other personal data to the data controller through any means, entails or implies the provision of free, unequivocal, specific, informed, and express consent for the processing of personal data by the data controller, which will be carried out for the purpose of responding to the communications received.
The data controller informs the website user of the processing of personal data, the characteristics of which are detailed below:
For what purpose do we process your data?
We process your data for the purpose of providing or facilitating information requested by the user, providing services or delivering goods and services, and providing informational or commercial communications previously accepted by the user or extracted from unrestricted public databases. We also process data for statistical studies, analyzing website behavior and usage, and interacting with digital communication elements.
What categories of data do we process?
The data categories processed by the Controller are solely identifying data. Under no circumstances are special categories of personal data processed within the meaning of Article 9 of the GDPR.
Legal basis for the processing of personal data
The legal basis for the processing of personal data is:
- Execution of a contract: processing is necessary for the provision of the services requested by the User.
- Legitimate interest of the controller: for purposes such as sending commercial communications, statistical studies, behavioral analysis, and service improvement, provided that such interest is not overridden by the fundamental rights and freedoms of the User.
- Compliance with legal obligations: when processing is necessary to comply with a legal obligation applicable to the controller.
- User Consent: for specific purposes that require your express authorization.
The User shall have the right to withdraw their consent at any time when processing is based on it, without affecting the lawfulness of the processing prior to its withdrawal.
Whenever the User must or may provide their data through forms to make inquiries, request information, or for reasons related to the content of the Website, they will be informed if completion of any of these forms is mandatory because they are essential for the proper development of the transaction.
Purposes of the processing to which the personal data are destined
Personal data is collected and managed by the Controller for the purpose of facilitating, streamlining, and fulfilling the commitments established between the Website and the User, or maintaining the relationship established in the forms the User completes, or to respond to a request or query.
Likewise, the data may be used for commercial purposes of personalization, operational and statistical purposes, and for activities related to the corporate purpose of the Controller, as well as for data extraction, storage and marketing studies to adapt the Content offered to the User, as well as to improve the quality, operation and navigation of the Website and promotional or advertising actions.
Retention periods for personal data
Personal data will only be retained for the minimum period necessary for the purposes of its processing and, in any case, only for the following period: Indefinite, or until the User requests its deletion.
At the time personal data is obtained, the User will be informed of the period for which the personal data will be retained or, if this is not possible, the criteria used to determine this period.
Recipients of personal data
The User’s personal data may be shared with third parties under the conditions specified in this document. This also applies if the controller is part of a corporate group, in which case it will be shared with the companies in the group to which the controller belongs.
In any case, at the time the personal data is obtained, the User will be informed of the categories of recipients of the personal data in this same document.
The User’s personal data may be shared with current and future third-party service providers who assist the Controller in providing services, always under the confidentiality and security conditions required by law.
Personal data of minors
In compliance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights, only those over 14 years of age may give their consent for the lawful processing of their personal data by the Data Controller. If the data subject is under 14 years of age, the consent of their parents or guardians will be required for processing, and this will only be considered lawful to the extent that they have authorized it.
Are there automated decisions?
Automation systems are used to personalize communications and customize the content displayed on the website based on the user’s behavior and recorded interactions on the website and communications sent. User profiles are thus established based on their behavior and web activity, whether browsing, purchasing, or other interactions with the content of the website and communications sent electronically, as well as other interactions with third-party services such as social networks, advertising systems, or CRMs.
How long will we retain your data?
Your personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected, respecting the retention period limitation principle established in the GDPR.
The data will be retained as long as a contractual or service relationship exists with you and you do not request its deletion. Once the contractual relationship ends, the data will be deleted or anonymized using appropriate security measures, unless retention is necessary to comply with legal obligations, such as tax or regulatory obligations that require data retention for a specific period, or to defend ourselves against potential legal claims during the statute of limitations established by applicable regulations.
To determine the retention periods, we will take into account applicable legal obligations, the nature of the contractual relationship, the requirements for defending against claims, and our legitimate interests in maintaining effective communication with you.
What is the legitimacy for processing your data?
The legal basis for processing personal data is the consent of the data subject or their legal representative, as well as the execution of a service provision contract, a request for information, or the transfer of data in exchange for information or documentation of interest to the user.
The interested party is not obligated to provide us with their personal data, but failure to provide the information required and necessary for processing may prevent us from providing the requested service.
