Terms and Conditions

1. Legal notice

The owner and manager of the contents of the website www.iberlayer.com, hereinafter “website”, is Iberlayer S.L. with NIF B86621984 and address Avenida de los Labradores 1, 28760 Tres Cantos, Madrid. Registered in the Commercial Registry of Madrid. Volume 30571, Folio 195, Sheet M-550226.

2. Conditions of use

These General Conditions regulate the use (including the access) of the web pages that make up the website, including the content and services made available on them. Every person who accesses the website accepts the General Conditions in force at each time they access this website. Iberlayer is not responsible for the contents or state of said sites. The use of external links does not imply that Iberlayer recommends or approves the contents of the destination pages. Iberlayer reserves the right to modify, at any time and without prior notice, the presentation and configuration of the website, as well as these General Conditions.

User obligations

The User is hereby acknowledge to use the website and the contents in accordance with current legislation, the Legal Notice, and any other notice or instructions brought to their attention, either through this legal notice or in any other place within the web.
To this end, the User undertakes not to use any of the Contents for illicit purposes or effects, prohibited in the Legal Notice or by current legislation, harmful to the rights and interests of third parties, or that in any way may damage, disable, overload, deteriorate or prevent the normal use of the contents, computer equipment or documents, files and all types of content stored on any computer equipment owned or contracted by Iberlayer, other Users or any Internet user. The external links contained in this Website lead to sites managed by third parties.

Trademark information

Iberlayer’s and logo are a registered trademarks of Iberlayer S.L. Any act of exploitation, reproduction, distribution, public communication and transformation of the contents of the website or parts of it, including the name and logo, is prohibited. Any unauthorized use will be investigated and pursued through the relevant legal channels.

Applicable law and jurisdiction

These Conditions of Use of the Website are governed by Spanish Law. The language of writing and interpretation of this legal notice is Spanish. This legal notice will be always accessible via Internet on this Website.

Consumers or users, defined as such by Spanish regulations, who reside in the European Union, and who would have any problem with an online purchase made from Iberlayer, to try to reach an out-of-court agreement, going to the Online Dispute Resolution, created by the European Union and developed by the European Commission.

If the user is not a consumer or user, and when there is no rule that requires otherwise, the parties agree to submit to the Courts and Tribunals of Madrid capital, as this is the place of celebration of the contract, with express waiver of any another jurisdiction that may correspond to them.

3. Privacy Policy

Responsible for the treatment

Iberlayer S.L. con NIF B86621984 y domicilio en calle Avenida de los Labradores 1, 28760 Tres Cantos, Madrid. info@iberlayer.com

Purpose, origin, legitimacy, recipients and retention period of data

Below, we indicate the details of the processing of personal data carried out by Iberlayer based on the channel through which the collection is carried out and specifying what types of data are collected, what is their origin, what will be the purpose for the are intended, what legitimizes the processing and for how long the data is kept.

Conservation periods applicable to all treatments

In certain cases and under the legitimation of a mandatory law, it will be necessary for Iberlayer to retain the data for a longer period than indicated. Some examples are the following:

• 4 years: Law on Infringements and Sanctions in the Social Order (obligations regarding membership, registrations, cancellations, contributions, payment of salaries...); Arts. 66 et seq. General Tax Law (accounting books, etc.).
• 5 years: Art. 1964 Civil Code (personal actions without special term).
• 6 years: Art. 30 Commercial Code (accounting books, invoices, etc.).
• 10 years: Art. 25 Law on the Prevention of Money Laundering and Financing of Terrorism.

Recipients or assignees

Iberlayer does not transfer personal data to third parties except under legal obligation or in cases for which the interested party consents after having been duly informed.

International transfers

There are no international data transfers.

Automated decisions

“Commercial profiles” are not prepared based on the information provided. No automated decisions are made based on these profiles.

How to exercise your rights

Users can send a written communication to the registered address of Iberlayer or to the email address indicated in the heading of this privacy policy, including in both cases a photocopy of their ID or other similar identification document, to request the exercise of the following rights:

• Right to request the access to personal data: you may ask Iberlayer if it is processing your data.
• Right to request their rectification (if they are incorrect) or deletion.
• Right to request the limitation of your processing, in which case they will only be kept by Iberlayer for the exercise or defense of claims.
• Right to object to processing: Iberlayer will stop processing the data in the manner you indicate, unless for compelling legitimate reasons or the exercise or defense of possible claims , it must continue to be processed.
• Right to data portability: if you want your data to be processed by another firm, Iberlayer will facilitate the portability of your data to the new controller.

You can find models, forms and more information about the referred rights on the official website of the Spanish Data Protection Agency: https://www.aepd.es

Possibility to withdraw consent

In the event that consent has been granted for a specific purpose, the interested party has the right to withdraw consent at any time, without affecting the legality of the processing based on consent prior to its withdrawal.

How to complain to the Control Authority

If an interested party considers that there is a problem with the way in which Iberlayer is handling their data, they can direct their complaints to the Security Manager of Iberlayer (dpo@iberlayer.com) or they can submit a complaint by writing to the Spanish Protection Agency of Data located at Jorge Juan street, 6 28001-Madrid or use the electronic office: https://sedeagpd.gob.es. In both cases, you must attach the relevant documentation.

You can also find information in the Citizen's Guide published by the Spanish Data Protection Agency, which can be found here: Citizen's Guide.

4. Cookies Policy

What are "cookies?"

Cookies are files created in the user's browser to record their activity on the Website and allow more fluid and personalized navigation.

Use of cookies on our website

This website does not require and does not install its own cookies, but there may be linked content from third parties that do.

