Privacy policy

Under the framework of compliance with current legislation, as established by Regulation (EU) 2016/679 General Data Protection Regulation (GDPR), applicable regulations, and the Law on Information Society Services and Electronic Commerce 34/02 of July 11 (LSSICE), which aim to ensure and protect the processing of personal data and information security by our users, which is conducted under security levels preventing data loss or manipulation. The privacy policy applies to the navigation of users on our website. By reading and accepting this Privacy Policy, you may enjoy these Services.

Data controller

Who is responsible for processing your data?

  • Company name: HPLab History & Development SL (spinoff of the University of Zaragoza)
  • NIF: B22418461
  • Registered office: Av. Nª Sra. del Pilar, 30, 1º C
  • City: 22400 Monzón – Huesca
  • Country: España
  • Email: montearagon@hplab.es
  • Phone: (+34) 622 573 497
  • Website: www.castillodemontearagon.es
HPLAB (hereinafter “The CONTROLLER”) has a Data Protection Officer through whom the User can submit complaints, claims, and suggestions regarding the processing of their personal data, as well as exercise their rights. For this purpose, the User may contact the following email address: montearagon@hplab.es

Types of data collected

How do we obtain personal data?

The CONTROLLER collects personal data provided by users through forms on the website, our email addresses, and via telephone contact.

When filling out forms on the website, you must agree to both the portal’s terms of use and this privacy policy.

By agreeing to this privacy policy, you consent to The CONTROLLER processing and storing your personal data, in addition to all sections established in this document.

What personal data do we obtain?

The CONTROLLER collects the following data through the form on our website that the user has freely accessed: Name, telephone number, city, and email address.

Outside the website, usually by phone or email, The CONTROLLER will collect the necessary data to maintain a business relationship and the information required for invoicing its services: Name and surname or company name, postal address, postcode, city, province, country, VAT number or tax identification number, and banking details for invoice issuance.

For what purposes do we use your personal data?

To maintain a business relationship with you in compliance with legal, accounting, tax, and administrative obligations.

To respond to queries or provide quotes about our services or your inquiries.

The provision of personal data requested is mandatory; failure to provide them will result in the inability to provide the contracted services or respond to inquiries.

How long do we retain your personal data?

The User’s personal data will only be kept for the time necessary to fulfill the purposes for which it was collected, including fulfilling any legal, accounting, and regulatory reporting requirements.

In the event of exercising your right to deletion, your data will be blocked and retained in a restricted manner available to competent authorities for the period stipulated by law to address potential criminal, civil, or administrative liabilities.

Purpose of data processing

For what purpose do we process your personal data?

The CONTROLLER will collect and process your personal data for the following purposes:

Customer Registration and Management: To carry out the contracted service. In this case, the data will be kept for as long as the contract is in force, unless the Law establishes another period.

Responding to queries and sending quotes regarding our services or your inquiries.
If you do not agree with any of the above purposes, you can contact us via email at montearagon@hplab.es, identifying yourself and explaining your issue or problem.

Data shared with third parties

The CONTROLLER will not transfer users’ personal data to any third party without a legal basis legitimizing such processing. Except:
  • To Public Administrations in cases provided for by law.
  • To Accounting Advisors.
  • For measuring the use of services, an external provider like Google is used, which uses Cookies to perform analytical studies of website usage. The User can consult the cookie policy at any time on the “Cookie Policy” page.
What if you provide us with third-party data? If, during a relationship with us, you provide us with Third-Party data, please note that you are solely responsible for obtaining their prior consent to provide us with the data for each specific purpose as informed, and for informing them of the content of this Policy.

How do we protect your personal data?

The CONTROLLER understands the importance of ensuring the security of information with our clients and for this purpose, we have implemented maximum security measures to guarantee the confidentiality of communications. The SSL secure server (Secure Socket Layer) establishes a connection so that information is transmitted encrypted, ensuring that it is only readable by the client’s computer and our internet service provider’s server, complying with the pseudonymization conditions established by the GDPR. You can verify that the connection is being made through a secure server by checking one of the following:
  • Through the server’s address (URL), as a secure server starts with https:// instead of http://.
  • Through an indication in your browser program, where a closed padlock or a full key (instead of broken or open symbols) appears in one of the lower corners of the screen.

Your rights

What are your rights?

The user can exercise their rights recognized by the GDPR, including access, rectification, cancellation, and opposition by means of written communication addressed to The CONTROLLER at Pol. Industrial Montecicos, nave 13, 50638 Cabañas de Ebro, Zaragoza – Spain, or via our email montearagon@hplab.es, including their name, surname, address for notifications, date and signature of the request, telephone, and email contact details.

What rights can I exercise?

  • Right to request access to your personal data.
    • By exercising this right, you can obtain information about the processing of your personal data.
  • Right to request correction of your personal data if they are inaccurate.
    • You can correct or modify your data if they are inaccurate or incomplete to ensure that the information we have about you is correct.
  • Right to request deletion of your personal data.
    • You may request the deletion of your personal data when certain conditions are met. For example, illegal data processing, or when the purpose that motivated the processing or collection no longer exists. However, there are exceptions where this right will not apply. For instance, when the right to freedom of expression and information must prevail.
  • Right to object.
    • You can object to the processing of your personal data: when for reasons related to your personal situation, the processing of your data must cease, unless a legitimate interest is proven, or it is necessary for the exercise or defense of claims, or when the processing is for direct marketing purposes.
  • Right to restriction of processing.
    • You may request that we restrict the processing of your data while verifying the accuracy of the data if the processing is unlawful, but you oppose the deletion of your data and request the restriction of processing instead when you need it for a claim or when you have objected to the processing of your data for the fulfillment of a mission of public interest or for the satisfaction of a legitimate interest, which must be verified. In these cases, we will only retain them for the exercise or defense of claims.
  • Right to data portability.
    • You may request the portability of your data in electronic format and the possibility of transmitting them to another entity. We may need to ask you for specific information to help confirm your identity and ensure your right to access your personal data (or exercise your other rights). This is a security measure to ensure that your personal data is not disclosed to anyone who does not have the right to receive it. In an effort to speed up our response, we may contact you to request additional information regarding your request.

Use of cookies

We collect information through the use of cookies. Cookies are small text files that are automatically stored on your computer or mobile device when you visit a website. You can find more detailed information in our cookie pollicy.

Minors

Children under 14 years of age should not use our company’s services without the consent of their parents or guardians. If we detect that the user is a minor, we reserve the right to request a copy of their ID card or authorization from their parents and guardians.

Confidentiality

The CONTROLLER is obligated according to the Law to keep personal data accessed confidential, even after the commercial relationship between both parties has ended.

User consent

The user declares to have read these general conditions or terms of service, accepting and consenting fully and expressly to all that is stipulated in each of them.

Contact us

  • Company name: HPLab History & Development SL (spinoff of the University of Zaragoza)
  • NIF: B22418461
  • Registered office: Av. Nª Sra. del Pilar, 30, 1º C
  • City: 22400 Monzón – Huesca
  • Country: España
  • Email: montearagon@hplab.es
  • Phone: (+34) 622 573 497
  • Website: www.castillodemontearagon.es