1. Identification and contact of the owner of the web site.

www.ibstartups.es (hereinafter the website), is owned by Institut d’Innovació Empresarial de les Illes Balears (hereinafter the Holder) with address at Plaça Son Castelló, 1, bajos, 07009, Polígono Son Castelló, Palma de Mallorca, with CIF Q5755018H, telephone (+34) 971178900 and e-mail dpd@idi.es.

2. Scope of application.

Browsing the website of the Holder implies the condition of user and the absolute acceptance of what is stated in this Legal Notice.

3. Age.

We do not process data of children under fourteen years of age on our website. In any case, our services are intended for people over eighteen years of age.

4. Intellectual or industrial property.

The contents of the Web, such as texts, images, graphics or source code, are protected by intellectual and industrial property rights.
Such contents may not be, for example, reproduced or transformed without the prior and explicit permission of the Proprietor. Users may access the contents and make authorized private copies as long as the reproduced elements are not subsequently transferred to third parties, nor are they installed on network servers, nor are they subject to any type of exploitation.

5. Common rules of use of the web.

The user agrees to use the Web in accordance with the following rules:
– It will not publish commercial communications through the website without authorization.
– It will not collect content or information from other users.
– It will not carry viruses or malicious code of any kind.
– It will not request login information or access an account belonging to another user.
– You will not engage in unlawful, misleading, malicious or discriminatory acts on the website, in accordance with these terms and conditions and the Spanish legal system.
– In general, it shall not perform acts that involve damage or injury to the rights of third parties.

The Owner may remove any content or suspend the service if, in its sole discretion, breaches any of the rules and obligations described in this Legal Notice.
For any questions or clarifications regarding these rules, please contact us via email.

6. Links and Limitation of Liability.

The establishment of a hyperlink does not imply in any case the existence of relations between the Holder and the owner of the website in which it is established, nor the acceptance and approval by the Holder of its contents or services. Those who intend to establish a hyperlink must request prior written authorization from the Holder. In any case, the hyperlink will only allow access to the home page of our website. Likewise, you must refrain from making false, inaccurate or incorrect statements or indications about the Holder, or include illegal content, contrary to good customs and public order.

The Holder is not responsible for the use that each user makes of the materials made available on this website nor for the actions taken on the basis of the same. The content of the Web is of a general and merely informative nature.
The Owner shall not be liable for the content or operation of third party websites to which the user of the Web site can access through any type of link.

The Holder declines any liability, to the extent permitted by law, for damages resulting from the presence of viruses, actions of third parties that violate property rights, honor, privacy or illegal advertising.
If any user or third party considers that the Web is committing any illegal activity of any kind, they should send a communication to the Holder to the email address that appears in our identification data. You must duly identify yourself, specifying the facts that you denounce.

7. Privacy.

If personal data is collected on the Website, the Holder shall be responsible for it and shall treat it with absolute confidentiality and security. You can find more information in our privacy and cookies policy.

8. Modifications

The Proprietor reserves the right to make any changes it deems appropriate, without prior notice, to the content of its website. Both with regard to the contents of the website, as well as in the conditions of use of the same, or in the general contracting conditions. Such modifications may be made through its website by any legally admissible means and shall be binding for as long as they are published on the website and until they are not validly modified by subsequent modifications.

9. Applicable law, resolution of disputed issues and competent forum.

The use of the Web will be governed by Spanish law. Any dispute arising out of or in connection with the use of the Web, shall be subject to the non-exclusive jurisdiction of the Courts and Tribunals of the municipality where the registered office of the Holder is located.

The Privacy Policy is part of the General Conditions that govern the Web Page www.ibstartups.es together with the Cookies Policy and the Legal Notice.
Institut d’Innovació Empresarial de les Illes Balears (hereinafter IDI), reserves the right to modify or adapt this Privacy Policy at any time. Therefore, we recommend that you review it each time you access the Web Site. In the event that the user has registered on the website and accesses his account or profile, upon accessing the same, he will be informed in the event that there have been substantial changes in relation to the processing of his personal data.

Who is responsible for the processing of your data?

