Kymatio has a Data Protection Officer, in charge of responding to any concerns that our users may have regarding the protection of their personal data and our practices in this regard. In addition, you can contact our Data Protection Officer to exercise any of your data protection rights and to suggest any action related to this area.

To contact our Data Protection Officer, please write an email to privacy@kymatio.com with your request and we will respond as soon as possible.

If you are a representative of a Kymatio client company because you have any of our services, we will treat your data as indicated below:

• Purpose of the treatment: We process your data to maintain, fulfill, develop, control and execute the commercial relationship that we maintain with our client, for whom you work or with you if you are self-employed, as a Kymatio client. In addition, we may send you commercial communications about our services, to keep you informed about news that is of interest to you, based on a prior profiling of your interests and/or web browsing. This profiling is obtained thanks to a study of your browsing (visits to each page, time of visits, recurrence of visits, etc.) and your preferences when using our services. We carry out this profiling to ensure that when we offer you any promotion or inform you about our services, our communications will really be of interest to you and will be related to your use of our website or our services. In this way, we want to make sure that you only receive advertising based on what really matters to you, and that you will not receive information about things that do not interest you.

• Types of data that will be processed: Those requested in the form that you must fill out, identification data (name and surname, email), web browsing data, information about your browsing preferences and about the interests that you have given us. indicated or can be inferred from your browsing habits.

• Legal basis of the treatment: The treatment of your data is necessary to execute our contractual relationship (for example, for the management of the provision of services to the company in which you work). Regarding the sending of commercial communications, Kymatio has a legitimate interest in maintaining contact with you to inform you of our news that may be of interest to you.

• Recipients of your data: Only some of our technology and management service providers will have access to your personal data who, in order to execute the service they provide us, have to access the data of our clients (for example, the agency or hosting service). These service providers will process your data according to our instructions and always under our command. We will also share your data with other group companies, with the legal basis of the legitimate interest in jointly managing the suppliers.

• International data transfers: To provide you with the service we use the services of technology providers who need to have access to your personal data from the United States, always following our instructions. These providers adhere to the Privacy Shield framework, an agreement signed between the United States and the European Union by which the American entities adhering to the program guarantee that they apply the same data protection standards as European companies. You can request an updated list of these recipients by writing an email to privacy@kymatio.com.

In addition, your data may be transferred to technology providers located in countries outside the European Union (“EU”). You can request an updated list of these recipients by writing an email to privacy@kymatio.com.

These international data transfers will be carried out on the basis of the signing of standard contractual clauses drawn up by the European Commission to regulate this type of international relations, in accordance with the provisions of article 46.2 of the General Data Protection Regulation . You can request a copy of the standard contractual clauses by writing an email to privacy@kymatio.com.

• Period of conservation of your data: Your data will be kept during the execution and maintenance of our contractual relationship. Regarding the sending of commercial communications, your data will be kept for as long as you want it to be, since you can request at any time that we stop sending you these communications, through the link included for that purpose in all our advertising communications. In the event that you do not interact with our commercial emails for 18 months (understanding interaction as opening the email), we will proceed to delete your data for this purpose.

• Mandatory data: It is mandatory to provide us with the information requested in the fields marked with an * in the data collection form, since Kymatio needs to know this data to provide you with the service with all the guarantees. Failure to provide this information would mean that Kymatio could not provide you with the service optimally. 

If you are not yet a Kymatio customer, but you want to receive our communications informing you of news, offers, campaigns, launches, etc., we will treat your data as indicated below:

• Purpose of the treatment: We treat your data to keep you informed about our news and offers that are of interest to you

• Types of data that will be processed: Identification data (email address, name and surname), web browsing data, information about your browsing preferences 

• Legal basis of the treatment: Your express consent, which you will demonstrate by checking the specific box that indicates so.

• Recipients of your data: Only some of our technological service providers will have access to your personal data who, in order to execute the service they provide us, have to access the data of our clients. These service providers will process your data according to our instructions and always under our command.

• International data transfers: To provide you with the service we use the services of technology providers who need to have access to your personal data from the United States, always following our instructions. These providers adhere to the Privacy Shield framework, an agreement signed between the United States and the European Union by which the American entities adhering to the program guarantee that they apply the same data protection standards as European companies. You can request an updated list of these recipients by writing an email to privacy@kymatio.com.

