Privacy Policy

Below, we inform you about the processing of your personal data through the privacy policy -hereinafter, policy-.

Sustainable Intelligent Transportation Systems, S.L -hereinafter, SUITS-, with registered address at calle Albacete, nº 3, 1ª Planta Edificio Mizar, Puerta A,B, 28027 Madrid, with N.I.F B87916383, provides the privacy policy on the website located at the URL https://www.sustainableits.com/web -hereinafter, website- to offer you information on how we process your personal data and how we protect your privacy and information. This policy is an integral part of the Legal Notice.

WE WOULD APPRECIATE IT IF YOU COULD TAKE A FEW MINUTES TO READ OUR PRIVACY POLICY. IT WON’T TAKE MUCH TIME AND YOU CAN LEARN HOW WE TREAT AND PROTECT YOUR PERSONAL DATA.

BRIEF INTRODUCTION

This policy applies to all users of the website -hereinafter, the user or the users- whether or not they are clients of SUITS, and it is made available at the URL https://www.sustainableits.com/web/ as well as in the interactions that the user makes with SUITS through the specified website.

SUITS reserves the right to modify this policy to adapt it to future legislative, doctrinal, or jurisprudential developments that may apply, or for technical, operational, commercial, corporate, or business reasons, and in any case whenever it deems appropriate. We will inform you of changes or updates through the website or by other means deemed appropriate. In any case, it is recommended that each time you access this platform, you read this policy in detail because continuing to use the functionalities provided by SUITS after being notified of modifications will mean that you agree with them, except in cases where your express consent is required.

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?

The entity responsible for the processing of personal data is Sustainable Intelligent Transportation Systems, S.L -hereinafter, SUITS-, with registered address at calle Albacete, nº3, Edificio Mízar, 1ª planta, Puerta A,B, 28027 Madrid, Spain, with N.I.F B83746107.

WHO IS THE DATA PROTECTION OFFICER (DPO) OF SUITS?

To ensure proper management in the processing of your data, SUITS has appointed a Data Protection Officer -hereinafter, DPO-, with whom you can contact regarding all issues related to the processing of your personal data, as well as to exercise your rights as provided in the applicable regulations.

You can contact our DPO through the following contact details:

• Postal address: calle Albacete, nº3, Edificio Mízar, 1ª planta, Puerta A, B, 28027 Madrid, Spain.
• Email address: privacidad@eysaservicios.com.

FOR WHAT PURPOSE AND LEGAL BASIS DO WE PROCESS YOUR DATA?

