Privacy Policy

Data Processing

What processing activities do we carry out with your personal data?

In compliance with Regulation (EU) 2016/679 and the Organic Law on the Protection of Personal Data, we inform you that your personal data may be subject to the following processing activities:

  • TR04 – Advertising campaigns (Legal basis: Law 34/1988 of November 11, General Advertising Law).

  • TR08 – Collecting opinions from data subjects (Legal basis: Regulation (EU) 2016/679 on data protection and the LOPD).

  • TR03 – Recruitment of company staff (Legal basis: Royal Legislative Decree 3/2015 of October 23, approving the revised text of the Employment Law).

  • TG01 – Own accounting and record management (Legal basis: Royal Decree 1514/2007 of November 16, General Accounting Plan).

  • TG25 – Data collection for tax management (Legal basis: Law 58/2003 of December 17, General Tax Law).

  • TG12 – Employment management: data collection (Legal basis: Royal Legislative Decree 1/1994 of June 20, General Social Security Law).

  • TR09 – Security regarding technical and organizational software measures (Legal basis: Regulation (EU) 2016/679 and the LOPD).

  • TE08 – Protection of Personal Data (Legal basis: Regulation (EU) 2016/679 and Organic Law 3/2018).

  • TE02 – Occupational risk prevention (Legal basis: Law 31/1995 of November 8, Occupational Risk Prevention).

  • TE07 – Document destruction (Legal basis: Regulation (EU) 2016/679).

  • TV01 – Sales / Service provision (Legal basis: Commercial and Tax legislation).

  • TE03 – Transport and/or package delivery service (Legal basis: Royal Decree of August 22, 1885, publishing the Commercial Code).

  • TR05 – Emails (Legal basis: Commercial Code and applicable legislation).

  • TR01 – Information requests received (Legal basis: Commercial Code and related provisions).

  • TR07 – Management of incidents and/or security breaches (Legal basis: Regulation (EU) 2016/679 and the LOPD).

  • TE04 – Legal affairs management (Legal basis: Commercial and labor legislation).

  • TE01 – IT system maintenance (Legal basis: Commercial Code).

Data Controller

Who are we?

We are responsible for the processing of your data. Therefore, we provide clear and precise information to all data subjects:

Macaronesia Consulting SLU
Tax ID: B22920110
Address: C/ Ocho de Marzo 9, 21, Telde, 35200, Las Palmas
Email: admin@macaronesia-consulting.com

Purposes

Why do we use your personal data?

Our organization may process your personal data exclusively for the purposes listed below:

  • Ensure that all technical measures necessary for proper personal data management through applied software are implemented.

  • Send commercial and/or promotional information via email.

  • Manage requests for information received about our products or services.

  • Manage internal incidents related to GDPR compliance.

  • Conduct advertising campaigns to promote our services and/or products.

  • Collect feedback from interested parties.

  • Recruit personnel to fill job vacancies.

  • Comply with all requirements under Occupational Risk Prevention Law.

  • Send parcels and correspondence.

  • Manage any legal issues affecting the company.

  • Manage, maintain, and repair IT storage systems.

  • Carry out our own employment management.

  • Carry out our own tax and accounting management.

  • Comply with the principle of data retention limitation.

  • Fulfill the requirements of Regulation (EU) 2016/679 and Organic Law 3/2018.

  • Administrative management of individual clients.

  • Execute the sale or provision of the contracted service.

A commercial or user profile may be created based on the information provided or obtained. However, we expressly inform you that no profiling will be carried out using a minor’s data.

Your personal data will be retained for the duration of the contractual relationship, or, where applicable, until you exercise your right to object or withdraw consent. To do so, you may contact us through our website’s designated section or by emailing the address listed under “Data Controller.”

Legal Basis

Why do we process your data?

We are legally entitled to process your personal data for the following reasons:

  • Your unequivocal, informed, and express consent, where legally required. Withdrawal of this consent will not affect the lawfulness of processing carried out prior to withdrawal.

  • A legal obligation applicable to the data controller.

  • Performance of a contract for service provision and/or product sales entered into by you.

  • A legitimate interest of the controller, supported by a proportionality and balancing assessment ensuring that the processing does not override your rights and freedoms.

For any questions or clarifications, you may contact us at the email address provided in the “Data Controller” section.

Recipients

With whom may we share your data?

Your personal data may be shared with the following entities and organizations:

  • Spanish Tax Agency

  • State Public Employment Service

  • General Treasury of Social Security

  • Spanish Data Protection Agency

  • Banks and financial institutions

Your personal data will not be transferred to any third country or international organization.

Data Sources

What data do we process and how did we obtain it?

Your personal data will be incorporated into the following files owned by our organization:

  • FG01 – Own accounting management

  • FG02 – Own employment management

  • FG15 – Own tax management (data collection)

  • FE01 – IT maintenance

  • FE02 – Occupational risk prevention

  • FE03 – Transport and delivery

  • FE04 – Legal affairs

  • FR01 – Information requests received

  • FR03 – Staff recruitment

  • FR04 – Advertising campaigns

  • FR05 – Emails

  • FR07 – Incident and/or security breach management

  • FR08 – Collecting opinions from interested parties

  • FR09 – Software and hardware security

  • FE07 – Document destruction

  • FE08 – Personal Data Protection

  • FP01 – Clients

Data processed originates from:

  • The data subject themselves.

Rights

What rights can you exercise?

You are guaranteed the right to exercise your rights regarding the processing of your personal data. In particular, you have the right to:

  • Confirm whether your data is being processed.

  • Exercise your right of access to obtain information about the purposes, categories of data, possible recipients, retention periods, data source, and, where applicable, profiling or automated decision-making.

  • Exercise your right to rectification to ensure your data remains accurate and up to date. You guarantee that the data you have provided is true and accurate and agree to notify us of any changes.

  • Object to the processing of your data for reasons related to your particular situation.

  • Request deletion of your personal data when it is no longer necessary for the above purposes or when we no longer have a legal basis to process it.

  • Request data portability, where processing is automated and based on your consent or a contract, to receive your data in a structured, machine-readable format or have it transmitted directly to another controller.

  • Request restriction of processing in certain circumstances, in which case data will be retained only for legal claims or defense.

  • Object to automated decision-making, including profiling.

These rights can be exercised free of charge (except in cases provided by law) through a written and signed request, either by you or your authorized representative, directed to the controller at the addresses provided above or in person at any of our offices.

You also have the right to file a complaint with the Spanish Data Protection Agency (https://www.aepd.es/