Information on how BridgeOne processes and protects your personal data.
1. DATA CONTROLLER
Data controller
DIGITAL KORAL, S.L. (trading as "BridgeOne"), Tax ID (CIF) B56815111, registered office at Carrer de La Flora Fou, 68, 08640 Olesa de Montserrat (Barcelona), Spain, phone +34 647 29 53 49 and contact email support@bridgeone.es, is the controller for the processing of your personal data in accordance with this Privacy Policy.
Data protection officer (DPO)
You can contact our Data Protection Officer by writing to support@bridgeone.es and indicating "Data Protection" in the subject line.
2. PURPOSES OF PROCESSING
What do we use your data for?
We process the information you provide for the following main purposes: (i) to handle inquiries and requests received through the website and portal contact channels; (ii) to manage job applications and recruitment processes; (iii) to manage the commercial relationship and provision of services of the BridgeOne portal with clients, suppliers, and partners; and (iv) where applicable, to send you commercial communications related to our products and services, provided that you have given us your consent.
How long do we keep the data?
The data will be kept as long as the relationship with the user is maintained, your account on the portal remains active, and for the periods necessary to comply with legal obligations. In the case of job applications, the data will be kept for a maximum of 24 months after the end of the selection process, unless you request its deletion sooner.
Automated decisions
No automated decisions are made, nor are profiles created that produce legal effects on the user or significantly affect them in a similar way.
3. LAWFULNESS OF PROCESSING
What is the legal basis for the processing?
The legal basis for processing your data is, as the case may be: (i) your consent, given by submitting a form, registering on the portal, or ticking the corresponding box; (ii) the performance of a software services contract or the application of pre-contractual measures; and (iii) the legitimate interest of BridgeOne in managing its business activity, ensuring portal security, and responding to inquiries submitted.
Obligation to provide data
The information requested in the forms or during registration marked as mandatory is necessary to process your request, inquiry, or registration on the portal. If you do not provide it, we may not be able to address it correctly.
Consequences of not providing data
Refusal to provide the necessary data may make it impossible to access certain essential services or functionalities of the BridgeOne portal.
4. DATA RECIPIENTS
To whom do we communicate your data?
Your data may be communicated to BridgeOne's technology companies and subsidiaries when necessary for internal administrative purposes, technical support, the proper provision of platform services, or to properly handle your request.
Disclosures based on legal obligations and providers
In certain cases, we may be obliged to communicate data to public authorities in compliance with legal obligations. Likewise, some technology and cloud infrastructure service providers (data hosting, authentication systems, management tools, etc.) may access your data, acting as data processors and under the strict instructions of BridgeOne.
International transfers
In the event that international data transfers are carried out, they will be based on adequate safeguards, such as the standard contractual clauses approved by the European Commission.
5. RIGHTS OF THE DATA SUBJECTS
What are your rights?
You can exercise your rights of access, rectification, erasure, restriction of processing, data portability, and objection, as well as withdraw consent at any time, by sending a written request to support@bridgeone.es, proving your identity and indicating the right you wish to exercise.
Withdrawal of consent and complaints
The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. If you consider that your rights have not been properly addressed, you can file a complaint with the competent supervisory authority.
Supervisory authority
In Spain, you can contact the Spanish Data Protection Agency (AEPD) through its official website.
6. SOURCE AND CATEGORIES OF DATA
Where do we obtain the data from?
The personal data we process comes directly from the user through registration forms, contact channels enabled on the website, or during the use of the BridgeOne portal tools.
Categories of data processed
The categories of data processed are identification data, access credentials, contact data, professional and employment data (necessary for the portal's functionalities), commercial information, and, where applicable, economic and banking data necessary for billing subscriptions.
7. ELECTRONIC COMMUNICATIONS
Notice in compliance with Law 34/2002 (LSSI-CE)
In accordance with the provisions of Law 34/2002 of July 11, on Services of the Information Society and Electronic Commerce, we inform you that if you do not wish to continue receiving communications and information from the portal, please notify us by email at support@bridgeone.es, so that your personal data can be removed from our communications database. Your request will be processed within 10 days of submission.
Message confidentiality
Communications from BridgeOne are addressed exclusively to their recipient and may contain privileged or confidential information related to your account or contracted services. If you receive a communication by error, you are notified that any unauthorized use, disclosure, and/or copying is prohibited under current legislation.
Data protection — GDPR and LOPDGDD
In accordance with the provisions of the GDPR (EU) 2016/679 and Organic Law 3/2018 (LOPDGDD), you are informed that the personal data collected on the portal will be kept and processed solely for the purpose for which it was collected, as well as to manage the contractual relationship and maintenance of the BridgeOne service. The lawful basis for processing is the consent of the data subject or the performance of the services contract. You can exercise your legal rights and file complaints with the Spanish Data Protection Agency.