01 Data controller
- Controller
- Grupo Actual Soluciones y Recursos Humanos, S.L.
- Tax ID (CIF)
- B-84677947
- Address
- Calle Príncipe de Vergara, 90, 28006 Madrid (Spain)
- Phone
- +34 917 450 611
- Privacy email
- bs@psicosoft.com
02 What data we process
We only process the data you provide to us directly or that is generated when you browse the Website:
- Contact and professional data: first and last name, business email, phone number, company, job title and country, when you fill in the contact form or the request for information form.
- Information about your needs: the profiles you want to assess, the volume of applications, the timeline, the areas you are interested in, the security documentation you request and the message you write to us, together with the Website page from which you submit the form.
- Meeting booking data: name, email and the date and time you choose when you book a meeting through our Google Calendar booking page.
- Browsing data: IP address, device and browser type, pages visited and source of the visit (including campaign parameters in the URL), as described in the Cookie policy.
The forms indicate which fields are mandatory. If you do not fill them in, we will not be able to handle your request. When you send us data relating to a third party, you warrant that you have informed that person and have their consent.
03 Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Responding to the inquiries and requests for information you send us through the forms or by phone. | Your consent (Art. 6(1)(a) GDPR) and the taking of steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR). |
| Preparing proposals, demos and meetings about the Delta platform. | Taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR). |
| Managing the relationship with clients and suppliers (billing, support and service communications). | Performance of the contract (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR). |
| Sending you information about solutions similar to those you have already contracted. | Legitimate interest (Art. 6(1)(f) GDPR and Art. 21.2 of the LSSI, the Spanish Information Society Services Act). You may object at any time. |
| Measuring use of the Website in order to improve it (analytics). | Your consent, which you can withdraw from the cookie settings (Art. 6(1)(a) GDPR). |
| Protecting the forms against automated or abusive submissions (the IP address is used to limit the number of submissions). | Legitimate interest in the security of the Website (Art. 6(1)(f) GDPR). |
We do not make automated decisions producing legal effects concerning you based on the data from this Website, nor do we use it for profiling.
04 How long we keep it
- Inquiries and requests for information: while the request is being handled and, afterwards, for up to 2 years if it does not lead to a business relationship, unless you ask us to erase it sooner.
- Clients and suppliers: for the duration of the contractual relationship and, afterwards, for the limitation periods of the legal obligations (as a general rule, 6 years for commercial and accounting records and 4 years for tax records).
- Marketing communications: until you object.
- Analytics data: the periods indicated in the Cookie policy.
Once those periods end, the data is blocked for as long as liability may be claimed and then erased.
05 Recipients and international transfers
We do not sell or transfer your data. We only disclose it to Psicosoft Group companies when necessary to handle your request, to public authorities when required by law, and to the providers that supply services to us (hosting, customer management tools, meeting scheduling and web analytics), which act as processors under a contract that requires them to protect the data and to use it only in accordance with our instructions.
Some of these providers, such as Google (Google Analytics, Google Tag Manager and Google Calendar), may process data outside the European Economic Area. In those cases, the transfer is based on the EU-U.S. Data Privacy Framework, on an adequacy decision of the European Commission or on the standard contractual clauses approved by the Commission.
06 Assessment data on the Delta platform
When an organization uses the Delta platform to assess its candidates or employees, that organization is the controller of the data of the people assessed and we act as processor, following its instructions and under the data processing agreement required by Article 28 GDPR.
If you have taken part in an assessment and want to exercise your rights over that data, please contact the organization that invited you. If you write to us, we will forward your request to that organization.
07 Your rights
You may exercise the following rights at any time:
- Access: find out whether we process your data and obtain a copy.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete your data when it is no longer necessary.
- Objection: object to our processing of your data, for example for marketing communications.
- Restriction: ask us to keep your data but stop using it while a claim is being resolved.
- Portability: receive your data in a structured format or have us send it to another controller.
- Withdraw the consent you have given us, without affecting the lawfulness of processing carried out before its withdrawal.
To exercise them, write to us at bs@psicosoft.com or by post to Calle Príncipe de Vergara, 90, 28006 Madrid (Spain), stating the right you wish to exercise. If we have reasonable doubts about your identity, we may ask you for additional information to confirm it. We will respond within one month.
If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) (www.aepd.es).
08 Data security
We apply appropriate technical and organizational measures to protect data against loss, alteration or unauthorized access. In addition, the Delta platform has an Information Security Management System certified to the ISO/IEC 27001 standard. You can find more details on the Security page.
09 Minors
The Website is intended for professionals and organizations. We do not knowingly collect data from children under 14 through its forms.
10 Changes to this policy
We may update this policy to reflect legal changes or new processing activities. We will always publish the current version on this page, with its update date, and we will notify you through the usual channels if the changes are significant.