Privacy policy

WHAT IS THE PRIVACY POLICY?

The privacy policy is a legal document that the company must have to inform users about the means through which personal data is obtained, the processing that is going to be carried out, who is responsible for said processing, the storage periods and the possibility of exercising the rights recognized to the interested parties. among other details.

PLAIN CONCEPTS Group is committed to the protection of your privacy and to compliance with the legislation on the protection of personal data, specifically with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter GDPR) and the personal data protection legislation applicable in each country where the different companies of the PLAIN CONCEPTS Group are domiciled. The processing of personal data carried out by PLAIN CONCEPTS will be carried out in accordance with the principles of loyalty, legality, adequacy and transparency, always in accordance with specific, explicit and legitimate purposes. PLAIN CONCEPTS undertakes to keep your data up to date and to keep it only for the time necessary to fulfill the purposes of the processing.

Article 12 of the GDPR states that privacy policies must be simple, concise, transparent and understandable for all citizens. This is also included in Spain by Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD).

Therefore, the purpose of this Privacy Policy is to inform the user about the different processing of personal data that is carried out and about the rights that assist the interested parties under the GDPR and the LOPDGDD, facilitating the exercise of these rights.

Any updates or modifications to this Privacy Policy will be communicated to you through this website.

IDENTIFICATION AND CONTACT DETAILS OF THE DATA CONTROLLER.

This website is the property of PLAIN CONCEPTS, S.L.U. (hereinafter, PLAIN CONCEPTS), with CIF: B24532178 and registered office at C/ Gran Vía Don Diego López de Haro, 1º, 8ª planta, 48001 Bilbao (Vizcaya), Spain, Responsible for the Processing of the personal data collected through this website. You can consult the information relating to the entity that manages the website by accessing the link called Legal Notice that is incorporated at the bottom of the website.

If you have any questions regarding the processing of your personal data, you can contact us at the address gdpr@plainconcepts.com.

We also inform you that PLAIN CONCEPTS has a designated Data Protection Officer (hereinafter DPO), who can be contacted at the address dpo@leasba.com.

DESCRIPTION OF THE INFORMATION INCLUDED IN THIS PRIVACY POLICY.

In PLAIN CONCEPTS, we care about privacy and transparency. In this privacy policy you will find, clearly and in plain language, the processing of personal data for which PLAIN CONCEPTS is responsible and which affect the use of the website.

In each of the treatments identified, you will be informed mainly about:

The purposes of the processing of personal data.

The legal bases that allow the processing of data for each of the purposes indicated.

The possible communication of the data to third parties, as well as the cause of such communication.

The existence of international data transfers.

The period of data storage, depending on the different processing carried out. Likewise, we inform you that the data may remain blocked for the attention of judicial, administrative or tax claims, for the periods legally determined by each applicable regulation.

How your personal data was obtained and categories of data that are processed.

USE OF THE WEBSITE.

PLAIN CONCEPTS is committed to respecting the privacy of visitors to our website in accordance with applicable data protection legislation and this privacy policy.

By using this website, you consent to the collection, processing, transfer, storage and other processing of your personal data in accordance with this Privacy Policy and its terms. If you do not fully agree with them, you should not use this website.

The processing that are carried out through the website are the following:

Data Processing of the WEB CONTACTS:

For what purpose do we process your personal data?

At PLAIN CONCEPTS we process the information provided by interested parties in order to respond to their request electronically. In the event that you do not provide your personal data, we will not be able to comply with the functionalities described above.

No automated decisions will be made based on the data provided.

How long will we keep your data?

The data will be kept as long as you do not express your wish for them to be deleted. However, the data will be kept for the corresponding period to comply with legal obligations, during the applicable limitation periods to meet possible liabilities arising during processing. In this case, the data will be kept duly blocked until the limitation period for any legal liabilities associated with the processing has elapsed. In the event that they are removed, it will be carried out by applying the appropriate security measures to guarantee their total destruction.

What is the legitimacy for the processing of your data?

We indicate the legal basis for the processing of your data:

Consent of the data subject: Send the response to your request electronically.

To whom will your data be communicated?

The data will be communicated to the following recipients:

Organizations or persons directly related to the data controller, and to the PLAIN CONCEPTS business group, in order to get in touch with the potential customer to offer complementary services.

How did we obtain your data?

The personal data that we process at PLAIN CONCEPTS comes from: The interested party himself.

The categories of data that are processed are:

Identification data: Name, surname and email.

Data processing for SENDING OF NEWSLETTER:

For what purpose do we process your personal data?

At PLAIN CONCEPTS we process the information provided to us by interested parties in order to manage the subscription to the Newsletter, which we send periodically to interested parties who subscribe to it. In the event that you do not provide your personal data, we will not be able to comply with the functionalities described above.

No automated decisions will be made based on the data provided.

How long will we keep your data?

What is the legitimacy for the processing of your data?

We indicate the legal basis for the processing of your data:

Consent of the interested party: To send them the Newsletter, which is sent periodically.

To whom will your data be communicated?

The data will be communicated to the following recipients:

Organizations or persons directly related to the data controller, and to the PLAIN CONCEPTS business group, for the purpose of contacting the subscriber for the offer of complementary services.

How did we obtain your data?

The personal data that we process at PLAIN CONCEPTS comes from: The interested party himself.

The categories of data that are processed are:

Identification data: Name, surname and email.

Data processing of EVERGINE’S CLIENTS:

For what purpose do we process your personal data?

At PLAIN CONCEPTS we process the information provided to us by interested parties in order to carry out the commercial, administrative, accounting and tax management of the products or services acquired from EVERGINE, as well as to send commercial communications about said products or services. In the event that you do not provide your personal data, we will not be able to comply with the functionalities described above.

