Privacy Policy

1. Object

This Privacy Policy aims to inform people (hereinafter, users or interested parties) who visit our Website (hereinafter, website or web), how we collect, process and protect the personal data that you decide to provide us by any means (forms, emails, phone, contracts, etc.) and after reading it, decide freely if you want us to process them. Additionally, it will serve to expand the information that we have previously provided to interested parties, in the informative clauses arranged in the processes of collecting your personal data.

Likewise, this policy aims to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter GDPR) and Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights (hereinafter, LOPDGDD).

2. Who is responsible for the processing of your personal data?

• Entity: LATEAM TECH, S.L.
• CIF/NIF: B23891799
• Phone: 960 136 175
• Email: dpo@lateam.es
• Corporate Purpose: Otras actividades relacionadas con la informática
• Website: https://www.lateam.es
• Registry Data: Inscrita en el Registro Mercantil de Valencia; Sección 8, Hoja 229064, Inscripción 1.

3. Why will we process your data (legitimation)?

The processing of your personal data by our entity will be carried out with one or more of the following legitimizing bases:

Article 6.1 a) GDPR:
the interested party gave their consent for the processing of their personal data for one or more specific purposes;

Article 6.1 b) GDPR:
For the execution of a contract in which you are a party or have requested pre-contractual measures from us.

Article 6.1 c) GDPR:
When the processing is necessary for compliance with a legal obligation applicable to our entity.

Article 6.1 f) GDPR:
When the processing is necessary for the satisfaction of legitimate interests pursued by our entity or by a third party, provided that those interests do not prevail over the interests or fundamental rights and freedoms of the interested party. In this regard, we inform that our entity has performed an analysis weighing our legitimate interests with the rights and freedoms of the interested party, always respecting their fundamental rights. This will not apply to processing carried out by public authorities in the exercise of their functions.

In the event that the user is under 14 years of age, it will be necessary to have the consent of the parents, tutors or legal representative to process their data. The user is solely responsible for the veracity of the data they send us.

4. What personal data will we process and how do we obtain them?

For the development of our business activity, it is essential to process personal data whose collection can be done by digital means, through paper documents or as a result of face-to-face or telephone conversations and in any of these cases the data will be processed fairly, lawfully and transparently.

The categories of data that our entity will process about interested parties are:

• Identification data: name and surname, ID or equivalent document, image, voice and signature.
• Contact data: phone, email, postal address.
• Commercial data: budgets, purchase conditions, management and history of services and/or purchases, results of contacts (phone, email, messaging and other communication channels).
• Economic and financial data: bank accounts and cards, bank transfers and direct debits, amounts and concepts, control of income and expenses, billing data.
• Curricular data: academic data, professional experience, personal characteristics, etc.
• Transaction of goods and services:
• Browsing data: analysis of the time of stay on our web, Pages visited and other data offered by third parties (e.g. Google)

Our entity will not collect special category data (e.g. health data, ethnic origin, political opinions or religious beliefs), but in case it were necessary to process them, it will inform you and request your prior and express consent.

The requested data will be adequate, relevant, limited to what is strictly essential and necessary, processed only by authorized personnel and/or collaborators of our entity, who will have signed a confidentiality commitment and undertake to comply with the necessary security standards that guarantee the confidentiality, integrity and availability of the processed data and other requirements legally established in the GDPR.

In the event that an interested party does not provide the data we request or incomplete or incorrect data are provided, it will not be possible to fulfill and maintain the relationship with them.

The categories of data we can process about a person will depend on the relationship they maintain with our entity, as shown below:

4.1. Clients

Identification, contact, commercial, economic and financial data will be processed and may be collected only if the client provides them to us at the time of contracting services, requesting pre-contractual measures or during the maintenance of the service provision relationship.

Data may be collected personally, by phone, email or through the forms provided on our website, online chat, instant messaging, etc.

Legitimizing base: Article 6.1 a); 6.1 b); 6.1 c); 6.1 f); GDPR

4.2. Information seekers

Whether the requested information is face-to-face, by phone or in writing (e.g. email or web forms) we will request and process identification, contact and commercial data.