The data subject may revoke consent for the collection and processing of their personal data at any time, using the procedure we establish for this purpose, without affecting the lawfulness of the processing based on consent prior to its withdrawal. Under no circumstances will the withdrawal of consent affect the execution of other purposes.
Are there transfers to third parties and international transfers of your data?
Your personal data may be shared with third-party service providers to perform necessary functions that allow us to provide you with a better experience and meet our business objectives. The categories of companies with which we may share your data include:
- Analytics and statistics service providers: To understand how users interact with our website and improve its functionality. This includes tools that collect information about your browsing for statistical and behavioral analysis.
- On-site communication services: Tools that allow us to interact with you directly on our website, such as live chats or virtual assistants, pop-ups, dynamic behavior-based messages, and other content and communication customization systems within the website provided by third parties, to improve the browsing and interaction experience, provide customer service, and resolve your inquiries in real time.
- Cookie consent management and data protection platforms: To manage and safeguard the consents you have given regarding the use of cookies and other personal data, ensuring compliance with applicable privacy regulations.
- Process and production management providers: Tools that help us optimize and automate our internal processes and workflows to offer you a more efficient service.
- Billing and collection services: Companies that process payments and manage billing, which are necessary for the execution of commercial transactions and the provision of our services.
- Marketing and automation platforms: To send you commercial communications, offers, newsletters, and other information related to our products and services, provided you have given your consent.
- Customer relationship management (CRM) tools: To manage and optimize our interactions with you, improve customer service, and personalize our communications.
- Advertising and remarketing platforms: To show you personalized advertising based on your interests and online behaviors.
- Web hosting and maintenance services: To host our website and ensure its proper functioning and security.
- Social media management platforms: To interact with you through social media and manage content and communications on those platforms.
- Process automation tools: To optimize internal processes and improve the operational efficiency of our services.
- Advanced AI and analytics tools: For content generation, personalization, and profiling.
- Data cross-referencing and synchronization: To consolidate information from different sources and improve the user experience.
- Profiling and segmentation: Through behavioral and interaction analysis, both on our website and on social media or other external platforms.
Purposes of Treatment
Personal data will be processed for the following purposes:
- Website analysis and improvement: Evaluate the performance and functionality of our site in order to improve it and adapt it to user needs.
- Marketing y comunicaciones: Enviarle información promocional y publicitaria relacionada con nuestros productos y servicios, siempre que haya prestado su consentimiento.
- Advertising personalization: Showing you content and ads tailored to your interests and preferences.
- Customer Relationship Management: Maintaining effective communication with you, managing inquiries, requests, and providing support.
- On-site communication: Provide you with immediate assistance through live chat or similar tools while you navigate our website.
- Behavioral analysis: Understanding your browsing patterns and behavior on our site to improve your experience and personalize our services.
- Consent management: Record and safeguard your consent regarding the use of cookies and data processing, ensuring legal compliance.
- Process and production management: Optimize our internal processes and service delivery to increase efficiency and quality.
- Billing and collection: Process payments, issue invoices, and manage business transactions related to the services you have contracted.
- Compliance with legal obligations: Manage and store data in accordance with applicable regulations.
Legitimation for Data Processing
The legal basis for the processing of your data is based on:
- Data subject consent: For the sending of commercial communications, newsletters, the use of non-essential cookies, and on-site communication services when applicable. You have the right to withdraw your consent at any time.
- Legitimate interest: For statistical analysis, behavioral analysis, service improvements, process and production management, and website security. We ensure that this interest does not override your fundamental rights and freedoms.
- Performance of a contract: When processing is necessary for the provision of a service requested by you, including billing and collection.
- Compliance with a legal obligation: To comply with applicable legal obligations, such as tax and data protection regulations.
International Data Transfers
Your personal data may be transferred to organizations located outside the European Economic Area (EEA). These transfers are carried out under appropriate safeguards, including:
- Standard Contractual Clauses approved by the European Commission that ensure the protection of your data.
- Adequacy decisions of the European Commission regarding the country of destination.
By using our services, you agree to the possible international transfer of your data to various organizations for the purposes described above, or for our legitimate interests, which are based on compliance with European data protection legislation, without any obligation on us to verify compliance claims.
What security measures do we implement to protect your data?
