Privacy Policy
Last review: September 9, 2024
Privacy / Data Protection Policy
1. Who is the controller of your personal data?
The data controller for your personal data is REVO Systems, S.L. (CIF: B66353780) C/ Bruc 23, 1er piso 08241 – Manresa (Barcelona). Email: ib_dpo@cegid.com.
2. Who is our Data Protection Officer?
REVO Systems, S.L. has appointed a Data Protection Officer (DPO) in order to ensure the correct functioning of this “Privacy Policy” and to ensure that its requirements are preserved in relation to the personal data of users internal and external to the organization. You can contact our DPO at ib_dpo@cegid.com.
In the event that REVO Systems, S.L. identifies a personal data security breach, the users will be informed as soon as possible, and in the event that this breach implies a significant risk, the competent authority will also be informed.
3. For what purposes will we continue to process your personal data?
We process the personal data of our contacts, clients and suppliers for the purpose of managing the business relationship with our organization and, in particular, contractual aspects, in the event that you have authorized us to do so or once you are already a customer of REVO Systems, S.L. In addition, we use it for the sending of information about our organization and sector, the organization of activities, campaigns or events, market studies, user satisfaction analyses and the sending of informative and commercial communications (including electronically through any of its channels).
4. For how long do we keep your personal data?
REVO Systems, S.L. will keep your personal data as long as they are necessary for the purpose for which they were collected (the contractual provision of our relationship and/or sending commercial communications by electronic means), unless you request their erasure. In this case, or once the contractual relationship that binds you to REVO Systems, S.L. has ended, the organization will keep them duly blocked for as long as any type of liability may arise. Once the purposes for which your data were obtained have been finalized, or you as the interested party have exercised your right of erasure, and the legally established period has passed according to current legislation, your data will be destroyed with all the necessary security measures to prevent any subsequent access to this information.
The legal terms are as follows: for six (6) years in accordance with current accounting regulations and, where applicable, for ten (10) years in accordance with regulations on the prevention of money laundering.
5. On what legitimate basis do we process your personal data?
The legitimate basis for processing your personal data is the contractual relationship and in the case of sending commercial communications, the consent of the user and/or the legitimate interest of REVO Systems, S.L.
6. To whom will your personal data be disclosed?
Your data may be disclosed solely to other organizations within the group, to third-party organizations linked to REVO Systems, S.L., all of which are specified in the contract signed with the user, as part of the management of your products and/or services for the execution of the contract, as well as to the competent Public Administrations when so required by the regulations in force.
Third-party companies whose intervention is required and/or necessary for the correct management of the service provision—with which the corresponding data processor contract has been signed—can access your data. REVO Systems, S.L. has established agreements or contractual arrangements and security measures with third parties to ensure the appropriate level of security and protection of personal data along the respective chain.
Our servers containing business data information from clients who use our in-cloud solutions (apps) are stored in the Google Cloud Platform (GCP, Belgium). Similarly, the provider uses certain tools to provide services necessary for the activity to be carried out, and may store your data. These tools are as follows:
Google Analytics: to perform an analysis and metrics through cookies of how users use the website. The information generated and collected by these cookies on your use (including your IP address) will be transmitted to and stored by Google Inc., Delaware, 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States (“Google”), on its servers in the United States.
Email Marketing: used for the email marketing service: The information will, in this case, be transmitted and archived by MailChimp, The Rocket Science Group LLC, 675 Ponce De Leon Ave NE Ste 5000 Atlanta, GA, 30308-2172 United States.
7. What are your rights with regards to your personal data?
You may exercise your rights of access, rectification, erasure, restriction of processing, portability and objection to the processing of your personal data at any time. You may withdraw your consent to the sending of commercial communications and exercise the rights mentioned above by sending an email to ib_dpo@cegid.com.
If you do not receive a satisfactory response and wish to file a complaint or obtain further information regarding any of these rights, you may contact the Spanish Data Protection Agency (www.aepd.es).
8. What type of personal information is stored?
With regards to our ERP, in order to create invoices, basic identification and relationship data is stored, such as name, sending address, NIF/CIF (Tax ID Number), bank account number, whether the client would like to set up a direct debit, etc.
The information hosted on our Google Cloud Platform—GCP—servers (Belgium), contains business data information: username and password (Bcrypt), the information associated with the billing of the business, your tax address, your email address and full name.
9. What security measures do we implement?
REVO Systems, S.L. has adopted all the technical and organizational measures and all the necessary levels of protection to guarantee the security in data processing and to prevent them from being altered, lost, stolen, processed or accessed without authorization, in accordance with the state of technology and the nature of the data stored, including encrypting client/user data, thereby rendering the personal data unintelligible to anyone who is not authorized to access them. REVO Systems, S.L. has carried out and maintains an updated risk analysis of the vulnerability of personal data and its impact on the security of the clients’/users’ privacy.
10. What is the data cancellation policy?
REVO Systems, S.L. disables the accounts of clients/users who decide to unsubscribe and who have exercised their right to erasure. In this case, the data belonging to the client/user will be blocked and kept for the time required by regulations, for the sole purpose of complying with the legal obligations that justify the past relationship between the parties.
11. Changes to this Privacy Policy
REVO Systems, S.L. reserves the right to amend this policy to adapt it to new legislation or jurisprudence.
12. Social networks
You are informed that REVO Systems, S.L. may have a presence on social networks. The processing of data from people who become followers on social networks (and/or perform any link or action of connection through social networks of the official websites of REVO Systems, S.L.) will be governed by this clause, as well as for the conditions of use, privacy policies and access regulations that belong to the social network that applies in each case and accepted previously by the user.
REVO Systems, S.L. will process your data for the purposes of correctly managing its presence on the social networks, informing of activities, products or services of the provider, as well as for any other purpose permitted by the regulations of the social networks.
It is prohibited to publish any content:
That is presumed to be unlawful under national, community or international regulations or engages in activities that are suspected of being unlawful or of contravening the principles of good faith.
That violates the fundamental rights of persons, lacks online decorum, disturbs or may generate negative opinions in our users or third parties and in general any content that REVO Systems, S.L. deems inappropriate.
That in general contravenes the principles of legality, honesty, responsibility, protection of human dignity, protection of minors, protection of public order, protection of privacy, consumer protection, and intellectual and industrial property rights.
Similarly, REVO Systems, S.L. reserves the right to remove—without prior notice—from the website or the corporate social network any content that is deemed inappropriate.
In any case, if you send personal information through the social network, REVO Systems, S.L. will be exempt from liability in relation to the security measures applicable to this platform. The user should consult the corresponding particular terms and conditions of the network in question if they wish to know them.
13. Sending a résumé
If the user sends their résumé through our website, they are informed that the data provided will be processed in order to make them part of the selection processes that may take place, and an analysis of the applicant’s profile will be carried out with the aim of selecting the best candidate for the vacant Manager’s position. You are informed that this is the only official procedure we use to accept your résumé, thus résumés submitted by any other procedure will not be accepted. In the event of any changes in the data, please inform us in writing as soon as possible, in order to keep your data up-to-date.
The data will be kept for a maximum period of one year, after which the data will be deleted, guaranteeing total respect for confidentiality both in the processing and in their subsequent destruction. In that regard, after this period, and if you wish to continue participating in the selection processes for the position of Manager, please send us your résumé again.
14. Legislation
In general, the relationship between REVO Systems, S.L. and Users of its telematic services, present on this website, are subject to Spanish legislation and jurisdiction to which the parties expressly submit themselves, and the courts of Manresa (Barcelona) will be empowered to resolve all disputes arising from or related to its use.