Privacy Policy
From MIRAI ADVISORY, S.L. (hereinafter, “MIRAI” or the “Controller”), we want to give you all the details about how we process the personal data you provide to us when interacting with us through our website. Thus, this privacy policy applies to all personal data provided to us by any means, specifically in places where there is a reference to this policy, including the forms provided on this website.
For us, privacy is an essential value, and following the provisions of both Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”) and Spanish Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (“LOPDGDD”), below we provide you with both basic information and developed information on the processing of your data.
1. Basic information about how we process your data.
| Data Controller | Company name: MIRAI ADVISORY, S.L. Spanish Tax ID num. B-86759743. Registered office: Ponce de León 2, 1ºC, 28010, Madrid, Spain. Email: gdpr@mirairisktech.com DPO contact: dpo@mirairisktech.com |
|---|---|
| Purposes of the processing |
|
| Lawfulness of the processing | The processing is based on your consent, validly given by accepting the checkbox indicated in the various forms of contact with us, by contacting us directly through the means indicated, or by accepting the installation of cookies on the website. We also rely on our legitimate interest to send information about Mirai's services. |
| Transfer of personal data – international data transfers | Your data may be communicated to our collaborators in case it may be necessary and to public authorities in case of legal obligation of the controller or request by such authority. No international transfers of personal data are foreseen. |
| Retention period |
|
| Data subject’s rights | You can exercise your rights of access, rectification, erasure, and portability of your data, of restriction and objection to their processing, as well as not to be subject to decisions based solely on the automated processing of your data, where appropriate, by sending an email to the address gdpr@mirairisktech.com or through the postal address indicated at the beginning of the text. |
| Data Protection Authority | If you do not agree with MIRAI's processing of your data or its performance regarding data access requests, you can file a complaint with the Spanish Data Protection Authority (www.aepd.es). |
The data that you decide to provide us with through any of the enabled means, you provide them freely, and you accept that this personal data is subject to the corresponding processing in each case depending on the purpose for which you have provided them to us and thanks to your freely given consent.
Per the GDPR, below we provide you with the information regarding the processing of your data that we will carry out more extensively so that you have all the necessary information to give us your valid consent. Therefore, it is essential that you carefully read the information detailed below.
2. What are the purposes for which we process your data, and what personal data do we process?
We use the personal data that you provide to us through the different forms of contact that we offer on our website for the following purposes:
- To manage and improve the website and the services provided through it, including the installation of cookies if you accept it.
- To enable you to contact us and send us queries or requests for information, including receiving your CV to apply to our job offers.
- To book and enable a demo of our platform.
- To evaluate the CVs submitted and to manage our job offers, including contacting candidates.
- To manage the attendance at our events and webinars.
- Through the form “Subscribe to the newsletter”, to receive information that may be of interest to you.
- To send our newsletter and information about Mirai’s services to the attendees of our events and webinars
3. Under what legal basis do we use your personal data?
The legal basis for the processing of your data will be consent, as provided in Article 6.1. a) GDPR.
We need to process your personal information in order to respond to the request for communication or contact sent or to carry out the purpose of any of the forms provided for this purpose. In the same way, and where appropriate, you consent to the use of the installation of cookies on your device.
We also rely on our legitimate interest to send our newsletter and information about Mirai’s services to the attendees of our events and webinars. Such legitimate interest is based on Article 21.2 of the Spanish Law 34/2002 of 11 July 2002 on information society services and electronic commerce. We will only rely on it if we have a prior commercial relationship with the subjects to whom this information is sent, always offering the possibility to opt out of receiving these communications.
4. Who do we share your data with?
Your personal data may be communicated to our collaborators, legal and finance advisors as well as public authorities if we must comply with a legal obligation or if we receive a request from such authorities.
No international data transfers are foreseen.
In case there is a communication of data, we will ensure that the processing of data is in full compliance with the law, entering into all necessary agreements to ensure that the flow of personal data guarantees the confidentiality, integrity, and availability of our users, clients, and partners.
5. How long will we keep your data
We will keep the data as long as necessary to fulfill the purpose for which they were collected, to ensure the provision of the service and comply with our legal obligations, or until you withdraw your consent.