1. Contact, management, and processing of queries and requests from website users. The contact form is available on the website.
   • Purpose: The personal data of users who contact SUITS through any of the contact channels provided on the website to receive queries or requests from users will be processed for the purposes of maintaining contact between the parties, managing website users, providing customer or user support services, and managing and processing requests.
   • Data processed: (i) identification data, such as your name and surname; (ii) contact details, such as your contact phone number, email address; and (iii) professional data, such as the company you work for.
   • Legal basis: the management and processing of the legal relationship between the user and SUITS, that is, in the management of your own request, in maintaining contact between the parties, and, where applicable, in providing the service that the user has requested.
2. Cookie management on the website.
   • Purpose: if you accept our cookie policy, particularly for analysis, personalization, advertising, and social media cookies, the personal data of users may be processed by SUITS to (i) track and analyze their behavior on the website, such as counting visits and traffic sources to evaluate and improve website performance; (ii) provide better functionality and personalization of the website, such as allowing the user to access certain criteria on their device like language, browser type, etc.; (iii) manage advertising; and (iv) manage social media services we have added to allow users to share our content, as well as create a profile of their interests by monitoring their browsing on other websites. You can find more information about the cookies we use in our cookie policy.
   • Data processed: browsing data, such as IP address and the domain from which access is obtained, date and time of visit, etc.
   • Legal basis: the explicit and express consent for the processing of your personal data for one or more specific purposes. In some cases, the satisfaction of legitimate interest, whether of SUITS or third parties, associated with the proper technical usability, management, maintenance, development, and evolution of the website and related tools, network, and information systems (Art. 6.1 f) GDPR) will also apply.
3. Sending newsletters and information about events.
   • Purpose: We will process your data to provide you with commercial information about our products and services, our quarterly newsletter, and information about invitations to events such as trade fairs, conferences, etc.
   • Data processed: (i) identification data, such as name and surname; and (ii) contact details, such as phone number or email address.
   • Legal basis: Your consent or legitimate interest, provided that the legal requirements for it are met. For example, within the established legal limits, SUITS may have a legitimate interest in generating interest and promoting the hiring of its products, as well as improving its image.
4. Sending invitations and managing your registration/participation in the event, organization, and logistics.
   • Purpose: Managing your data when you contact SUITS through the provided contact channels, whether through the contact form, phone call, in-person meeting/contact, sending emails by the user, or any other means.
     Also, your data will be processed to maintain contact between the parties and manage the queries you send us through the enabled channels.
   • Data processed: (i) identification data, such as name and surname; (ii) contact details, such as phone number or email address; and (iii) professional data, such as the company you belong to, the role/function you perform in the professional field.
   • Legal basis: (i) the legitimate interest of SUITS in creating and developing a network of contacts for the development and maintenance of public relations and/or networking with its stakeholders, as well as for the exchange of opinions on issues related to sectoral interests or related to the activity, to contribute to the development of the communities in which it conducts its business.
     To manage your registration and/or participation in the event, (i) it will be the consent you give us when registering through the previously enabled corporate channels; and, (ii) in the management and processing of the legal relationship established between the user and SUITS with the invited user, or the person invited to participate as a speaker or panelist, that is, in managing your own request, maintaining contact between the parties, holding the event, to ensure it is conducted with the necessary guarantees and that all attendees can participate under the specified conditions.
5. Capturing corporate images and videos.
   • Purpose: capturing images and videos for the creation of audiovisual material and its subsequent dissemination in corporate communication media online and offline, e.g., corporate website, social media profiles, etc.
   • Data processed: (i) photographs; (ii) image recordings.
   • Legal basis: (i) If general shots and ambient sound are involved, the legal basis will be the legitimate interest of SUITS in publishing and promoting the “SUITS” image and brand with the aim of giving it visibility and enhancing its public image within the EYSA group in line with its ideals and values through the organization of events; (ii) if images or recordings are captured during the event, directly or indirectly by SUITS, where close-ups are captured that can directly recognize your image and/or voice, the processing of your data will be legitimized by your consent. Intentionally posing for a photograph implies your consent, i.e., looking directly and intentionally at the camera and/or technology intended for capturing images. In addition to consenting to the processing of images, you also consent to the free transfer of your image for the use of known technical means today and those that may be developed in the future, for the maximum period allowed by law and without geographical limitation. If you do not want to appear in any images and/or recordings, we advise you to avoid posing, as well as areas that may be designated as specific photography zones.
6. Access control.
   • Purpose: managing your data to verify your identity and authorized access to our facilities and, in the case of access to SUITS corporate events, verifying the identity and authorized access to the event. This is to exercise due diligence to protect the security of people and facilities.
   • Data processed: (i) identification data, such as name, surname, and document number that proves your identity.
   • Legal basis: the legitimate interest of SUITS in verifying the identity of visitors or, in the case of events, the attendees who have previously registered.
7. Video surveillance.
   • Purpose: (i) ensuring the security of people, property, or facilities and, where appropriate, investigating security incidents that may occur; and, (ii) access control to the facilities.
   • Data processed: the image of people accessing or attempting to access the premises through the installed cameras.
   • Legal basis: to ensure the security of people, property, or facilities, as well as access control to the facilities, the legal basis will be the legitimate interest pursued by the data controller.
8. Fraud prevention.
   • Purpose: the personal data of users will be processed to comply with established legal and corporate standards, as well as to cooperate with competent authorities to prevent crimes or fraud.
   • Data processed: identification and contact data, as well as data related to commercial transactions.
   • Legal basis: the legitimate interest of SUITS, which consists of ensuring reasonable use of the resources provided on the website and reducing the risk of falling victim to fraud or scam operations. If you wish to obtain more information about the legitimate interest of SUITS regarding this purpose, you can request information at privacidad@eysaservicios.com.

When the legal basis for processing your personal data is your consent, we remind you that you have the right to withdraw it at any time easily and free of charge by writing to privacidad@eysaservicios.com.

WHAT ARE THE SOURCES OF THE PROCESSED DATA?

The data that SUITS processes as a result of interactions you make through our website originates from the following sources:

1. Data provided by the user through the completion of spaces for managing communication with users provided by SUITS.
2. Data provided and/or generated as a result of the development, processing, and management of the relationship you establish with SUITS.
3. Data generated as a result of the user’s browsing and use of the website.

Additionally, SUITS will process those data directly obtained by you.

HOW LONG DO WE KEEP YOUR DATA?

The personal data provided will be kept for the time determined based on the following criteria: (i) legal obligation of retention and; (ii) request for deletion by the interested party in the cases where applicable. You can request additional information about retention periods at privacidad@eysaservicios.com.

In general, when personal data is no longer necessary for the processing purposes for which it was collected, it will be blocked, remaining available to the competent authorities for the possible purification of legal responsibilities in accordance with the applicable regulations, and cannot be used for other purposes. Once the legal periods corresponding to the prescription periods of potential legal actions have elapsed, your data will move from being blocked to being deleted or, if applicable, securely anonymized by SUITS (anonymized/non-personal data).

WHAT ARE THE CONSEQUENCES OF NOT PROVIDING YOUR DATA AND WHAT SHOULD YOU GUARANTEE?

We avoid requesting more data than strictly necessary for each purpose; therefore, we will request the minimum and essential data to carry out personal data processing.

