Personal Data and General Confidentiality Agreement

PERSONAL DATA PROTECTION POLICY - (English)

1. Right to information

Worktocloud, S.L. Being the company that supports Digiocio, it informs the users of the website about its policy regarding the treatment and protection of the personal data of the users and clients that can be collected by browsing or contracting services through its site. web. In this sense, Worktocloud, S.L. guarantees compliance with current regulations on the protection of personal data, reflected in Organic Law 15⁄1999, of December 13, Protection of Personal Data (LOPD), and Royal Decree 1720⁄2007, of 21 of December, known as the Development Regulation of the LOPD. It also complies with Regulation (EU) 2016⁄679 of the European Parliament and of the Council of April 27, 2016 regarding the protection of natural persons (GDPR).

To this end, it has drafted this Privacy Policy, in which users are informed about the procedure followed by Worktocloud SL to collect their personal data and the uses to which they will be used.

The simple use of this website implies the acceptance of this privacy policy.

The following web portals are owned by Worktocloud:

https://www.digiocio.com/

https://www.worktocloud.es
https://www.worktocloud.net
https://app.worktocloud.net
https://www.worktocloud.cat

2. Identity of the person in charge

Owner: Worktocloud, S.L.

NIF/CIF: B66295445

Address: Avda. Sta Eulalia 367, Barcelona - Spain.

Email: info@worktocloud.es

3. Principles that we will apply to your personal information

In the processing of your personal data, we will apply the following principles that comply with the requirements of the new European data protection regulation:

Principle of legality, loyalty and transparency: We will always require your consent for the processing of your personal data for one or more specific purposes that we will inform you in advance with absolute transparency.
Principle of data minimization: We will only request data that is strictly necessary in relation to the purposes for which we require it. The minimum possible.
Principle of limitation of the conservation period: The data will be kept for no longer than necessary for the purposes of the treatment, depending on the purpose, we will inform you of the corresponding conservation period, in the case of subscriptions, we will periodically review our lists and eliminate those records inactive for a considerable time.
Principle of integrity and confidentiality: Your data will be treated in such a way that adequate security of personal data is guaranteed and confidentiality is guaranteed. You should know that we take all necessary precautions to prevent unauthorized access or improper use of our users' data by third parties.

4. Data we collect

Worktocloud obtains the personal data of Users through the following means:

4.1 User Information Data (name, surname, age and sex).
4.2 Contact information of the user (phone, email).
4.3 Data about the client company (company name, address, city, province, country)
4.4 Data necessary for Billing (bank account number or bank card and CIF of the client company).
4.5 Data from the organization chart of the company (established by the client on the website, workers, departments, hierarchies, etc...). Only if the client voluntarily determines them on the website. When the client registers.
4.6Cookies. The website uses cookies to identify the user through tokens and to collect data on the language and browser used.
4.7Operating system data. Data is collected from the operating system, version and name of the operating system.

5. Use of personal data
Worktocloud informs users that the personal data they provide us will be incorporated into a file owned by Worktocloud duly registered in the General Data Protection Registry, being used for the purpose of:

Provision and billing of services.
- Notification of promotional agreements signed by Worktocloud S.L. with collaborating companies to offer SITE Users certain products and services similar to those that have already contracted with Worktocloud S.L. in attractive conditions.
- Respond to queries or requests for information that you may make.
- Allow access to the options that require registration, in which case the user must attend to the particular conditions that are established.
Your personal data, except those that as a user make available to other users of the SITE, will in no case be provided to third parties and if in the future Worktocloud S.L. If you wish to use them for purposes other than those referred to, we will inform you of these new purposes and request your consent. Certain services provided on the SITE may contain particular conditions of use with provisions regarding the protection of personal data. In this sense, it is important that the user bears in mind the following warnings. The information that the user provides through the SITE, for example, in screenshots of the "Worktocloud Team", may reveal or allow others to deduce their nationality, ethnicity, sex , age or other aspects of your private life. By providing this information, completely voluntarily, through any of the services offered on the SITE, the user is expressly and voluntarily accepting this Personal Data Protection Policy, the General Conditions of Access and Use of the SITE and the particular conditions of use that are established for services enabled through the SITE, which allow Worktocloud S.L. process this information about the user in an automated way.

