Privacy Policy for Supplier Processing
Data controller
Data controller: SMILEAT, S.L. (hereinafter, SMILEAT)
Tax ID: B-87.144.622
Postal address: Calle Gran Vía, 62, 5ºD -28013 Madrid
Email: info@smileat.com
Purposes of processing
SMILEAT processes the data you provide us with the purpose of managing the contractual relationship and maintaining the necessary relations for the execution of said contractual relationship in accordance with the signed contract.
Prior to contracting, we may process contact data of the supplier in order to maintain relations aimed at contracting the supplier's products and/or services.
Legal basis for processing
The legal basis for processing your data for the purposes detailed in the previous section are the following:
· Art. 6.1.b) GDPR: Processing necessary for the execution of a contract in which the data subject is a party or for the application at their request of pre-contractual measures.
· Art. 6.1.f) GDPR: Processing in Legitimate Interest in accordance with the provisions of art. 19 LOPDGDD.
For any other purpose not expressly foreseen, your consent will be required, which may be revoked at any time.
Recipients
SMILEAT does not foresee data communications to third parties, except those required by legal obligation, which will be carried out in any case, complying with all legally established guarantees. In other cases, SMILEAT will request your explicit consent or another legal basis.
Without prejudice to the above, SMILEAT informs you that, exceptionally, your data may be processed by it or by third-party companies contracted by SMILEAT. In such cases, the corresponding contract will be signed between the parties, and it is an essential requirement for the formalization of this contract that the service provider is aware of the existing regulations on personal data protection and guarantees compliance during the development of the contract.
Data processed
SMILEAT will process corporate data of the supplier and of the natural persons necessary for the purpose of the contract, processing only the minimum data required for their professional location and solely for the purpose of fulfilling the provisions established therein.
In any case, the provider guarantees that the data provided is true, accurate, complete, and up to date, being responsible for any direct or indirect damage or harm that may result from failure to comply with this obligation.
International Transfers
No international data transfers are planned. However, if this processing requires transferring your data to a third country outside the European Union or that does not have an adequate level of protection according to the European Commission, appropriate safeguards will be adopted to carry out such international transfers in accordance with applicable current legislation.
Data Accuracy
You guarantee that the data provided is true, accurate, complete, and up to date, being responsible for any direct or indirect damage or harm that may result from failure to comply with this obligation.
Rights
You may exercise the rights granted by applicable current regulations: right of access, rectification, deletion and objection, limitation of processing, data portability, and not to be subject to automated individual decisions.
- Access: allows the data subject to obtain information about whether SMILEAT processes personal data concerning them or not and, if so, the right to obtain information about their personal data under processing.
- Rectification: allows correcting errors and modifying data that is inaccurate or incomplete.
- Deletion: allows the data to be deleted and no longer processed by SMILEAT unless there is a legal obligation to retain them and/or other legitimate reasons for their processing by SMILEAT in accordance with current regulations.
- Limitation: under legally established conditions, allows the data processing to be halted, so that SMILEAT avoids processing it in the future, only retaining it for the exercise or defense of claims.
- Objection: allows the holder, under certain circumstances and for reasons related to their particular situation, to object to the processing of their data. SMILEAT will stop processing the data, except for legal reasons, or the exercise or defense of possible claims.
- Portability: allows the data subject to receive their personal data and transmit them directly to another controller in a structured, commonly used, and machine-readable format. To exercise this right, the data subject must provide a valid email address.
You can exercise your rights by any means that allow proof of sending and receiving your request. The request must be addressed to SMILEAT. through the data included in the “Data Controller” section indicating the reference “Data Protection.” The request must include: Name, surname, the request specifying your application, and address for notification purposes. If there are doubts about your identity, any procedure that allows the person to be verified should be used, but without requiring a copy of the ID.
If you are not satisfied with SMILEAT’s response to the exercise of your rights, you have the right to file a complaint with the Supervisory Authority, the Spanish Data Protection Agency, for their protection.
Without prejudice to the above, any person has the right to obtain confirmation as to whether SMILEAT is processing personal data concerning them or not.
Retention
SMILEAT informs you that it will process and store your data as long as necessary for the execution of the Contract and while it remains in force, and in order to use them according to the purpose and legal basis of the processing for which they were collected, provided you do not revoke your consent if that was the basis of legitimacy.
We will also process your data to comply with the requirements of applicable law, prevent unlawful actions, resolve disputes, solve problems, execute our contract, and other actions permitted by law.
We will keep your personal data for the legal prescription periods, in accordance with the applicable current legislation according to the general and sector-specific regulations applicable to SMILEAT.
In accordance with industry standards, SMILEAT informs you that it maintains technical and organizational measures against accidental or illegal destruction, accidental loss or alteration, unauthorized disclosure or access, and other illegal forms or procedures.
In this regard, SMILEAT will adopt the security measures that are appropriate to prevent alteration, loss, unauthorized processing, or access to data. Likewise, it will inform those who have access to their data about their security, confidentiality obligations, and duty to maintain secrecy.