Privacy policy

Responsible for processing

The owner of the web domain, Jorge Garcés, NRT: F-370851-D, trade AUMENTIUM (hereinafter AUMENTIUM), with fiscal address in Avinguda del Fener number 9, floor 4 door 3, in Escaldes Engordany (Principado de Andorra), informs that:

1. Guarantees the protection of personal data voluntarily provided by the user when communicating with AUMENTIUM ​through email, la ​filling in data collection forms, ​formalizing a contractual relationship or using any other service that involves data communication.
2. Process the data in accordance with Law 29/2021 of 28 October of the Principado de Andorra, and in accordance with the provisions of this policy, which it publishes based on the principle of proactive responsibility and transparency of information, and tries to demonstrate the unequivocal consent of the interested party through the same.

Finality of processing

The personal data collected and processed by AUMENTIUM, through this website, fairs, contracts, conferences, newsletters, draws, or other means, will be appropriate, relevant and limited to those necessary in relation to the purposes for which they are processed. These are:

• –
  The purpose of the processing for the data collection forms on the web and for other non-specified voluntary data submission is to handle the specific request, as a response to inquiries, subscription and newsletters, commercial contact, registration in workshops, sending documentation and information related to the services and, in any case, commercial and/or advertising communications.
• –
  The purpose of the processing for the contracting of services is to establish and maintain the contractual relationship that may be established, in accordance with the nature and characteristics of the service contracted and for the maintenance of historical records.

In all cases, the personal data will be maintained in a way that allows the identification of the interested party only the time necessary for the purposes of the processing.

Legitimacy of processing

The legal basis for legitimizing the processing of data by AUMENTIUM depends on the different processing activities, the type of holders of personal data and the purposes thereof. data subjects and the purposes of the data processing. For these cases we have as a basis of legitimacy:

• –
  Acceptance or express consent for Stakeholders who contact AUMENTIUM to request information, make inquiries, subscribe to the sending of information and newsletters, training, etc. and that they voluntarily provide the requested personal data.
• –
  Contract for customers who access AUMENTIUM services and provide their consent through the formalization of the contract.
• –
  The legitimate interests of AUMENTIUM or of the third parties to whom the data is communicated prevail when contact data is collected beyond the forms indicated in the purpose of processing section (example: receipt of business cards, e-mail inquiries).

The services provided by AUMENTIUM are addressed to professionals of legal age. The use of the services offered by minors must have been previously authorized by their parents, guardians or legal representatives, since they are considered responsible for the acts performed by the minors in their charge.

Transfers

Transfers: AUMENTIUM ​only transfers personal data to third parties to meet their contractual or legal obligations of the service, with suppliers or public or private organizations. In these cases the holder consents said assignments and in exercising their rights can be informed about them. 

International Transfer: ​AUMENTIUM communicates that in the development of its activity it uses the services of suppliers to whom it communicates data (as processing managers) with residence outside the European Economic Area, carrying out an international transfer of data. The suppliers are listed below so that their privacy policies can be checked:

• Google, Inc (Google Analitics): https://policies.google.com/privacy?hl=en-US

The international transfer of data means that the laws of the countries of the above-mentioned providers may differ from Andorran and European laws in terms of the recognition of rights or the non-existence of a supervisory authority that manages or is responsible for data protection. The legal basis for these transfers is consent or legitimate interest.

Security measures

Personal information provided or collected from users and whose manager is AUMENTIUM is structured in files; whether automated or not and AUMENTIUM  carries out a record of processing activities in accordance with current regulations.

In addition, for data processing AUMENTIUM establishes the appropriate technical and organizational measures that guarantee the confidentiality, integrity, availability, resilience of the data included in processing and that are necessary to guarantee its adequate security, including protection against unauthorized or illegal processing and against loss, destruction or accidental damage, and that tend to:

• –
  Pseudonymization and encryption of personal data.
• –
  The ability to guarantee the confidentiality, integrity, availability and permanent resilience of the processing systems and services.
• –
  The ability to restore availability and access to personal data quickly, in the event of a physical or technical incident.
• –
  The process of regular verification, evaluation and assessment of the effectiveness of technical and organizational measures to ensure the safety of processing.
  

User rights

The user can at all times exercise the rights recognized on their personal data, as well as the revocation of the consent for the aforementioned uses, by means of written communication with the request or right exercised addressed to AUMENTIUM at the address given in this contract as a AUMENTIUM address or via e-mail andorra@aumentium.com, including in both cases a photocopy of your NRT or other similar identification document.

The recognized rights that can be exercised are the following:

• ●
  Access. Request information about the data we process, the purpose of the processing and its legitimacy.
• ●
  Rectification. Request the modification of the data if they are incorrect.
• ●
  Suppression. Request the elimination of data in legally established cases
  
• ●
  Opposition. Stop processing the data, except for justified reasons.
  
• ●
  Right to the portability of the data. In case you want your data to be treated by another SUPPLIER, AUMENTIUM will facilitate the portability of your data to the new responsible party.
  
• ●
  Limitation of the processing . They will only be conserved by the AUMENTIUM for the exercise or the defence of claims.
  

For more information on the exercise of these rights, you may consult the rights section published by the Agència Andorrana de Protecció de dades.

If you consider that the processing of your personal data violates the regulations, you can file a claim with AUMENTIUM or with the Andorran Data Protection Agency (Agència Andorrana de Protecció de dades).

Nonetheless, the interested party will respond, in any case, regarding the veracity of the data provided, reserving VIEWED the right to exclude all false or illicit data, without prejudice to the other actions that proceed in Law. 

AUMENTIUM warns that, except for the existence of a legally constituted representation, no interested party may use the identity of another person and communicate their personal data. For such purposes, the interested party will be solely responsible for any damage, whether direct and/or indirect, caused to third parties or AUMENTIUM for the use of personal data of another person, or their own personal data when they are false, erroneous, not current, inadequate or irrelevant.

Anyone who communicates the personal data of a third party, will respond to the information obligation established in the law for when the personal data has not been collected from the interested party, and/or the consequences of not having informed him.

Acting as processing manager

In those cases in which AUMENTIUM accesses and/or deals with personal data whose responsibility and ownership pertains to its clients and acts as the processor in accordance with the provisions of current regulations, it undertakes to thoroughly regulate the content of the contracts of processing manager, regulating aspects such as:

• –
  Object, duration, nature and purpose of the processing.
• –
  Designate a Data Protection Delegate, if applicable.
• –
  Keep a Record of Activities including the types of personal data and stakeholder categories of the person responsible.
• –
  Obligation of the person in charge of processing personal data only following the documented instructions of the person in charge.
  
• –
  Conditions for the responsible party to give their prior, specific or general authorization to subcontracting.
  
• –
  Notification of data security violations.
  

Once the contractual provision has been fulfilled, the data will be destroyed or returned, as agreed between the parties. However, AUMENTIUM may continue to use the data for research, scientific and statistical purposes after anonymization.