The data collected or provided voluntarily through the Website, either by browsing it, as well as all those that you can provide us in the contact forms, via email or by phone, will be
collected and processed by the File Manager, whose data are indicated below:

Institut d’Innovació Empresarial de les Illes Balears CIF: Q5755018H
Address: Plaça Son Castelló, 1, bajos, 07009, Polígono Son Castelló, Palma de Mallorca
Phone: 971178900
Data Protection Officer: dpd@idi.es

If, for any reason, you wish to contact us on any matter related to the processing of your personal data or privacy (with our Data Protection Officer), you can do so through any of the means indicated above.

What data do we collect through the website?
By simply browsing the Website, IDI will collect information regarding:

– IP address.
– Browser version.
– Operating system.
– Duration of the visit or navigation through the Web Page.

Such information is stored by Google Analytics, so we refer to the Privacy Policy of Google, as it collects and treats such information.
Similarly, the Website may provide the utility of Google Maps, which may have access to your location, if you allow it to do so, in order to provide you with greater specificity about the distance and/or paths to our sites. In this regard, we refer to the Privacy Policy used by Google Maps, in order to know the use and treatment of such data.
The information that we handle, will not be related to a specific user and will be stored in our databases, in order to perform statistical analysis, improvements in the Web Page, about our products and/or services and will help us to improve our strategy. The data will not be communicated to third parties.

User registration on the website

In order to access certain products and/or services, the user must register on the Web Page. To do so, in the registration form, a series of personal data are requested. The necessary and mandatory data to be provided by the user to carry out such registration, are marked with the symbol *. If these fields are not provided, the registration will not be carried out.

The user and password generated are personal and non-transferable, being the user responsible for their custody. We do not recommend that you write it down somewhere or notify it to third parties.
In this case, the navigation data will be associated with the user’s registration data, identifying the same specific user who browses the Web Page. In this way, it will be possible to personalize the offer of products and/or services that, at our discretion, best suits the user, as well as to recommend certain products and/or services.

The registration data of each user will be incorporated into IDI’s databases, together with the history of operations carried out by the same, and will be stored in the same as long as the registered user’s account is not deleted. Once such account is deleted, such information will be removed from our databases, keeping aside for 10 years those data related to the transactions made, without accessing or altering them, in order to comply with the legal deadlines in force. Data that is not linked to the transactions made will be retained unless you withdraw your consent, in which case it will be deleted immediately (always taking into account the legal deadlines).
The legal basis for the processing of your personal data is the performance of a contract between the parties.

In relation to the sending of communications and promotions by electronic means and the response to requests for information, the legitimacy of the treatment is the consent of the affected party.

The purposes of the treatment will be the following:

– Manage the registration in the user registration area and their access to the Web Page.
– Manage the services made available to you through the Website.
– Keep you informed of the processing and status of your application.
– Respond to your request for information.

Thus, we inform you that you may receive communications via email and/or telephone, in order to inform you of possible incidents, errors, problems and/or status of your requests.
For the sending of communications, the express consent of the user will be requested at the time of registration. In this regard, the user may revoke the consent given by contacting IDI, using the means indicated above. In any case, in each commercial communication, you will be given the possibility to unsubscribe from receiving them, either by means of a link and/or e-mail address.

Newsletter Sending

In the event that the option to subscribe to a Newsletter is allowed, it will be necessary to provide us with an e-mail address to which the Newsletter will be sent.
Such information will be stored in a database of IDI, in which it will remain registered until the interested party requests the cancellation of such information or, if applicable, IDI ceases to send such information.
The legal basis for the processing of this personal data is the express consent given by all interested parties who subscribe to this service by checking the box provided for this purpose.
The e-mail data will only be processed and stored for the purpose of managing the sending of the Newsletter by users who request it.

For the sending of the Newsletter, the express consent of the user will be requested at the time of registration by checking the box provided for this purpose. In this regard, the user may revoke the consent given by contacting IDI, using the means indicated above. In any case, in each communication, you will be given the possibility to unsubscribe from receiving them, either by means of a link and/or e-mail address.

If you are one of the following groups, please see the information below:

+ WEB OR E-MAIL CONTACTS

For what purposes will we process your personal data?
– Respond to your inquiries, requests or requests.
– Manage the requested service, answer your request, or process your request.
– Information by electronic means, related to your request.
– Commercial or event information by electronic means, provided there is express authorization.