• Period of conservation of your data: Your data will be kept for as long as you want it to be, since you can request at any time that we stop sending you these communications, through the link included for that purpose in all our advertising communications. In the event that you do not interact with our commercial emails for 18 months (understanding interaction as opening the email), we will proceed to delete your data.

• Mandatory data: It is mandatory to provide us with the information requested in the fields marked with an * in the data collection form, since Kymatio needs to know this data to send you commercial communications. Failure to provide this information would mean that Kymatio could not send you commercial communications in an optimal way. 

In the event that you have made a query to Kymatio, we will treat your data as indicated below:

• Purpose of the treatment: We treat your data to resolve the doubt or question that you have raised.

• Types of data that will be processed: Email address and name and surname.

• Legal basis of the treatment: Kymatio has a legitimate interest in answering any question that a person may ask.

• Recipients of your data: Only some of our technological service providers will have access to your personal data who, in order to execute the service they provide us, have to access the data of our clients. These service providers will process your data according to our instructions and always under our command.

• International data transfers: To provide you with the service we use the services of technology providers who need to have access to your personal data from the United States, always following our instructions. These providers adhere to the Privacy Shield framework, an agreement signed between the United States and the European Union by which the American entities adhering to the program guarantee that they apply the same data protection standards as European companies. You can request an updated list of these recipients by writing an email to privacy@kymatio.com.

In addition, your data may be transferred to technology providers located in countries outside the European Union (“EU”). You can request an updated list of these recipients by writing an email to privacy@kymatio.com.

These international data transfers will be carried out on the basis of the signing of standard contractual clauses drawn up by the European Commission to regulate this type of international relations, in accordance with the provisions of article 46.2 of the General Data Protection Regulation . You can request a copy of the standard contractual clauses by writing an email to privacy@kymatio.com.

• Period of conservation of your data: Your data will be kept for this purpose until we solve your query.

• Mandatory data: It is mandatory to provide us with the information requested in the fields marked with an * on the data collection form, since Kymatio needs to know this data to respond to any query you may make. Failure to provide this information would mean that Kymatio could not answer your questions or questions optimally. 

If you are a job candidate at Kymatio and you have sent us your CV, we will treat your data as indicated below:

• Purpose of the treatment: We process your data to study your candidacy, present or future, for a job at Kymatio.

• Types of data that will be processed: Identification data (ID / NIF, name and surname, address, telephone, e-mail, signature, image, date and place of birth) employment data and academic and professional data.< /p>

• Legal basis of the treatment: Your express consent, which you will demonstrate by checking the specific box that indicates so. 

• Recipients of your data: Only some of our technological service providers will have access to your personal data who, in order to execute the service they provide us, have to access the data of our clients. These service providers will process your data according to our instructions and always under our command.

• International data transfers: To provide you with the service we use the services of technology providers who need to have access to your personal data from the United States, always following our instructions. These providers adhere to the Privacy Shield framework, an agreement signed between the United States and the European Union by which the American entities adhering to the program guarantee that they apply the same data protection standards as European companies. You can request an updated list of these recipients by writing an email to privacy@kymatio.com.

In addition, your data may be transferred to technology providers located in countries outside the European Union (“EU”). You can request an updated list of these recipients by writing an email to privacy@kymatio.com.

These international data transfers will be carried out on the basis of the signing of standard contractual clauses drawn up by the European Commission to regulate this type of international relations, in accordance with the provisions of article 46.2 of the General Data Protection Regulation . You can request a copy of the standard contractual clauses by writing an email to privacy@kymatio.com.

• Period of conservation of your data: Your data will be kept for one year from when you sent the CV to Kymatio.

• Mandatory data: It is mandatory to provide us with the information requested in the fields marked with an * in the data collection form, since Kymatio needs to know this data to assess your candidacy for a job. Failure to provide this information would mean that Kymatio could not optimally assess your candidacy for a job. 

If you are a user of a social network and you interact with a Kymatio profile or page, we will treat your data as indicated below:

• Purpose of the treatment: We treat your data to be able to interact with you in a normal way according to the policies of the social network, and to manage our virtual communities according to the policies of each social network and to our interests (both yours and ours).

