Privacy Policy

HAEGIA is committed to compliance with Spanish and European personal data protection regulations, and guarantees full compliance with the obligations set out, as well as the implementation of the security measures provided for in the General Data Protection Regulation (GDPR) (EU) 2016/679, of 27 April, and in Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD and GDD, hereinafter LOPD).

In accordance with these regulations, we inform you that the use of our website may require certain personal data to be provided via contact forms, or by sending emails, and that this data will be processed by HAEGIA, the data controller, whose details are:

  • Company Name: Cristina Abuin Martínez
  • Trade NameHAEGIA
  • CIF02264211E
  • Registered OfficeC/Ferrocarril 6, 4ºB, 28850, Torrejón de Ardoz, Madrid,
  • Emailcontact@haegia.com

Obtaining and Processing Personal Data

Personal data is any information relating to an individual: name, email, address, telephone number, NIF/NIE… Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by their internet service provider.

HAEGIA, As the Data Controller, you have a duty to inform Users of your website about the collection of personal data that may take place, either through sending an email or by completing the forms on the website.

Only the precise data required to perform the contracted service, or to adequately respond to your request for information, will be obtained. The data collected is for identification purposes, and represents the minimum reasonable amount necessary to carry out the activity. In particular, no specially protected data will be collected at any time. Under no circumstances will the data be used for any purpose other than that for which it was collected.

Contact forms/email

PurposeTo respond to your information request submitted via our contact form(s).

LegitimacyThe legal basis authorising this processing is the User's consent, which may be withdrawn at any time.

Data transferpersonal data will be processed via servers managed by hosting, who will be considered Data Processors.

Minors

Only individuals aged 14 and over may provide personal data on this website. As required by the LOPD and GDD, in the case of individuals under 14 years of age, parental or guardian consent will be mandatory for us to process their personal data.

On the other hand, only persons over 18 years of age may contract our services. In the case of minors under 18 years of age, the consent of their parents or legal guardians will be a mandatory condition for us to provide the services offered, unless the minor is emancipated.

Safety Measures

Users of the HAEGIA website are informed that the security, technical, and organisational measures at our disposal have been adopted to prevent the loss, misuse, alteration, unauthorised access, and theft of data, thereby guaranteeing the confidentiality, integrity, and quality of the information contained therein, in accordance with current data protection regulations. Personal data collected in forms are processed solely by HAEGIA personnel or by designated Data Processors.

The HAEGIA Website also has SSL encryption, which allows the User to securely send their personal data through the website's contact or registration forms.

Veracity of data

The User declares that all supplied data is true and correct, and undertakes to keep it updated. The User will be responsible for the veracity of their data and will be solely liable for any conflicts or disputes that may arise due to their falsity. It is important that, in order for us to keep personal data updated, the User informs HAEGIA whenever there has been any modification to it.

Data transfer

HAEGIA will not yield or communicate your data to any third party, except in legally provided cases or when strictly necessary for the provision of a service. Specifically, data may be ceded to:

  • Technology or IT service providers
  • Payment Service Providers
  • Courier and parcel companies
  • Third parties or intermediaries, acting as service providers, operating in our own name (management, consultancy…).

Data transfers will take place in strict confidence, employing necessary measures such as signing confidentiality agreements or adhering to the privacy policies established on their respective websites. The User may refuse the transfer of their data to the Data Processors by written request, through any of the aforementioned means.

Furthermore, in those cases where it is necessary, customer data may be transferred to certain bodies, in compliance with a legal obligation: Spanish Tax Agency, Labour Inspectorate, etc.

User Rights Exercise

The LOPD and GDPR grant data subjects the possibility to exercise a series of rights related to the processing of their personal data. To do so, the User must contact, providing documentation that proves their identity (DNI or passport), by email to contacto@haegia.com or by written communication to the address indicated in our Legal Notice. Said communication must include the following information: User's full name, the purpose of the request, the address, and supporting documents.

The exercise of rights shall be carried out by the User themselves. However, they may be exercised by an authorised person as the legal representative of the User, provided that documentation proving such representation is submitted.

