Privacy Policy

In accordance with the provisions of current data protection legislation, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, GDPR), as well as Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (hereinafter, LOPD-GDD), the user is informed in accordance with the provisions of Articles 13 of the GDPR and 11 of the LOPD-GDD:

DATA CONTROLLER

Who is the controller of your data?

Company Name: Yuptel Telecom Spain, SL
Tax ID (CIF): B67263541
Address: AV. Meridiana 27-29, 08018 Barcelona
Email: dpo@yuptel.com

PURPOSE

For what purpose will we process your personal data?

At Yuptel Telecom Spain, SL, we will process your information for the administration and management of the Service and, where applicable, the Value-Added Services.

This processing will be carried out in strict compliance with the duty of confidentiality and with the adoption of all necessary measures to prevent its alteration, loss, unauthorized processing, or access, taking into account the state of technology. If the Customer is not the owner of the data provided (data of dependents, employees, family members, etc.), they guarantee that they are authorized and have obtained the consent of the owner for its provision and will be responsible to Yuptel for it. Likewise, the Customer consents to Yuptel for the following data processing:

Sending commercial communications about Yuptel's telecommunications and value-added services by postal mail or any electronic means;
Commercial promotion of products and services of third parties with which Yuptel has collaboration agreements in the following sectors: financial, insurance, telecommunications, technology, energy, audiovisual, security, education, leisure, automotive, and consumer goods;
Processing of traffic, billing, navigation, and consumption data for commercial promotion purposes;
Transfer of personal data to companies within the Yuptel Group for the commercial promotion of telecommunications, financial, audiovisual, technology, security, and insurance products and services.

Location data (indicating the geographical position of the Customer's device) may be processed by Yuptel in the context of providing Value-Added Services that involve such location, upon the Customer's request, to the extent and for the time necessary to provide these services.

Yuptel may access solvency and credit files to assess the Customer's financial solvency. In the event of non-payment of the Service within the stipulated period, Yuptel may communicate the non-payment data to files related to compliance or non-compliance with monetary obligations.

How long will we keep your data?

The personal data you provide will be retained while the commercial relationship is in effect. However, for maximum transparency, we inform you of the general retention periods we work with:

Generic identification data (email, name, surname, phone number, etc.): for the duration of the commercial relationship or until consent is revoked. In any case, they will be deleted when they are no longer necessary for the purpose for which they were collected.
Video surveillance: thirty (30) days, unless recording an infringement and/or crime.
Additionally, for the sending of commercial information, even after the relationship between the parties ends, Yuptel Telecom Spain, SL will continue to retain your information for sending newsletters related to our products and services. You may always exercise the rights granted by current legislation by contacting us through the most convenient means.

Despite these general periods, we inform you that we periodically review our systems to delete data that is no longer legally necessary.

LEGAL BASIS

What is the legal basis for processing your data?

Depending on the purposes of data collection, the processing of your data is necessary for:

Managing the commercial relationship you have entered into and contracted with us.
- Legal basis: Execution of a contract (Article 6.1.b GDPR).
Preparing a budget tailored to your needs.
- Legal basis: Execution of a contract and/or pre-contractual relationship (Article 6.1.b GDPR).
Managing email communications with interested parties.
- Legal basis: Consent of the interested party (Article 6.1.a GDPR)
- Legitimate interest (Article 6.1.f GDPR).
Carrying out the company's selection processes.
- Legal basis: Consent of the interested party (Article 6.1.a GDPR).
Managing employees and internal human resources of the company.
- Legal basis: Contractual execution (Article 6.1.b GDPR).

Sending commercial communications.

Legal basis: Consent of the interested party (Article 6.1.a GDPR)
Legal basis: Consent of the interested party (Article 20 LSSICE)
Legitimate interest (Article 6.1.f GDPR).
Ensuring the security of facilities (video surveillance).
Legal basis: Legitimate interest (Article 6.1.f GDPR).

All data collected is necessary for the provision of the service. However, data marked with an asterisk (*) is mandatory. If mandatory data is not provided, Yuptel Telecom Spain, SL will not be able to provide the contracted service.

RIGHTS OF DATA SUBJECTS

What rights do I have regarding data protection?

In accordance with Articles 13 of the GDPR and 11.2.c) of the LOPD-GDD, you may exercise any of the following rights by notifying us at the postal address AV. Meridiana 27-29, 08018 Barcelona or by email at dpo@yuptel.com. In any case, under current legislation, you have the following rights as set out in Articles 15 to 22 of the GDPR and 12 to 18 of the LOPD-GDD:

Right to request access to personal data concerning the data subject.
Right to request rectification or erasure.
Right to request restriction of processing.
Right to object to processing.
Right to data portability.

The Customer may revoke the consents granted at any time, as well as exercise their rights of access, rectification, cancellation, and opposition to their data by sending a written request with the subject "Data Protection," including a photocopy of a valid ID document, to Yuptel Telecom Spain, SL, AV. Meridiana 27-29, 08018 Barcelona, or by email to dpo@yuptel.com with the subject "DPO Yuptel."

RECIPIENTS

To which recipients will your data be communicated?

Your data will not be communicated to third parties unless otherwise indicated. Likewise, we inform you that your data will not be transferred internationally to any third country unless otherwise indicated.

SOURCE OF YOUR DATA

How have we obtained your data?

The personal data used by Yuptel Telecom Spain, SL comes from the data subject themselves, in compliance with the aforementioned Articles 13 of the GDPR and 11 of the

LOPD-GDD, or from group companies, about which you can obtain more information by writing to dpo@yuptel.com or at the controller's office at the postal address indicated in this document.

What categories of data do we process?

The categories of personal data processed include:

Identification data:
- Name
- Surname
- ID / NIE / Passport or equivalent document
- Postal addresses
- Email addresses
- Gender
- Date of birth
- Place of birth
- Contact phone number (mobile / landline)
Commercial information
Economic data:
- Bank account number
- Credit card number
Video surveillance:
- Image

Unless otherwise indicated, Yuptel Telecom Spain, SL will not process specially protected data as set out in Articles 9 of the GDPR and 9 of the LOPD-GDD. In any case, processing involving the use of specially protected or sensitive data will be indicated to the data subject in this document.

SUPERVISORY AUTHORITY

At Yuptel Telecom Spain, SL, we make every effort to comply with data protection regulations, as it is our most valuable asset. However, we inform you that if you believe your rights have been violated, you may file a complaint with the Spanish Data Protection Agency (AEPD), located at C/ Jorge Juan, 6. 28001 – Madrid. More information about the AEPD: http://www.agpd.es.