Our Privacy Policy at a glance
Who are we?
We are HUMAN DATA INSTITUTE, S.L., and we process your data as the Data Controller. This means we are responsible for how we use and protect your personal data.
What do we use your data for?
We use the data you have provided online or through any other means to respond to your inquiries and suggestions, provide you with services, or deliver requested products.
Why do we have your data?
We are authorized to process your data for different reasons. When you fill out a form or send an email with an inquiry or suggestion, we have a legitimate interest in responding to it.
Once we receive your inquiry, an automatic email is generated with access to our form. After answering the required questions, your responses are automatically processed in our calculation engine, generating results. These results will be internally downloaded in an anonymized CSV file.
Your responses will be used for advanced analytics and intelligence, with the aim of generating dissemination articles to share knowledge or for benchmarking purposes.
Who do we share your data with?
We only share your data with collaborating companies necessary to process received requests, provide services, or deliver requested products. Your data may also be shared with banks and legally required authorities. Under no circumstances do we sell your data to third parties.
What are your rights?
You have the right to access, rectify, or delete your personal data. You can also object to its use, request data portability, and avoid being subject to automated decision-making.
Principles applied in processing your data:
● Lawfulness, fairness, and transparency: We will always require your consent to process your personal data for one or more specific purposes, informing you clearly and transparently in advance.
● Data minimization: We only request data that is strictly necessary for the purposes for which we require it.
● Storage limitation: Data will be kept only for the time necessary for processing purposes. We periodically review our lists and delete inactive records after a reasonable period.
● Integrity and confidentiality: We process your data in a way that ensures appropriate security and confidentiality. We take all necessary precautions to prevent unauthorized access or misuse by third parties.
In this Privacy Policy, you will find more detailed information on how we use the personal data of our clients, suppliers, and users, regardless of the medium used to communicate with us (online form, phone, email, or in person).
We believe in transparency regarding how we handle your personal data, so you understand the implications of its use and your rights over it. For this reason, we keep our Privacy Policy, Legal Notice, and Cookie Policy updated, which you can review on our website.
If you have any questions or would like more information about our Privacy Policy, you can continue reading the document or contact us.
1. Who is responsible for processing your data?
The entity responsible for processing your data is HUMAN DATA INSTITUTE, S.L.:
● Identity: HUMAN DATA INSTITUTE, S.L. - B02764652
● Address: Agustín de Foxá 40, 28036 - Madrid (Madrid)
● Phone: +34 698122122
● Website: www.dathum.com
● Email: hello@dathum.io
● Data Protection Officer (DPO): Aixa Corpore, S.L.
● DPO Email: aixa4291@dpocanarias.com
HUMAN DATA INSTITUTE, S.L. informs users that the data provided through website browsing and various data collection forms will be processed by HUMAN DATA INSTITUTE, S.L. This processing is recorded in the Register of Processing Activities, in accordance with the GDPR.
Once your inquiry is received, an automatic standard email is generated with access to our form. After answering the required questions, your responses are automatically processed in our calculation engine, generating results. These results will be internally downloaded in an anonymized CSV file.
Your responses will be used for advanced analytics and intelligence, with the aim of generating dissemination articles to share knowledge or for benchmarking purposes.
2. What is your personal data used for?
At www.dathum.com, we process data from both our website users and third parties with whom we maintain relationships. To facilitate the understanding of how we process your data, we distinguish between the purpose, type of data, and legal basis depending on the category of individuals whose data we process. Below, we classify the people whose data we process according to their relationship with HUMAN DATA INSTITUTE, S.L.
2.1. Website Users
What data do we collect from website users?
a) Data from users who complete any of the available forms. HUMAN DATA INSTITUTE, S.L. requests:
● Identification data: name, surname, phone number, postal and email address.
● Data related to the request.
b) Data from users browsing our website:
Information provided by cookies and Google Analytics.
For what purposes do we process your personal data?