What is the legitimacy for the processing of your data?
Acceptance and consent of the interested party: In those cases where it is necessary to make a request, the following is required
If you fill out a form and click on the submit button, the completion of the form will necessarily imply that you have been informed and have expressly given your consent to the content of the clause attached to the form or acceptance of the privacy policy.
All our forms have a checkbox with the following formula in order to send the information: “□ I have read and accept the Privacy Policy”.

CUSTOMERS

For what purposes will we process your personal data?
– Preparation of the budget and follow-up of the same through communications between both parties.
– Information by electronic means, related to your request.
– Commercial or event information by electronic means, provided there is express authorization.
– Manage the administrative, communications and logistics services performed by the Responsible.
– Billing.
– Carry out the corresponding transactions.
– Invoicing and declaration of the appropriate taxes.
– Control and recovery management.

What is the legitimacy for the processing of your data?
The legal basis is your consent.

SUPPLIERS
For what purposes will we process your personal data?

– Information by electronic means, related to your request.
– Commercial or event information by electronic means, provided there is express authorization.
– Manage the administrative, communications and logistics services performed by the Responsible.
– Billing.
– Carry out the corresponding transactions.
– Invoicing and declaration of the appropriate taxes.
– Control and recovery management.

What is the legitimacy for the processing of your data?
The legal basis is the acceptance of a contractual relationship, or otherwise your consent by contacting
us or offer us your products by any means.

CONTACTS SOCIAL NETWORKS

For what purposes will we process your personal data?
– Respond to your inquiries, requests or requests.
– Manage the requested service, answer your request, or process your request.
– Network with you and create a community of followers.

What is the legitimacy for the processing of your data?
Acceptance of a contractual relationship in the relevant social network environment, and in accordance with its privacy policies:
Facebook
Instagram

How long will we keep personal data?
We can only consult or unsubscribe your data in a restricted way by having a specific profile. We will treat them as long as you let us by following us, being friends or giving “like”, “follow” or similar buttons.
Any rectification of your data or restriction of information or publications must be made through the configuration of your profile or user in the social network itself.

IDI USERS
For what purposes will we process your personal data?

– Respond to your inquiries, requests or requests.
– Manage the requested service, answer your request, or process your request.
– Information by electronic means, related to your request.
– Commercial or event information by electronic means, provided there is express authorization.

What is the legitimacy for the processing of your data?

The legal basis is the acceptance of a service contract and the consent of the data subject.

HR
For what purposes will we process your personal data?

– Management of the employment relationship and the employee’s file.
– To carry out all administrative, tax and accounting procedures necessary to comply with our contractual commitments, obligations in terms of labor regulations, social security, occupational risk prevention, tax and accounting.
– Payroll payment management through a financial institution.
– Time control via fingerprint/card/employee portal access control system (if applicable).
– Management of the entity’s group insurance / pension plan.
– To carry out both subsidized and non-reimbursed training activities.

What is the legitimacy for the processing of your data?
The legal basis for the processing of your data is the execution of your employment contract. Compliance with the relevant legal obligations. The consent of the interested party.
– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –
Do we include personal data of third parties?
No, as a general rule we only process the data provided by the owners. If you provide us with third party data,
you must previously inform and ask for the consent of such persons, or else we are exempt from any liability for failure to comply with this requirement.

What about data on minors?
We do not process data from children under 14 years of age, so please refrain from providing it if you are under 14 years of age.

Will we communicate electronically?
– They will only be made to handle your request, if it is one of the means of contact you have provided us with.
– If we send commercial communications, they will have been previously and expressly authorized by you.

What security measures do we apply?
You can rest assured: We have adopted an optimal level of protection for Personal Data that
We have installed all the technical means and measures at our disposal, according to the state of the art.
technology, to prevent the loss, misuse, alteration, unauthorized access and theft of Personal Data.

To what extent will decision-making be automated?
IDI does not use fully automated decision-making processes to enter into, develop or terminate a contractual relationship with the user. In the event that we use these processes in a particular case, we will keep you informed and advise you of your rights in this regard if required by law.

