Privacy Policy

Data Controller Information

AICRUMIT S.L.

  • Tax ID: B01660513
  • Registered Address: CEEIM, C/ Campus de Espinardo, 7, 30.100 MURCIA (SPAIN)

Scope of Application

This Policy shall apply to:

  • Those persons who visit the AICRUMIT S.L. website (hereinafter, any reference to this shall also include its English version).
  • Those who voluntarily communicate with AICRUMIT S.L. via email, chat, or complete any of the data collection forms published on the AICRUMIT S.L. website.
  • Those who request information about AICRUMIT S.L. products and services or request to participate in any of AICRUMIT S.L.’s commercial actions.
  • Those who formalize a contractual relationship with AICRUMIT S.L. by contracting its products and services.
  • Those who use any other service on the website that involves communicating data to AICRUMIT S.L. or access to data by AICRUMIT S.L. for the provision of its services.
  • Any others who, directly or indirectly, have given their express consent for their data to be processed by AICRUMIT S.L. for any of the purposes set forth in this Policy.

The use of AICRUMIT S.L. products and services requires express acceptance of this Policy.

AICRUMIT S.L. warns that, unless there is a legally constituted representation, no user and/or client may use another person’s identity and communicate their personal data. Therefore, the data you provide to AICRUMIT S.L. must be personal data corresponding to your own identity, adequate, relevant, current, accurate, and true. In this sense, the user and/or client shall be solely responsible for any direct or indirect damage caused to third parties or to AICRUMIT S.L. by the use of another person’s data or their own data when they are false, erroneous, not current, inadequate, or irrelevant. Likewise, the user and/or client who communicates the personal data of a third party shall be responsible for having obtained the corresponding authorization from the data subject, as well as for the consequences otherwise.

Similarly, the user and/or client who communicates personal data to AICRUMIT S.L. declares that they are of legal age, in accordance with Spanish legislation, refraining otherwise from providing data to AICRUMIT S.L. Any data provided about a minor shall require the prior consent or authorization of their parents, guardians, or legal representatives, who shall be considered responsible for the data provided by the minors in their care.

This Policy shall apply subsidiarily to those other conditions on personal data protection that are established on a special basis and communicated, without limitation, through registration forms, contracts, and/or conditions of particular services, this Policy therefore being complementary to those mentioned in matters not expressly provided for therein.

Purposes of Collection and Processing of Personal Data

AICRUMIT S.L., as data controller, informs users of the existence of various processing activities and files in which the personal data communicated to AICRUMIT S.L. are collected and stored.

The purposes of such collection and processing of personal data are as follows:

  • Regarding “cookies”: The cookies used by AICRUMIT S.L. when browsing its website are stored on the user’s terminal equipment (computer or mobile device) and collect information when visiting said websites. The purpose is to improve usability, learn about users’ browsing habits or needs in order to adapt to them, and obtain information for statistical purposes. For users who are already AICRUMIT S.L. clients, the information collected through cookies will also serve to identify them when accessing the various tools that AICRUMIT S.L. makes available for service management. In any case, users can configure their browser to disable or block the receipt of all or some cookies. Not wishing to receive these cookies does not prevent access to the information on AICRUMIT S.L. websites, although the use of some services may be limited. If consent for receiving cookies has been granted and you wish to withdraw it, you must delete those stored on your device through the options of the different browsers. All information about the cookies used by AICRUMIT S.L. is published in its Cookie Policy, available at https://wetoolesg.com/cookies.
  • In the case of sending an email or communication through a contact form: The purpose of collecting and processing such data by AICRUMIT S.L. is to respond to inquiries and requests for information about AICRUMIT S.L. products and services.
  • In the case of sending an email related to job opportunities: Such data will be processed to participate in personnel selection procedures.
  • In the case of forms to participate in commercial actions: The purpose will be to enable such participation, as well as to send commercial and advertising communications about AICRUMIT S.L. services, unless the data subject expressly objects at the time of data collection. Notwithstanding the foregoing, the data subject may change their decision at any time, as many times as they wish, through the means provided by AICRUMIT S.L. for this purpose.
  • When contracting services offered by AICRUMIT S.L.: Only those personal data necessary to establish the contractual relationship and enable the provision of services and their payment by clients will be collected. Such data is collected and processed for the following purposes:
    • Main purpose: Maintaining the contractual relationship established with the client, in accordance with the nature and characteristics of the contracted services, with AICRUMIT S.L. contacting the client via email, telephone, or other means indicated by the latter.
    • Sending information and commercial communications: Sending documentation and information related to the contracted services, as well as commercial and advertising communications about the same or similar services by AICRUMIT S.L., via postal mail, email, telephone, SMS, or other means indicated by the client, unless the client expressly objects at the time of contracting. Regardless of whether the client has chosen to receive commercial information from AICRUMIT S.L. or not, the client may change their decision at any time, as many times as they wish, through the specific section available in their Client Area.
    • Historical records: Maintaining historical records of business relationships for legally established periods.
    • Acting as Data Processor: In cases where AICRUMIT S.L. must access and/or process personal data for which the client is the data controller or processor, AICRUMIT S.L. will process such data as data processor in accordance with Article 28 of the GDPR and as indicated in the section called “AICRUMIT S.L. as data processor”, included in this Policy.
    • Legal obligations (Law 25/2007): In compliance with the provisions of Law 25/2007, of October 18, on the retention of data relating to electronic communications and public communications networks, AICRUMIT S.L. informs the user that certain traffic data generated during communications will be retained and preserved, as well as, where applicable, communicated to competent authorities whenever the legal circumstances provided for in said Law arise.
    • Specific Conditions: For all other purposes expressly set forth in the Specific Conditions applicable to the corresponding product or service contracted by the client and expressly accepted by them.

