Lendismart informs users of the website about its policy regarding the processing and protection of personal data of users and customers that may be collected by navigation, purchase of products or services through its website. In this sense, Lendismart guarantees compliance with current legislation on protection of personal data, reflected in Law 15/1999 of 13 December on the Protection of Personal Data and Royal Decree 1720/2007 of 21 December, approving the Regulation of Development of the LOPD, and the General Data Protection Regulation (RGPD) (EU) 2016/679.

SECURITY MEASURES

In compliance with current legislation on data protection, users are informed that, in Lendismart, technical and organizational measures have been adopted in accordance with the provisions of that legislation. The personal data collected in the forms are processed only by the staff of Lendismart or the data processors established here. We have taken appropriate security measures for the data provided and have also installed all the technical means and measures at its disposal to prevent the loss, misuse, alteration, unauthorised access and theft of the data provided to us.

VERACITY OF DATA

The Customer or User declares that all data provided by him are true and correct and undertakes to keep them updated, communicating to Lendismart, any changes thereto. The user is responsible for the veracity of their data and shall be solely responsible for any disputes or litigation that may result from the falsity of the same. It is important that, so that we can keep the personal data updated, the user informs Lendismart whenever there has been any change in them. Otherwise, we cannot be held responsible for their accuracy.

EXERCISE OF RIGHTS

The LOPD and the RGPD grants data subjects the possibility to exercise a number of rights related to the processing of their personal data. Insofar as the user’s data are processed by Lendismart, they may exercise their rights. To do this, the user must contact us, providing documentation proving their identity (ID card or passport), by email to admin@lendismart.com, or by written communication to the address listed in our legal notice. This communication must include the following information: Name and surname(s) of the user, the request, address and supporting data.

The exercise of rights must be carried out by the user himself. However, they may be exercised by a person authorised as the authorised person’s legal representative. In this case, documentation must be provided to accredit this representation of the interested party.

The user may request the exercise of the following rights:

• Right to request access to personal data.
• The right to request their rectification (in case they are incorrect) or deletion.
• The right to request the limitation of their processing, in which case they will only be kept by Lendismart for the exercise or defence of claims.
• Right to object to the processing: Lendismart will stop processing your data, unless for legitimate reasons or for the exercise or defence of possible claims.
• Right to data portability: in case you want your data to be processed by another firm, Lendismart will facilitate the portability of your data to the new data controller.

Where consent has been given for a specific purpose, the user has the right to withdraw consent at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal.

If a user considers that there is a problem with the way in which Lendismart is handling their data, they can address their complaints to the Security Officer or to the appropriate data protection authority, being the Spanish Data Protection Agency the one indicated in the case of Spain.

PRESERVATION OF DATA

Disaggregated data will be retained without a deletion period. With regard to Client data, the period of conservation of personal data will vary depending on the service contracted by the Client. In any case, it will be the minimum necessary, and may be kept until:

• 4 years: Law on Offences and Penalties in the Social Order (obligations regarding affiliation, registrations, cancellations, contributions, payment of wages…); Arts. 66 ff. of the General Tax Law (accounting books…)
• 5 years: Art. 1964 Civil Code (personal actions without special time limit)
• 6 years: Art. 30 Commercial Code (accounting books, invoices…)
• 10 years: Art. 25 Prevention of Money Laundering and Terrorist Financing Act.

Users of mailing lists or those uploaded by Lendismart to RRSS pages or profiles, will be retained until the user withdraws consent.

Candidate data (C.V.), if any: In the event that the candidate is not selected, Lendismart may keep their curriculum for a maximum of two years to incorporate it into future calls, unless the candidate declares otherwise.

DATA COLLECTION AND PROCESSING

Lendismart has a duty to inform users of its website about the collection of personal data that can be carried out, either by sending email or by filling out the forms included on the website. In this sense, Lendismart will be considered responsible for the data collected by the means described above.

In turn Lendismart informs users that the purpose of the processing of the data collected includes the attention of requests made by users, inclusion in the agenda of contacts, the provision of products or services and the management of the business relationship. The operations, management and technical procedures that are carried out in an automated or non-automated way and that make possible the collection, storage, modification, transfer and other actions on personal data, are considered to be the processing of personal data.

The Lendismart Website is SSL-encrypted, which allows the User to securely submit personal data through the website’s contact forms.

Lendismart offers users a series of telematic mechanisms for the collection and processing of personal data, with the purposes set out above. The personal data provided electronically, either through email, contact forms on this website or online contracting will be used for commercial and administrative management of customers and users of the company. This data will be processed through servers managed by https://www.acens.com, which is also the company providing email services, and which will be considered as the data processor.

For its part, the mail and name data will be incorporated into a database for sending commercial communications and manage the subscription to the services requested by the customer or user, managed through the servers of https://mailchimp.com, which will also have the consideration of Data Processor. You may unsubscribe at any time by clicking on the link that you will find in our communications, or by sending a request to exercise your right to the company in charge of processing or Lendismart.

As established by the LSSICE, Lendismart undertakes not to send commercial communications without identifying them as such. For these purposes, information sent to customers for the maintenance of the existing contractual relationship will not be considered as commercial communication.

In any case, only the data necessary to carry out the contracted service, or to be able to respond appropriately to the request for information made by the user, will be obtained.

Occasionally, personal data will be provided through links to third party websites. In this case, at no time will Lendismart staff have access to the personal data provided by the Customer to such third parties.

PROCESSORS IN THE UNITED STATES

Lendismart uses the services of https://mailchimp.com, to send commercial information through its mailing lists.

The user expressly and unequivocally consents to the processing of his/her data and to the international transfer of such data to this service provider.

PERSONNEL SELECTION

The applicant who sends electronic communications to Lendismart, in order to access the recruitment processes of the Entity, authorises us to analyse the documents sent (for example, the C.V.), all content that is directly accessible through Internet search engines (e.g. Google), the profiles maintained in professional social networks (e.g. LinkedIn), the data obtained in the entrance tests and the information disclosed in the job interview, in order to assess your application and to be able, if necessary, to offer you a position. In the event that the candidate is not selected, Lendismart may keep your C.V. stored for a maximum of two years, to incorporate it into future calls, unless the candidate states otherwise.

COMMUNICATION OF INFORMATION TO THIRD PARTIES

Lendismart will not transfer or communicate your data to any third party, except in the cases provided by law or when the provision of a service involves the need for a contractual relationship with a data processor, and always in accordance with the general conditions approved by the user prior to the contracting of the same. Thus, when contracting our services, the user accepts that some of the same may be, totally or partially, subcontracted to other persons or companies, who will be considered as Data Processors, with whom the corresponding confidentiality contract has been agreed, or who have adhered to their privacy policies, established on their respective web pages. The user also accepts that some of the personal data collected may be provided to these data processors, when necessary for the effective performance of the contracted service. The user may refuse the transfer of your data to the Data Processors, by means of a written request, by any of the aforementioned means.

CONFIDENTIALITY

The information provided by the customer shall in any case be considered confidential and may not be used for purposes other than those related to the contracted services or products purchased from Lendismart. Lendismart undertakes not to disclose or reveal information about the customer’s claims, the reasons for the advice requested or the duration of its relationship with the customer.

VALIDITY

This privacy and data protection policy may vary according to changes in regulations and jurisprudence that may occur, and it is the responsibility of the owner of the data to read the updated document in order to know their rights and obligations in this regard at all times.