Privacy and cookies policy.

1. IDENTIFYING DATA

In compliance with Article 10.1 of Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (LSSI), the identifying data of the holder are indicated:

  • Responsible: CINFO CUSTOMIZED INFORMATION CONTENT, S.L. (hereinafter, “TIIVII”)
  • NIF: B15757941
  • Registered office: Edificio CSA, 1st floor, Ciudad de las TIC Avenida de Pedralonga, 32, 15009, A Coruña
  • Registration data: Mercantile Registry of A CORUÑA T 2913, F 139, S 8, H C 25677, I/A 29
  • Contact email: dpd@cinfo.es
  • Website: tiivii.gal

2. PRIVACY POLICY

Through this Privacy Policy, the user is informed clearly, precisely, and concisely. If the user accepts it, they give their consent freely, informed, specific, and unequivocal for TIIVII to process their personal data, in accordance with the EU Regulation 2016/679 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data (GDPR) and Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights (LOPDGDD) (current European and national legislation on data protection).

2.1 BASIC INFORMATION ON DATA PROTECTION

 
Data controller CINFO CUSTOMIZED INFORMATION CONTENT, S.L.
Purposes of processing Response to inquiries and doubts, provision of service, and possible sending of information about products and services.
Legitimization Consent of the data subject (Article 6.1.a of the GDPR). Contractual relationship with the data subject (Article 6.1.b of the GDPR).
Recipients Data will not be transferred to third parties. Access may be had by: Tax Administration, Banks and financial entities, Security Forces and Bodies, Processors necessary for the provision of the service.
Rights and additional information The exercise of the rights of access, rectification, or deletion, among others, is permitted. All information is available in the detailed information of this privacy policy.

2.2 DETAILED INFORMATION ON DATA PROTECTION

2.2.1 Who is the data controller?

The identifying data of the Data Controller appear in section 1.

2.2.2 What information do we collect and process about the user through the website?

The data collected refers to the category of identifying data, which may include: Name and Surname, Phone, Postal Address, Company, Email, as well as the IP address from which they access the data collection form.

  • Through the Contact form

On our website, the user will find the option to write to us to clarify any doubts they may have regarding the operation of our products/services or any other matter they need. To respond, we will contact the user via email or phone number if they have indicated it to us.

  • Through user registration on the Platform

On our website, the user will be able to see the content within the “Log in” section, an option that allows registration by providing the required data to create an account. Once the account with the user in TIIVII is created, the user will be able to access, view the products/services they have contracted, and modify/add complementary information.

  • Through our corporate email

Through our email deportegalego@tiivii.gal, the user will be able to write to us and/or request the information they consider necessary to clarify doubts related to our services.

  • Through subscription to our blog

Through a small form that the user can see on our website, they can subscribe to our blog to receive the latest news and promotions from TIIVII. At any time, they can request to unsubscribe by sending an email to deportegalego@tiivii.gal or in the newsletter they will receive in their inbox.

In the event that the user provides us with third-party data, they will assume the responsibility of having informed them previously and having their consent for it, in accordance with Article 14 of the GDPR.

By providing us with their data through electronic channels, the user guarantees that they are over 18 years old and that the data provided to TIIVII is true, accurate, complete, and up to date. For these purposes, the user confirms that they are responsible for the veracity of the communicated data and that they will keep this information appropriately updated so that it corresponds to their real situation, assuming responsibility for any false or inaccurate data they may provide, as well as for any direct or indirect damages that may arise.

2.2.3 For what purpose do we process the user’s personal data?

TIIVII processes personal data for the purposes outlined below, depending on the reason for which they have been provided:

  • To carry out the provision of the contracted products/services, the maintenance of the contractual relationship, and the monitoring of it.

  • To contact, process, manage, and respond to the user’s request, incident, or inquiry (whether via email, contact form, or phone).

  • To manage the client’s purchase process and any inquiries associated with the contracted products/services.

