Human Affinity Platform, S.L., a company based in Calle Fuencarral 135, 6º ext. Left, with NIF B87794384, (hereinafter, “Kymatio” or the “Company”) is responsible for the processing of your personal data. This privacy policy provides information regarding the processing of personal data of representatives of clients or potential clients, candidates for jobs, representatives of suppliers or users of social networks that interact with us, following the provisions of the General Regulations of Data Protection (“RGPD”).

You can contact us by writing an email to privacy@kymatio.com to resolve any questions you may have regarding this policy. In case you want, you can request a list of recipients of your data at the same email address.

Kymatio has a Data Protection Delegate, responsible for responding to any concerns that may arise to our users regarding the protection of their personal data and our practices in this regard. In addition, you can contact our Data Protection Delegate to exercise any of your data protection rights and to suggest any action related to this area.

To contact our Data Protection Delegate, please, write an email to [privacy@kymatio.com] with your request and we will respond as soon as possible.

If you are a representative of a Kymatio client company because you have any of our services, we will treat your information as indicated below:

• Purpose of the treatment: We treat your data to maintain, fulfill, develop, control and execute the commercial relationship that we maintain with our client, for which you work or with you in case you are autonomous, for being a Kymatio client. In addition, we can send you commercial communications about our services, to keep you informed about news that are of interest to you, based on a previous profile of your interests and / or navigation on the web. This profiling is obtained thanks to a study of your navigation (visits to each page, time of the visits, recurrence of the same, etc.) and your preferences when using our services. We carry out this profiling to ensure that when we offer you any promotion or inform you about our services, our communications will really be of your interest and will be related to your use of our website or our services. In this way, we want to make sure that you will only receive advertising based on what really matters to you, and that you will not receive information about matters that do not interest you.

• Types of data that will be processed: Those requested in the form that you must fill out, identifying data (name and surname, email), navigation data on the web, information about your browsing preferences and about the interests that you have indicated or may infer from your browsing habits.

• Legal basis of the treatment: The treatment of your data is necessary to execute our contractual relationship (for example, for the management of the provision of services to the company in which you work). Regarding the sending of commercial communications, Kymatio has a legitimate interest in maintaining contact with you to inform you of our news that may be of interest to you.

• Recipients of your data: Only some of our technology and management service providers will have access to your personal data. In order to execute the service they provide us, they must access the data of our clients (for example, the agency or the hosting service). These service providers will process your data according to our instructions and always under our control. We will also share your data with other companies in the group, with the legal basis of legitimate interest in managing suppliers in a common way.

• International data transfers: In order to provide you with the service, we use the services of technological providers that need access to your personal data from the United States, always following our instructions. These providers adhere to the framework of the Privacy Shield, an agreement signed between the United States and the European Union whereby the American entities adhering to the program guarantee that they apply the same data protection standards as European companies. You can request an updated list of these recipients by writing an email to the address privacy@kymatio.com.

In addition, your data can be transferred to technology providers located in countries outside the European Union (“EU”). You can request an updated list of these recipients by writing an email to the address privacy@kymatio.com.

These international data transfers will be made on the basis of the signature of the standard contractual clauses drafted by the European Commission to regulate this type of international relations, in accordance with the provisions of Article 46.2 of the General Data Protection Regulations. You can request a copy of the standard contractual clauses by writing an email to the address privacy@kymatio.com.

• Period of conservation of your data: Your data will be kept during the execution and maintenance of our contractual relationship. Regarding the sending of commercial communications, your data will be kept for as long as you want it to be, since you can request at any time that we stop sending these communications, through the link included for that purpose in all our advertising communications. In case you do not interact with our commercial emails for 18 months (understanding to interact as the opening of the email), we will proceed to the deletion of your data for this purpose.

• Mandatory data: It is mandatory to provide us with the information requested in the fields marked with a * in the data collection form, since Kymatio needs to know this information to provide the service with all the guarantees. Failure to provide this information would mean that Kymatio could not provide the service optimally.

restación de esa información supondría que Kymatio no podría prestarte el servicio de manera óptima. 

If you are not yet a Kymatio customer, but you want to receive our communications informing you of news, offers, campaigns, launches, etc., we will treat your information as indicated below:

• Purpose of the treatment: We treat your data to keep you informed about our news and offers that are of interest to you

• Types of data that will be treated: Identifying data (email address, name and surname), web browsing information, information about your browsing preferences

• Legal basis of treatment: Your express consent, which you will demonstrate by checking the specific box that indicates it.