Retention Period for Personal Data

AICRUMIT S.L. will retain personal data for the time strictly necessary to fulfill the purposes detailed above. AICRUMIT S.L. may keep such data duly blocked during the period in which liabilities may arise from its relationship with the client.

In the case of data subject to retention under Law 25/2007, of October 18, on the retention of data relating to electronic communications and public communications networks, the retention period shall be that detailed in said regulations.

Recipients of Personal Data

The recipients of the personal data collected by AICRUMIT S.L. are as follows:

  • AICRUMIT S.L.’s own employees in the performance of their duties.
  • AICRUMIT S.L. suppliers involved in the provision of services, if necessary for the provision thereof.
  • The companies that are part of the Group of Companies to which AICRUMIT S.L. belongs, as defined in Article 42 of the Commercial Code, whose activity is the marketing of services of an identical or similar nature to those offered by AICRUMIT S.L.
  • Judicial or administrative bodies, as well as State Security Forces and Corps, in the event that AICRUMIT S.L. is required by applicable law to provide information related to its clients and services.
  • Any others who, due to the nature of the service, must access the data provided therewith, as detailed in the Specific Conditions applicable to the corresponding product or service contracted by the client and expressly accepted by them.

User Rights and Exercise Thereof

Users may exercise at any time the following rights recognized by the GDPR:

  • Right of access: Users have the right to obtain from AICRUMIT S.L. information about whether personal data concerning them are being processed, to access them, and to obtain information about the processing carried out.
  • Right to obtain a copy of their personal data.
  • Right to rectification: Users have the right to have AICRUMIT S.L. rectify their personal data if they are inaccurate or incomplete.
  • Right to erasure: Users have the right to have their data deleted when it is no longer necessary for the purpose for which it was provided or when other legally provided circumstances exist.
  • Right to restriction of processing: Users have the right to request a restriction on the processing of their personal data, so that the processing operations that should apply in each case are not applied to them, in the cases provided for in Art. 18 of the GDPR.
  • Right to data portability: Users have the right to receive the personal data concerning them in a structured format, provided that such data relates exclusively to the user and has been provided by them.

Users may exercise these rights in the following ways:

Whether or not they are AICRUMIT S.L. clients, users may exercise their rights by sending a request accompanied by their ID card or valid legal document proving their identity, addressed to AICRUMIT S.L., C/ González Cebrián, 3. Bajo 30002 Murcia (Murcia) Spain, to the attention of the Administration Department, specifying the right they wish to exercise.

In cases of manifestly unfounded or excessive requests due to their repetitive nature, AICRUMIT S.L. reserves the right to charge a fee for the resulting administrative costs or the right to refuse to act on them, as established in Art. 12.5 GDPR.

Supervisory Authority

Users and/or clients may contact the relevant local supervisory authority if they consider that the processing of their personal data has not been carried out in accordance with current legislation.

The data protection supervisory authority in Spain is the Spanish Data Protection Agency (AEPD), whose contact details are available on its website, specifically at http://www.agpd.es/portalwebAGPD/CanalDelCiudadano/contacteciudadano/index-ides-idphp.php.

International Data Transfers

In those AICRUMIT S.L. products and services that require international transfers to enable their provision, this circumstance will be set forth in the Specific Conditions applicable to the corresponding product or service contracted by the client and expressly accepted by them prior to such transfers.