Legitimizing base: Article 6.1 a); 6.1 f); GDPR

4.3. Suppliers

Identification, contact, commercial, accounting, banking, transaction of goods and services and financial data will be processed. These data may be processed during all stages of the commercial relationship and only if the supplier provides them to start said relationship.

Legitimizing base: Article 6.1 a); 6.1 b); 6.1 c); 6.1 f) GDPR

4.4. Job applicants

For this category of interested parties, curricular, identification, contact and other data related to their professional or personal characteristics will be processed, which will be provided by the applicant themselves when sending us their application.

Data collection can be done in person, by email, web forms, in personnel selection interviews (face-to-face or remote), it can even come to us through some collaborator to whom we have delegated certain functions.

Legitimizing base: Article 6.1 a); 6.1 b); 6.1 f) GDPR

4.5. Social media users

We are present on different social networks and we may process identification, contact, commercial data and other data that the user enables to be seen by the rest of the users of the social network, including curricular data (e.g. LinkedIn).

For more information consult our Social media policy.

Legitimizing base: Article 6.1 f) GDPR

4.6. Claimants

Identification, contact data and personal information of their own or of third parties that the claiming party sends us will be processed.

Legitimizing base: Article 6.1 a); 6.1 c); 6.1 f) GDPR

4.7. Web users

By visiting our website and only if the user expressly authorizes it, cookies and similar technologies will be installed, which may process browsing data, collected by our entity or by third parties (e.g. Google). For more information visit our Cookies Policy.

Legitimizing base: Article 6.1 a) GDPR

4.8. More information for interested parties

Information legally established in the corresponding informative clauses, included in the different means of data collection, will be made available to interested parties, so that the interested person decides freely and expressly if they want their personal data to be processed by our entity. For expanded information, they will be informed in said clauses on how to access this policy.

All categories and types of personal data processed will be duly identified in the corresponding processing activities owned by our entity.

5. For what purpose will your data be processed?

In general, the processing of personal data carried out by our entity aims to fulfill and maintain the relationship with the different groups of people with whom we interact.

Depending on said relationship, the processing of your data obeys different purposes, which by way of example and not limitation, we detail below:

5.1. Clients

Your personal data will be processed to identify you, fulfill and maintain the pre-contractual and contractual relationship including sending commercial communications by different means, attend queries, perform quality controls and commercial statistics, for the provision of our services, for accounting and billing management, transaction of goods and services, collection management, incident management, claims and exercise of rights, as well as for other purposes to which we are obliged to comply with said relationship, the laws to which we are subject or to attend to our legitimate interests.

5.2. Information seekers

We will process your personal data to attend to information requests of any kind that you wish to transfer to us, to identify you, for sending or delivery of budgets and information about the goods and/or services of your interest, including in our response (verbal or written) the commercial information related to your request. We will also perform follow-up contacts, by different means, to know the decisions taken regarding the commercial proposals we have sent you.

5.3. Job applicants

Your data will be processed to include you in our selection processes and job pool, to identify you, as well as to contact you and inform you about vacancies, coordination of interviews and other matters related to your candidacy.

5.4. Suppliers

Your personal data will be processed for the purpose of maintaining the pre-contractual and contractual relationship, fulfilling the commercial relationship whether for budget requests, for the purchase of goods or contracting services, to make queries and identify you, for accounting management and transaction of goods and services, as well as for other purposes necessary to comply with said relationship, with our legal obligations and legitimate interests.

5.5. Social media users

We will process your personal data to maintain the relationship as users of the same social network, to identify you, to contact you, share news or advertising and process other personal data that the user of the social network themselves allows to share with the rest of its members. For more information consult our Social media policy.

5.6. Claimants

Personal data will be processed to identify you, manage your claim and contact you about its status, in addition to complying with our legal obligations and legitimate interests.

5.7. Web users

By accepting the installation of cookies when visiting our website, data may be processed to analyze traffic on our website (e.g. visit times, Pages visited, etc.). For more information visit our Cookies Policy.

