PRIVACY POLICY

Below, we inform you about the privacy policy that will be applied in those cases in which the interested party, through browsing the website www.weset.io and weset.app (hereinafter, the “Website”), provides us with personal data. We would like to inform you of our updated Privacy Policy and the use of the personal data you provide us with, including the data we collect when you browse our Website.

IDENTIFICATION OF THE DATA CONTROLLER

Holder: Weset Corporation, (hereinafter referred to as “WESET”)
NIF/CIF: B-16989006
E-mail: [email protected]

INFORMATION AND CONSENT

By accepting this Privacy Policy, the Web Data Subject (hereinafter, the “Data Subject“) GIVES THEIR informed, express, free and unequivocal CONSENT to process the personal data collected through the Website or the Application, either through the forms provided for this purpose or through the information collected by cookies.

Likewise, the Data Subject consents to these data being processed by the Data Controller in order to provide its services by applying the organisational and security measures required by the applicable data protection regulations.

All personal data requested from the Data Subject on the Website are mandatory, and it is not possible to provide the service without the corresponding data processing by the Data Controller. However, browsing the Website is free of charge.

The Data Subject guarantees that the personal data provided to the Data Controller are true and accurate, so that WESET shall not be liable for any incident arising from the inaccuracy or falsity of the information provided by the Data Subject, beyond the possibility that the Data Subject has to exercise his/her right of rectification.

In the event that the Data Subject provides us with data of third parties, the Data Subject, as data controller or data processor, is responsible for complying with all applicable data protection regulations. Furthermore, the Data Subject warrants that he/she has obtained all legally required consents, authorisations and/or approvals before including personal data of third parties on the Website.

ORIGIN, PURPOSE AND LEGAL BASIS

The personal data of the Data Subject, or of third parties, which are assigned by the Data Subject, will be treated confidentially and will be incorporated into the corresponding processing activity of the Data Controller.

The processing activities carried out by the Data Controller are as follows:

ACTIVITY: ADVERTISING BY ELECTRONIC MEANS
PROVENANCE	Information provided directly by the Data Subject through the KYC procedure on the Website.
LEGAL BASIS	General Data Protection Regulation, in particular: Art. 6.1, a) processing is based on the unambiguous consent of the Data Subject.
PROCESSING PURPOSES	Sending of advertising and commercial communications related to the activity of the Data Controller, via e-mail or postal address.
COLLECTIVE	Natural and legal persons
DATA CATEGORY	Name and surname; NIF / DNI / NIE / PASSPORT; Address; E-mail
TARGET	The Data Controller may assign the personal data provided to recipients and service providers, provided that it is limited to the purpose for which it is provided, as well as to the transfers provided for in the applicable legislation. The categories of recipients to which the Data Controller may assign the personal data of the Data Subject are: Data Processors linked to the purpose of the Data Controller; Service providers linked to the purpose of the Data Controller. The list of Data Processors and/or Service Providers with access to data without authorisation for processing.
INTERNATIONAL TRANSFER	No international transfer of data is expected.
STORAGE PERIODS	30 days from revocation of consent

ACTIVITY: CONTRACT PERFORMANCE
PROVENANCE	Collection of data through KYC from clients, in relation to the activity of the Data Controller.
LEGAL BASIS	General Data Protection Regulation, in particular: Art. 6.1. b): the processing is based on the performance of a contract.
PROCESSING PURPOSES	Management and development of the “Contract” between stakeholders.
COLLECTIVE	Natural or legal persons
DATA CATEGORY	Name and surname; NIF / DNI / NIE; Telephone; Address; E-mail; Name and surname of the legal representative in the case of a legal entity.
TARGET	The Data Controller may assign the personal data provided to recipients and providers of services provided, provided that it is limited to the purpose for which it is provided, as well as to the transfers provided for in the applicable legislation.
TRANSFER	No automated or international transfer of data is expected.
STORAGE PERIODS	The deadline for erasure of such data is 5 years from the end of the liabilities arising from the guarantee contract.

ACTIVITY: CONTACT OR CONSULTATIONS
PROVENANCE	From the Data Subject himself/herself by sending e-mails to the address indicated, or through the form provided on the Website.
LEGAL BASIS	General Data Protection Regulation, in particular: Art. 6(1)(f): processing is necessary for the purposes of the legitimate interests pursued by the Data Controller.
PROCESSING PURPOSES	To attend to and respond to consultations requested by the Data Subject.
COLLECTIVE	Natural or legal persons.
DATA CATEGORY	Name and surname; Telephone; E-mail; metadata.
TARGET	The assignment of data to third parties is expected, in order to collect further information and to comply with legal obligations or with the prior unambiguous and informed consent of the Data Subject.
INTERNATIONAL TRANSFER	No international transfer of data is expected.
STORAGE PERIODS	The data will be kept for the period of time strictly necessary to fulfil the purpose for which they were collected. In any case, the maximum storage period will be 1 year.

DATA OF THE DATA SUBJECT

The Data Subject guarantees that he/she is over eighteen (18) years of age and that the data provided is true, accurate, complete and up to date, being responsible for any direct or indirect damage or harm that may be caused as a consequence of the breach of this obligation, beyond the possibility that the Data Subject has to exercise his/her right to rectify it.

In the event that the data provided belong to a third party, the Data Subject guarantees that he/she has informed said third party of the aspects contained in this document and obtained his/her authorisation to provide his/her data to the Data Controller for the aforementioned purposes.

The Data Controller cannot guarantee the absolute invulnerability of the systems, and therefore assumes no liability for damages arising from alterations that third parties may cause in computer systems, electronic documents or files.

COOKIES POLICY

In accordance with the provisions of the GDPR and Law 34/2002, on Information Society Services, all personal data obtained through cookies while using the Website will be processed in accordance with the provisions of the Cookies Policy.

EXERCISE OF RIGHTS

In accordance with the provisions of the GDPR, we inform you that you can exercise your rights of access, rectification, erasure, opposition, data portability and limitation of processing directly with the Data Controller.

In order to exercise these rights, the Data Subject may send a message to this effect, indicating name, surname, email, ID card or passport number, to the following email address: [email protected].

The Data Subject may also exercise his or her rights by lodging a complaint with the Spanish Data Protection Agency.

ACCEPTANCE OF THE PRIVACY POLICY

The Data Subject ACKNOWLEDGES AND AGREES TO HAVE READ AND UNDERSTOOD this Privacy Policy, the contents of which constitute the entire agreement between the Data Subject and the Data Controller with respect to the use and processing of his/her personal information. The Data Subject expressly agrees to be bound by the terms of this Privacy Policy to the fullest extent and scope, without exception to any of its provisions.

The express acceptance of the present Privacy Policy shall be indispensable when the User registers through the Website by filling in the corresponding registration form.