Privacy policy
Commitment to data protection
ORIGEN CORPORACIÓN, in its commitment to the Protection of the Personal Data of its clients, has reviewed all its business processes to bring them into line with EU legislation, the General Data Protection Regulation (GDPR), implementing the appropriate security measures in accordance with the results of the analysis carried out, and has updated its privacy policies and, consequently, this Legal Notice.
The User and/or Client warrants that the data provided are true, accurate, complete and up to date, and is liable for any damage or loss, direct or indirect, that may arise from any breach of this obligation. If the data provided belong to a third party, the User and/or Client warrants that they have informed that third party of the matters contained in this document and obtained their authorisation to provide their data to ORIGEN CORPORACIÓN for the purposes indicated.
The Portal may host blogs, forums and other social networking applications or services in order to facilitate the exchange of knowledge and content. Any personal information provided by the user may be shared with other users of that service, over whom ORIGEN CORPORACIÓN has no control.
For the purposes of technical security and system diagnostics, in anonymised or pseudonymised form, ORIGEN CORPORACIÓN may record the IP address (the identification number of the device’s Internet access, which allows devices, systems and servers to recognise and communicate with each other). This information may also be used for website performance analysis purposes.
Data controller
The Controller of the data voluntarily provided by the user is:
ORIGEN CORPORACIÓN
Tax ID (CIF): B67738070
Registered office: Parque Empresarial EXPO ZARAGOZA Avda. Ranillas Nº1A, Planta 3º – Oficina 3A 50018, Zaragoza
Purposes of the processing of personal data
The personal data voluntarily provided by the user will be included in processing records owned by ORIGEN CORPORACIÓN for the following purposes:
- Processing and managing the request for information and/or advice, pre-order or order made by the User and/or Client through this site, by telephone or by email.
- Managing and monitoring the services offered through the website, by telephone or by email, relating to advice and the provision of services.
- Sending commercial information about services and products of ORIGEN CORPORACIÓN that may be of interest to the user, provided they have expressly accepted it.
- Managing the Users of the Website.
- Providing the services included on the Website and/or providing the information requested, whether via the website, by email or by telephone. Emails may report confirmation of their receipt and reading.
- Managing the contractual or commercial relationship established between ORIGEN CORPORACIÓN and the Users and/or Clients.
- Managing the fulfilment of the contractual or non-contractual obligations assumed by ORIGEN CORPORACIÓN.
- Managing and maintaining a single register of Clients in the promotional system of ORIGEN CORPORACIÓN, where this has been expressly accepted.
- Where the User expressly consents, sending advertising communications and commercial information about ORIGEN CORPORACIÓN regarding its activities, products, services, offers, competitions and special promotions, as well as documentation of various kinds that may be of interest or use to the User and/or Client.
Information on the processing of data for sending communications
The data used or provided in informative and/or promotional communications are processed by ORIGEN CORPORACIÓN for the purpose of sending electronic communications of an informative nature about services, activities, publications, celebrations and social and professional events of ORIGEN CORPORACIÓN that may be of interest to the User and/or Client; the monitoring and optimisation of marketing campaigns will be carried out using technologies designed for that purpose.
Consent to receive these communications may be withdrawn at any time in each of the communications received, using the mechanism provided for that purpose.
Personal data of third parties
Where personal data are provided by a person other than the user or data subject who acts as their representative, that representative warrants that they have informed the data subject of this Privacy Policy and obtained their authorisation to provide their data to ORIGEN CORPORACIÓN for the purposes indicated. They also warrant that the data provided are accurate and up to date, and are liable for any damage or loss, direct or indirect, that may arise from any breach of this obligation.
Retention period of personal data
The personal data provided will be kept for as long as the contractual relationship is maintained, their erasure is not requested by the data subject and they do not have to be deleted because they are necessary for compliance with a legal obligation, for the establishment, exercise or defence of claims, or when their retention is required to allow the application of a benefit, discount or promotional advantage for the client.
If the user withdraws their consent to the processing of their data or exercises the rights of cancellation or erasure, their personal data will be kept blocked and at the disposal of the Administration of Justice for the legally established periods, in order to deal with any liabilities arising from their processing.
Legal basis for the processing of personal data
ORIGEN CORPORACIÓN is entitled to process personal data on the basis that:
- The User and/or Client has given their explicit consent for the purposes described in section 2 of this Policy that require the processing of the User’s and/or Client’s data.
- The User and/or Client has provided their personal data in the context of a contractual or pre-contractual relationship in order to deal with their request for the management of services related to their products.
- The User and/or Client has given their informed consent to receive commercial communications relating to products and/or services of ORIGEN CORPORACIÓN that may be of interest to the User and/or Client, to the installation of tracking systems that report on browsing habits in accordance with the Cookie Policy, or to the sending of information requested through contact forms.
There are legal obligations that require the processing of personal data, in accordance with the services provided.
The legal basis for the processing of the personal data of Users and/or Clients by ORIGEN CORPORACIÓN lies in points (a), (b) and (c) of article 6(1) of Regulation (EU) 2016/679 of 27 April and in the Spanish Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD) of 2018.
Categories of recipients
The personal data of Users and/or Clients of ORIGEN CORPORACIÓN may be disclosed to the following categories of recipients:
- The companies of the Origen Group, for internal administrative management and, where the User and/or Client has expressly consented, for sending commercial communications about their products and services.
- Entities with which it has collaboration agreements to enable the performance and proper fulfilment of the contract signed by those users and/or clients.
- Administrative agencies (gestorías) with which ORIGEN CORPORACIÓN has collaboration agreements to enable the performance and proper fulfilment of that contract.
- Insurance companies with which ORIGEN CORPORACIÓN has collaboration agreements to enable the performance and proper fulfilment of the required insurance contracts.
- Financial institutions with which ORIGEN CORPORACIÓN has collaboration agreements to enable the performance and proper fulfilment of the corresponding contract.
- IT service providers.
- Public Administrations and Bodies, for the fulfilment of obligations directly enforceable against ORIGEN CORPORACIÓN and/or where the corresponding legal authorisation exists.
International transfers
ORIGEN CORPORACIÓN does not currently carry out international data transfers.
Rights of data subjects
The User and/or Client may exercise before ORIGEN CORPORACIÓN the rights of access, rectification or erasure, restriction of processing, objection and portability, and the right not to be subject to automated individual decisions. They may also withdraw their consent where they have given it for a specific purpose, and may change their preferences at any time.
The User and/or Client may exercise any of the rights described in the previous paragraph by sending an email stating the right being exercised to ORIGEN CORPORACIÓN at: hola@origen.bio.
The User and/or Client is informed that they may submit any complaint regarding the protection of personal data to the Spanish Data Protection Agency (Agencia Española de Protección de Datos), the Supervisory Authority of the Spanish State.
Policy updates
This policy has been updated in accordance with the requirements of EU personal data protection legislation, the General Data Protection Regulation (GDPR) and the Spanish Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD).
It is also stated that this policy may be modified due to changes in the requirements established by the legislation in force at any time, judicial decisions and changes in case law, as well as changes in the activity and strategy of ORIGEN CORPORACIÓN. Publication, and access by users, will take place through this same site, on the understanding that relationships established with users before the change will be governed by the rules in force at the time the website was accessed to establish them.