5.8. More information for interested parties

Information legally established in the corresponding informative clauses included in the different means of data collection (e.g. forms, locutions, contracts, etc.) will be made available to interested parties, so that you decide freely and expressly if you want the requested personal data to be processed by our entity, in this same sense, said information will be recalled in the different documents or communications we share with interested parties (e.g. badges, invoices, legal notices, etc.).

In case the interested person does not provide the data we request or incomplete or erroneous data are provided, it is possible that we cannot attend to your information request or interact with them.

Data will not be processed further or with purposes different from those accepted by the interested parties.

The purposes that motivate the processing of personal data will be duly identified in the corresponding processing activities owned by our entity.

6. Data conservation

The personal data provided will be kept as long as we maintain the relationship with the interested person and for the time necessary to fulfill the purpose for which the data were collected.

Once said relationship is finished, we will keep them blocked in those cases where it is necessary to conserve them, either until the prescription of responsibilities for the exclusive purposes of claims or legal actions, as well as to comply with our legal obligations, for example:

When data are no longer necessary, our entity will proceed to their safe and confidential deletion and destruction.

7. Profiling

We do not create profiles nor will automated decisions be made using your personal data, but in case of doing so you will be informed and requested prior authorization to do so.

Similarly, you have the right to object to this type of processing at any time by writing to our entity at: dpo@lateam.es dpo@lateam.es

8. Data transfer

In general, our entity will only communicate personal data to third parties when there is a valid legal basis according to Regulation (EU) 2016/679 (GDPR), such as a legal obligation, the execution of a contractual relationship, the provision of socio-health services or, where appropriate, the consent of the interested person.

Likewise, certain personal data may be processed by companies belonging to our business group when necessary for the correct centralization of administrative, accounting, IT or internal management services, guaranteeing in any case compliance with data protection regulations and the rights of interested parties.

8.1. Clients and suppliers

In the case of clients and suppliers, your personal data may be communicated to third-party entities only when there is a legal obligation (for example, to the Tax Agency and other competent Public Administrations), when necessary for the correct execution of the contractual relationship, as occurs with banking entities for the management of collections and payments. In such cases, only strictly essential data will be provided.

8.2. Job applicants

In the case of job applicants, your data will not be communicated to third-party entities except by legal obligation.

However, they may be communicated to other companies in the business group only if the candidate has previously granted their express authorization for said purpose.

8.3. Information seekers and website users

Personal data collected through the website will not be communicated to third parties unless there is a valid legal basis or it is necessary for the provision of the requested service, being informed in each case specifically at the time of collection.

Data processors

Certain personal data may be processed by third-party providers to whom we delegate certain obligations (for example, accounting consultancies or IT services), acting these as data processors. In such cases, our entity has formalized with them the corresponding contract according to Article 28 GDPR

Authorities and public bodies

In general terms, personal data may be communicated to Judges, Courts, Public Prosecutor's Office or competent Public Administrations when there is a legal obligation or it is necessary for the formulation, exercise or defense of claims.

9. International data transfer

In case of transfers to third-party entities located in countries outside the European Economic Area, we will inform and request the prior and express consent of the interested persons.

10. Security Measures

Our entity has implemented all the technical and organizational measures necessary to protect the processed personal data, avoiding its loss, theft or unauthorized use.

Said measures have been created depending on the type of data processed and the purposes that motivate said processing. These are verified periodically in our internal compliance controls of personal data protection regulations and through external audits.

11. Your Rights

You, as the holder of your personal data and acting in your own name or through your representative can contact our entity at any time and request us to exercise your rights in terms of personal data protection.

We explain what these rights are:

11.1. Right of Access

You have the right to know and request us at any time to know the following information:

• Whether or not we are processing your personal data.
• The purposes of processing, as well as the categories of personal data being processed.
• The origin of your data, in case you did not provide them to us.
• The recipients or categories of recipients to whom my personal data have been communicated, or will be communicated, including, if applicable, recipients in third countries or international organizations.
• Information on appropriate safeguards regarding the transfer of my data to a third country or an international organization, if applicable.
• The planned conservation period, or if not possible, the criteria to determine this period.
• Whether automated decisions exist, including profiling, significant information about the logic applied, as well as the importance and planned consequences of such processing.
• Copy of your personal data being processed.