We adopt appropriate and reasonable security measures, tailored to technological advances and the nature of the stored data, making an effort to protect such data against common potential risks, such as unauthorized processing and access, alteration, or loss of data, in a reasonable manner, in strict compliance with regulatory obligations regarding data protection.
What are your rights when you provide us with your data?
Right of access: It is the right of the User to obtain confirmation of whether or not the Controller is processing their personal data and, if so, to obtain information about their specific personal data and the processing that the Controller has carried out or is carrying out, as well as, among other things, the information available on the origin of said data and the recipients of the communications made or planned for them.
Right to rectification: This is the User’s right to have their personal data modified if it is inaccurate or, taking into account the purposes of the processing, incomplete.
Right to erasure (“the right to be forgotten”): This is the User’s right, unless otherwise provided by current legislation, to obtain the erasure of their personal data when they are no longer necessary for the purposes for which they were collected or processed; the User has withdrawn their consent to the processing and there is no other legal basis for this; the User objects to the processing and there is no other legitimate reason to continue processing; the personal data have been processed unlawfully; the personal data must be erased in compliance with a legal obligation; or the personal data have been obtained as a result of a direct offer of information society services to a child under 14 years of age. In addition to erasing the data, the Data Controller, taking into account available technology and the cost of its implementation, must take reasonable steps to inform the controllers processing the personal data of the data subject’s request to erase any links to those personal data.
Right to data portability: If processing is carried out by automated means, the User shall have the right to receive their personal data from the Data Controller in a structured, commonly used, and machine-readable format and to transmit it to another data controller. Whenever technically feasible, the Data Controller shall transmit the data directly to that other controller.
Right to object: This is the User’s right to prevent the processing of their personal data or to stop the processing of their data by the controller.
Right not to be subject to a decision based solely on automated processing, including profiling: This is the User’s right not to be subject to an individualized decision based solely on automated processing of their personal data, including profiling, unless otherwise provided by applicable law.
Right to restriction of processing: This is the User’s right to restrict the processing of their personal data. Users have the right to obtain restriction of processing when they contest the accuracy of their personal data; the processing is unlawful; the Data Controller no longer needs the personal data, but the User requires it to make a claim; and when the User has objected to the processing. Users may request restriction of the processing of their data in the following cases:
- While the challenge to the accuracy of your data is being reviewed
- When the processing is lawful, but you oppose the deletion of your data.
- When the organization does not need to process your data, but you need it to exercise or defend legal claims.
- When you have objected to the processing of your data, for the fulfillment of a mission in the public interest or for the satisfaction of a legitimate interest, while we verify whether the legitimate reasons for processing prevail over yours.
Therefore, the User may exercise his or her rights by means of written communication addressed to the Data Controller, specifying:
Name, surname, and copy of ID. In cases where representation is permitted, identification by the same means of the person representing the User will also be required, as well as the document proving the representation. The photocopy of the ID may be substituted with any other legally valid means that proves identity.
Request with the specific reasons for the request or information you wish to access.
Address for notifications.
Date and signature of the applicant.
Any document that proves the request.
To the data of the person responsible specified at the beginning of this document.
However, you may file a complaint with the Data Protection Agency (www.agpd.es).
Accuracy and truthfulness of data
The data subject or their legal representative is solely responsible for the truthfulness and accuracy of the data provided, exonerating the data controller from any liability in this regard. Data subjects guarantee and are responsible, in all cases, for the accuracy, validity, and authenticity of the personal data provided, and undertake to keep them duly updated. The data subject agrees to provide complete and accurate information to the data controller.
Modifications
The Data Controller reserves the right to modify its Privacy Policy, at its sole discretion, or due to legislative, jurisprudential, or doctrinal changes from the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User. Users are advised to check this page periodically to stay informed of the latest changes or updates.
Acceptance and changes to the privacy policy
The User must have read and agree to the terms and conditions regarding the protection of personal data contained in this Privacy Policy, and must accept the processing of their personal data so that the Data Controller can process it in the manner, during the timeframe, and for the purposes indicated. Use of the Website implies acceptance of its Privacy Policy.
The Data Controller reserves the right to modify its Privacy Policy, at its sole discretion, or due to legislative, jurisprudential, or doctrinal changes from the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User. Users are advised to check this page periodically to stay informed of the latest changes or updates.
This Privacy Policy has been updated to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights.