Legal Notice and Privacy Policy

1 General Information

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, GDPR), we inform you that the entity responsible for the processing of personal data collected through VestaPlatform is:

2 Purpose of Personal Data Processing

The personal data we collect through VestaPlatform will be used for the following purposes:

• Management of commercial relationships with clients, users and suppliers
• Sending commercial communications, promotions and offers related to our products or services (provided you have given your explicit consent)
• Conducting satisfaction surveys or market studies
• Administrative and operational management of the services provided
• Compliance with legal obligations applicable to the company

3 Types of Data Collected

The personal data we collect includes, among others:

• Identification data: Name, surname, address, email, telephone number
• Professional contact data: Company name, job position, sector, etc.
• Information about products and services purchased
• Information related to interactions made through the CRM

4 Legal Basis for Data Processing

The processing of your personal data is based on several legal bases:

• Consent: If you have given us your explicit consent to send commercial communications or conduct surveys
• Contract performance: When processing is necessary for the performance of a contract to which you are a party (e.g., management of the commercial relationship)
• Compliance with a legal obligation: When processing is necessary to comply with a legal obligation to which we are subject
• Legitimate interest: In some cases, processing may be based on the company's legitimate interest to manage the commercial relationship, always respecting your rights and freedoms

5 Data Recipients

Personal data will not be transferred to third parties, except in the following cases:

• Service providers: Companies that provide support services to the CRM, such as hosting providers, email services, etc., acting as data processors
• Legal requirements: When necessary to comply with legal obligations or to respond to requests from competent authorities

6 International Data Transfers

In the event that data is transferred outside the European Economic Area (EEA), we will ensure that adequate measures exist for the protection of personal data, such as standard contractual clauses or an adequacy decision by the European Commission.

7 Data Retention Period

Personal data will be retained for as long as necessary to fulfill the purposes for which it was collected, and in any case, for the time established by applicable legislation. In particular:

• Commercial data: Will be retained for the duration of the contractual relationship and, once concluded, for the legal prescription periods for liabilities
• Marketing data: Will be retained until you withdraw your consent or request deletion

8 User Rights

In accordance with the GDPR, you have the following rights regarding your personal data:

• Right of access: You can request information about the personal data we have about you
• Right of rectification: You can request the correction of incorrect or incomplete personal data
• Right of erasure: You can request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected or if you withdraw your consent
• Right to restriction of processing: You can request that the processing of your data be limited in certain circumstances
• Right to object: You can object to the processing of your personal data for legitimate reasons related to your particular situation
• Right to data portability: You can request the transfer of your data to another data controller in a structured, commonly used and machine-readable format

To exercise these rights, you can contact us at support@vestaplatform.es or by sending a written request to our address: 1209 Mountain Road Pl NE Ste N, Albuquerque, NM 87110, United States.

9 Data Security

We adopt the necessary security measures to protect personal data against unauthorized access, alteration, disclosure or destruction. These measures include physical, electronic and procedural controls appropriate to the nature of the data.

10 Changes to the Legal Notice

This legal notice may be modified at any time to adapt it to legislative changes or changes in processing conditions. Any changes will be notified by email or publication on the website.

11 Applicable Law and Jurisdiction

This legal notice is governed by the legislation of the European Union (especially the GDPR), as well as by Spanish legislation (if applicable). Any dispute arising from this legal notice will be resolved by the competent courts of Albuquerque, New Mexico, United States, waiving any other jurisdiction that may correspond to them.