11.2. Right of Rectification

Request us to rectify your personal data when they are inaccurate, as well as to complete them when they are incomplete.

11.3. Right of Opposition

You can object to us processing your data when they are incorrect or their processing is no longer necessary.

In the event that you act as the reported person or a person affected by a report within the framework of Law 2/2023, you cannot exercise your right of opposition, as it is presumed (unless proven otherwise) that grounds exist that legitimize the processing of your personal data, in accordance with the provisions of Article 31.4 of the Law.

11.4. Right of Deletion

Request us to delete your data for any of these causes:

• Your data are no longer necessary for the purposes for which they were collected or processed.
• You have not given consent for the processing of your data.
• When you have exercised the right of opposition.
• When the data have been processed unlawfully.
• When the data must be deleted for compliance with a legal obligation.

11.5. Right to Limitation of processing:

You may request us to exercise this right when one or more of these assumptions occur:

• When you challenge the accuracy of your data, during a period that allows the responsible party to verify their accuracy.
• When the processing is unlawful and you object to the deletion of your data and request instead the limitation of their use.
• When the data are no longer needed for the purposes of processing, but the interested party needs them for the formulation, exercise or defense of claims.
• When you have objected to processing under Article 21, paragraph 1, while it is verified whether the legitimate reasons of the responsible party prevail over those of the interested party.

11.6. Right of Portability:

Refers to the right to obtain the data related to you, in a structured, commonly used and machine-readable format, as well as to transmit them to another responsible party for further processing.

11.7. Right not to be subject to automated decisions:

Right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects on them or significantly affects them in a similar way.

11.8. How you can exercise your rights

To exercise any of your rights, you must address LATEAM TECH, S.L. in writing either by postal mail to the address: Ronda Borx, 29, 1º, 4ª, CP 46410 Sueca (Valencia) or by email: dpo@lateam.es stating the rights you wish to exercise. If you act on behalf of another person, you must prove your representation. If there are reasonable doubts regarding the identity of the person making the request, we may request that additional information necessary to confirm your identity be provided. dpo@lateam.es

If you wish to convey any suggestion or query about the processing of your personal data, you can contact our data protection consultants:

BUSINESS ADAPTER, S.L.
Ronda Guglielmo Marconi, 11, 26, (Parque Tecnológico) 46980 Paterna (Valencia).

Interested party service form

We inform you that you have the right to make a claim before the Spanish Data Protection Agency at: C/ Jorge Juan, 6, 28001 Madrid or at www.aepd.es.

12. Commitment to Personal Data Protection

This commitment aims to comply with European and Spanish regulations on data protection and guarantee of digital rights (GDPR and LOPDGDD) and will be mandatory for all departments and workers of our entity, as well as for third parties acting on our behalf.

We will process personal data with lawfulness, fairness, transparency, data minimization, accuracy, limitation of the conservation period, integrity, confidentiality and active responsibility. Special category data processing is prohibited, as provided in Art. 9 of the GDPR and LOPDGDD.

Record of Processing Activities
Our entity will carry out a record of processing activities to assess processing risks and implement the security measures necessary to guarantee the confidentiality, integrity, availability and conservation period of the data.

Impact Assessment
In each processing activity, the need to prepare an Impact Assessment and find out if there is a risk to the rights and freedoms of the interested parties is analyzed, in order to determine if it is necessary to apply additional technical and organizational measures that guarantee their fundamental rights.

Security measures and security violations
All technical and organizational measures necessary for the processed personal data will be applied. In the event of a security violation, the Action Protocol against Security Violations, designed for such purposes, will be applied.

Data protection rights
Our entity will attend and respond with the greatest speed and diligence possible to requests for exercise of rights or information about their violation.

Control
We have external Consultants who advise and audit us, in order to comply with the GDPR and the LOPDGDD.

13. Update of this Policy

Our entity reserves the right to modify this Policy without prior notice. Therefore, we recommend consulting it every time you visit our website.

Text updated on February 24, 2026.