Guruti Solutions · Data Protection
Privacy Policy
How Guruti Solutions Handles Personal Data
Data controller
Yuri Hidalgo Alonso, trading as Guruti Solutions
Spanish Tax ID: NIF 46181996C
Professional address: Passeig Garbí 189, 08860 Castelldefels, Barcelona, Spain
Email: solutions@guruti.es
Website: guruti.es
Guruti processes personal data for legitimate professional, pre-contractual, contractual, operational, legal and communication purposes, using the data reasonably necessary for those purposes and applying applicable data-protection requirements.
01 ·Scope of this Privacy Policy
This Privacy Policy explains how Guruti Solutions processes personal data in connection with guruti.es, enquiries, website forms, appointments, prospective engagements, professional services, client and supplier relationships and other business interactions.
This Policy applies where Guruti acts as a data controller. Where Guruti processes personal data solely on behalf of a Client as a data processor, that processing is governed by the relevant engagement terms and, where required, an appropriate data-processing agreement.
02 ·Personal data we may process
Depending on the nature of the interaction, Guruti may process:
- identification and professional contact information, such as name, company, role, email address and telephone number;
- information provided through website forms, email communications, appointments, meetings or other enquiries;
- information relating to proposals, contracts, projects, invoices, suppliers and professional relationships;
- communications and correspondence relating to an enquiry or engagement;
- technical and usage information generated when interacting with the website, where permitted by applicable law and the user's cookie choices; and
- other personal data voluntarily supplied where reasonably relevant to the purpose of the interaction.
03 ·Purposes and legal bases
The purposes and legal bases depend on the context in which the personal data is processed.
| Purpose | Typical legal basis |
|---|---|
| Responding to enquiries, arranging meetings and preparing proposals or prospective engagements. | Steps requested before entering into a contract and, where appropriate, legitimate interests in managing professional enquiries. |
| Providing, administering and supporting professional services and client relationships. | Performance of a contract and related legitimate interests in appropriate service administration. |
| Managing suppliers, collaborators and other professional relationships. | Contractual necessity and/or legitimate interests in business administration and professional relationship management. |
| Billing, accounting, tax administration and legally required records. | Performance of a contract and compliance with applicable legal obligations. |
| Maintaining website, information and systems security and protecting legal rights. | Legitimate interests in security, fraud prevention and the establishment, exercise or defence of legal claims. |
| Optional analytics, marketing or other activities that require consent. | Consent, where required by applicable law. |
Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.
04 ·Where personal data comes from
Personal data is normally obtained directly from the individual, including through website forms, appointments, email, telephone, professional meetings, contracts and other direct communications.
In appropriate professional contexts, Guruti may also receive business contact information from a Client, employer, colleague, supplier, collaborator or publicly available professional source. Where applicable, information about the source and categories of data will be provided in accordance with data-protection law.
05 ·Required and optional information
Fields identified as required in a form or professional process are necessary to handle the relevant request, appointment, proposal or contractual relationship. If required information is not provided, Guruti may be unable to process the request or provide the relevant service.
Information not identified as required is generally optional unless the circumstances or applicable law make it necessary for the relevant purpose.
06 ·How long personal data is retained
Guruti retains personal data only for as long as reasonably necessary for the purpose for which it was collected and to comply with applicable contractual, accounting, tax, legal or professional obligations.
Retention periods therefore vary according to the type of relationship, the nature of the information and applicable statutory requirements. When personal data is no longer required, it will be deleted, anonymised or appropriately restricted where continued retention is legally required.
07 ·Recipients and service providers
Guruti does not disclose personal data to third parties except where this is reasonably necessary for the purposes described in this Policy, requested by the individual, required to provide the relevant service or required by law.
Depending on the processing activity, categories of service providers may include website and hosting providers, business software and infrastructure providers, email and communications services, scheduling tools, professional advisers, accounting or administration providers and other suppliers supporting Guruti's operations. Where they process personal data on Guruti's behalf, appropriate data-protection obligations apply.
Personal data may also be disclosed where required by law, regulation, court order or a competent public authority, or where reasonably necessary for the establishment, exercise or defence of legal claims.
08 ·International data transfers
Where a processing activity involves the transfer of personal data outside the European Economic Area, Guruti will apply the transfer mechanism or safeguards required by applicable data-protection law, where such safeguards are required.
Information about applicable safeguards may be requested using the contact details in this Policy where the right to receive that information applies.
09 ·Your data-protection rights
Subject to the conditions established by applicable data-protection law, individuals may exercise their rights of:
- access to personal data;
- rectification of inaccurate or incomplete personal data;
- erasure where applicable;
- restriction of processing;
- objection to processing;
- data portability where applicable; and
- withdrawal of consent at any time where processing is based on consent.
To exercise a data-protection right, contact solutions@guruti.es and provide sufficient information to identify the request and the right being exercised. Guruti may request reasonable information necessary to verify identity before acting on a request.
10 ·Right to lodge a complaint
If an individual considers that personal data has been processed in breach of applicable data-protection law, they may lodge a complaint with the competent supervisory authority.
In Spain, the supervisory authority is the Agencia Española de Protección de Datos (AEPD).
11 ·Security
Guruti applies reasonable technical and organisational measures appropriate to the nature of the personal data and the risks associated with its processing. No information system can guarantee absolute security, but reasonable measures are maintained to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.
12 ·Cookies and website technologies
Information about cookies and similar technologies used on guruti.es, including the available consent choices, is provided in Guruti's Cookie Policy.
13 ·Updates and contact
This Privacy Policy may be updated when legal requirements, services, technology or data-processing practices change materially.
Questions about this Privacy Policy or the processing of personal data by Guruti Solutions may be sent to solutions@guruti.es.
Align | Transform | Grow