Information We Collect and Your Rights
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, concerning the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, GDPR), and the Spanish Organic Law 3/2018 of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights, we inform you that the personal data collected through this form will be included in a data file. The purpose of this file is the administration and management of the tasks entrusted to EC3metrics. The company may use the provided data to send you information it considers to be of interest to you.
The user, as the data subject, is hereby informed and gives their explicit consent for their data to be incorporated into the following automated data files:
- Clients and Suppliers, and for their subsequent automated processing, with EC3metrics SL, a Spin-Off of the University of Granada, being the data controller responsible for the file and its processing. The purpose of this data processing is to manage clients who request the services provided by our company through the internet.
In accordance with the provisions of the GDPR, individuals have a set of fundamental rights concerning their personal data. Below, you will find detailed information on how EC3metrics SL handles each of these rights under the GDPR and in relation to your data. At EC3metrics SL, we process data solely for the purpose of delivering our professional services. All our facilities and servers are located within the European Union and fully comply with the GDPR.
We do not transfer your data to third parties for commercial or marketing purposes.
1. Right to Information
The law, more commonly known as the General Data Protection Regulation (GDPR), applies to all individuals within the European Union, the European Economic Area (EEA), and the European Free Trade Association (EFTA). You have the right to know what we do with your personal data, why we process it, and how you may withdraw your consent at any time. This includes the right to be informed about who we are and how we handle your data.
This privacy policy applies to EC3metrics SL. Our offices are located at the Technology Transfer Centre of the University of Granada, at Calle Gran Vía nº 48, 5th floor, Granada (Spain). The person responsible for managing the company’s data is the General Manager. As a general rule, you may contact this individual for any data-related concerns, as they are responsible for ensuring that your rights under the GDPR are respected.
As a company that works with both other businesses and the general public, there are several legal grounds that require us to collect and process certain personal information. The three primary legal bases under which we do this are:
- To collect sufficient information to establish a service relationship.
- To carry out business transactions within our company and to retain the necessary data to process orders and deliver the services associated with those orders.
- We request your consent through various channels: via telephone, when recording your orders, and on our website, where we explicitly ask for your consent before processing any online orders.
By law, we are required to retain personal data for as long as any of the aforementioned three legal grounds remain applicable. If we do not have your permission to send you emails and we have not processed any orders from you for a period of six years, we will proceed to delete your personal data from our systems. Additionally, we will request that our third-party data processors delete this information from their systems as well.
If at any point you wish to withdraw your consent or lodge a complaint regarding our processing of personal data, you may do so by sending an email to info@EC3metrics.com or by writing to us at Calle Gran Vía nº 48 – 5th floor, Granada (Spain). We will process your withdrawal of consent or respond to your complaint within a maximum period of one month from the date of receipt of your request.
In cases where clients provide their credit card number for the purpose of receiving requested services, this information is transmitted directly to the payment gateway provider Redsys Servicios de Procesamiento (Banking Entity: Bankia SA), which is responsible for securely storing such data within its infrastructure.
In line with our commitment to security and confidentiality, EC3metrics SL is particularly focused on providing our clients with the highest level of data protection. All commercial transactions are carried out in a secure server environment using the SSL (Secure Socket Layer) protocol. All communications are transmitted in encrypted form using 128-bit encryption, ensuring the highest level of protection for transmitted data.
User acceptance of the processing of their data in the manner described herein is a necessary condition for the provision of our services. The use of our services implies such acceptance, which is always revocable and without retroactive effect. The user is, in all cases, responsible for the accuracy of the data provided. EC3metrics reserves the right to exclude from its services any user who has provided false information, without prejudice to any other legal actions that may be applicable.
2. Right of Access
If you would like to know what personal data we store about you, verify its accuracy, and ensure that it is being processed lawfully, you may request this information by sending an email to info@EC3metrics.com, or by writing to us at Calle Gran Vía nº 48 – 5th floor, Granada (Spain). We will provide you with all the personal data we hold about you in the same format in which your request was submitted.
