Privacy Policy

Insertion Order

ECOM7 will be solely liable for damages directly caused to the customer (excluding consequential damages and lost profits) in case of direct fault or negligence on ECOM7 while providing the services subject to this agreement, up to a maximum amount equal to the sums paid by the customer during the 3 months prior to the fact causing the damage.

Controller

ECOM7 is the controller of personal data contained in this agreement in relation to the legal representatives and partners of the parties (hereinafter stakeholders) and those being generated as a result of its execution.

The Need of the Data Processing

The communication of personal data by the stakeholders is a contractual requirement for the implementation of this agreement, and the stakeholder shall provide such data and be informed that the agreement may not be signed, performed, or even terminated in case such data are not provided.

Purposes of Data Processing

The purposes of processing the data are:

1. To carry out the management, development, implementation, and control of the contractual relationship
2. Shipment of any type of electronic or postal correspondence related to that relationship
3. Inclusion of the data in the corporate and departmental address book of ECOM7 and employees who are in need of it
4. The accurate management in terms of finance, accounting, tax, and revenue derived from the established legal relationship
5. Management of the relevant contractual file for its filing and record-keeping

Data Storage Term

Your data will be preserved during the period of the agreement's effectiveness, while the deletion of your data is not requested, and during the limitation period of the actions that may arise in connection with this agreement. This includes any claim that we could receive from official bodies such as the Tax Office and/or Social Security administration. In any case, the maximum storage period will be 5 years from the moment of the termination of the agreement.

Legal Basis of Data Processing

The processing of the stakeholders’ data is required for the execution of the agreement the stakeholders are part of as legal representatives and/or partners. Furthermore, the inclusion in our contacts database will be based on the legitimate interest.

Recipients of Data

Personal data will be communicated to the following third parties:

• Judges and courts, in compliance with requirements, legal obligations or in connection with legal proceedings
• Banks for the management of receivables and payments
• Tax agency, for the fulfillment of tax obligations
• Financial auditors for the fulfillment of financial obligations
• Public notaries in the event of converting a document into a public instrument
• Any other third party whose divestiture is required to be carried out under the applicable rules in force in each case, such as the competent administrative bodies for reasons of control, registration, and inspection

International Transfers

Your data are not transferred at an international scale.

Data Processor

Your data can be made available to third parties, both in Spain and at the level of the European Union, in order to provide services to our company such as accommodation, invoicing, etc. in accordance with a services provision agreement and another related to processing commission with the obligation of change-back or destruction at the completion of the service.

Rights

Stakeholders can exercise their rights of access, rectification, deletion, opposition, limitation of data processing and, where legally appropriate, portability, by sending a request to the postal address of ECOM7 indicating the right they wish to exercise, along with a copy of both sides of their identity card or legal identification document.

Also, the stakeholder may submit the appropriate claim with the Spanish Data Protection Agency.