6. Sharing information with third parties and transfer of data to third countries

Worktocloud SL, will not provide user data to third parties, except those that the users themselves make available to other users of the SITE. The use of the functions enabled through the SITE that allows the distribution of content and interaction with other Users may imply that part of the user data is displayed outside the SITE. So when the user posts content in an open group, such content and the personal data linked to it may appear in search engine results. It is important that the user is aware that the removal of such content by Worktocloud at the user's request will not prevent its replication on other websites, over which Worktocloud SL has no control.

Worktocloud hosts your data on the servers of:

Google Cloud: In the use of several of its services, Firebase, Analytics, Performance, Hosting, data hosting... Who strictly comply with European legislation and who can be contacted through this link. User data is hosted on servers in Europe and the United States:

https://cloud.google.com/security/gdpr/resource-center/pdf/googlecloud_gdpr_whitepaper_618.pdf?hl=en

Strato: For hosting data on their servers. Who also strictly comply with European legislation on data protection as specified in this link:
https://www.strato.es/proteccion-de-datos/

OVH: Replication of data on its servers and hosting of web services. Who also strictly comply with European legislation on data protection as specified in the following link:
https://www.ovh.es/soporte/documentos_legales/Contrato%20de%20Tratamiento%20de%20Datos%20Personales.pdf

Tormat Agency: For the management of accounting and tax obligations. You can see their conditions of use here:
https://www.tormat.net

6. User Consent

The sending of the data, through the use of the electronic forms enabled by Worktocloud on the SITE or email messages or content provided by the user through the SITE, implies the express consent of the sender to the processing of the data included in the media. of communication indicated. The user's acceptance for their data to be processed for the purposes referred to in the "Use of personal data" section is always revocable, without retroactive effect, in accordance with the provisions of current legislation. The user guarantees that the personal data provided to Worktocloud SL is true and is responsible for notifying Worktocloud SL of any changes thereto.

It is the obligation of the client (the company that contacts our services) to inform its employees (users that will be monitored) of the metrics that Worktocloud collects, and must provide them with the following contract to obtain explicit consent from the workers for the use of this software.

7. Rights of access, rectification, cancellation and opposition

The user may exercise their rights of access, rectification, cancellation and opposition to the processing of their personal data, under the terms and conditions provided in the LOPD. You may exercise these rights, after proving your identity by means of a photocopy or scanning of D.N.I. by contacting Worktocloud, S. L., Avenida Santa Eulalia, 367, 1º-2ª, Terrassa or to the following email address: rgpd@worktocloud.es with the subject "Data Protection". At the time the user exercises such rights, all personal data linked to your account, as well as the information and content that is integrated into your profile will be canceled or deleted or delivered to the client, depending on what the client requests. Notwithstanding the foregoing, it is important that the user take into account that the information that they have shared with other users may remain visible. Worktocloud S.L. is exonerated from all responsibility in relation to the elimination of this information that is already part of the accounts and profiles of other Users. Worktocloud SL does not control the renewal system of the search mechanisms, and said mechanisms may contain certain information from the public profile that has already been canceled by Worktocloud S.L. Likewise, in the event that the user exercises the right of cancellation on the necessary data so that Worktocloud S.L. can provide the services of the SITE, Worktocloud S.L. will be forced to terminate their relationship with the user, proceeding to unsubscribe, without the right to any claim on the part of the user.