The User may request the exercise of the following rights:

  • Right to request the Access to personal data, which is the right to obtain information on whether one's own personal data is being processed, the purpose of the processing that is, where applicable, being carried out, as well as the information available on the origin of such data and any communications made or foreseen thereof.
  • Right to request your Rectification, should the personal data be incorrect or inaccurate, or suppression of data that prove to be inadequate or excessive.
  • Right to request the limitation of your treatment, in which case only data strictly necessary for the establishment, exercise or defence of legal claims will be retained by HAEGIA.
  • Right to oppose to processing: refers to the data subject's right not to have their personal data processed or to cease processing when their consent is not necessary for processing, or when such data is contained in commercial prospecting files, or when it is intended to make decisions concerning the data subject based solely on the automated processing of their data, unless legitimate reasons or the exercise or defence of potential claims require continued processing.
  • Right to Portability From the data: In the event that you wish for your data to be processed by another company, HAEGIA will facilitate the portability of your data in an exportable format.

In cases where consent has been given for a specific purpose, the User has the right to withdraw consent at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal.

We undertake to exercise all these rights within the maximum statutory period (1 month).

If a User believes there is an issue with how HAEGIA is handling their data, they may direct their complaints to the Security Officer or the relevant data protection authority, with the Spanish Data Protection Agency being the designated authority in Spain.

Data retention

Personal data of Users who use the contact form or send us an email requesting information will be processed for the time strictly necessary to respond to the information request, or until the consent granted is revoked.

Personal data of clients will be processed until the end of the contractual relationship. The retention period for personal data will be the minimum necessary, and may be maintained until:

  • 4 years: Law on Infringements and Sanctions in the Social Order (obligations regarding affiliation, registrations, deregistrations, contributions, payment of wages…); Arts. 66 et seq. General Tax Law (accounting books…)
  • 5 years: Article 1964 Civil Code (personal actions without a specific time limit)
  • 6 years: Article 30 Commercial Code (accounting books, invoices...)
  • 10 years: Art. 25 Law on the Prevention of Money Laundering and Terrorism Financing.
  • No deadline: disaggregated and anonymised data.

For its part, the personal data of Users who subscribe to the newsletter will be retained indefinitely, until the consent given is withdrawn.

In the case of processing candidate data (CVs), HAEGIA may store your curriculum for a maximum of two years for inclusion in future calls for applications, unless the candidate states otherwise.

Social media

HAEGIA has profiles on some of the main social media platforms, and in all cases acknowledges that it is the data controller for the personal data of its followers, fans, subscribers, commenters and other user profiles (hereinafter, ‘followers’) published by HAEGIA.

The purpose of data processing by HAEGIA, When the law does not prohibit it, it will be to inform their followers about their activities and offers, by any means permitted by the social network, as well as to provide personalised customer service. The legal basis legitimising this processing will be the consent of the data subject, which may be withdrawn at any time.

Under no circumstances HAEGIA will extract data from social networks, unless explicit and express consent is obtained from the User (for example, for the execution of a competition).

Staff Recruitment

The applicant who sends electronic communications to HAEGIA, For the purpose of accessing the personnel selection processes of the responsible party, you authorise us to analyse the documents submitted (e.g., your CV), all content directly accessible via internet search engines (e.g., Google), profiles maintained on professional social networks (e.g., LinkedIn), data obtained in selection tests and information disclosed in the job interview, with the aim of evaluating your candidacy and, where appropriate, offering you a job. In the event that the candidate is not selected, HAEGIA We may keep your CV on file for a maximum of two years, to be considered for future vacancies, unless you state otherwise. The legal basis for this processing is the data subject’s consent, which may be withdrawn at any time.

Confidentiality

The information supplied by the User shall, in all cases, be considered confidential and shall not be used for any purpose other than those described herein. HAEGIA undertakes not to disclose or reveal information about the User's claims, the reasons for the requested advice, or the duration of its relationship with them.

Validity

This privacy and data protection policy has been drawn up on 17/06/2026. It may vary depending on changes to legislation and case law as they arise; it is the data subject’s responsibility to read the updated document in order to be aware of their rights and obligations in this regard at all times.