  • To manage, if applicable, the sending of information about products, services, and new offerings related to TIIVII via electronic and/or conventional means.

2.2.4 What is the legitimacy of processing the user’s data?

  • The legal basis for processing their personal data for the purposes outlined in the previous section is the execution of the provision of the corresponding service, and it is an imperative obligation to do so, as established by Article 6.1,b) of the GDPR.

  • Regarding the sending of information about products, services, and new offerings related to TIIVII, the legal basis for processing the personal data provided is the consent explicitly granted by the user, as established by Article 6.1,a) of the GDPR.

2.2.5 How long will the user’s personal data be processed?

  • The data for the management of the relationship with the client and the invoicing and collection of services will be retained for as long as the contract is in force. Once this relationship has ended, where applicable, the data may be retained for the time required by applicable legislation and until any potential liabilities arising from the contract have expired.

  • The data for the management of inquiries and requests will be retained for as long as necessary to respond to them, and where applicable, as long as the interested party does not request the withdrawal of their consent to send them information related to their inquiry.

  • The data for the sending of information associated with TIIVII products or services will be retained as long as the user does not revoke their consent.

2.2.6 To whom will the user’s personal data be communicated?

As a general rule, your data will not be transferred to third parties unless there is a legal obligation or it is necessary to carry out the provision of the service. Keeping this in mind:

  • The user’s personal data may be communicated to financial entities through which payment and collection management is organized.

  • Only in legally necessary cases, the data will be communicated to the Security Forces and Bodies of the State.

  • They may also be communicated to the competent Public Administrations in the cases provided for by Law.

  • Where applicable, they will also be communicated to TIIVII’s Processors for the correct provision of the service.

2.2.7 What are the rights of the user?

Data protection regulations allow users to exercise their rights of access, rectification, deletion, and data portability, as well as objection and limitation to their processing, as well as not to be subject to decisions based solely on automated processing of their data, when applicable.

These rights are characterized by the following:

  • Their exercise is free of charge, unless they are manifestly unfounded or excessive requests (e.g., repetitive in nature), in which case TIIVII may charge a fee proportional to the administrative costs incurred or refuse to act.
  • They can exercise the rights directly or through their legal or voluntary representative.
  • We must respond to their request within one month, although, considering the complexity and number of requests, the period can be extended for another two months.
  • We have the obligation to inform you about the means to exercise these rights, which must be accessible and we cannot deny you the exercise of the right solely for choosing another means. If the request is made by electronic means, the information will be provided by these means when possible, unless you request otherwise.
  • If TIIVII does not process the request, it will inform you, no later than one month, of the reasons for its inaction and the possibility of lodging a complaint with a Control Authority.

In order to facilitate their exercise, we provide links to the request form for each of the rights:

To exercise your rights, TIIVII provides you with the following means:

  • By written and signed request addressed to TIIVII. Ref. Exercise of Data Protection Rights.
  • By sending a scanned and signed form to the email address dpd@cinfo.es, indicating in the subject Exercise of Data Protection Rights.

In both cases, you must verify your identity by providing a photocopy or, if applicable, a scanned copy of your ID or equivalent document to verify that we only respond to the interested party or their legal representative, having to provide in this case, a document proving representation.

Furthermore, and especially if you feel that you have not obtained full satisfaction in exercising your rights, we inform you that you may file a complaint with the national control authority by addressing the Spanish Agency for Data Protection (AEPD), C/ Jorge Juan, 6 – 28001 Madrid (www.aepd.es).

2.2.8 What security measures do we have in place?

At TIIVII we are committed to protecting your personal information.

We use reasonably reliable and effective physical, organizational, and technological measures, controls, and procedures, aimed at preserving the integrity and security of your data and ensuring its privacy.

Moreover, all personnel with access to personal data have been trained and are aware of their obligations regarding the processing of your personal data.

In the case of contracts entered into with our providers, we include clauses requiring them to maintain a duty of confidentiality regarding personal data accessed due to the assignment made, as well as implementing the necessary technical and organizational security measures to ensure the confidentiality, integrity, availability, and permanent resilience of the systems and services for personal data processing.

