Privacy Policy

The purpose of this privacy policy is to provide information regarding the processing of data by EKARPEN and to describe the rights of data subjects per Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of data and the free movement of such data (hereinafter, GDPR), and with Organic Law 3/2018, of December 5, on Data Protection and Guarantee of Digital Rights (hereinafter, LOPDGDD).

Who is the controller of your data?

EKARPEN, S.A., hereinafter referred to as EKARPEN, is responsible for this website.

This privacy policy applies to all data provided to EKARPEN on this website, as well as to all individuals interested in the products and services offered by the company through its website and any other means of communication. EKARPEN’s Privacy Policy aims to provide information transparency on how we treat your data in compliance with current data protection law.

Identification of controller:

EKARPEN was set up to support innovative sectors with strategic appeal for the Basque Country, to achieve projects with a high potential for value creation and with the appropriate size. For our administration, we need to process data based on the processing described in the following chapter. You can learn about us in detail at http://www.ekarpen.es/

The data subject may contact EKARPEN by e-mail at ekarpen@ekarpen.es or at Rodríguez Arias Kalea, 23, 48009 Bilbao, (Bizkaia) with any queries or needs they may have regarding data protection

For what purposes do we process your data and on what grounds?

EKARPEN keeps a Record of Processing Activities which details each of the following processing operations it conducts as data controller:

a) CONTACTS: contact details of persons linked to EKARPEN or of commercial interest. We will also process your data to respond to suggestions and communications to provide the best service.
b) CANDIDATES: management of employment selection processes at EKARPEN.
c) HUMAN RESOURCE processing not detailed in this privacy policy.
d) Processing related to EKARPEN MEMBERS and DIRECTORS.
e) Other purposes: we may also use your data for other purposes and, for these purposes, we will provide you with specific notice at the time of collection and obtain your consent where necessary.

Legitimization

The legal basis for processing your data depends on how you interact with our websites.
For the rest of our activity, the legal basis for the processing of your data varies according to the purposes described above and the groups of persons concerned, as follows:

• Compliance with legal obligations

• Our legitimate business interests

• The express consent of the data subjects where necessary.

How long do we keep your data?

EKARPEN will keep data subjects’ data for the duration of their relationship with the organisation, thereafter the data will be kept following the archiving and documentation regulations established in each applicable jurisdiction. Should you exercise one of your rights, your data will be deleted according to the right you have exercised.

Who has access to your data?

EKARPEN may transfer or communicate data to meet its obligations with Public Administrations as may be required following the legislation in force at any given time and, where appropriate, to other bodies such as the State Security Forces and the Judiciary.

EKARPEN shares your data with third-party service providers who have access to and process your data on our behalf, the conditions and requirements governing the use of which have been agreed via contract.

What are the rights of data subjects?

We inform you that you may exercise the following rights:

Right of access to your data to know which data is being processed.
The right to amend any inaccurate data.
The right to delete your data, where possible.
The right to seek the restriction of the processing of your data where the accuracy, lawfulness or necessity of the data processing is in doubt, in which case we may retain the data to pursue or defend claims.
The right to object to the processing of your data, when it is processed according to the legal basis of legitimate interest, EKARPEN will stop processing your data unless it has a compelling legitimate interest or for the formulation, exercise or defence of claims.
The right to the portability of your data, when the legal basis that enables us to process the indicated data is your consent.

These rights may be exercised free of charge by the data subject, and, where appropriate, by whoever represents them, via a written request addressed to ekarpen@ekarpen.es

In addition to the above rights, the data subject shall have the right to withdraw the consent they have given at any time without such withdrawal of consent affecting the lawfulness of the processing before its withdrawal. EKARPEN may continue to process the data subject’s data to the extent permitted by applicable law.

EKARPEN reminds the data subject that they have the right to file a complaint with the Spanish Data Protection Agency.

What security measures have we implemented?

EKARPEN undertakes to comply with its obligation to maintain the secrecy of data and its duty to store it and will adopt the necessary measures to avoid its alteration, loss, unauthorised processing or access, following the applicable legal provisions.

EKARPEN has implemented the necessary technical and organisational security measures to guarantee the security of your data and to avoid its alteration, loss and unauthorised processing and/or access, considering the state of technology, the nature of the data stored and the risks to which it is exposed, whether from human activity or the physical or natural environment, following the applicable legal provisions.

Links

The EKARPEN website may include hyperlinks to other sites that are not operated nor controlled by EKARPEN. Therefore, EKARPEN does not guarantee, nor is it responsible for the legality, reliability, usefulness, veracity and currentness of the contents of such websites or their privacy practices. Please note that before you provide your personal information to such third-party websites, be aware that their data protection compliance may differ from ours.