Privacy Policy

INTRODUCTION

Your privacy is very important to us. For this reason, we have produced this document that explains which data we collect from users, how we use it and for what purpose, among other things.

Please note that we will never ask for more information than we actually need for the services requested; we will never share said information with third parties, unless we are legally obliged to do so or when we have prior authorisation to do so; and we will never use your data for any purpose not previously indicated.

As a user, you should read this Privacy Policy carefully on a regular basis and whenever you enter your personal data. This is because the provider is able to modify any information that appears on its website in order to bring it in line with new regulations or to simply update the policy. There is no need to warn or inform the users of said modifications, with publication on the website being sufficient.

DATA CONTROLLER:

Name: QUALLA SYSTEMS S.L. (also referred to as “the provider”)

Spanish Tax ID no. (NIF): B67082768

Postal address: Carrer Tres Creus, 236, 08203, Sabadell, Barcelona

E-mail address: dpd@quallakids.com

Data Protection Officer: Pymelegal, S.L.

DPO contact details: dpd@quallakids.com

QUALLA SYSTEMS S.L., as the party responsible for the website, in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and the free movement of such data and other current legislation on the protection of personal data, and of Law 34/2002 of 11 July 2002 on Information Society Services and Electronic Commerce (LSSICE), hereby informs you that it has implemented the necessary technical and organisational security measures to guarantee and protect the confidentiality, integrity and availability of the data submitted.

DATA COLLECTED AND COLLECTION METHOD:

The data we collect, the method we use to collect them and the purpose for collection are set forth below:

  • Contact and/or information request forms:
    • Required data: name, e-mail address, telephone number
    • Purpose: to respond to queries and/or provide information requested by the user
    • Legitimacy: User consent
  • Newsletter subscription form:
    • Required data: e-mail address
    • Purpose: to send advertising and/or commercial communications by e-mail, SMS, on social media channels or by any other electronic or physical means
    • Legitimacy: User consent
  • Registration form
    • Required data: name, e-mail address, telephone number
    • Purpose: to create a user account and have access to the app’s features.
    • Als https://app.quallakids.com/politica-de-privacitat/ provides an explanation as to how the service works and how data are processed (in Catalan).
    • Legitimacy: User consent
  • Draw participation form:
    • Required data: name, e-mail address, telephone number, company, municipality.
    • Depending on the type of draw, further information may be required which will be set out and detailed in the legal terms and conditions of each draw.
    • Purpose: to send advertising and/or commercial communications by e-mail, SMS, on social media channels or by any other electronic or physical means; to manage participation in the draw in line with the participation method established in the legal terms and conditions; and to award the prize to the winner, if there is one, as described.
    • The draw organiser may publicise the name of the winner in any advertising, promotional or marketing activity related to the same.
    • Legitimacy: User consent
  • To carry out the contractual relationship and related administrative, fiscal and accounting formalities that are required under the current legislation.
    • Required data: first and last name, telephone number, address, Spanish national ID no., e-mail address, signature and bank details
    • Purpose: to provide the contracted services and carry out internal commercial, fiscal and administrative formalities
    • Legitimacy: contractual relationship

You may revoke your consent at any time by sending an e-mail with the subject “Unsubscribe” to the e-mail address provided.

In accordance with the provisions of the LSSICE, QUALLA SYSTEMS S.L. does not carry out spam practices. As such, it does not send commercial e-mails that have not been previously requested or duly authorised by the user. You can therefore withdraw your express consent to receive any type of communication from us.

We will not process your personal data for any other purpose than those described, unless we are legally or judicially required to do so.

You will not be subject to decisions based on automated processing which has an impact on your data.

DATA STORAGE PERIOD:

Your data will be stored for the duration of the commercial relationship with us, or until you exercise your right of cancellation, opposition or restriction of processing. However, we will retain your data for the periods of time legally provided for in the applicable legal provisions.

RECIPIENTS OF DATA TRANSFER OR DISCLOSURE:

QUALLA SYSTEMS S.L. does not transfer or disclose any data, either inside or outside the EU. The provider will only send information to law enforcement agencies when legally or judicially obliged to do so, without prejudice to the ability to block or terminate the user’s account if there are indications that they may have committed a criminal offence. The information sent shall only be that which the provider has at this moment in time.

The information that you provide through this website and on the application will be hosted on the servers of QUALLA SYSTEMS S.L. These are contracted from the company Amazon Web Services (AWS), which provides the web hosting service. Data processing is regulated via a data processor contract which is entered into by both the provider and the company. Under no circumstances shall the data processor sub-contract services involving the processing of data by third parties without our prior consent.

The provider also uses certain tools to provide services that are necessary for the development of the activity, and some of these may store your data. These tools are as follows:

Google Analytics: to analyse and produce metrics of the use that individuals make of the website using cookies. The information generated and collected by these cookies about the user’s use of the website (including their IP address) will be sent to and stored by Google Inc., with registered address at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter, “Google”) on its servers in the United States of America.