• Recipients of your data: Only some of our technology service providers will have access to your personal data that, in order to execute the service they provide us, they must access the data of our clients. These service providers will process your data according to our instructions and always under our control.

• International data transfers: In order to provide you with the service, we use the services of technological providers that need access to your personal data from the United States, always following our instructions. These providers adhere to the framework of the Privacy Shield, an agreement signed between the United States and the European Union whereby the American entities adhering to the program guarantee that they apply the same data protection standards as European companies. You can request an updated list of these recipients by writing an email to the address privacy@kymatio.com.

• Period of conservation of your data: Your data will be kept for as long as you wish it to be, since you can request at any time that we stop sending these communications, through the link included for that purpose in all our advertising communications. In case you do not interact with our commercial emails for 18 months (understanding to interact as the opening of the email), we will proceed to the deletion of your data.

• Mandatory data: It is obligatory to provide us with the requested information in the fields marked with a * in the data collection form, since Kymatio needs to know this information to send you commercial communications. The non-provision of this information would mean that Kymatio could not send you commercial communications in an optimal way.

In case you have made a query to Kymatio, we will treat your information as indicated below:

• Purpose of the treatment: We treat your data to resolve the question or question that you have raised.

• Types of data that will be treated: Email address and name and surname.

• Legal basis of treatment: Kymatio has a legitimate interest in answering any question that a person may ask.

• Recipients of your data: Only some of our technology service providers will have access to your personal data that, in order to execute the service they provide us, they must access the data of our clients. These service providers will process your data according to our instructions and always under our control.

• International data transfers: In order to provide you with the service, we use the services of technological providers that need access to your personal data from the United States, always following our instructions. These providers adhere to the framework of the Privacy Shield, an agreement signed between the United States and the European Union whereby the American entities adhering to the program guarantee that they apply the same data protection standards as European companies. You can request an updated list of these recipients by writing an email to the address [email address that will receive the data protection queries].

In addition, your data can be transferred to technology providers located in countries outside the European Union (“EU”). You can request an updated list of these recipients by writing an email to the address privacy@kymatio.com.

These international data transfers will be made on the basis of the signature of the standard contractual clauses drafted by the European Commission to regulate this type of international relations, in accordance with the provisions of Article 46.2 of the General Data Protection Regulations. You can request a copy of the standard contractual clauses by writing an email to the address privacy@kymatio.com.

• Period of conservation of your data: Your data will be kept for this purpose until we solve your query.

• Mandatory data: It is mandatory to provide us with the requested information in the fields marked with a * in the data collection form, since Kymatio needs to know this information to answer any question you may ask us. The non-provision of this information would mean that Kymatio could not answer your questions or questions optimally.

If you are a job candidate in Kymatio and you have sent us your CV, we will process your information as indicated below:

• Purpose of the treatment: We treat your data to study your candidacy, present or future, to a job in Kymatio.

• Types of data to be processed: Identifying data (DNI / NIF, name and surname, address, telephone, e-mail, signature, image, date and place of birth) employment data and academic and professional data.

• Legal basis of treatment: Your express consent, which you will demonstrate by checking the specific box that indicates it.

• Recipients of your data: Only some of our technology service providers will have access to your personal data that, in order to execute the service they provide us, they must access the data of our clients. These service providers will process your data according to our instructions and always under our control.

• International data transfers: In order to provide you with the service, we use the services of technological providers that need access to your personal data from the United States, always following our instructions. These providers adhere to the framework of the Privacy Shield, an agreement signed between the United States and the European Union whereby the American entities adhering to the program guarantee that they apply the same data protection standards as European companies. You can request an updated list of these recipients by writing an email to the address privacy@kymatio.com.

In addition, your data can be transferred to technology providers located in countries outside the European Union (“EU”). You can request an updated list of these recipients by writing an email to the address privacy@kymatio.com.

These international data transfers will be made on the basis of the signature of the standard contractual clauses drafted by the European Commission to regulate this type of international relations, in accordance with the provisions of Article 46.2 of the General Data Protection Regulations. You can request a copy of the standard contractual clauses by writing an email to the address privacy@kymatio.com.

• Period of conservation of your data: Your data will be kept for a year since you sent the curriculum to Kymatio.

• Mandatory data: It is mandatory to provide us with the information requested in the fields marked with a * in the data collection form, since Kymatio needs to know this information to assess your candidacy for a job. The non-provision of this information would mean that Kymatio could not evaluate your application for a job optimally.

