Mukanë is deeply committed to complying with Spanish regulations on personal data protection and guarantees full compliance with the obligations set forth therein, as well as the implementation of the security measures provided for in Article 9 of Law 15/1999 on the Protection of Personal Data (LOPD) and its implementing regulations, and compliance with the General Data Protection Regulation (GDPR). 9 of Law 15/1999 on the Protection of Personal Data (LOPD) and its Implementing Regulations, as well as compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679. In accordance with these regulations, we inform you that the use of our website may require you to provide certain personal data through registration or contact forms, or by sending emails, and that these will be processed by “Mukanë”, the data controller, whose details are as follows:
Company name: MUKANE AGENCY SL
Tax ID number: B67803213
Trade name: Mukanë
Registered office: Pso. Manrsesa 37, 1ºB 08201 Sabadell (Barcelona)
DATA COLLECTION AND PROCESSING
“Mukanë,” as the Data Controller, has a duty to inform users of its website about the collection of personal data that may be carried out, either by sending an email or by filling in the forms included on the website. Only the data necessary to perform the contracted service or to respond adequately to the User’s request for information will be obtained.
Contact/email forms
Purpose: To respond to your request for information made through our contact form(s).
Legitimacy: The legal basis that legitimizes this processing is the consent of the User, which may be revoked at any time.
Data transfer: Personal data will be processed through servers managed by Siteground, which will be considered the Data Processor. In addition, our email service provider, through which communications will be made, is Microsoft, through Microsoft 365.
Mailing list registration forms (newsletter)
Purpose: To send commercial communications of interest to the User. As established by the LSSICE, “Mukanë” undertakes not to send commercial communications without identifying them as such. For these purposes, information sent to customers for the maintenance of the existing contractual relationship will not be considered commercial communication.
Legitimacy: The legal basis that legitimizes this processing is the consent of the User, which may be revoked at any time.
Data transfer: Personal data will be processed through servers managed by Hubspot, which will be considered the Data Processor.
SECURITY MEASURES
Users are informed that, at “Mukanë,” technical and organizational measures have been adopted in accordance with the provisions of data protection regulations. The personal data collected in the forms is processed solely by “Mukanë” staff or the Data Processors established herein.
Appropriate security measures have been adopted for the data provided and, in addition, all technical means and measures at our disposal have been installed to prevent the loss, misuse, alteration, unauthorized access, and theft of the data you provide us.
The Mukanë website also has SSL encryption, which allows the User to securely send their personal data through the contact forms on the website.
ACCURACY OF DATA
The User declares that all the data provided by them is true and correct and undertakes to keep it up to date. The user will be responsible for the accuracy of their data and will be solely liable for any conflicts or disputes that may arise from the falsity of the same. It is important that, in order for us to keep personal data up to date, the user informs “Mukanë” whenever there has been any change in the same.
EXERCISE OF RIGHTS
The LOPD and the GDPR grant interested parties the possibility of exercising a series of rights related to the processing of their personal data. To do so, the user must send an email to administracion@mukane.com, providing documentation proving their identity (ID card or passport), or write to the address that appears in our Legal Notice. This communication must include the following information: the User’s name and surname(s), the request, the address, and supporting data.
The exercise of rights must be carried out by the User themselves. However, they may be exercised by a person authorized as the User’s legal representative, providing documentation proving such representation.
The user may request the exercise of the following rights:
Right to request access to personal data.
Right to request rectification (if incorrect) or deletion.
Right to request limitation of processing, in which case they will only be kept by “Mukanë” for the exercise or defense of claims.
Right to object to processing: “Mukanë” will stop processing your data, unless there are legitimate reasons or the exercise or defense of possible claims requires further processing.
Right to data portability: if you want your data to be processed by another company, “Mukanë” will facilitate the portability of your data in an exportable format.
If consent has been given for a specific purpose, the user has the right to withdraw consent at any time, without this affecting the lawfulness of the processing based on consent prior to its withdrawal.
If a user considers that there is a problem with the way in which “Mukanë” is handling their data, they may address their complaints to the Security Manager or to the relevant data protection authority, which in the case of Spain is the Spanish Data Protection Agency.
DATA RETENTION
The personal data of Users who use the contact form or newsletter registration form will be processed for the time strictly necessary to respond to the request for information, or until the consent given is revoked.
For its part, the Customer’s personal data will be processed until the end of the contractual relationship. The period of retention of personal data will be the minimum necessary, and may be kept for up to:
4 years: Law on Infractions and Sanctions in the Social Order (obligations regarding affiliation, registrations, cancellations, contributions, payment of salaries, etc.); Arts. 66 et seq. General Tax Law (accounting books, etc.)
5 years: Art. 1964 Civil Code (personal actions without a specific time limit)
6 years: Art. 30 Commercial Code (accounting books, invoices, etc.)
10 years: Art. 25 Law on the Prevention of Money Laundering and Terrorist Financing.
No time limit: disaggregated and anonymized data.
In the case of candidate data (CVs), Mukanë may store your CV for a maximum of two years for future recruitment purposes, unless the candidate states otherwise.
INTERNATIONAL DATA TRANSFERS
“Mukanë” uses the mailing services of https://blackhub.io/. The user expressly and unequivocally accepts their consent for the processing of their data and for the international transfer of such data to this/these service provider(s).
CONFIDENTIALITY
The information provided by the customer will, in all cases, be considered confidential and may not be used for purposes other than those described herein. “Mukanë” undertakes not to disclose or reveal information about the User’s claims, the reasons for the advice requested, or the duration of its relationship with the User.
VALIDITY
This privacy and data protection policy was drafted on February 28, 2023, and may vary depending on changes in regulations and case law that may occur. It is the responsibility of the data owner to read the updated document in order to be aware of their rights and obligations in this regard at all times.