• Types of data that will be processed: Name and surname and nick of the user in the social network

• Legal basis of the treatment: We have a legitimate interest to process your data within the operation of the social network to resolve queries, doubts, etc. that you ask us through the social network, as well as to interact with you within the normal functioning of the social network.

• Recipients of your data: No third party will have access, through Kymatio, to your social network user data.

• Period of conservation of your data: We will keep your data only for the time necessary to resolve your question, or for the duration of our interaction. Keep in mind that, although we will not specifically save this data, your data may remain in the social network according to the operating policy of each specific social network.

If you are a representative of a Kymatio supplier company because you provide any of our services, we will treat your data as indicated below:

• Purpose of the treatment: We process your data to maintain, fulfill, develop, control and execute the commercial relationship that we maintain with our supplier, for whom you work or with you in case you are self-employed, for being a client of Kymatio.  ;

• Types of data that will be processed: Those requested in the form that you must fill out, identification data (name and surname, email) and employment, academic and professional data, among others.

• Legal basis of the treatment: The treatment of your data is necessary to execute our contractual relationship (for example, for the management of the services provided to us by the company in which you work). 

• Recipients of your data: Only some of our technology and management service providers will have access to your personal data who, in order to execute the service they provide us, have to access the data of our clients (for example, the agency or hosting service). These service providers will process your data according to our instructions and always under our command. We will also share your data with other group companies, with the legal basis of the legitimate interest in jointly managing the suppliers.

• International data transfers: To provide you with the service we use the services of technology providers who need to have access to your personal data from the United States, always following our instructions. These providers adhere to the Privacy Shield framework, an agreement signed between the United States and the European Union by which the American entities adhering to the program guarantee that they apply the same data protection standards as European companies. You can request an updated list of these recipients by writing an email to privacy@kymatio.com.

In addition, your data may be transferred to technology providers located in countries outside the European Union (“EU”). You can request an updated list of these recipients by writing an email to privacy@kymatio.com.

These international data transfers will be carried out on the basis of the signing of standard contractual clauses drawn up by the European Commission to regulate this type of international relations, in accordance with the provisions of article 46.2 of the General Data Protection Regulation . You can request a copy of the standard contractual clauses by writing an email to privacy@kymatio.com.

• Period of conservation of your data: Your data will be kept during the execution and maintenance of our contractual relationship. 

• Mandatory data: It is mandatory to provide us with the information requested in the fields marked with an * in the data collection form, since Kymatio needs to know this data to provide you with the service with all the guarantees. Failure to provide this information would mean that Kymatio could not provide you with the service in an optimal way.

You can exercise the following rights before Kymatio:

• Right of access to your personal data to know which are being processed and the processing operations carried out with them;

• Right to rectify any inaccurate personal data;

• Right to delete your personal data, when this is possible;

• Right to request the limitation of the processing of your personal data when the accuracy, legality or necessity of the data processing is doubtful, in which case, we may keep the data for the exercise or defense of claims.

• Right to oppose the processing of your data to resolve any question that you have raised through the contact form, email or chat, as well as the processing of your data through a social network or if you are a representative or contact at a Kymatio provider. 

• Right to withdraw your consent to receive commercial communications at any time, through the link included for this purpose in each commercial communication.

• Right to the portability of your personal data, when you are a client of Kymatio and in relation to the treatment intended to maintain our contractual relationship. Portability consists of receiving the personal data that you have provided to Kymatio in a structured, commonly used and machine-readable format, and transmitting the data to another data controller when the processing is carried out by automated means.

You can exercise your rights at any time for free by writing an email to the following email address: privacy@kymatio.com. You must specify which right you wish to exercise, as well as your identification data. In the event that, to verify your identity, we need additional information to the ones you provide us, we will let you know.

If you believe that Kymatio has committed an infringement of the personal data protection legislation, please do not hesitate to contact us at the email address privacy@kymatio.com, telling us your assessments, so that we can solve the problem as soon as possible. In any case, you can also notify the Spanish Data Protection Agency (www.aepd.es) and claim the protection of your rights before this body.