When the user accepts our Privacy Policy, they authorize us to use their personal data for the following purposes:
● To send information and provide the requested service through the various forms available on our website.
● To organize, communicate, and host events or similar activities.
● To conduct statistical studies to evaluate the success of campaigns and determine how users learned about a service provided by HUMAN DATA INSTITUTE, S.L. These data are collected exclusively for statistical purposes and are for internal use only.
How do we obtain your data?
We obtain your data through:
● The form completed by the user for the specified purpose. This form is subject to the acceptance of this Privacy Policy via a checkbox.
● Navigation data obtained from cookies accepted when accessing www.dathum.com for the first time.
What is the legal basis for processing your data?
● Explicit user consent (Article 6.1.a. GDPR): Expressed by completing forms, checking the consent box for commercial communications, and participating in our blog.
● Legitimate interest: For profiling browsing behaviors and detecting user preferences through cookies.
● Execution of a contract or pre-contractual measures: When the user requests information about services provided by HUMAN DATA INSTITUTE, S.L.
2.2. Suppliers
What data do we collect from our suppliers?
● Identification data: name, surname, phone number, postal and email address.
● Employment and professional data.
● Business activities.
How do we obtain your data?
● We obtain your data through:
● The signing of a contract that binds us.
● Acceptance of a submitted quote.
● Receipt of supplier invoices.
● Signing of the Data Processing Agreement, if applicable.
For what purposes do we process your personal data?
● Managing information related to our suppliers of goods and services and their representatives.
● Maintaining the contractual relationship.
● Managing payments and collections related to the contracts that bind us.
What is the legal basis for processing your data?
● Execution of a contract or pre-contract: To send information and manage the service provided.
● Legitimate interest: In managing data related to the representatives of HUMAN DATA INSTITUTE, S.L.’s suppliers.
2.3. ClientsWhat data do we collect from our clients?
a) Data from clients who complete any of the available forms on www.dathum.com or in our physical office:
● Name and surname, phone number, postal and email address.
● Data related to the request.
b) Data from clients registered on our platform:
● Name and surname, postal and email address, phone number, billing address.
c) Data from clients making a reservation or request in person:
● Name and surname, postal and email address, phone number, billing address.
d) Data obtained through contracts and quotes.
e) Data from clients who make online or in-person purchases:
● Name, surname, postal and email address, phone number, billing address.
● Transaction data: Products purchased, services provided, payment method, invoice, or purchase receipt.
How do we obtain your data?
If you are an online client:
● Through the form completed by the user for requesting information, a quote, or an order.
● Through cookies accepted upon first access to www.dathum.com.If you are an in-person client:
● Through the client registration form.By accepting a submitted quote.By signing a contract.
For what purposes do we process your personal data?
● To generate and manage documentation associated with requests and purchases.
● To provide information on offers, products, and services related to the purchase.
● To process reservations or online purchases through our platform.
What is the legal basis for processing your data?
● Execution of a contract or pre-contract: To manage information and provide the requested service.
● User consent: For sending newsletters and commercial communications.
● Legitimate interest: To send information about exclusive promotions, latest news, and satisfaction surveys.
2.4. Job Applicants and Candidates
What data do we collect from job applicants?
● Name and surname, phone number, postal and email address.
● Academic and professional background.
● Attached documents provided by the candidate.
How do we obtain your data?
● Through the submission of a resume at our offices or via the "Work with Us" form on our website.
For what purposes do we process your personal data?
● Exclusively for ongoing or future selection processes if added to our talent pool.
What is the legal basis for processing your data?
● User consent, when registering in our database for participation in active or future selection processes.
2.5. Social Media contacts
What data do we collect?
● Identification data on the social media platform. HUMAN DATA INSTITUTE, S.L. will not request additional data beyond what is included in the user's profile.
For what purposes do we process your personal data?
● To manage inquiries, requests, or communications.
● To interact with users who are part of our community of followers.
What is the legal basis for processing your data?
