Data Controller
Website Data Controller: TSMGO BRAND CONSULTANTS, S.L.U.
Address: Avenida Lope de Vega 3, Ground Floor
Contact Email: info@tsmgo.es
Data Processing, Purposes, and Legal Bases
Information Requests, Inquiries, and Website Browsing
The data collected through the website (contact and identification data) is used to respond to inquiries related to our residential care centers, the care services we provide, and any other corporate information requested.
The legal basis for processing is the consent provided by checking the corresponding box on the form or by sending an email to the contact address. The website also uses technical data necessary to ensure its operation and security.
Cookies
If you agree to the installation of cookies, they will be activated upon acceptance through the cookie consent banner. Their purpose is described in the Cookie Policy for each specific cookie.
The legal basis for processing is the consent provided by accepting their installation.
Customer Management
Customer data is used to manage the contractual relationship established between the parties.
The legal basis for processing is the performance of a contract or the legitimate interest of the data controller, depending on the purpose of the processing.
Employee Management
If you are part of any of the companies managing the centers, your data will be processed to manage and develop the employment relationship.
The legal basis for processing will vary depending on the purpose and may include contractual necessity, legal obligations, legitimate interest, or the consent provided.
The legal basis will depend on the purpose for which the data was collected and may include the contractual relationship, compliance with a legal obligation, or the individual’s consent.
Supplier Management
Supplier data is used to manage the contractual relationship established between the parties.
The legal basis for processing is the performance of a contract or the legitimate interest of the data controller, depending on the purpose of the processing.
Data Retention
The personal data provided will be retained:
a) For as long as the commercial relationship remains in effect.
b) Until the data subject requests its deletion.
c) Information that must be retained by law for a specific period will not be deleted until the legally required retention period has expired.
Specifically, certain data will be deleted or blocked as follows:
- Contact data submitted through inquiries or forms: Up to 1 year after the last interaction.
- Employee data: 5 years after termination of the employment relationship.
- Customer and supplier data: 6 years after the end of the contractual relationship.
Data Recipients
Data may be disclosed:
Pursuant to Legal Obligations
To Social Security authorities, Tax Authorities, Public Administrations with jurisdiction, law enforcement agencies, companies related to occupational health and safety, and insurance companies.
Pursuant to Contractual Obligations
To banks and financial institutions.
Data Processors (Contracted Service Providers)
To technology providers, professional advisors, consultants, and other service providers acting on behalf of the data controller.
Personal data is not shared with third parties for commercial or marketing purposes.
Data Subject Rights
Data subjects may exercise the following rights:
- Right of Access: To know what personal data is being processed.
- Right to Rectification: To request correction of inaccurate data.
- Right to Erasure: To request deletion of data when it is no longer necessary.
- Right to Object: To object to processing based on legitimate interests.
- Right to Restriction of Processing: To request suspension or limitation of processing.
- Right to Data Portability: To receive personal data in a structured, commonly used format.
- Right Not to Be Subject to Automated Decision-Making: Including profiling.
Requests concerning access, rectification, erasure, restriction, objection, or portability may be submitted to: info@tsmgo.es
You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) through its website: www.aepd.es
Security Measures
Appropriate technical and organizational measures are implemented centrally based on a prior risk assessment of the data processing activities carried out.
These measures are designed to ensure the security, integrity, and confidentiality of personal data, preventing loss, alteration, unauthorized access, or disclosure.
Examples of security measures include data encryption, access controls, secure servers, backup systems, and internal data protection policies.
Changes to This Policy
This Privacy Policy may be updated from time to time in order to reflect legal, regulatory, or operational changes.
