Privacy policy

Data controller

[RAZÓN SOCIAL], tax ID [NIF], with registered address at [DIRECCIÓN POSTAL].

Privacy contact: info@cleariso.es.

What data we process

The data you provide in the information and subscription request forms: name, email, organization, profile (organization or consultant), subscription option and the message you write.

To protect the forms against abuse we store an identifier derived from your IP address with a keyed cryptographic function, not the address itself. Technical server logs (IP address, date and requested page) are kept only as long as strictly needed for the security of the service.

Purposes and legal basis

Handling your information requests: your consent (art. 6.1.a GDPR).

Handling your subscription requests and preparing your sign-up: taking steps at your request prior to entering into a contract (art. 6.1.b GDPR).

Protecting the site against fraudulent or abusive use: our legitimate interest in the security of the service (art. 6.1.f GDPR).

We do not make automated decisions or build profiles with your data.

Retention

We keep request data for as long as needed to handle it and for no more than 12 months after our last communication, unless a contract is signed. It is then blocked for the statutory limitation periods and deleted.

Recipients

We do not share your data with third parties unless required by law. We rely on providers acting as processors under contracts in line with article 28 GDPR: hosting in data centres in the European Union and an email service. We do not transfer data outside the European Economic Area.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, by writing to info@cleariso.es.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.

Data in your ISMS-manager instance

This policy covers the website. We process the data you manage inside your instance as a processor, under the data processing agreement (DPA) that is part of the subscription.

Security

We apply the technical and organisational measures described at https://www.cleariso.es/en/security.