No automated decisions will be made based on the data provided.

How long will we keep your data?

The data will be kept for the time necessary for the performance of the contract. However, the data will be kept for the corresponding period to comply with legal obligations, during the applicable limitation periods to meet possible liabilities arising during processing. In this case, the data will be kept duly blocked until the limitation period for any legal liabilities associated with the processing has elapsed. In the event that they are removed, it will be carried out by applying the appropriate security measures to guarantee their total destruction.

What is the legitimacy for the processing of your data?

We indicate the legal basis for the processing of your data:

Execution of a contract: Carry out the commercial, administrative, accounting and tax management of the products or services acquired from EVERGINE.

Legitimate interest of the Data Controller: To send commercial communications about said products or services.

To whom will your data be communicated?

The data will be communicated to the following recipients:

Tax Administration and Public Administration with competence in the matter, in order to comply with legal obligations.

Organizations or persons directly related to the data controller, and to the PLAIN CONCEPTS business group, in order to be able to offer related products or services of interest to the customer.

How did we obtain your data?

The personal data that we process at PLAIN CONCEPTS comes from: The interested party himself.

The categories of data that are processed are:

Identifying data.

Postal and e-mail addresses.

Commercial Information.

Economic data.

DATA TRANSFERS TO THIRD COUNTRIES

There are the following data transfers to third countries:

It is possible that for the payment management service of the products or services of EVERGINE acquired is necessary to transfer some data to non-European countries such as the USA, in respect of which there is an adequacy decision by the European Commission (EU- USA Data Privacy Framework Decision of 10 July 2023). Specifically, international data transfers may be made for the management of the payment of the products or services of EVERGINE acquired when using the services of the payment gateway provider STRIPE, INC. Below is a link to the privacy information of the aforementioned provider: https://stripe.com/es/privacy-center/legal#international-data-transfers.
It is possible that in order to send the Newsletter, manage your requests, collect data from forms and emails, it is necessary to transfer some data to non-European countries such as the USA, etc. USA, for which there is an adequacy decision by the European Commission (EU- USA Data Privacy Framework Decision of 10 July 2023). In particular, data transfers to third countries may occur when using the services of the provider HubSpot, S.L. HubSpot may, in accordance with its Privacy Policy, transfer information to other subsidiaries of the Group and external entities that provide services to it on a contractual basis. However, this company has incorporated Standard Contractual Clauses (SCC) in the contracts signed between the parties, approved by the European Commission, which allow secure processing and in accordance with the current regulation on data protection. In addition, HubSpot will take additional measures as appropriate, such as implementing commercially standard secure encryption methods to protect personal data at rest and in transit, TLS on HubSpot-hosted sites, and firewalls to protect web applications, as well as other relevant contractual and organizational measures.
Some of the companies in the PLAIN CONCEPTS group are located outside the European Economic Area, which entails an international transfer of data. Specifically, to the following group companies:

- PLAIN CONCEPTS CORP INC. (United States of America): The US has an adequate level of protection for personal data, as there is an adequacy decision by the European Commission (EU- USA Data Privacy Framework Decision of 10 July 2023).

- PLAIN CONCEPTS UK LTD (United Kingdom): The guarantee for this international transfer of data is based on the existence of an Adequacy Decision of the European Commission: Commission Implementing Decision (EU) 2021/1773 of 28 June 2021

EXERCISE OF RIGHTS

Any person has the right to obtain confirmation as to whether or not PLAIN CONCEPTS is processing personal data concerning them.

Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which they were collected. You also have the right to data portability.

In certain circumstances, the interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defence of claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, PLAIN CONCEPTS will stop processing the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.

You may exercise your rights in the following way: by sending an email to gdpr@plainconcepts.com, by contacting the address of the data controller or by contacting the DPO at the address dpo@leasba.com.

When commercial communications are sent using the legitimate interest of the controller as a legal basis, the interested party may object to the processing of their data for this purpose.

If you have given your consent for a specific purpose, you have the right to withdraw the consent given at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal.

If you feel that your rights regarding the protection of your personal data have been violated, especially when you have not been satisfied in the exercise of your rights, you can lodge a complaint with the competent Data Protection Supervisory Authority through its website: www.aepd.es.

LINKS TO OTHER WEBSITES

PLAIN CONCEPTS’ websites may contain links to other websites, which we may consider to be useful to you. However, PLAIN CONCEPTS is not responsible for the content published on such websites, nor for their Privacy Policies. PLAIN CONCEPTS encourages you to carefully review the Privacy Policy before using these websites to ensure that you are satisfied with the information that is collected.

CHILD USE POLICY

This website is not directed to minors in accordance with applicable current legislation. Parents, guardians or legal representatives will be solely responsible for all acts carried out on this website by the minors in their care, including the completion of the forms with the personal data of said minors and the ticking, where appropriate, of the boxes that accompany them.

SECURITY MEASURES

PLAIN CONCEPTS applies all the security measures required by the regulations on the protection of personal data, with the aim of protecting your rights and freedoms. PLAIN CONCEPTS implements the necessary measures to guarantee the confidentiality of the personal data of all persons under its responsibility.

MODIFICATIONS TO PRIVACY POLICY

PLAIN CONCEPTS reserves the right to modify or update this Privacy Policy at any time. In the event that any clause of this Privacy Policy is annulled or considered null and void, the rest of the conditions will not be affected, and will fully retain their validity and validity, in accordance with the regulations in force applicable at all times.

COOKIE INFORMATION

This website may use Cookies. For more information, please consult our Cookies Policy.

ANNEX 1

CHANGE CONTROL