Privacy policy.

1. Data controller

The controller of the personal data collected through this website is Elenco Audiovisión, S.L. ("Elenco"), Spanish tax ID (NIF) B-81882649, with registered office at Avda. Prado del Espino, 5, Nave 1-3, 28660 Boadilla del Monte (Madrid), Spain, registered with the Madrid Companies Registry, volume 12,613, folio 35, section 8, sheet M-201663. Email: elenco@elenco.es. Telephone: +34 91 632 60 70.

For any matter relating to data protection you may write to elenco@elenco.es, stating "Data protection" in the subject line, or by post to the address indicated.

This English version is provided for the convenience of international users. In the event of any discrepancy, the Spanish version of this policy shall prevail.

2. Applicable legislation

This policy has been drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR); Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD); and Spanish Law 34/2002 of 11 July on information society services and electronic commerce (LSSI-CE).

3. What data we process and where it comes from

We process the data you provide to us directly: through the contact form (name, email address, organisation, profile, date and venue of the event, expected attendance and a description of what you need), by email or telephone, at meetings and visits, and in the course of the commercial or contractual relationship with clients, agencies and suppliers (identification and professional contact details, position, billing details). We also process the data of people who send us their professional applications.

We do not process special categories of data through the website. Please do not include third-party data or sensitive information in the form; if you provide data about other people, you declare that you have their authorisation to do so.

4. Why we process your data and on what legal basis

• To handle your request for information or a proposal and maintain the contact you initiate: the legal basis is the application of pre-contractual measures at the request of the data subject (Art. 6(1)(b) GDPR) and, beyond that, your consent (Art. 6(1)(a) GDPR), which you give by ticking the box on the form and may withdraw at any time.
• To manage the commercial and contractual relationship with clients and suppliers: preparing proposals, delivering projects, invoicing and collection, handling incidents (Art. 6(1)(b) GDPR).
• To comply with the legal obligations applicable to Elenco in commercial, tax, employment and occupational risk prevention matters (Art. 6(1)(c) GDPR).
• To send commercial communications about services similar to those contracted to existing clients (Art. 21(2) LSSI-CE and Art. 6(1)(f) GDPR, legitimate interest) and, to everyone else, only with their prior consent. In all cases you may object simply and free of charge in each communication.
• To manage professional applications received (Art. 6(1)(b) GDPR, pre-contractual measures at the request of the data subject).

Reports received through the ethics channel are governed by their own legislation (Spanish Law 2/2023 of 20 February on the protection of persons who report regulatory breaches) and by the specific information provided in that channel, which is run by independent external advisers.

5. How long we keep your data

Data from requests for information is kept while the request is being handled and, at most, for one year from the last contact if it does not lead to a commercial relationship. Client and supplier data is kept for the duration of the relationship and, afterwards, blocked for the limitation periods of the applicable legal obligations (as a general rule, up to six years under the Spanish Commercial Code and four years for tax purposes). Application data is kept for a maximum of one year, unless you request its erasure earlier. Data processed on the basis of your consent is kept until you withdraw it.

6. Who we share your data with

We do not disclose your data to third parties, except where required by law (tax authorities, courts and tribunals or other competent authorities) or where necessary to deliver the project you contract (for example, the venue or the organiser of an event, to the extent strictly necessary).

Certain service providers access personal data on behalf of Elenco as processors (hosting of the website and email, IT maintenance, accounting and payroll advisers, management of the ethics channel). The contracts provided for in Article 28 GDPR have been signed with all of them, obliging them to process the data solely in accordance with our instructions and with appropriate security measures.

No international data transfers are planned. Should any provider be established outside the European Economic Area, the processing would be carried out with the safeguards of Chapter V GDPR (adequacy decision or standard contractual clauses), and this policy would be updated accordingly.

7. Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, as well as the right not to be subject to decisions based solely on automated processing of your data and the right to withdraw the consent you have given, without affecting the lawfulness of prior processing. To do so, write to elenco@elenco.es or to the postal address indicated, enclosing a copy of a document proving your identity where necessary to verify it. We will reply within one month at most.

If you consider that your rights have not been properly respected, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001 Madrid · www.aepd.es) or with the supervisory authority of your country of residence.

8. Security and confidentiality

Elenco applies the technical and organisational measures necessary to guarantee the security of personal data and to prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the data and the risks to which it is exposed. Every member of staff, everyone hired for a project and every collaborator is bound by a confidentiality agreement, on every project and without exception.

9. Minors

The website and its services are aimed at professionals and organisations. We do not knowingly collect data from children under fourteen. If you become aware that a minor has provided us with personal data without the authorisation of their parents or guardians, please let us know so that we can erase it.

10. Social media

Elenco maintains profiles on Instagram and LinkedIn. The processing of data of those who interact with those profiles is governed, in addition to this policy, by the terms and privacy policies of each platform. Elenco only accesses the information that each social network makes available to profile administrators.

11. Changes to this policy

Elenco may update this policy to adapt it to legislative changes or to changes in the processing it carries out. The current version will always be published on this page, with the date of its last update. If the changes were to affect processing based on your consent, we would ask for it again.