AICRUMIT S.L. as Data Processor

Pursuant to Article 28 GDPR and related provisions, AICRUMIT S.L. will process the personal data for which the client is the data controller or processor, when necessary for the proper provision of the contracted services. In such case, AICRUMIT S.L. will act as data processor, in accordance with the following terms:

  • AICRUMIT S.L. will only process the data in accordance with the instructions of the client who is the data controller or processor, not using them for any purpose other than that set forth in this data protection policy and/or the applicable contractual conditions.
  • Once the provision of services that motivate the processing of personal data has been fulfilled, these will be destroyed, along with any media or documents containing any personal data or any type of information generated during, for, and/or as a result of the provision of the services subject to the corresponding Conditions. Notwithstanding the foregoing, AICRUMIT S.L. may keep said data duly blocked during the period in which liabilities may arise from its relationship with the client.
  • In the event that AICRUMIT S.L. uses the data for another purpose or communicates or uses them in breach of this data protection policy and/or the corresponding Service Conditions, it will also be considered a data controller.
  • AICRUMIT S.L. undertakes, in accordance with Article 28 of the GDPR, to maintain due professional secrecy regarding the personal data to which it must access and/or process in order to fulfill the purpose of the applicable Service Conditions in each case, both during and after their termination, committing to use such information only for the intended purpose in each case and to require the same level of commitment from any person within its organization who participates in any phase of the processing of personal data for which the client is responsible.

In accordance with the GDPR, the following rules shall apply regarding the form and modalities of access to data for the provision of services:

  • In the event that AICRUMIT S.L. must access processing resources located at the client’s facilities, the client shall be responsible for establishing and implementing the security policy and measures, as well as communicating them to AICRUMIT S.L., who undertakes to respect them and require compliance from the persons in its organization who participate in the provision of services.
  • When AICRUMIT S.L. remotely accesses the data processing resources for which the client is responsible, the client must establish and implement the security policy and measures in its remote processing systems, with AICRUMIT S.L. being responsible for establishing and implementing the security policy and measures in its own local systems.
  • When the service is provided by AICRUMIT S.L. at its own premises, AICRUMIT S.L. will record in its Processing Activities Register the circumstances relating to the data processing in the terms required by the GDPR, including the security measures corresponding to such processing.

The access and/or processing of data by AICRUMIT S.L., without prejudice to specific legal or regulatory provisions that may apply in each case or those adopted by AICRUMIT S.L. on its own initiative, shall be subject to the necessary security measures to:

  • Ensure the permanent confidentiality, integrity, availability, and resilience of processing systems and services.
  • Restore the availability and access to personal data in a timely manner in the event of a physical or technical incident.
  • Regularly verify, evaluate, and assess the effectiveness of the technical and organizational measures implemented to ensure the security of the processing.
  • Pseudonymize and encrypt personal data, where applicable.

The client authorizes AICRUMIT S.L., as data processor, to subcontract with third parties, on behalf of and for the account of the client, the services of storage, custody of data backup copies, and security, and those necessary to enable the provision of the contracted services, in any case respecting the obligations imposed by the GDPR and its implementing regulations. At any time, the client may contact AICRUMIT S.L. to know the identity of the subcontracted entities for the provision of the indicated services, which shall act in accordance with the terms set forth in this document and after formalizing a data processing contract with AICRUMIT S.L. pursuant to Art. 28.4 of the GDPR.

The client authorizes AICRUMIT S.L. to carry out the actions indicated below, provided they are necessary for the execution of the service provision. Said authorization is limited to the action(s) necessary for the provision of each service and with a maximum duration linked to the validity of the applicable contractual Conditions:

  • To carry out the processing of personal data on portable devices only by the users or user profiles assigned to the provision of services.
  • To carry out processing outside the client’s or AICRUMIT S.L.’s premises, only by the users or user profiles assigned to the provision of services.
  • The entry and exit of media and documents containing personal data, including those contained in and/or attached to an email, outside the premises under the control of the client as data controller.
  • The execution of data recovery procedures that AICRUMIT S.L. is obliged to carry out.

AICRUMIT S.L. is not responsible for the breach of obligations arising from the GDPR or relevant data protection regulations by the user and/or client in relation to their activity and related to the execution of the contract or business relationships with AICRUMIT S.L. Each party shall be liable for its own breach of contractual obligations and the regulations themselves.

Information on Data Protection

  • Purposes: Respond to your requests and send you commercial information about our product, including by email.
  • Legal basis: Consent of the data subject.
  • Recipients: No data transfers are planned.
  • Rights: You may withdraw your consent at any time, as well as access, rectify, delete your data, and exercise other rights at info@aicrumit.com.
  • Additional Information: You can find more information in the Legal Notices link.