● Execution of a contract or pre-contract, depending on the social media platform used and its privacy policies.
3. How long do we retain your data?
3.1. Website Users
● Data processed based on user consent will be retained as long as it remains relevant to the original purpose and consent is not withdrawn.
● Data processed based on legitimate interest will be retained for the period necessary to fulfill its purpose while ensuring the protection of the rights and freedoms of data subjects.
● Data processed based on contract execution or pre-contractual measures will be retained while the contractual relationship is in effect and for any additional time required by law.
3.2. Suppliers
● Data processed based on legitimate interest will be retained for as long as necessary to fulfill its purpose, ensuring appropriate safeguards for the rights and freedoms of data subjects.
● Data processed based on a contract or a legal obligation will be retained while the contractual relationship is in effect and subsequently for the legally established retention period. In these cases, the data cannot be deleted by the data subject except under legally established blocking conditions.
3.3. Clients
● Data processed based on client consent will be retained as long as it remains relevant to the purpose for which it was collected and consent is not withdrawn.
● Data processed based on legitimate interest will be retained as long as necessary to fulfill the purpose for which it was collected while ensuring the protection of the rights of data subjects.
● Data processed based on a contract or when its processing is legitimized by a legal obligation will be retained while the contractual relationship is in effect and subsequently for the legally established period. In these cases, the data cannot be deleted by the data subject except under legally established blocking conditions.
3.4. Job Applicants and Candidates
● Data processed based on job applicant consent will be retained as long as the selection process for which they applied remains open.
● If the application is not linked to a specific selection process but is included in our candidate pool, the maximum retention period will be one year, at which point the CV will be deleted and destroyed unless the data subject requests its retention and update.
3.5. Social Media Contacts
● Data from social media contacts will be retained as long as the user and HUMAN DATA INSTITUTE, S.L. maintain a connection on the platform (for example, through the ‘follow’, ‘like’, or similar option).
● Since these data do not depend directly on HUMAN DATA INSTITUTE, S.L., rectification or deletion must be managed directly by the user through their social media profile settings.
3.6. Data Processing for Scientific, Historical, or Statistical Research
Regardless of the legal basis for data collection, these data may be processed for scientific, historical, or statistical research purposes, provided that adequate safeguards are applied and the rights and freedoms of data subjects are respected.
4. Additional information on Data Processing
● Only individuals aged 14 years or older can provide data through our website and email. If you are under this age, parental or guardian consent is required.
● The user guarantees the authenticity and accuracy of all data provided to HUMAN DATA INSTITUTE, S.L. and declares that they are 14 years or older, being solely responsible for any false or inaccurate statements.
● If a service reservation or online purchase is made, the user must be 18 years or older, as established by the Civil Code to acquire legal majority and full contractual capacity.
● The personal data processed by HUMAN DATA INSTITUTE, S.L. may be mandatory or voluntary.
● Through web forms, special category data will not be requested to guarantee privacy. If such data is necessary to provide a service, it will be requested through another channel.
● The data requested in forms include:Identification data: name, surname, phone number, postal and email address.
→ Data related to the request.
→Data from users who subscribe to receive information, commercial communications, and other notifications.
Voluntary information is not mandatory for the user to provide in order to contact us. Fields marked with an asterisk (*) or the word (required) in our forms must be completed. Refusing to provide them will result in inability to provide the service or respond to the request.If you provide data on behalf of a third party, you declare that you have their consent and commit to informing them of the information in this clause, exempting HUMAN DATA INSTITUTE, S.L. from any responsibility. Nonetheless, HUMAN DATA INSTITUTE, S.L. may conduct verifications to confirm that the third party has been informed, adopting appropriate diligence measures as required by data protection regulations.
5. Who will your aata be shared sith?
Your data will not be shared with third parties except in cases of legal obligation or when necessary to process your request.
Among the recipients of your data, we may share information with:
● Public administrations and authorities, when required by tax, labor, social security, or other applicable regulations.
