Privacy policy

We provide this Privacy Policy in order to inform in detail on the use to be made by the owner of this Website of your personal data and on the protection of your privacy and the information you provide.

Any changes to this Privacy Policy, will be notifies via this Website or by other means, so Users are aware of the new privacy conditions that will be adopted.

Who is responsible for the processing of your data?

MLAB Abogados, S.L.P. with Tax Identification Number B84585884 and address at Calle Claudio Coello, 20, 2^nd floor, Madrid (28001). E-mail address info@mlab-abogados.com and telephone number 91 426 44 70.

For what purposes do we process your personal data?

We process the personal data you provide for the following purposes:

To deal with the requests and queries you send us, contact you, provide a response and follow up on them.
If you become our follower on social networks, we will process your data to keep you informed of our activities through said channels.

For these two purposes, providing your data is voluntary, although, if you do not do so, we will not be able to respond to you nor will you be able to follow us on the corresponding social network.

If you send us your CV for an internship or to work with us, we will process the data contained therein in order to be able to carry out the corresponding selection processes. The provision of the data is obligatory, as otherwise the corresponding selection process cannot be carried out and, in any case, the recruitment cannot take place.

For how long will we process your data?

We only keep your data for the period of time necessary to fulfil the purpose for which they were collected, to comply with the legal obligations imposed on us and to meet any possible liabilities that may arise from the fulfilment of the purpose for which the data were collected.

The personal data necessary to deal with queries or requests will be processed for the time necessary to respond to them and will be kept as a communications history for a period of one year, unless you request the deletion of your data beforehand. In any case, we will keep them blocked during the period of prescription of the legal actions that could derive from the request and/or its management.

The data you provide us with or that we obtain in order to take part in a specific recruitment process will be kept until the recruitment process is completed and will be deleted thereafter, unless the candidate is selected, in which case it will be added to your employee file. Where you provide us with your CV spontaneously, simply so that we can take it into account in future recruitment processes, the data will be kept for a maximum of one year from the last update. You must keep the personal data you provide us with up to date, in particular with regard to training and professional experience.

Occasionally, during selection processes, job portals may be used to search for candidates who match the professional profiles that we are interested in, subject to the Privacy Policies of such platforms. The categories of personal data processed in these cases are the following: identification data, personal characteristics data, employment details data, academic and professional data and any other information that the candidate has published on the job portal or included in their CV.

The data provided through social networks will be retained for as long as you remain our follower on the corresponding platform.

What is the legitimacy for the processing of your data?

The processing of personal data for the purpose of responding to your queries and requests, as well as data provided through social networks, is based on the consent of the person concerned.

The legitimate basis for processing CVs that you submit to us or that we obtain from job platforms for a specific recruitment process is the existence of a pre-contractual relationship. In addition, further data may be collected during interviews or selection processes, the processing of which has the same basis. On the other hand, the legal basis for processing the data contained in your CV that you have spontaneously submitted to us is your consent.

The categories of data processed are those requested in the document, CV or contract through which you provide us with your data. In the case of social networks, we will process your identification data.

To which recipients will your data be communicated?

The data will not be communicated to third parties, except for those transfers that must be made as required by the legislation in force.

Although it is not a transfer of data, it may be that third party companies, acting as our service providers, access your information to carry out the service. These third parties access your data on our instructions and may not use it for any other purpose, and they do so in strict confidence and on the basis of a contract in which they undertake to comply with the requirements of current legislation on the protection of personal data.

What are your rights when you provide us with your data?

Any person has the right to obtain confirmation as to whether or not we are processing personal data concerning said person, to access such data, to request the rectification of inaccurate data or, where appropriate, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

Under the conditions provided for in the General Data Protection Regulation, interested individuals may request the limitation of the processing of their data or their portability, in which case we will only keep them for the exercise or defense of claims.

In certain circumstances and on grounds relating to their particular situation, interested individuals may object to the processing of their data. If you have given consent for a specific purpose, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal. In such cases, we will stop processing the data or, as the case may be, we will stop processing it for that specific purpose, except for compelling legitimate reasons, or the exercise or defense of possible claims.

In addition, data protection regulations allow you to object to being subject to decisions based solely on automated processing of your data, where appropriate.

The aforementioned rights are characterised by the following:

Their exercise is free of charge, except in the case of manifestly unfounded or excessive requests (e.g. repetitive nature), in which case a fee proportional to the administrative costs incurred may be charged or a refusal to act may be made.
You can exercise these rights directly or through your legal representative or volunteer
Your request must be responded to within one month, although, taking into account the complexity and number of requests, the deadline can be extended by a further two months.
We are obliged to inform you about the means of exercising these rights, which must be accessible and without being able to refuse you the exercise of the right on the sole ground that you have chosen another means. If the request is made by electronic means, the information will be provided by electronic means where possible, unless you ask us to do otherwise.
If, for whatever reason, the request is not acted upon, we will inform you, within one month at the latest, of the reasons for this and of the possibility of lodging a complaint with a supervisory authority.

In order to facilitate the exercise of the aforementioned rights, we provide below links to the application form for each of them:

All the aforementioned rights may be exercised through the means of contact with the entity listed at the beginning of this clause.

In the event of any breach of your rights, in particular where you have not obtained satisfaction in exercising your rights, you may lodge a complaint with the Spanish Data Protection Agency (contact details available at www.aepd.es), or other competent supervisory authority. You can also obtain further information about your rights by contacting these bodies.

How do we protect your personal data?

We are committed to protecting the personal data we process. We use reasonably reliable and effective physical, organisational and technological measures, controls and procedures to maintain the integrity and security of your data and to ensure your privacy.

In addition, all staff with access to personal data have been trained and are aware of their obligations in relation to the processing of your personal data.

In the case of the contracts we sign with our service providers, we include clauses requiring them to maintain the duty of secrecy regarding the personal data to which they have had access by virtue of the assignment, as well as to implement the necessary technical and organisational security measures to guarantee the permanent confidentiality, integrity, availability and resilience of the systems and services for the processing of personal data.

All these security measures are regularly reviewed to ensure their adequacy and effectiveness.

However, absolute security cannot be guaranteed and no security system is impenetrable so, in the event that any information under our control is compromised as a result of a security breach, we will take appropriate steps to investigate the incident, notify the competent authority and, where appropriate, those users who may have been affected to take appropriate action.

What is your responsibility as a data subject?

By providing us with personal data, the person doing so guarantees that is over 14 years of age and that the data provided is true, accurate, complete and up to date.

For these purposes, the interested individual is responsible for the veracity of the data and must keep them suitably updated so that they correspond to their real situation, and shall be liable for any false or inaccurate data that may be provided, as well as for any damages, direct or indirect, that may arise.

If you provide data of third parties, you assume the responsibility of informing them in advance of all the provisions of article 14 of the General Data Protection Regulation under the conditions set out therein.