Cookie deletion

To use this Website, the installation of cookies is not necessary, but as indicated there may be third-party content that does use them. You can not accept them or configure your browser to block them and, if necessary, delete them.

If you want to delete cookies from your browser, here are some useful links:

5. Information Security Policy

Iberlayer, manufacturer of email protection technology, openly expresses its intention to offer not only a service of the highest technological and avant-garde level to all its clients, but to do so on the basis of the highest possible levels of internal security. To this end, Iberlayer has within the organization an information security management system focused not only on achieving demanding business objectives and customer satisfaction but also on guaranteeing at all times the confidentiality, integrity and availability of information.

Our three pillars in the provision of our services are:

1. Maximum security
2. Maximum performance.
3. Maximum availability.

To this end, it assumes its commitment to information security according to the reference standard ISO/IEC 27001:2013, for which the General Management establishes the following principles:

• Competence and leadership on the part of management as a commitment to develop the Information Security Management system.
• Determine the internal and external stakeholders that are relevant to the Information Security management system and meet their requirements.
• Understand the context of the organization and determine its opportunities and risks with respect to information security as a basis for planning actions to address, assume or treat them.
• Ensure the satisfaction of our clients, including parties interested in the company's results, in everything related to the performance of our activities and their impact on society.
• Establish objectives and goals focused on evaluating performance in terms of Information Security, as well as continuous improvement in our activities, regulated in the Management System that develops this policy.
• Compliance with the requirements of the applicable legislation and regulations to our activity, the commitments acquired with clients and interested parties and all those internal rules or guidelines of action to which the company is subject.
• Ensure the confidentiality of the data managed by the company and the availability of information systems, both in the services offered to clients and in internal management, avoiding undue alterations in the information.
• Ensure the capacity to respond to emergency situations, restoring the operation of critical services in the shortest time possible.
• Establish appropriate measures for the treatment of risks derived from the identification and evaluation of assets.
• Motivate and train all personnel who work in the organization, both for the correct performance of their job and to act in accordance with the requirements imposed by the Reference Standard, providing an adequate environment for the operation of the processes.
• Maintaining fluid communication both internally, between the different levels of the company, and with clients.
• Evaluate and guarantee the technical competence of personnel to perform their functions, as well as ensure their adequate motivation for their participation in the continuous improvement of our processes.
• Guarantee the correct condition of the facilities and the appropriate equipment, so that they are in accordance with the activity, objectives and goals of the company.
• Guarantee a continuous analysis of all relevant processes, establishing the relevant improvements in each case, based on the results obtained and the established objectives.

These principles are assumed by the General Management, who provides the necessary means and provides its employees with sufficient resources for their compliance, expressing them and making them publicly known through this Information Security Policy.

6. Data Protection Policy

According to the European General Data Protection Regulation (GDPR) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free circulation of these, and based on Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we inform you that we will respect at all times the confidentiality of your data, which is under the exclusive responsibility of:

Identity and contact information of the person responsible

Iberlayer, S.L. CIF B86621984
Avda. Labradores 1, 28760 Tres Cantos. Madrid ES
Tel. +34 911 863 476
Email: dpo@iberlayer.com

Data origin

The data collected has been provided directly by you, by completing the previous form, and has not been collected from any other source.

Data and purpose

The personal data collected corresponds to identification data (name, surname, telephone number and email) and professional data, in order to:

• Answer your request, or query about our services.
• Management of your CV in staff pick processes.
• Any complaint, claim, suggestion or congratulation that you wish to send us.

Legitimation of the treatment

The Legal Basis of Treatment is the consent granted by the interested party, which may be revoked at any time. However, you have the right to object to this processing of your data, and you may do so through any of the means described in this Policy.

Data retention

The data collected to respond to your request, or query about our services will be kept indefinitely until, where appropriate, you express your desire to delete them. The resume data will be kept for a maximum period of twenty-four months from its receipt. After this period without an update thereof, it will be destroyed. The data of complaints, claims or suggestions will be kept for a maximum period of twelve months from their receipt.

Data recipients

Your personal data will not be communicated to third parties.

International data transfers

They are not planned.

Automated decisions

There are no automated decisions regarding your data.

Rights of the interested party

• Access: right to obtain confirmation about whether Iberlayer is processing your personal data, to know what data is procesing, what it is used for, how long it will be kept, its origin and whether it has been or will be communicated to a third party.
• Rectification: right to request rectification of inaccurate data and to have incomplete personal data completed.
• Cancellation: right to request the deletion of personal data when it is inappropriate, excessive or no longer necessary for the purposes for which it was collected, including the right to be forgotten.
• Opposition: right to object, in certain circumstances, to the processing of your personal data or to request that the processing be stopped.
• Limitation of processing: right to request, in the legally established circumstances, that your data not be processed beyond their conservation.
• Portability: right to receive personal data in a structured, commonly used and machine-readable format, and to be able to transmit it to another person in charge, whenever technically possible.
• Not to be subject to automated individual decisions: right to ensure that you are not subject to a decision based solely on the processing of your data, including profiling (any form of processing of your personal data that evaluates personal aspects, in particular analyzing or predict aspects related to your performance at work, economic situation, health, personal preferences or interests, reliability or behavior), which produces legal effects on you or significantly affects you in a similar way.

Exercise of rights

The exercise of rights must be made in writing, attaching a photocopy of your identification document, directing your request to the email address dpo@iberlayer.com. For more information you can consult at www.agpd.es.

Right to complain before the Control Authority

If you consider that your rights have not been respected, you can file a claim by writing to the Spanish Data Protection Agency located at Calle Jorge Juan 6, 28001 Madrid; or use its electronic headquarters (https://sedeagpd.gob.es). In both cases, you must accompany the relevant documentation.