All these security measures are periodically reviewed to ensure their adequacy and effectiveness.

However, absolute security cannot be guaranteed and no security system is impenetrable. Therefore, in the event that any information subject to processing under our control is compromised as a result of a security breach, we will take appropriate measures to investigate the incident, notify the Control Authority, and, if applicable, the users who may have been affected so they can take appropriate measures.

2.2.9 Policy on social networks

TIIVII has a corporate profile on social networks such as Facebook, Instagram, X, and Google.

Therefore, TIIVII is the “Data Controller” of your data by virtue of the existence of these profiles on social networks and the fact that the user follows us and we can also follow them.

This means that if the user decides to join our corporate profile as a follower or gives a “Like” or “thumbs up” to our content or profile, they accept this policy, where we explain their rights and how we use their data.

As the data controller, we guarantee confidentiality in the processing and compliance with the rights of the user, always under the effects of current data protection regulations.

On the other hand, we inform that we will use these social networks to announce news or relevant information related to the services we offer, or about topics we consider to be of interest to the user. Using the functionalities of these platforms, the user may receive news of this type of information on their wall or profile.

However, we also inform you that there is no link between TIIVII and these platforms or social networks, so the user accepts their usage policy and conditions once they access them and/or validate their notices and terms and conditions in the registration process, TIIVII not being responsible for the use or processing of user data done outside the strict relationship and provision of services indicated in this policy.

3. INTELLECTUAL AND INDUSTRIAL PROPERTY

We warn you that Cinfo holds all intellectual and industrial property rights of the website, as well as all its elements (by way of example: images, sound, audio, video, software, or texts; trademarks or logos, color combinations, structure and design, selection of used materials, computer programs necessary for its functioning, access, and use, etc.). Thus, the Responsible party holds all rights related to images, articles, links, etc., that are found on this website or has authorization from the owner of the same. No user may use them without prior authorization from the Responsible party.

The website of TIIVII contains texts intended to inform its users. Any error or omission in the generated content shall not hold TIIVII liable in any case. Any error or omission in the generated content shall not hold the Responsible party liable in any case. The Responsible party is not liable for the content to which its users will have access through third-party links contained on its website. The use of these third-party links does not imply that the Responsible party has approved the content of the external pages. At the same time, it is informed that the Responsible party has consent to use the third-party trademarks that appear on the website. It shall be understood that the Responsible party is the exclusive holder of any trademark or distinctive object of intellectual property appearing on the Website or, in its case, that has authorization from the owner of those that are limited only to its use on the Website and therefore cannot be assigned to any user without prior authorization from its owner.

NOTICE: IMAGES PUBLISHED ON OUR WEBSITE MAY NOT BE COPIED, REPRODUCED, STORAGED, OR MARKETED IN ANY WAY WITHOUT EXPRESS AND WRITTEN AUTHORIZATION FROM CINFO.

4. COOKIES POLICY

4.1 Basic information about cookies

  • What the user should know about Cookies

Cookies are small files that store information on the users’ devices that use our Website.

Cookies are associated with the browser of a specific computer or device. Thanks to them, it is possible for TIIVII to recognize the users’ browsers; they also serve to determine the users’ browsing preferences and, based on that, evaluate the users’ preferences that can be used as indicators, all to improve our service offerings.

  • The acceptance of cookies in TIIVII

Law 34/2002, of July 11, on the Information Society and Electronic Commerce (hereinafter, LSSI) in relation to cookies requires that our Users are informed prior to their browsing experience on the platform about the use, type, and purpose of the cookies. That is why we have implemented an informative notice that appears once the user accesses our Website, informing them beforehand, and giving them the option to choose the cookies they want to allow and to accept them expressly, thus fulfilling the criteria established by the European Data Protection Committee and the Guide on the use of cookies published by the AEPD in July 2023.