- For queries or communications sent through the means of contact established for this purpose, we will process the information while they are active.
- We will keep your CV for a period of 2 years if you deem it appropriate and authorize us to do so through the communication methods MIRAI uses to contact you.
- In the case of sending our newsletter or publishing your comments on our blog, if you do not withdraw your consent.
- As for the duration of the installation of cookies, you can find all the information related to it in our Cookies Policy.
- Once deleted by appropriate security measures, we will keep them properly blocked for the time necessary to respond to future claims and defend our interests.
6. How do we keep your data?
In compliance with our obligation of secrecy regarding the personal data collected, as well as our duty to safeguard them, we undertake to adopt the necessary security measures to prevent their modification, alteration, loss, unauthorized access, or processing in accordance with the provisions of the GDPR.
At MIRAI, we recognize and take very seriously our responsibility to protect your data. That is why we maintain security levels of personal data protection per the GDPR and we have established all the technical means at our disposal to prevent the loss, misuse, alteration, unauthorized access, and theft of the data you have provided, without prejudice to inform you that Internet security measures are not 100% invulnerable.
7. How do we ensure the protection and privacy of your data?
To safeguard the security of your personal data, we have implemented the necessary technical and organizational measures to ensure its protection. These actions are designed to prevent alterations, losses, unauthorized processing, or access to your personal data.
8. How can you manage the processing of your data?
You can exercise your rights of access, rectification, erasure, and objection, as well as those of restriction of the processing and portability, at any of the addresses we have given you at the beginning or at the email address gdpr@mirairisktech.com, indicating what action on our part you are requesting.
The exercise of all these rights is free of charge, and for the sake of transparency, we provide more information about these rights:
| Right | Purpose |
|---|---|
| Access | You can request information about what data we process about you, either by referring to the totality of the information or to specific data. |
| Rectification | One of the principles of the applicable regulations is the accuracy of the data, so you can request its rectification at any time in order to keep them properly updated. |
| Erasure | You can request the deletion of personal data, which will also be deleted if they are no longer necessary for the purpose for which it was collected or when you exercise your right to object to it. Except if they are necessary for compliance with a legal obligation, public interest, or for the exercise or defense of possible claims. The consequence of the deletion of the data will be the impossibility of the correct provision of services by MIRAI. In the case of sending CVs, the deletion of the data will mean that you can not be considered for selection processes. |
| Objection | In certain circumstances and for reasons related to your situation, you may object to the processing of your data. MIRAI will stop processing the data except for compelling legitimate reasons, for the exercise or defense of possible claims, or to comply with our legal obligations. |
| Restriction of the processing | In certain circumstances, you may request to restrict the processing of your data, in which case we will only retain it to comply with our legal obligations. |
| Portability | You can receive, in the most appropriate format in each case, the personal data you have provided to us. |
| Consent withdrawal | You may withdraw your consent at any time without affecting the lawfulness of the processing. If you request cancellation of your data, we will stop processing your data, but please note that we will no longer be able to provide you with services and that, in certain cases where we have the relevant legal basis, we will continue to process your information after you have withdrawn your consent and requested deletion of your information |
The exercise of all these rights is free of charge and for the sake of transparency, we provide more information about such rights.
Additionally, you may contact our Data Protection Officer by sending an email to the address dpo@mirairisktech.com.
If you believe that MIRAI may have infringed your data protection rights, you can contact the Spanish Data Protection Agency (www.aepd.es). Nevertheless, we would like you to contact us first to resolve any dispute relating to the processing of your personal data before initiating any proceedings.
9. Modification of this personal data policy
MIRAI reserves the right to modify this policy to adapt it to future legislative developments, as well as to industry practices, by previously informing users through our website. We recommend that you consult this page from time to time to review the most recent version. At the bottom of this document, we indicate the date of the last update. The new privacy notice will be effective from the time of its publication.
In no event will such changes affect any choices you have made about how MIRAI may process your personal information. If at any time we wish to use your data in a manner different from that established at the time of collection, we will notify you by e-mail, requesting your consent.
Likewise, MIRAI reserves the right to terminate the services it provides to those users who do not comply with the legal terms and conditions of use, as well as with current legislation.
Latest version of the Privacy Policy: October 2024