Will profiling take place?
In order to be able to offer you products and/or services according to your interests and to improve your experience with us.
user, we may develop a “profile” based on the information provided. However, no automated decisions will be made on the basis of such a profile.

To which recipients will your data be communicated?
Your data may be transferred to IDI’s collaborating entities, in order to offer the best possible service.
They will also be disclosed to third parties when there is a legal obligation, as well as to the persons in charge of the
treatment necessary for the execution of the agreement or service contract.
In the event that you have given us your consent for the treatment of your name and images and other information related to the activity of IDI, they will be disclosed in the different social networks and website.

International transfers.
In the event that it is necessary for IDI to make international data transfers, IDI will ensure that such transfers are possible in accordance with the General Data Protection Regulation or any other requirements established by the applicable regulations. To this end, the company will adopt the necessary agreements to guarantee a level of data protection equivalent to that provided for in European regulations.
In case of working in a shared folder system in applications such as Dropbox, Google Drive, Microsoft OneDrive, Amazon, Apple, HubSpot, etc…an international transfer will be made to the United States under the
Article 49.c) of the General Data Protection Regulation or any other mechanism that guarantees a level of data protection equivalent to that provided for in the European regulations.

What rights do you have?
– To know if we are processing your data or not.
– To access your personal data.
– To request the rectification of your data if it is inaccurate.
– To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw your consent.
– To request the limitation of the processing of their data, in certain cases, in which case only the data will be used for the purpose of
We will preserve them in accordance with the regulations in force.
– To carry your data, which will be provided to you in a structured, commonly used or machine-readable format. If you prefer, we can send them to the new person in charge that you designate. It is only valid in certain cases.
– To file a complaint before the Spanish Data Protection Agency, if you believe that we have not attended you correctly.
– To revoke consent to any processing for which you have consented, at any time.
If you change any information, please let us know so that we can keep them updated.

Do you want a form to exercise your rights?
– We have forms for the exercise of your rights, ask for them by email or if you prefer, you can use the forms prepared by the Spanish Data Protection Agency or third parties.
– These forms must be electronically signed or be accompanied by a photocopy of the ID card.
– If someone is representing you, you must attach a copy of their ID card, or have them sign it with their electronic signature.
– The forms can be submitted in person, sent by letter or by mail to the address of the person in charge at the beginning of this text.
You have the right to file a complaint with the Spanish Data Protection Agency, in the event that you consider that your rights have not been adequately addressed.
The maximum term to resolve by IDI is one month, counting from the effective reception of your request by us.
You have the right to revoke your consent at any time for any of the processing for which you have given it.

Do we process cookies?
If we use other types of cookies that are not necessary, you can consult the cookie policy in the corresponding link at the top of our website.

How long will we keep your personal data?
– Personal data will be kept for as long as you remain associated with us.
– Once you unsubscribe, the personal data processed for each purpose will be kept for the legally stipulated periods, including the period in which a judge or court may require them in accordance with the statute of limitations for legal actions.
– The data processed will be kept until the expiration of the aforementioned legal terms, if there is a legal obligation to maintain them, or if there is no such legal term, until the interested party requests their deletion or revokes the consent given.
– We will maintain all information and communications relating to your purchase or the provision of our service, for the duration of product or service warranties, to address potential claims.
– For each treatment or type of data, we provide you with a specific period, which you can consult in the following table:

File	Document	Conservation
Customers	Invoices	10 years
	Forms and coupons	15 years
	Contracts	5 years
Human Resources	Payrolls, TC1, TC2, etc.	10 years
	Resumes	Until the end of the process of selection, and 1 more year with your consent
	Severance pay docs. Contracts. Temporary workers data.	4 years
	Worker’s record.	Up to 5 years after sick leave.
Marketing	Databases or web visitors.	For the duration of the treatment.
Suppliers	Invoices	10 years
	Contracts	5 years
Accounting	Accounting books and documents. Shareholders and board of directors agreements, company bylaws, minutes, board of directors regulations and delegated committees. Financial statements, audit reports Records and documents related to grants	6 years
Prosecutor	Management of the administration, rights and obligations related to the payment of taxes. Administration of dividend payments and withholding taxes.	10 years
Health and Safety	Worker Medical Records	5 years
Insurance	Insurance policies	6 years (general rule) 2 years (damage) 5 years (personal) 10 years (life)
Legal	Intellectual and Industrial Property Documents. Contracts and agreements.	5 years
	Permits, licenses, certificates	6 years from the date of expiration of the permit, license or certificate. 10 years (criminal statute of limitations)
	Confidentiality and non-competition agreements