● Companies that process data on our behalf, including:
→ Fraud detection and prevention providers.
→Technology service providers.
→Customer support services.
→Advertising and marketing service providers.
→In general, third-party providers essential for delivering HUMAN DATA INSTITUTE, S.L. services, such as messaging and transportation service providers.
6. Are international data rransfers made?
www.dathum.com is hosted in Ireland, a country that is part of the European Union (EU) and the European Economic Area (EEA), complying with the guidelines established in Articles 46 and 47 of the GDPR. Therefore, no international transfers of the data provided by users on the website will be made.
Our website only accesses user data through:
● Contact forms available on the website.
● Cookies that the user has previously accepted.
However, international data transfers may occur in the context of the assignments or communications mentioned above. For this purpose, HUMAN DATA INSTITUTE, S.L. will use the tools established in Articles 46 and 49 of the GDPR, ensuring data protection in case of transfers to countries that do not have an adequacy decision from the European Commission.
In any case, third parties with whom personal data is shared must first demonstrate that they have adopted appropriate technical and organizational measures to adequately protect these data. International data transfers will only be carried out when a legally binding instrument exists, in accordance with Articles 46 and following of the GDPR.
By accepting this privacy policy, the user agrees that an international data transfer may occur in compliance with the guarantees indicated. If the GDPR requirements are not met, the data subject may provide explicit consent for the transfer or a contract may be executed in their interest. Otherwise, an authorization from the Supervisory Authority will be required.
Additionally, some services provided by and for HUMAN DATA INSTITUTE, S.L. may involve the transfer of personal data to third countries outside the EU, in cloud computing services offered by international providers such as Google or Microsoft. In these cases, compliance with the aforementioned guarantees will be verified.
HUMAN DATA INSTITUTE, S.L. does not, under any circumstances, sell users' data to third parties.
7. What are your rights and how can you exercise them?
Users may exercise the following rights with HUMAN DATA INSTITUTE, S.L.:
● Access their personal data.
● Rectify data when it is inaccurate or incomplete.
● Request the deletion or cancellation of data when, among other reasons, they are no longer necessary for the purposes for which they were collected.
● Object to data processing.
● Request restriction of data processing when the conditions established by regulations are met.
● Request data portability in the cases provided by law.
● Prevent automated decision-making.
● Revoke any previously granted consent.
To exercise these rights, the user must submit a written request, indicating the specific right they wish to exercise and providing a document proving their identity, as well as a postal or electronic address for notifications.
The request may be sent by:
● Postal mail to: HUMAN DATA INSTITUTE, S.L., Agustín de Foxá 40, 28036 - Madrid (Madrid).
● Email to: hello@dathum.io.
HUMAN DATA INSTITUTE, S.L. must respond to the request within one month of receiving it. This period may be extended by two additional months if necessary, considering the complexity and number of requests. If an extension is required, the user will be informed within one month of receiving the request, stating the reasons for the delay.
Additionally, users have the right to file a complaint with the Spanish Data Protection Agency (AEPD) if they believe that HUMAN DATA INSTITUTE, S.L. has violated their rights regarding data protection. More information is available at: www.aepd.es.
8. Is my Data secure?
HUMAN DATA INSTITUTE, S.L. has a contract in place with Amazon Technologies Inc. for hosting its website.
HUMAN DATA INSTITUTE, S.L. guarantees that appropriate measures have been adopted to ensure the confidential processing of user data, considering its sensitive nature.
We commit to ensuring that user data remains confidential, treating it with the highest level of discretion. Additionally, we have implemented security policies in our information system, corresponding to the type of data processed, in compliance with Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016, concerning the protection of individuals regarding the processing of personal data and the free movement of such data (GDPR).
9. Links to other websites
If the user leaves our website through links to other websites not owned by our entity, HUMAN DATA INSTITUTE, S.L. is not responsible for the privacy policies of those websites or the cookies they may store on the user’s device.
