Política de privacidad

This personal data protection policy will be applicable to personal data processed by EURODIVISAS CORPORACIÓN, S.L., holding company of the Global Exchange Group, hereinafter and indistinctly referred to as the "Global Exchange Group" or the "Entity") as Data Controller.

The Global Exchange Group complies with current legislation in Spain and the European Union in the processing of personal data of its users, particularly with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, GDPR) and with Organic Law 3/2018, of 5 December, on Personal Data Protection and guarantee of digital rights (hereinafter, LOPDGDD).

To this end, we have adopted the necessary technical and organizational measures to ensure the confidentiality of the information and prevent the loss, misuse, alteration, unauthorized access and theft of the personal data provided, taking into account the state of technology, the nature of the data and the risks to which they are exposed:

I. WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?

• Eurodivisas Corporación, S.L., holding company of the Global Exchange Group, is a commercial entity registered in the Commercial Registry of Salamanca in volume 542, folio 91, 1st registration, sheet SA-19293, whose corporate purpose is the provision of management, administration, coordination, maintenance and optimization services for the resources of the companies in which the Entity participates, as well as the provision of any support and assistance service to its subsidiaries through the necessary human and material resources.
• Tax ID Number: B-56449101
• Registered office: Calle Lagunas de Villafáfila, nº 35-39, Parque Empresarial "El Montalvo II", 37008 Salamanca, Spain.

II. WHAT PERSONAL DATA DO WE COLLECT AND HOW DO WE USE IT?

The personal data we collect and that will be subject to processing will be the personal data that the user has provided to us through the Entity's website, according to the following scenarios:

1. Commercial contact: Personal data provided for handling inquiries and contact requests received by any means, regarding the services of the Global Exchange Group, as well as maintaining commercial relationships:
   • Category of data collected: Name and surname, e-mail and telephone.
   • Purpose: To respond to information requests that the interested party has made by any means about the products and services of the Global Exchange Group, and to establish and maintain commercial relationships.
   • Legal basis: Based on the provision of consent, the Global Exchange Group is legitimized to process the data of the interested party provided through the contact request, and according to legitimate interest for the development and maintenance of commercial relationships.
   • Retention periods: The data will be kept until the moment the interested party requests the cancellation or deletion of their data and once deleted they will be kept available to the public administration, judges and courts, for the legal periods established for the attention and defense of possible responsibilities arising from the processing.
2. Curriculum or employment: Personal data provided for sending the curriculum vitae through the Global Exchange Group websites enabled for its submission or through any means to the Global Exchange Group:
   • Category of data collected: Professional area, name, surnames, telephone, e-mail and any other personal data associated with the curriculum vitae.
   • Purpose: Management of the interested party's candidacy for published selection processes or other vacant positions in line with their professional profile that may arise in the future within the activities of the Global Exchange Group.
   • Retention periods: The data will be kept until a job position is awarded or until you request their deletion. They will therefore be kept for the time necessary for the purpose of the processing, and once finished they will be kept available to the public administration, judges and courts, for the legal periods established for the attention and defense of possible responsibilities arising from the processing.
   • Legal basis: Consent of the interested party.
   • Recipients: The data provided and derived from the selection process may be transferred to third-party companies identified by the interested party for requesting references that may be necessary for the selection of the candidate.
3. Promotional: Personal data provided for the management of promotional activities, related to the activities of the Global Exchange Group:
   • Category of data collected: Email address, name, surnames and identity document.
   • Purpose: The management of promotional activities.
   • Legal basis: Consent of the interested party to the Global Exchange Group for registration in promotional services, and legitimate interest for the development of commercial relationships.
   • Retention periods: The data will be kept until the moment the interested party requests the cancellation or deletion of their data and once deleted they will be kept available to the public administration, judges and courts, for the legal periods established for the attention and defense of possible responsibilities arising from the processing.
4. Access control and security: Data collected by Video Surveillance cameras:
   • Category of data collected: Images
   • Purpose: To control access and manage internal security of the Global Exchange Group facilities, as well as supervise the performance of Global Exchange Group employees.
   • Legal basis: Legitimate interest in guaranteeing security in the facilities by its owner, which justifies that the images are necessarily captured when accessing these facilities.
   • Retention periods: The data will be kept for a maximum period of one month, unless it is necessary to keep them for a longer time to clarify any detected infraction or illegal act.

     III. WHAT HAPPENS IF YOUR PERSONAL DATA IS UPDATED?

If the personal data you have provided us is updated, for example, if your email address changes or you believe the data in our database is incomplete or incorrect, please let us know by sending a communication to the Global Exchange Group and explicitly stating the reason for your request by filling out our Contact Form.

We are not responsible for any damages you may suffer resulting from incorrect, false, deficient or incomplete data that you have provided to us.

IV. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

There are data communications to third parties for the provision of third-party services as data processors with whom the Global Exchange Group has signed the corresponding Data Processor contracts and verified that they provide sufficient guarantees to apply appropriate technical and organizational measures, so that the processing is carried out in accordance with the requirements of the GDPR, ensuring the protection of the data subject's rights.

However, your personal data will not be transferred to any third party without a legal basis that legitimizes such transfer (legal relationship, judicial or administrative order, etc.).

V. DOES THE GLOBAL EXCHANGE GROUP CARRY OUT INTERNATIONAL DATA TRANSFERS?

International transfers of your personal data may be made to service providers, mainly iCloud service providers (for example, AWS). These providers will have their servers located in the European Union (EU).

However, in the event that the servers are located in countries outside the EU, Global Exchange will ensure that personal data is treated with the same level of protection that would have corresponded if it had remained in the EU, ensuring that standard clauses adopted by the European Commission or by the Spanish Data Protection Agency have been signed with the receiving entity.

VI. WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?

The data subject may revoke the consent given, if applicable, as well as exercise the following rights before the Controller:

• Right of access: Right to obtain information about what personal data and processing is being carried out by the Controller.
• Right of rectification: Right to request the correction of inaccurate personal data.
• Right of erasure: Right to request the cancellation of personal data.
• Right of portability: Right to receive the personal data provided for transmission to another Controller.
• Right to object: Right to request the cessation of personal data processing, when this is based on legitimate interest.
• Right to restriction: of personal data processing.
• Right not to be subject: to automated decision-making.

To do this, you must send a communication attaching a document that proves your identity and explicitly indicating the right you wish to exercise, to the Global Exchange Group, by filling out our Contact Form.

In any case, and if deemed appropriate, you will have the right to seek the protection and support of the Spanish Data Protection Agency, or competent data protection authority, in accordance with the provisions of the current data protection regulations (www.aepd.es).

VII. DO YOU NEED MORE INFORMATION ABOUT THE PROCESSING OF YOUR PERSONAL DATA?

For any other matter related to the processing of your personal data by the Global Exchange Group, you may contact our Data Protection Officer by filling out our following Contact Form.

© EURODIVISAS CORPORACIÓN, S.L.
Global Exchange Group
Last updated, November 2024