Cookies policy:
According to Law 34/2002, of July 11, 2002, on Information Society Services and Electronic Commerce, we inform you that this website uses Cookies to improve and optimize the user experience. Below you will find detailed information on what “Cookies” are, what type this website uses, how to change your cookie settings, and what happens if you disable them.

What are cookies?
A cookie is a file that is downloaded to your computer when you access certain web pages. Cookies allow a website, among other things, to store and retrieve information about the browsing habits of a user or their computer and, depending on the information they contain and the way you use your computer, can be used to recognize the user.

What types of cookies does this website use?
– Depending on the entity that manages them, cookies can be:
o Own Cookies: These are those that are sent to the terminal equipment of the interested party from a computer or domain managed by the editor itself and from which the service requested by the user is provided.
o Third-party cookies: These are those that are sent to the user’s terminal equipment from a computer or domain that is not managed by the editor, but by another entity that processes the data obtained through the cookies.

The Website uses both its own and third-party cookies.
– Depending on the length of time they remain activated:
o Session Cookies: These are a type of cookie designed to collect and store data while the user accesses a web page. They are usually used to store information that is only of interest for the provision of the service requested by the user on a single occasion (e.g. a list of products purchased).
o Persistent cookies: These are a type of cookie in which the data remains stored in the terminal and can be accessed and processed for a period defined by the party responsible for the cookie, which can range from a few minutes to several years.
The Web Site uses persistent cookies.

For what purposes may cookies be used on the website?
– Personalization Cookies: These are those that allow the user to access the service with some general characteristics predefined according to a series of criteria in the user’s terminal such as the language, the type of browser through which you access the service, the locale from which you access the service, etc..
– Analysis cookies: those that allow the person responsible for them, monitoring and analyzing the behavior of users of the websites to which they are linked. The information collected through this type of cookies is used to measure the activity of the websites, application or platform and for the elaboration of browsing profiles of the users of such sites, applications and platforms, in order to introduce improvements based on the analysis of the data on the use made by the users of the service.

Own cookies we use:
– idi_language_set: cookie we use to remember your choice of language for displaying our website.
Third-party cookies we use:
– cookiefirst-consent: cookie of the WebToffee company that we use to remember your consent or not to the use of cookies. We keep it for one year.
– Google Analytics: Google Analytics Cookies. They generate an anonymous user ID, which is used to count how many times a user visits the site. It also records when you first and last visited the site. It also calculates when a session has ended, user origin, and keywords.

What happens if Cookies are disabled?
Some functionality of the Services and areas of this website may not function properly if cookies are disabled.

Did we update our Cookie Policy?
We may update the Cookie Policy of our website, so we recommend that you review this policy each time you access our website in order to be properly informed about how and what we use cookies for.

How can you configure and/or reject your Cookies?
By clicking on “I ACCEPT THEIR USE” and continuing on our website, you are consenting to the use of Cookies under the conditions contained in this Cookie Policy. You as a user have the possibility to exercise your right to block, delete and refuse the use of Cookies, at any time, by modifying your browser options. For example:

– Microsoft Edge: Settings> Advanced Settings> Cookies.
– Mozilla Firefox: – Tools> Options> Privacy> History> Custom Settings. Consult Mozilla support or the browser’s Help.
– Google Chrome: – Settings> Show advanced options > Privacy> Content settings. Check Google support or browser Help.
– Safari (Apple): – references> Security. Consult Apple support or browser Help.
– Opera (Opera Software): – Settings > Options > Advanced > Cookies Consult Opera support or browser Help.

If you use another browser, please consult its policy on the installation, use and blocking of cookies. However, by using the tool www.youronlinechoices.com, you will be able to find useful information and configure, provider by provider, your cookie preferences.