PRIVACY POLICY FOR THE nbucle.com WEBSITE

This privacy policy describes how we collect information, the purposes for which we use it and how we manage it. Your privacy is important to us and we take it very seriously; that is why we wish to express our utmost commitment to protecting our Users’ personal data. We have implemented the necessary technical and organisational measures set out in data protection legislation to ensure the confidentiality of your data, in compliance with the General Data Protection Regulation adopted by the European Union (GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD). However, we cannot accept any liability for any loss or damage arising from alterations that third parties may make to the User’s computer systems, electronic documents or files.

WHO IS THE DATA CONTROLLER?

We would like to inform you that your personal data will be processed by NBUCLE CREATIVE COMMUNICATION S.L., with tax identification number (CIF) B88358106, whose registered office is at C/Ayala 94 dup., – 28001 MADRID (MADRID), telephone number +34 623 04 80 05, and the email admin@nbucle.com.

WHAT ARE THE PURPOSES OF THE PROCESSING?

Purpose No. 1. In order to access some of our services, and for the purpose of responding to your enquiries or sending you information relating to your request, we may need to obtain information from you; in such cases, we will ask you to provide it to us voluntarily and explicitly. You must only send us data relating to yourself, or to third parties, if you are their legal representative or have obtained their unambiguous consent. Purpose No. 2. To fulfil our contractual obligations should you decide to purchase any of our products and/or services, as well as to carry out the administrative, tax and accounting procedures arising from the work we have carried out. Purpose No. 3. Whenever you wish, we may send you regular marketing information about our products and/or services, including newsletters, or information from third parties with whom we have commercial partnerships. If you have had any contractual relationship with us, we may also send you marketing communications. Purpose No. 4: To publish content on our websites and social media pages, provided you have given your prior consent. If you have followed our social media pages, you consent to your personal data being processed in the manner permitted by each of these social media platforms, in accordance with their technical specifications and their own terms and conditions, and it will not be used for purposes other than those provided for by the social media platforms themselves and within their respective platforms and/or environments. On our social media pages, we may allow interaction with users and respond to their enquiries. The user consents to our access to the data contained in their profile, to our sending them marketing communications via the social media platform’s internal messaging system, and to an event created by us being posted on their timeline (in the case of Facebook) or in other prominent sections of other social media platforms. You can unfollow us on our social media platforms using the tools provided by those platforms. We would like to inform any data subject whose personal data may appear on the social media platforms where we have a profile that they may exercise their rights as specified in the section entitled ‘RIGHTS OF THE DATA SUBJECT’. At the end of this document, you will find further information on data processing on our social media pages (Use of Profiles, Posts, Data relating to minors or people with disabilities). Purpose No. 5: To participate in any recruitment processes we may carry out should you send us your CV.

DOES OUR WEBSITE USE COOKIES?

NBUCLE CREATIVE COMMUNICATION S.L. may use cookies when providing services on the website. You can view our cookie policy by clicking on the link on the home page.

WHAT IS THE LEGAL BASIS FOR THE PROCESSING?

Purpose No. 1: Consent given by the data subject when submitting an enquiry or taking part in a competition. Purpose No. 2: Fulfilment of contractual obligations arising from the purchase of products and/or services under the terms set out in any contract we may enter into, as well as compliance with the legal tax obligations arising therefrom. Purpose No. 3. Consent given by the data subject to receive marketing information on a regular basis, which you provide when you agree to receive marketing communications, or, where you have had a contractual relationship with us, our legitimate interest. Purpose No. 4. Consent given by the data subject to post content on our social media pages and websites. The USER has a profile on the same social media platform and has decided to follow the CONTROLLER’s page on that platform, thereby demonstrating an interest in the information published there; consequently, by requesting to follow our official profiles, the USER gives their consent to the processing of the personal data published on their profile. The USER may access the social network’s privacy policies at any time, as well as configure their profile to ensure their privacy. The DATA CONTROLLER has access to and processes the USER’s public information, in particular their contact name. This data is only used within the social network itself and will only be included in a file held by the DATA CONTROLLER when necessary to process the USER’s request. Purpose No. 5. Consent from the data subject to take part in recruitment processes, which you give us when you send us your CV, either via paper or electronic forms in which you give your specific consent. If you send us your CV by email, we will assume that you are consenting to us processing it; therefore, should we deem it appropriate to retain it, we will reply to you via the same channel, in accordance with our data protection policy.

WHAT ARE THE DATA RETENTION CRITERIA?

Purposes 1 and 2: We will retain the data for the period during which legal obligations remain in force, and for as long as there is mutual interest in maintaining the relationship between both parties; we will therefore delete the data once it is no longer necessary to fulfil the purposes that justified its processing. Purpose 3: Retention period for your data for the purpose of sending marketing communications:

  • If you have given us your express consent, we will retain your data until you decide to withdraw your consent or object to the processing.
  • If you have had a contractual relationship with us and we send you marketing communications, we will retain your data until you decide to object to such processing.

Purpose No. 4: Any images or other data that we have published on websites, social media pages or other platforms will be retained indefinitely unless you wish to withdraw the consent you have given us. Purpose No. 5: CVs received will be destroyed if they are not shortlisted for any recruitment processes we may carry out, and will be retained for a maximum period of one year.

HOW SHOULD YOU UPDATE YOUR PERSONAL DETAILS?

The User warrants that the personal data provided to us via this website is true, accurate, up-to-date and complete. The User must notify us of any changes or updates to this data by sending a message to the postal or email addresses set out in the section ‘How can you exercise your rights?’.

WHO IS THIS INFORMATION INTENDED FOR?

