Oesía Group

Privacy Policy

Through this Privacy Policy, Cipherbit aims to guarantee the right to privacy and protection of personal data for USERS, explaining in a fair and transparent manner how it collects, uses, shares, and protects their personal information.

Therefore, and in accordance with the provisions of the European General Data Protection Regulation 2016/679 (hereinafter, GDPR) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter, LOPDGDD), and following the recommendations of the Spanish Data Protection Agency (or “AEPD”), Cipherbit informs you of the following:

1.- Data Controller: Who is responsible for processing your personal data?

  1. Identity: Cipherbit (https://cipherbit.com/nosotros/)
  2. Mailing Address: Calle Marie Curie, 17-19, 28521 Rivas Vaciamadrid.
  3. Contact: 913098600 / marketing@oesia.com
  4. Data Protection Officer (DPO) Contact: dpo@oesia.com

2.- PURPOSES OF PROCESSING: For what purpose do we process your personal data?

Below, we inform you of the purposes for processing personal data collected through contact forms, emails sent to our public email accounts, and other mechanisms we may make available to you:

  • To send you technical, operational, and commercial information about the products, activities, and services you have expressed interest in, and other information that may be of interest to you.
  • To address and manage your requests, questions, and comments.
  • To establish and/or maintain a contractual or commercial relationship with you, where applicable.
  • To conduct statistical studies to improve our services.

In the event that other purposes apply, you will be informed of them, as well as other necessary mentions according to applicable law, at the time we request your personal data. Additionally, some of our services have their own Privacy Policy, as is the case with personnel recruitment processes.

3.- LAWFUL BASIS: What is the legal basis for processing your data?

The legal basis for processing personal data is the CONSENT of the USER.

The submission of personal data by USERS through the use of Cipherbit’s electronic forms, by checking the privacy policy acceptance box, or where applicable, by sending email messages, constitutes the sender’s consent to the processing of personal data. The personal information collected in forms may vary depending on the services used; in any case, all requested data is necessary for the provision of the service. If there are voluntary fields, you will be informed accordingly.

Cipherbit does not use “spamming” techniques and will only process the data transmitted by the USER. Furthermore, the USER guarantees that they are over 14 years of age and that the personal data provided is truthful, committing to communicate any modification thereof. In the event that the data refers to persons other than the USER, the latter guarantees having obtained their prior consent and having informed them of this policy.

In the event that we need to process your data for purposes not related to the previous points, we will inform you and, if necessary, request your additional consent, unless there is another legitimate basis for the processing.

4.- RECIPIENTS: To which recipients will your data be communicated?

If necessary, we will share USER information with the personnel involved in providing information about the products and services requested. Also in the event of any legal obligation or authorization by judges, courts, government agencies, or any public entity. Under no circumstances will we communicate the information to any other third party without informing you and requesting additional consent, unless there is another legitimate basis for its execution.

International data transfers outside the European Economic Area are not planned; should they be required, Cipherbit will guarantee an adequate level of protection by complying with the mechanisms and guarantees established in the regulations for such situations.

5.- INFORMATION SECURITY: How do we protect your personal data?

Cipherbit continuously works to adopt the technical and organizational measures necessary to guarantee the security of USERS’ personal data and prevent its alteration, loss, improper processing, or unauthorized access as required by regulations.

6.- DATA RETENTION PERIOD: How long will we keep your data?

USERS’ personal data will be kept for the time necessary to fulfill the purpose for which it was collected and to determine the possible liabilities that could derive from said purpose and the processing of the data.

The deletion of data entails that we keep the canceled data in a blocked state, which will involve its identification and reservation, so that it cannot be processed or accessed except for making it available to Public Administrations, Judges, and Courts, to address possible liabilities arising from the relationship with the USER, and until such liabilities expire. Once this period has elapsed, the data will be permanently deleted. Only those persons authorized for the indicated purposes may access the blocked data. If the law does not establish any retention period, we will proceed with the permanent deletion of said information within a period not exceeding two (2) years after the termination of the relationship established with you.

7.- RIGHTS: What are your rights when you provide your data and how can you exercise them?

USERS have the right to obtain confirmation as to whether Cipherbit is processing their personal data. Likewise, they have the right to access their personal data, as well as to request the rectification of inaccurate data or, where applicable, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, you may object to the processing of your data and request the limitation of the processing of your data, in which case Cipherbit will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims. Likewise, they can exercise the right to data portability, as well as withdraw the consents provided at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

These rights may be exercised at any time, and free of charge, through written communication to Cipherbit, C/ Marie Curie, nº 19, 28521, ATTN: DPO, Rivas Vaciamadrid, or through the email address: dpo@oesia.com providing a document that proves your identity and includes the following data (first name, last name, validity of the document) and being able to hide the rest of the unnecessary data, and identifying the right requested in relation to the processing carried out by Cipherbit. In the event that you consider that you have not obtained satisfaction in the exercise of your rights, you may file a claim with the Spanish Data Protection Agency (https://www.aepd.es/en).