If you are a user of a social network and you interact with a Kymatio profile or page, we will process your information as indicated below:

• Purpose of the treatment: We treat your data in order to interact with you in a normal way according to the policies of the social network, and to manage our virtual communities according to the policies of each social network and our interests (both yours and ours).

• Types of data that will be treated: Name and surname and nick of the user in the social network

• Legal basis of the treatment: We have a legitimate interest to treat your data within the functioning of the social network to resolve queries, doubts, etc. that you pose to us through the social network, as well as to interact with you within the normal functioning of the social network.

• Recipients of your data: No third party will have access, through Kymatio, to your user data of the social network.

• Period of conservation of your data: We will keep your data only during the time necessary to resolve your doubt, or during the time that our interaction lasts. Keep in mind that, although we will not specifically store this data, your data may remain in the social network according to the operating policy of each specific social network.

If you are a representative of a supplier company of Kymatio because you have any of our services, we will treat your information as indicated below:

• Purpose of the treatment: We treat your data to maintain, fulfill, develop, control and execute the commercial relationship that we maintain with our supplier, for which you work or with you in case you are autonomous, as a Kymatio client.

• Types of data that will be treated: Those requested in the form that you must fill out, identifying data (name and surnames, email) and employment and academic and professional data, among others.

• Legal basis of the treatment: The treatment of your data is necessary to execute our contractual relationship (for example, for the management of the services provided by the company in which you work).

• Recipients of your data: Only some of our technology and management service providers will have access to your personal data. In order to execute the service they provide us, they must access the data of our clients (for example, the agency or the hosting service). These service providers will process your data according to our instructions and always under our control. We will also share your data with other companies in the group, with the legal basis of legitimate interest in managing suppliers in a common way.

• International data transfers: In order to provide you with the service, we use the services of technological providers that need access to your personal data from the United States, always following our instructions. These providers adhere to the framework of the Privacy Shield, an agreement signed between the United States and the European Union whereby the American entities adhering to the program guarantee that they apply the same data protection standards as European companies. You can request an updated list of these recipients by writing an email to the address privacy@kymatio.com.

In addition, your data can be transferred to technology providers located in countries outside the European Union (“EU”). You can request an updated list of these recipients by writing an email to the address privacy@kymatio.com.

These international data transfers will be made on the basis of the signature of the standard contractual clauses drafted by the European Commission to regulate this type of international relations, in accordance with the provisions of Article 46.2 of the General Data Protection Regulations. You can request a copy of the standard contractual clauses by writing an email to the address privacy@kymatio.com.

• Period of conservation of your data: Your data will be kept during the execution and maintenance of our contractual relationship.

• Mandatory data: It is mandatory to provide us with the information requested in the fields marked with a * in the data collection form, since Kymatio needs to know this information to provide the service with all the guarantees. Failure to provide this information would mean that Kymatio could not provide the service optimally.

You will be able to exercise the following rights before Kymatio:

• Right of access to your personal data to know which are being treated and the treatment operations carried out with them;

• Right to rectify any inaccurate personal data;

• Right to delete your personal data, when this is possible;

• Right to request the limitation of the processing of your personal data when the accuracy, legality or necessity of the data processing is doubtful, in which case, we can keep the data to keep them for the exercise or the defense of claims.

• Right to oppose the processing of your data to resolve any question that you have raised through the contact form, email or chat, as well as the processing of your data through a social network or if you are a representative or contact at a provider of Kymatio.

• The right to withdraw your consent for the receipt of commercial communications at any time, through the link included for that purpose in each commercial communication.

• Right to the portability of your personal data, when you are a client of Kymatio and in relation to the treatment intended to maintain our contractual relationship. Portability consists in receiving the personal data that you have provided to Kymatio in a structured format, of common use and mechanical reading, and to transmit the data to another data controller when the processing is carried out by automated means.

You can exercise your rights at any time for free by writing an email to the following email address: [email address that will receive inquiries about data protection]. You must specify what right you wish to exercise, as well as your identifying information. In case, to verify your identity, we need additional data to which you provide, we will let you know.

If you believe that Kymatio has committed an infringement of the personal data protection legislation, please do not hesitate to contact us at the email address privacy@kymatio.com, telling us your opinions, so that we can solve the problem as soon as possible. In any case, you can also inform the Spanish Agency for Data Protection (www.aepd.es) and claim protection from your rights before this agency.