We will not disclose information to third parties unless we are legally obliged to do so, or where such disclosure is necessary to provide our services, or where you have given your express and unambiguous consent. On our website, we will only publish the data that you have consented us to publish, making it accessible to any internet user. The information provided by the USER via the CONTROLLER’s social media accounts, including their personal data, may be published – depending on the services the USER uses – and may therefore be made publicly available to other third-party users of social media. From each social media profile, the USER can configure which information they wish to make public in each case, view the permissions that have been granted, and remove or deactivate them, just as they would with any third-party application they no longer wish to use. No personal data is intended to be disclosed to third parties outside the social network, except where this is essential for the purposes of processing; in such cases, data may be disclosed to our communications service providers, with whom the DATA CONTROLLER has entered into the confidentiality and data processor agreements required by current data protection legislation.

ARE THERE ANY INTERNATIONAL DATA TRANSFERS?

We would like to inform you that, when using the services of certain social media platforms, such as Facebook, Twitter, YouTube, LinkedIn or Instagram, international data transfers may take place outside the EU to countries such as the United States, although these companies have adhered to the Privacy Shield framework, which permits the processing of data relating to European citizens. These social media platforms and their partners operate globally and use cookies for statistical analysis, personalisation and advertising, amongst other purposes. Facebook and Instagram are participants in the Privacy Shield framework: Further information Twitter is a participant in the Privacy Shield framework: Further information YouTube is a participant in the Privacy Shield framework: Further information LinkedIn adheres to the Privacy Shield framework: Further information Please bear this information in mind if you allow us to publish some of your data on social media platforms where we have a public profile.

WHAT RIGHTS DOES THE DATA SUBJECT HAVE?

Any person has the right to obtain confirmation as to whether or not we are processing personal data concerning them. The data subject has the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its erasure when, amongst other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, the data subject may request that the processing of their data be restricted, in which case we will retain it solely for the purpose of establishing or defending legal claims. In certain circumstances and on grounds relating to their particular situation, the data subject may object to the processing of their data. In this case, we will cease processing your data, except where there are compelling legitimate grounds, or for the purposes of exercising or defending potential claims. You also have the right to withdraw your consent to the processing of your data at any time where the legal basis for such processing is your own consent. You may lodge a complaint with the relevant data protection supervisory authority, such as the Spanish Data Protection Agency, particularly if you have not received a satisfactory response regarding the exercise of your rights or if you believe that the processing of your data does not comply with current legislation.

WHERE CAN YOU EXERCISE YOUR RIGHTS?

By writing to NBUCLE CREATIVE COMMUNICATION S.L., C/Ayala 94, dup., – 28001 MADRID (MADRID), or by sending an email to the address admin@nbucle.com, by identifying yourself and specifying your request, providing a photocopy of your national identity card or equivalent document. In the case of commercial communications, including newsletters, you may withdraw the consent you have given by sending an email to our address admin@nbucle.com by including the phrase “Unsubscribe from the Communications Service” in the message, or by clicking on the unsubscribe link if this is provided in the email.

SAFETY MEASURES

In accordance with the provisions of current data protection legislation, the DATA CONTROLLER is complying with all the provisions of the GENERAL DATA PROTECTION REGULATION (GDPR) regarding the processing of personal data under its responsibility, and explicitly adheres to the principles set out in Article 5, whereby such data is processed lawfully, fairly and transparently in relation to the data subject and is appropriate, relevant and limited to what is necessary in relation to the purposes for which they are processed. The DATA CONTROLLER guarantees that it has implemented appropriate technical and organisational policies to apply the security measures set out in the GDPR in order to protect Users’ rights and freedoms, and has provided them with the necessary information to enable them to exercise those rights.

FURTHER INFORMATION ON DATA PROCESSING ON SOCIAL MEDIA:

USING YOUR PROFILE ON SOCIAL MEDIA

The DATA CONTROLLER shall carry out the following actions:

  • Access to public information on the profile.
  • Publication on the USER’s profile of all information already published on the CONTROLLER’s social media platform.
  • Sending personal and individual messages via the social media platform’s channels.
  • Page status updates to be published on the USER’s profile.

The USER can always manage their connections, remove content that no longer interests them and restrict who they share their connections with; to do so, they must access their privacy settings.

PUBLICATIONS

Once the USER has become a follower or joined the CONTROLLER’s social media platform, they may post comments, links, images, photographs or any other type of multimedia content supported by that platform. In all cases, the USER must be the owner of the content posted, hold the copyright and intellectual property rights, or have the consent of the third parties concerned. Any publication on the social media platform – whether in the form of text, graphics, photographs, videos, etc. – that offends or is likely to offend against public morals, ethics, good taste or decency, and/or that infringes, violates or breaches intellectual or industrial property rights, image rights or the law, is expressly prohibited. In such cases, the CONTROLLER reserves the right to remove the content immediately, without prior notice, and may request that the USER’s account be permanently blocked.

DETAILS OF MINORS OR PEOPLE WITH DISABILITIES

Access to and registration via the CONTROLLER’s social media accounts is prohibited for persons under the age of 18. Furthermore, if the USER has special needs, the involvement of their parent or guardian, or their legal representative, will be required, supported by a valid document proving such representation. The CONTROLLER shall be expressly exempt from any liability that may arise from the use of social media by minors or people with disabilities. The CONTROLLER’s social media accounts do not knowingly collect any personal information from minors; therefore, if the USER is a minor, they must not register, use the CONTROLLER’s social media accounts or provide any personal information. You can view the privacy policies of these social media platforms via the following links:

ACCEPTANCE AND CONSENT

The user confirms that they have been informed of our data protection policy and consents to the processing of their data for the purposes set out above. Please note that some of the services provided on the website may be subject to specific terms and conditions; in such cases, users will be duly informed.