Privacy Policy

01Identity of the data controller

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR), as well as Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD), users are informed of the following details of the data controller:

Hereinafter, "Winner Partners".

02Scope of application

This Privacy Policy governs the processing of personal data provided by users through the website, contact forms, requests for information, service contracting, commercial meetings, electronic communications or any other channel enabled by Winner Partners.

Use of the services implies acceptance of this Privacy Policy.

03Categories of data processed

Winner Partners may process the following categories of personal data:

Identifying data

• First and last name.
• Company.
• Professional position.
• Email address.
• Phone number.

Commercial and contractual data

• Information relating to the contracting of services.
• Communication history.
• Data necessary for administrative and commercial management.

Financial and billing data

• Tax address.
• Tax ID (NIF/CIF).
• Billing and payment information.

Browsing data

• IP address.
• Device identifiers.
• Cookies and similar technologies.
• Statistical data on the use of the website.

Winner Partners does not deliberately request or process the special categories of personal data defined in article 9 of the GDPR.

04Purposes of processing

Personal data will be processed for the following purposes:

Provision of services

To manage the contracting, execution, monitoring and correct provision of the services offered by Winner Partners.

Customer service and support

To manage queries, requests for information, incidents, meetings, technical support and communications arising from the professional relationship.

Administrative, tax and accounting management

To comply with the legal, tax, commercial and administrative obligations arising from the business activity.

Commercial communications

To send information about services, events, content, updates, training or resources related to Winner Partners' activity, provided that there is consent or a legal basis that allows it.

Improvement of products and services

To carry out statistical analysis, satisfaction studies and actions aimed at improving the quality of the services provided.

Security and fraud prevention

To guarantee the security of the platforms used and to prevent unauthorized access, fraudulent use or unlawful activities.

05Legal basis for processing

The legal bases that legitimize the processing of data are:

Performance of a contract

When processing is necessary for the provision of the contracted services or for the application of pre-contractual measures requested by the user.

Consent

When the user voluntarily provides their data through forms or expressly authorizes certain communications.

Compliance with legal obligations

When processing is necessary to comply with tax, accounting, commercial or regulatory obligations.

Legitimate interest

When there is a legitimate interest of Winner Partners to improve its services, ensure the security of its systems or maintain commercial relationships with clients and potential clients.

06Recipients and data processors

To carry out its activity, Winner Partners may rely on specialized providers that act as data processors and that may access personal data solely for the provision of the contracted services.

Among others, the following platforms may be used:

As well as equivalent analytics, automation and business management tools.

All providers are selected under appropriate regulatory compliance and security criteria.

07International data transfers

Some of the technology providers used by Winner Partners may be located outside the European Economic Area (EEA).

When this occurs, Winner Partners will adopt the appropriate safeguards required by the GDPR to ensure a level of protection equivalent to the European one, including:

• Standard Contractual Clauses approved by the European Commission.
• Adherence to the EU-U.S. Data Privacy Framework, where applicable.
• Any other legally recognized mechanism to legitimize such transfers.

08Data retention period

Personal data will be kept for as long as is strictly necessary to fulfill the purposes for which it was collected.

In general:

• For as long as there is an active contractual or commercial relationship.
• For the periods required by applicable tax, commercial or administrative regulations.
• Until consent is withdrawn when processing is based on it.

Once these periods have ended, the data may remain duly blocked during the legally established periods before its definitive deletion.

09Rights of data subjects

The user may exercise the following rights at any time:

• Right of access.
• Right of rectification.
• Right of erasure.
• Right to object.
• Right to restriction of processing.
• Right to data portability.
• Right to withdraw consent given.
• Right not to be subject to automated decisions where applicable.

The request must clearly identify the right to be exercised, and proof of identity may be required when necessary.

10Complaints before the supervisory authority

If the user considers that their rights have been infringed or that the processing of their data does not comply with current regulations, they may file a complaint with the competent authority.

In Spain, this authority is:

11Information security

Winner Partners adopts the appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure or accidental or unlawful destruction.

However, the user acknowledges that no transmission of information over the Internet can guarantee absolute security.

12Modifications to the Privacy Policy

Winner Partners may update this Privacy Policy to adapt it to legislative, regulatory, jurisprudential or business changes.

The version in force will always be the one published on this website and will replace any previous version from the moment of its publication.

Users are advised to periodically review this document to stay informed about how their personal data is protected.