8. Security

Worktocloud S.L. maintains the security levels of protection of your data required by Organic Law 3/2018, on Data Protection and GDPR, and has established all the technical means at its disposal to prevent loss, misuse, alteration, unauthorized access and theft of the data that the user provides through the SITE. However, despite the diligent implementation of such measures, the user must know that Internet security measures are not impregnable, without Worktocloud being able to guarantee that unauthorized third parties may have knowledge of the class, conditions, characteristics and circumstances of use. that users make of the services offered on the SITE or that they can access or manipulate messages and communications of any kind that users disseminate or make available to third parties through said services.

The security measures that Worktocloud S.L. uses in its information storage system is:

- Google Firebase: Specifically the Authentication, Storage, Firestore, Analytics, Performance services. Which in turn encrypt the data flow between the client and the server with the most advanced encryption technologies of the moment and use the most current authentication methods.
- Strato: The encryption and data security services offered by said provider.

9. Information about cookies and "spamming" techniques

The user is informed of the presence of cookies on the SITE in order to facilitate its use and navigation. Cookies are associated with the browser of a specific computer. Thanks to them, it is possible that Worktocloud S.L. recognize the browsers of registered users after they have registered for the first time, without having to register each time they visit to access the areas and services reserved exclusively for them. The user has the possibility of configuring their browser to be notified on the screen of the reception of cookies and to prevent the installation of cookies on their hard drive. Please consult the instructions and manuals of your browser for more information. To use the SITE, it is not necessary for the user to allow the installation of cookies sent by Worktocloud S:L., notwithstanding that in this case it will be necessary for the User to register each time they access a service that requires prior registration and you may not be able to access some of the SITE services. Worktocloud S.L. does not use "spamming" techniques and will only process the data that the user transmits through the use of the electronic forms of Worktocloud S.L. enabled on this SITE, email messages or content provided through the services of the SITE.

You can see more information in our cookies policy: https://www.worktocloud.es/cookies/index.phpCookies Policy

10. Modification of this Personal Data Protection Policy

Worktocloud SL reserves the right to modify this policy to adapt it to future legislative or jurisprudential developments as well as future uses that it plans to make of the personal data of SITE users. In any case, it will previously inform users of the changes that occur in said policy. For this reason, the user is recommended to read the Personal Data Protection Policy of the SITE each time they access it. In the event that you wish to make any suggestion or comment in relation to our Personal Data Protection Policy, you can contact Worktocloud, S.L., Avenida Santa Eulalia, 367, 1º-2ª, Terrassa or to the following email address: info@worktocloud.es or pedronieto@worktocloud.es or rgpd@worktocloud.es.

11. Obligation of the client with his employees

It is the obligation of the Worktocloud client to explicitly report the information that Worktocloud collects from their computers and mobile phones and obtain their explicit consent in this regard by signing a document of conformity.

Worktocloud is not responsible for disputes that may occur between the employee and the company due to misuse of the software. Worktocloud is a tool to measure productivity, monitor employees and facilitate teleworking. Worktocloud is based on good faith and trust between both parties: company (monitor) and employee (monitored). In the event of disputes between the company and the employee, Worktocloud does not have the power or function to become an arbitrator. Worktocloud is software and as such may have errors in data collection, either due to internet failures or failures of the hardware device in which it is hosted or due to computer viruses, so it should not be used as a completely objective tool. , nor is it its function.

12. Duration of data retention

If the client maintains a continuous contractual relationship with Worktocloud and does not specify anything in this regard, Worktocloud will store and keep said data so that the client can access them whenever they want through the website.

For cases in which the client ceases to maintain a contractual relationship with Worktocloud SL, either by explicit manifestation or by not meeting their payment obligations, Worktocloud will store the data for a period of one year. After this period, Worktocloud will proceed to the elimination or storage on external hard drives, in case the client needs them one day. Obviously, if the client requests the elimination or immediate delivery of the data, Worktocloud will proceed to eliminate or deliver the data as soon as possible, as long as the client is up to date with the payments established in the commercial relationship established between the client and Worktocloud S.L.