The website www.acerta-cert.com is owned and managed by the Spanish registered company ACERTA Certificación, S.L., with CIF: B97479935 and address in Avda. de la Osa Mayor 29 - 28023 Madrid. This website also displays contents and makes available to the public and customers forms whose information is managed, received or registered by ACERTA I MÁS D MÁS I, S.L. with CIF: B86956463 and ACERTA R&D, S.L. with CIF: B56931058, also with the same address. These companies share senior management resources. However, the data files are not shared. The data are only known to the authorized personnel of the company that requires them and is responsible for them. Hereinafter, both organizations are identified as ACERTA.

Introduction

This privacy statement applies to any processing of personal data on www.acerta-cert.com, hereinafter referred to as the "Website" .

For these purposes, "personal data" shall mean any information relating to an individual who can be identified, directly or indirectly, by identifiers, such as a name, an identification number, location data, an online identifier or one or more elements of the individual's physical, physiological, genetic, mental, economic, cultural or social identity.

Processing shall mean any operation performed on personal data, such as collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or interconnection, restriction, erasure or destruction.

How we use your personal information:

Personal data collected automatically when you browse the Website.

When you visit the Website for informational purposes, i.e. without being registered, we automatically collect and store certain information (e.g. type of device, browser used, date and time of visit, pages visited).

We use such data only to help us provide an efficient service (e.g. to adapt our website to the needs of the end user's device or to enable you to log in to our website). The personal data collected is necessary to provide you with the website. The legal basis for this processing activity is Article 6 paragraph 1 (b) of the General Data Protection Regulation ("GDPR").

When you register for our services

We will process personal data that you actively provide to us, e.g. when you contact us by filling out a contact form for information request, request for quotation or download of documentation and information material. Such personal data may contain, among other things, your name, e-mail address, contact details, company affiliation, country, details of the request and your order.

ACERTA collects and uses this personal data only to provide you with the services you requested, to administer your contact record, to identify you and to communicate with you. We also interact with you through our general inquiries sections or by responding to your general complaints or comments about our services or because we had or have a contract with you.

Where appropriate, we may also contact you regarding your satisfaction with our products and services and to conduct other surveys.

The legal basis for this is Article 6 paragraph 1 (b) of the GDPR.

We use the personal data and contact data you provide when registering to inform you directly about our additional products and services. The use of your personal data for direct advertising of related products and services is a legitimate interest for us as the provider of this website, Article 6 paragraph 1 (f) GDPR.

You may object at any time to the use of your personal data for direct marketing purposes. In such a case, we reserve the right to refrain from any processing insofar as it relates to these purposes. You can inform us of your objection by completing this form.

Your personal data is retained, subject to exceptions within the specific services mentioned below, for as long as your user account is used. If there has been no activity on your account, your personal data will be deleted once the purpose has been fulfilled. Legal storage obligations or the need for legal action may arise from misconduct within the services and may lead to a longer retention of your personal data. In this case, we will inform you accordingly.

Data collected from other sources

We may also collect personal information about you, such as your name and contact information to provide you with information about products and services, from third party resources at conferences, trade shows and webinar providers in which we participate.

The legal basis for this processing activity is Article 6 paragraph 1 (f) of the GDPR as it is in the legitimate interest of our corporate group to maintain our user base, to bring new users to the Website and to inform (potential) users about the services organized and provided by ACERTA.

Informative e-mails

With your e-mail address you can subscribe to our informative e-mails informing you of the latest news about our products and services, provided that you consent to receive such e-mails. The legal basis for this processing is Article 6 paragraph 1 (a) of the GDPR. Your email address will be retained for as long as you are subscribed to our informative emails and for 36 months of inactivity thereafter.

This service is offered with a double option. Therefore, you will receive an email containing a link by which you can confirm that you are the owner of the email address and wish to be notified via our email service. If your subscription is not confirmed, we will not send you informative emails.

You may unsubscribe from this service by using the link provided in each informational email.

Automated decision making

We do not use your personal information to make automated decisions that have legal consequences for you or that significantly affect you.

Recipients of your personal data.

Under no circumstances will your personal data be provided to third parties or organizations outside the ACERTA group of companies or the companies that represent ACERTA in Spain and internationally, except for tax, labor or legal management activities when applicable.

Internal group recipient

Within the ACERTA group of companies, your personal data may be transferred to various entities within the group. The legal basis for such transfer is the legitimate interest of ACERTA in providing a shared internal management, administration and IT service, as well as the legitimate interest of our group of companies in ensuring the smooth functioning between our entities for the aforementioned purposes. Personal data may be transferred outside the country for which it was collected.

ACERTA is a company with binding corporate rules (Code of Ethics and Conduct) and, therefore, personal data transferred to a third country outside the European Union or the European Economic Area are subject to the same.

Third party addressee

We contract with third party companies and individuals who assist us in providing the services we offer, including those offered through this website. Your personal data will be disclosed, for example, to companies that represent us internationally and, in part, to their sub-processors also based outside the EU/EEA:

International data transfer

Within the scope of our information sharing activities set out above, your personal data may be transferred to other countries (including countries outside the European Union) that may have different data protection rules than your country of residence. Please note that data processed in a foreign country may be subject to foreign laws and accessible to foreign governments, courts, law enforcement and regulatory agencies. However, we will endeavor to take appropriate measures to maintain an adequate level of data protection also when we share your personal data with such countries.

In the case of a transfer outside the European Union, this transfer is protected by EU standard contractual clauses.