It is necessary to inform you that the lack of provision of your personal data could result in the inability to: (i) navigate the website correctly, such as disabling technical cookies; (ii) process your specific request or petition, such as insufficiently completing the forms that may be enabled on the website.

In any case, the information and personal data you provide must be: (i) sufficient, although adjusted, limited, and proportionate to the website forms; (ii) accurate, updated, and truthful to adequately verify your identity and access the website services.

SUITS informs you that when personal data is collected through a form provided on our website, it will be necessary to register at least the data indicated in the form as mandatory marked with an (*). If you do not provide such data considered necessary, SUITS will not be able to manage the requested service or query.

If you provide data of a third party, you guarantee that you have previously informed the third party about the entire content of this privacy policy and obtained their consent for the processing of their data by SUITS.

We inform you that you will be responsible for the data and personal information you provide to SUITS and, if applicable, for the services you require or contract.

To provide your personal data through any enabled means, such as through our website, you must be over eighteen (18) years of age. By providing data to SUITS, you declare and guarantee that you are over eighteen (18) years of age, taking responsibility for such a decision.

DO WE SHARE YOUR PERSONAL DATA WITH THIRD PARTIES?

In general, we do not make your data available to third parties. SUITS does not carry out any data transfer or communication unless there is a reasonable need or prior obtaining your consent. In this regard, your personal data may be communicated to the following recipients:

1. Purpose: Your data will be communicated to other EYSA Group organizations of which SUITS is a subsidiary, where necessary for the proper organization of events -including their security-, for internal administration purposes, or for publishing audiovisual material captured during the events on the websites of each organization. Your data may also be transferred to public administration bodies when necessary for the organization of events in which these bodies participate.
   Legal basis: the legitimate interest of SUITS in the proper management and holding of the event to ensure it is conducted with full guarantees and that all attendees can participate appropriately.
2. Purpose: when certain service providers for accommodation, transportation, and/or travel agencies are required.
   Legal basis: the application of pre-contractual measures at the request of the interested party and the legitimate interest of SUITS in the proper management and holding of the event to ensure it is conducted with full guarantees and that all attendees can participate appropriately.
3. Purpose: to comply with a judicial procedure, legal obligation, data may be transferred to public administrations in the cases provided by law, to the State Security Forces and Corps, and to the Courts and Tribunals.
   Legal basis: Compliance with a legal obligation.
4. Purpose: access control. It is possible that we may need to communicate your personal data to the access control point of the building where our facilities are located, to verify your identity and authorized access.
   Legal basis: the legitimate interest.

Similarly, it is possible that third-party suppliers of SUITS may access your personal information in providing services such as the necessary technical infrastructure of the website. In any case, third-party providers are configured as data processors and operate following the instructions and on behalf of SUITS in compliance with applicable regulations.

ARE INTERNATIONAL TRANSFERS OF YOUR PERSONAL DATA MADE?

We inform you that, in general, no international transfers of your personal data are foreseen, adopting the necessary measures and guarantees by SUITS in this area by the applicable data protection regulations. Notwithstanding the foregoing, in our cookie policy, you will find information about the use of cookies by third parties that could carry out international transfers of personal data. You can consult the privacy information of the third parties serving cookies on this website through our Cookie Policy.

WHAT ARE YOUR RIGHTS, WHAT DO THEY MEAN, AND HOW CAN YOU EXERCISE THEM?

You can exercise the rights of access, rectification, deletion, portability, limitation of processing, and opposition through the following means:

1. 1. • Written request addressed to calle Albacete, nº3, Edif. Mízar, 1ª planta, Puerta A,B – 28027 Madrid – Spain. It must contain an express reference to “data protection”.
      • Email address: privacidad@eysaservicios.com.

In both cases, the rights holder must prove their identity and, only if you have not previously provided data that allows us to identify you or if the circumstances require enhanced accreditation such as access to certain personal data, or if the provided means are insufficient, such as the email with which you registered, we may request additional information such as a copy of the front of your identity document.

SUITS will provide the requested information within a maximum period of one (1) month from the receipt of the request. This period may be extended by another two (2) months if necessary, considering the complexity and number of requests.

SUITS informs you that if you consider your rights in personal data protection to be violated, you can file a complaint with the competent Data Protection Authority (in Spain, the Spanish Data Protection Agency www.aepd.es). In any case, we recommend that before filing any complaint with the AEPD, you contact the Data Protection Officer of SUITS (privacidad@eysaservicios.com) to analyze the specific situation and respond to your request or exercise with an effective and amicable solution.

ARE SECURITY AND PROTECTION MEASURES APPLIED TO YOUR PERSONAL DATA?

Considering the nature, scope, context, and stated purposes of the processing, as well as the risks of varying likelihood and severity for your rights and freedoms, SUITS applies appropriate technical and organizational measures to ensure the security and protection of your personal data, which SUITS will review and update when necessary or as circumstances require.

VALIDITY AND MODIFICATION OF THE PRIVACY POLICY

This policy is effective as of July 16, 2024.