4.2 Detailed information about cookies

  • Technical or functional cookies: are those that allow the user to navigate through a webpage, platform, or application and use the different options or services that exist in it, including those that the editor uses to enable management and operation of the webpage and enable its functions and services, such as controlling traffic and data communication, identifying the session, accessing restricted access areas, remembering items that make up an order, carrying out the purchase process of an order, managing payment, controlling fraud related to the security of the service, making a request for registration or participation in an event, counting visits for billing purposes for the licenses of the software that operates the service (website, platform, or application), using security elements during navigation, storing content for the dissemination of videos or sound, enabling dynamic content (for example, loading animation of text or image), or sharing content through social networks.

    Also belonging to this category, due to their technical nature, are those cookies that allow the management, in the most effective way possible, of the advertising spaces that, as another element of design or “layout” of the service offered to the user, the publisher may have included in a webpage, application, or platform based on criteria such as the edited content, without collecting information about users for different purposes, such as personalizing that advertising content or other content.

    *Technical cookies will be exempt from the obligations established in Article 22.2 of the LSSI when they allow the requested service to be provided by the user, as occurs with the cookies listed in the previous paragraphs. However, if these cookies are also used for non-exempt purposes (for example, for behavioral advertising purposes), they will be subject to those obligations.

  • Preference or customization cookies: are those that allow remembering information so that the user accesses the service with certain characteristics that can differentiate their experience from that of other users, such as, for example, the language, the number of results to show when the user performs a search, the appearance or content of the service depending on the type of browser through which the user accesses the service or the region from which they access the service, etc.

    *If it is the user themselves who chooses those characteristics (for example, selecting the language of a website by clicking on the corresponding country flag icon), the cookies will be exempt from the obligations of Article 22.2 of the LSSI as they are considered a service expressly requested by the user, and this is provided that the cookies obey solely the selected purpose.

  • Analysis or measurement cookies: are those that allow the controller to follow up and analyze the behavior of users of the websites to which they are linked, including quantifying the impacts of advertisements. The information collected through this type of cookies is used to measure the activity of websites, applications, or platforms, in order to introduce improvements based on the analysis of usage data provided by the users of the service.

    *This type of cookies, although they are not exempt from the obligation to obtain informed consent for their use, the GT29 indicated that it is unlikely to pose a risk to users’ privacy as long as they are first-party, processing aggregated data with a strictly statistical purpose, providing information about their uses, and including the possibility for users to express their refusal to their use.

  • Behavioral advertising cookies: are those that store information about users’ behavior obtained through the continuous observation of their browsing habits, allowing the development of a specific profile to display advertisements based on that.

  • The cookies we use at TIIVII

    The table below includes the details, purpose, type, and classes of cookies that we have implemented on our platform. For clarity, we detail below the types of cookies that may be used if the user gives us their consent:

How to uninstall cookies

If a user wishes to uninstall the cookies used by the website www.tiivii.gal from their browser, they can do so by accessing the following instructions.

  • For more information about Internet Explorer click here.
  • For more information about Microsoft Edge click here.
  • For more information about Firefox click here.
  • For more information about Chrome click here.
  • For more information about Safari click here.
  • For more information about Opera click here.
  • For more information about Safari IOS click here.
  • For more information about Android click here.

5. MODIFICATIONS TO THE LEGAL TEXT

TIIVII may modify this legal text in accordance with the applicable legislation at any time. In any case, any significant modification affecting the use of the website regarding the Legal Notice, Privacy Policy, and Cookies will be duly notified to the user so they are informed of the changes made to the processing of their personal data and, if the applicable regulations so require, the user can grant their consent.

6. REGULATIONS AND JURISDICTION

Our legal texts are governed by Spanish law. These texts will remain accessible to users at all times from our website.

If the parties do not agree to submit to mediation or arbitration beforehand, this legal notice establishes the agreement to submit to the Courts and Tribunals of A Coruña, explicitly waiving any other jurisdiction.