Conservation periods

We strive to keep our processing activities of your personal data as limited as possible. In the absence of specific retention periods set out in this policy, your personal data will only be retained for as long as we need it to fulfill the purpose for which we have collected it and, if applicable, for as long as required by legal retention requirements.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc ("Google"). Google Analytics uses cookies to help us analyze how users use the site. The information generated by the cookie about your use of the Website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

The website uses the IP anonymization feature of Google Analytics. Google will truncate/anonymize the last octet (8 bits) of the IP address for EU Member States and other parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA. On our behalf, Google will use this information for the purpose of evaluating your use of the Website, compiling reports on Website activity and providing other services relating to Website activity and internet usage to us. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of this website.

In addition, you can prevent Google from collecting and using data (cookies and IP address) by downloading and installing the browser plug-in available at this link.

An opt-out cookie will be set to prevent future collection of your information when you visit this website.

You can find more information in this link.

LinkedIn Insights and Ads script

From time to time we may use LinkedIn Insights or Ad Script. The provider of this tool is LinkedIn Corporation, 2029 Stierling Court, Mountain View, CA 94043, USA. This tool helps us track conversions, retarget website visitors and improve our website. You can learn more about LinkedIn Insight at:

https://business.linkedin.com/marketing-solutions/blog/linkedin-b2b-marketing/2017/how-to-unlock-value-with-the-linkedin-insight

Security

We take market standard precautions to protect personal data. When our on-line or download form asks users to provide personal data, this personal data is encrypted and protected with market standard encryption software: SSL. When you are on a secure page, the padlock icon at the top of web browsers such as Microsoft Internet Explorer is present.

Unfortunately, no data transmission or processing can be guaranteed to be 100% secure. In this regard, despite our efforts to protect personal data, ACERTA is not in a position to ensure or guarantee the security of personal data.

Rights of interested parties

You may exercise some or all of the following rights free of charge:

1. (i) request information on whether your personal data are stored, (ii) request access to or request a copy of your personal data, (iii) obtain information on the processing, including the purposes of the processing, the categories of data concerned and the recipients or categories of recipients to whom the data are disclosed and, to the extent possible, the expected period for which the personal data will be stored or, if this is not possible, the criteria used to determine such period;
2. request the appropriate rectification, erasure or restriction of your personal data, e.g., because of (i) the incomplete or inaccurate nature of the personal data, (ii) that it is no longer necessary for the purposes for which it was collected, (iii) that the consent on which the processing was based has been withdrawn, or (iv) that you have invoked your existing right to object to the processing of the data; in case your personal data is processed by third parties, we will forward your request for rectification, erasure or restriction also to such third parties, unless this proves impossible or involves a disproportionate effort;
3. receive personal data relating to you, which you have provided to us, in a structured, commonly used and machine-readable format, and transmit it to another controller without hindrance from us; where technically feasible, you shall have the right to have the personal data transmitted directly from us to another controller;
4. refuse to provide and - without prejudice to data processing activities that have taken place prior to such withdrawal - withdraw your consent to the processing of your personal data at any time;
5. object at any time to your personal data being used for direct marketing purposes, or - for reasons relating to your particular situation, to your personal data being processed for other purposes;
6. not be subjected to automated individual decision-making processes (automated decision-making processes based on the processing of data by automated means for the purpose of evaluating various personal aspects) that produce legal effects on you or that affect you in a similar and significant way;
7. to take legal action in relation to any violation of your rights related to the processing of your personal data, as well as to lodge complaints with the competent data protection authorities.

Privacy Statement Revision

ACERTA may change or update the privacy statement without notice. All such changes will be effective once they are posted on the website. It is your responsibility to monitor such updates. The privacy statement was last updated on the date indicated at the beginning of this privacy statement.

Contact Information

If you are concerned about the use of data or have any questions about this Privacy Statement, please contact our data protection officer at info@acerta-cert.es or using the postal address below. ACERTA regrets that only general questions about the privacy statement can be answered by e-mail.

We wish you a pleasant and interesting experience on our website!

ACERTA

Avda. de la Osa Mayor 29 - 28023 Madrid - Spain

PRIVACY AND COMMERCIAL COMMUNICATIONS POLICY APPLICABLE TO THE FORMS ON THIS WEBSITE

In compliance with the provisions of the current European Data Protection Regulation, we inform you that the data collected by ACERTA Certificación, S.L., ACERTA I plus D plus I, S.L. and ACERTA R&D, S.L. (hereinafter ACERTA) through the various forms used, including those sent directly to customers requesting their services and those made available to the public on this website, are incorporated into a file for which ACERTA is responsible, with the sole purpose of providing a personalized response to those who send us the completed form or, where appropriate, to improve the professional service contracted by him or his company and eventually send technical or commercial information about the contracted service or other professional services that we believe may be of interest.

The data collected will be processed by ACERTA for the following purposes: (i) to make possible the contracting and provision of the services offered, (ii) remission of information regarding products and services related to the services offered or that may be offered by ACERTA in the future, (iii) carrying out promotional and advertising activities of the products and services of its catalog of servicesby any means, (iii) carrying out promotional and advertising activities of the products and services of its catalog of services by any means, especially the sending of e-mails (these promotional messages will be identified as "advertising" and the recipient may express his/her wish not to receive them in the future), (iv) statistics and historical comparisons and (v) processing of complaints and claims.

IMPORTANT:

In no case ACERTA transfers or shares your data with other persons or organizations. Only in some occasions in which your participation is required to improve the service provided or fulfill a request, ACERTA may share the data provided in the forms with other companies that make up the ACERTA group or with those that represent us internationally.

At any time any person who has provided us with their personal data may request their rights of access, rectification, cancellation and opposition to the processing thereof, by sending a request to ACERTA by any of the following means:

• Filling in the form to cancel your personal information
• By email to info@acerta-cert.es, attaching a copy of your ID or personal identification document.
• By letter addressed to ACERTA: Avda. de la Osa Mayor 29 - 28023 Madrid, enclosing a copy of your ID card or personal identification document.