1. Data Controller
The entity responsible for processing the personal data collected through this website is:
- Company name: DUASCE REGULATORY, S.L.
- Tax identification number: [PENDING CONFIRMATION]
- Registered address: CALLE LA PAZ 28, 8H, 50008 ZARAGOZA (SPAIN)
- Contact email: hello@duasce.eu
- Website: https://duasce.eu
Hereinafter, this entity will be referred to as “DUASCE”.
2. What personal data may we collect?
DUASCE may process personal data voluntarily provided by users through the channels available on the website, in particular:
- Contact form: identification and contact details, such as name, email address, company, and any information included in the user's message.
- Request for a strategic call: data necessary to manage the request, arrange the meeting, and handle related communications.
- Subsequent communications: information voluntarily provided during exchanges relating to a professional enquiry or potential engagement.
Users must provide accurate information and avoid including third-party personal data unless they are authorised to do so.
The specific data collected will depend on the fields included in the forms available on the website at any given time.
3. Why do we use your data, and what is the legal basis?
Personal data will only be processed for the relevant purposes and on a valid legal basis:
a) Responding to enquiries and requests for information
To respond to messages received, answer questions about DUASCE's services, and maintain communications requested by the user.
The legal basis will be taking steps at the data subject's request prior to entering into a contract where the enquiry relates to a potential engagement, or legitimate interests in responding to other communications, as applicable.
b) Managing strategic calls
To arrange requested meetings, contact the individual concerned, and manage the communications necessary to prepare for and conduct the call.
The legal basis will be taking steps at the data subject's request prior to entering into a contract or, where applicable, the individual's consent for specific processing activities that require it.
c) Managing a potential professional or contractual relationship
Where an enquiry leads to an engagement, personal data may be processed to manage the professional relationship, provide the agreed services, and comply with applicable legal obligations.
The legal basis will be the performance of a contract, taking steps at the data subject's request prior to entering into a contract and, where applicable, compliance with legal obligations.
d) Ensuring the technical operation and security of the website
Where necessary, essential technical data may be processed to maintain security, prevent misuse, and ensure the website operates correctly, on the applicable legal basis in each case.
e) Website analytics and cookies
The use of analytics tools, such as Google Analytics, and non-essential cookies remains subject to verification. If these tools are active, their purposes, legal basis, providers, and conditions of use must be explained in the Cookie Policy and through the relevant consent management mechanism.
4. How long do we retain your data?
Personal data will be retained for as long as necessary to respond to the enquiry or manage the request for which it was collected.
Where a contractual relationship exists, data will be retained for the duration of that relationship and subsequently for the periods necessary to comply with applicable legal obligations or address potential liabilities.
When data are no longer necessary for the purposes for which they were processed, they will be deleted or, where appropriate, restricted from further processing for the periods established by law.
The specific retention periods will depend on the type of enquiry, whether a contractual relationship is established, and the applicable legal obligations.
5. Who may we share your data with?
As a general rule, personal data will not be disclosed to third parties unless disclosure is required by law, necessary to manage the requested relationship, or supported by another valid legal basis.
To operate the website and manage requests, service providers may be involved in areas such as technology, web hosting, email, forms, or meeting scheduling. Where these providers process personal data on behalf of DUASCE, the appropriate safeguards and agreements must be in place in accordance with applicable law.
Providers pending verification: the tools actually in use must be confirmed, including the tool used to schedule calls and any analytics tools.
If any of these services involve international data transfers, the applicable legal basis and safeguards must be verified and documented.
6. Cookies and similar technologies
This website may use cookies or similar technologies for its operation and, if enabled, to collect usage statistics or provide additional functionality.
The use of non-essential cookies must comply with applicable law and, where required, obtain the user's prior consent.
Users can find information about the cookies used, their purposes, their providers, and the mechanisms for accepting, rejecting, or configuring their preferences in the Cookie Policy and the relevant settings panel.
The final wording of this section remains subject to a review of the cookies and tools actually used by the website.
7. What are your rights?
Where applicable, users may exercise the following data protection rights:
- Right of access: to find out whether their personal data are being processed and obtain information about that processing.
- Right to rectification: to request the correction of inaccurate or incomplete data.
- Right to erasure: to request the deletion of their data where the legal requirements are met.
- Right to object: to object to certain processing activities on grounds relating to their particular situation.
- Right to restriction of processing: to request that the use of their data be temporarily restricted in the circumstances provided for by law.
- Right to data portability: to receive the data they have provided in a structured format and request their transfer to another controller where the legal requirements are met.
- Right to withdraw consent: to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before its withdrawal.
To exercise these rights, users may email hello@duasce.eu, specifying the right they wish to exercise and providing the information necessary to process their request. If there are reasonable doubts about their identity, additional information may be requested for verification purposes.
Exercising these rights is free of charge, except in the exceptional circumstances provided for by law.
Users also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) if they consider that the processing of their personal data does not comply with applicable law.
Further information: https://www.aepd.es/
8. Security and confidentiality
DUASCE will implement the appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or improper disclosure, taking into account the nature of the data and the risks associated with the processing.
Anyone involved in processing personal data will be subject to the applicable confidentiality obligations.
9. Links to third-party websites
This website may contain links to third-party websites or services. DUASCE does not necessarily control their content or privacy practices. When users access those services, they should consult the relevant privacy policies and terms of use.
10. Changes to this Privacy Policy
DUASCE may update this Privacy Policy to reflect changes in legislation, technology, or the services offered through the website.
The current version will be available on this page, together with the date of its latest update.
11. Contact
For any questions regarding this Privacy Policy or the processing of personal data, you can contact DUASCE at:
Email: hello@duasce.eu