E-mail marketing: used for Qualla Systems S.L.’s CRM’s e-mail marketing service.

RIGHTS OF DATA SUBJECTS:

As a data subject, you may request the exercise of the following rights before QUALLA SYSTEMS S.L. by sending a letter to the postal address listed at the top of the page or by sending an e-mail to dpd@quallakids.com, indicating “DATA PROTECTION: RIGHTS OF DATA SUBJECTS” in the subject field.

Rights:

  • Right of access: allows the data subject to know and obtain information about their personal data that is subject to processing
  • Right of rectification or erasure: allows errors to be corrected and data that turn out to be inaccurate or incomplete to be modified.
  • Right to cancellation: allows data that is inappropriate or excessive to be deleted.
  • Right of opposition: the data subject’s right to not have their personal data processed or to have said processing stopped.
  • Limitation of processing: involves the marking of the stored personal data in order to limit future processing for the exercise or defence of claims.
  • Data portability: provision of the data undergoing processing to the data subject so that they can transfer the same to another data controller without any hindrance.
  • Right not to be subject to automated individual decision-making, including profiling: the right not to be subject to a decision based on automated processing which has a significant impact.

As a user, you have the right to withdraw your consent at any time. Withdrawal of consent shall not affect the lawfulness of the processing carried out prior to withdrawal.

You also have the right to lodge a complaint before the supervisory authority if you believe that your data protection rights may have been infringed upon (aepd.es).

ADDITIONAL INFORMATION:

SECURITY MEASURES

The data you provide will be processed confidentially. The provider has adopted all the technical and organisational measures and levels of protection needed to guarantee the security of the data processing procedure and to avoid the alteration, loss, theft, unauthorised processing of or access to the data, in line with current best practice and the nature of the data stored. It is also guaranteed that the processing and registration in files, programmes, systems or devices, premises and centres comply with the requirements and conditions of integrity and security that are provided for in the regulations that are currently in force.

LANGUAGE

The language applicable to this privacy policy is Catalan. In the event of any contradiction in any of the versions translated into other languages, the Catalan version shall prevail.

SOCIAL MEDIA

You are hereby informed that QUALLA SYSTEMS S.L. may have a presence on social media platforms. The processing of data belonging to individuals who follow the official social media accounts of QUALLA SYSTEMS S.L. (and/or carry out any interaction or similar with it) will be governed by this section, as well as the conditions of use, privacy policies and access regulations corresponding to the social media site in each case, which have been previously accepted by the user.

QUALLA SYSTEMS S.L. will process your data for the purposes of correctly administering your presence on the social media channel; informing you about our activities, products and services; and for any other purpose allowed by social media regulations.

The publication of the following content types are prohibited:

  • That which is suspected of being unlawful under national, regional or international law or which engages in activities that are suspected of being unlawful or inconsistent with the principles of good faith.
  • That which infringes on people’s fundamental rights; violates the channel’s etiquette; annoys or irritates our users or third parties; and, in general terms, any content that QUALLA SYSTEMS S.L. considers inappropriate.
  • And that which, in general terms, contravenes the principles of legality, honesty, responsibility, the protection of human dignity, the protection of minors, the protection of public order, the protection of private life, the protection of the consumer and the protection of intellectual property and industrial property rights.

QUALLA SYSTEMS S.L. also reserves the right to remove, without prior notice, any content deemed inappropriate from the website or the social media account.

Please note that if you send personal information on a social media channel, QUALLA SYSTEMS S.L. cannot be held liable for the channel’s security measures. The user should consult the corresponding conditions of the channel in question if they wish to learn more about them.

SENDING OF CVs

If the user sends their CV to our e-mail address, the data contained therein will be processed in order to involve the user in any recruitment processes that may exist and to analyse their professional profile with the aim of selecting the best candidate for the vacancy of Manager. Please note that this is the only way that CVs can be sent. CVs submitted by any other means will not be accepted. In the event of any changes to your data, please notify us in writing as soon as possible so that we can keep your data up-to-date.

The data will be kept for a maximum period of one year. The data will be deleted once this time has elapsed, with absolute confidentiality being guaranteed in both the processing and the destruction of the data. If you wish to continue to participate in the recruitment processes for the position of Manager once this period has elapsed, you will need to send us your CV again.

CHANGES TO THIS PRIVACY POLICY

QUALLA SYSTEMS S.L. reserves the right to modify this policy to bring it in line with new legislation or jurisprudence.

REVOCABILITY

The consent issued for the processing and transfer of your data may be revoked at any time by communicating said desire to QUALLA SYSTEMS S.L. under the terms established in this Policy regarding the exercise of rights. Such revocation shall in no case be retroactive.

LEGISLATION

In general terms, all relationships between QUALLA SYSTEMS S.L. and the users of the services found on its website are governed by Spanish legislation and jurisdiction, to which the parties expressly submit themselves. The Courts and Tribunals of Barcelona, meanwhile, shall be responsible for resolving all disputes arising from or related to their use.