We will respond within one month from the date of receipt of your request. If the request is particularly complex or if we are dealing with a high volume of requests, we will inform you —within that initial one-month period— that we will be applying the permitted extension under such circumstances.
3. Right to Rectification
If you believe that the information we hold about you is inaccurate or incomplete, you may inform us by sending an email to info@EC3metrics.com or by writing to the postal address provided above. Upon receipt of your request, we will correct or update your personal data accordingly.
We will do so within one month from the date of your request. If your request is particularly complex or we are handling a high number of simultaneous requests, we will notify you —within that initial one-month period— that we will be applying the permitted time extension under such circumstances.
4. Right to Erasure
Under certain circumstances, the General Data Protection Regulation (GDPR) grants you the right to request the deletion or modification of any personal data that a company may hold about you. This is also referred to as the right to be forgotten. You may request that we erase the personal information we hold about you if you believe it is no longer necessary for us to retain your data for the purposes for which it was originally collected, you have unsubscribed or never gave consent for your data to be used for commercial purposes, or you believe your data has been processed unlawfully. Please note that in order to fulfill your request, we may no longer be able to provide you with our services. Alternatively, you may choose to wait until we have completed providing services to you, after which we will comply with your request in accordance with applicable law.
To submit your request, please contact us by sending an email to info@EC3metrics.com or write to us at Calle Gran Vía nº 48 – 5th floor, Granada (Spain).
We will assess your request and take the appropriate action within one month of receiving it. If the request is particularly complex or if we are processing a large number of requests at the same time, we will inform you —within that one-month period— that we will apply the permitted time extension under such circumstances.
5. Right to Withdraw Consent
In accordance with the General Data Protection Regulation (GDPR), you also have the right —under certain circumstances— to withdraw the consent you previously granted for the processing of your personal data for a specific purpose. You may request the withdrawal of your consent if you believe that the personal information we hold about you is inaccurate, you object to the processing of your data, or you wish us to retain the information without processing it, for example, in the event you intend to initiate or defend a legal claim.
To submit your request, please contact us by email at info@EC3metrics.com or write to us at Calle Gran Vía nº 48 – 5th floor, Granada (Spain), addressed to the General Manager of EC3metrics SL.
We will evaluate and respond to your request within one month of receipt. If necessary, we will also notify any third parties involved. If your request is particularly complex or if we are managing a large number of concurrent requests, we will contact you within that one-month period to inform you that additional time will be required to process your request, as permitted under the GDPR.
6. Right to Data Portability
You have the right to request a copy of your personal data in a digital format (e.g., an Excel spreadsheet or a text file), either for your own use or to reuse the data for any other lawful purpose.
To submit your request, please contact us by email at info@EC3metrics.com or write to us at Calle Gran Vía nº 48 – 5th floor, Granada (Spain), addressed to the General Manager of EC3metrics SL.
We will process your request free of charge within one month from the date of receipt. If the request is particularly complex or if we are handling a large number of requests simultaneously, we will inform you within that one-month period that we will make use of the permitted time extension under such circumstances.
7. Right to Object
Under certain circumstances, the General Data Protection Regulation (GDPR) grants you the right to object to the processing of your personal data, particularly if the data is inaccurate or if you do not agree with how it is being used. If you object to our processing of your personal data —whether in relation to order processing, service provision, or for any other reason— you may inform us of your objection by sending an email to info@ec3metrics.com or by writing to us at the address provided above.
If we accept your objection in writing, and while your request is being reviewed, we will cease processing your data in the manner to which you have objected. We will then restrict the processing of such data free of charge within one month, unless your request is particularly complex or we are handling a high volume of requests. In that case, we will notify you within that one-month period that an extension may be required.
You will also be given the opportunity to object to receiving marketing communications from us at the time you place an order or provide your personal data, as outlined in Section 1: Right to Information.
8. Rights Related to Automated Decision-Making and Profiling
We do not carry out any automated decision-making that affects your personal information.
We do not make any decisions involving what the GDPR defines as special categories of personal data, nor do we make decisions based on ethnicity, race, sex, gender, or disability.