Data Protection Policy

This Data Protection Policy strictly complies with the requirements of Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of data (hereinafter, "RGPD") and the Organic Law 3/2018 of 5 December, on the Protection of Personal Data and guarantee of digital rights, (hereinafter, "LOPDGDDD"), aiming to inform the Users of our website https://www. vrmrights.com/, of everything related to the collection and processing of their personal data by VRM.

VRM reserves the right to modify and/or update this Policy from time to time, in order to adapt it to the legislation applicable at any time, as well as to the legitimate practices of VRM. In any case, the content of the new Policy will be published on the website and will be permanently available to Users. Users are recommended to read and consult this Privacy Policy every time they access this website.

Access to and general browsing of the contents displayed on the Website does not require registration by Users.

1. PERSON IN CHARGE OF THE TREATMENT

The data controller is Juan Mari Guillot, (hereinafter, "Juan"), whose registered office is located at Enric Granados 135, 08008 Barcelona (Spain), with tax identification number B02641975, e-Mail: hello@vrmrights.com, is committed to the protection and security of personal data that users of the website https://vrmrights.com could provide us.

2. TYPES OF PERSONAL DATA TO BE PROCESSED

Whether you provide us with your personal data directly or if you provide it to us by a third party, we will process the following personal data:

Consultants:

  1. Identification data: name and surname and ID card number.
  2. Contact data: email, telephone and address.
  3. Data associated with the consultation: employment data, tax data, economic data, etc.

Subscribers to our newsletter

  1. Identification data: name and surname.
  2. Contact data: email.

Website users

  1. Identifying data: IP and address.

3. PURPOSES

The data will be processed for the following purposes:

Processing Purposes

Consultations Resolve the query raised in relation to the Firm and/or the services it provides.

Sending newsletters 

To keep subscribers informed of the Firm's news and to send them our publications.

Navigation on the website 

To allow navigation on the website and to facilitate and improve the user's experience on the website.

To display advertising while browsing the website

4. BASIS OF LEGITIMACY

In the case of consultations, the treatment is legitimate because you have given your consent to make the query. 

In the case of sending newsletters, the treatment is legitimate because you have given your consent to complete and send the form.

In the case of web users, the processing is legitimate because they have given their consent to accept cookies when accessing the website.

5. DATA COMMUNICATION

Your data will not be transferred, sold, rented or made available in any other way to any third party, except to those VRM service providers who perform certain activities for VRM and who will in no case process the data for their own purposes.

Notwithstanding the above, personal data may be communicated to law enforcement agencies, Judges or Courts, as well as any other competent body in case of being required in compliance with the legislation in force.

6. AUTOMATED DECISIONS AND ELABORATION OF PROFILES

In no case VRM will adopt automated decisions with your data nor will it elaborate profiles.

7. INTERNATIONAL TRANSFERS 

VRM has international suppliers, so it is possible that your data may be processed outside the European Union or the European Economic Area.

In any event, VRM will ensure that such data processing is always protected by appropriate safeguards, which may include:

- EU-approved Standard Clauses: these are contracts approved by the European regulator, and which provide sufficient guarantees to ensure that the processing complies with the requirements established by the European Data Protection Regulation.

- Third-party certifications: framework agreement between the EU and a third state that establishes a standardized framework for data processing in accordance with the requirements of the European Data Protection Regulation.

8. DURATION OF PROCESSING

In the case of consultations, personal data will be kept for the time necessary to resolve the question or issue raised and provide an answer.

In the case of sending newsletters, personal data will be kept for as long as the user is subscribed to our newsletter in order to send it. 

In the case of web users, personal data will be kept for as long as the user is browsing the website and then for a maximum period of 12 months.

At the end of any of the above retention periods, the data will be duly blocked and retained for compliance with legal obligations. Once this period has expired, the data will be definitively deleted.

9. EXERCISE OF RIGHTS

At any time you may exercise your rights of access, rectification, deletion, opposition, limitation or portability by sending an e-mail to hello@vrmrights.com, attaching a copy of your ID card or similar document that legally identifies you.

If you have any questions about how we treat your personal data or any other question related to the matter, you can contact us through the above email.

Additionally, we inform you that you can file a complaint with the Spanish Data Protection Agency if you consider that VRM has treated your data in contravention of this Data Protection Policy or any other related regulation in force.