Privacy Policy

We care about your privacy

GESCOBRO COLLECTION SERVICES, S.L.U. (hereinafter, collectively, and interchangeably called 'GESCOBRO', 'we', 'our' or 'us'), is a leading company in servicing of collection for third parties and in purchase of secured and unsecured portfolios in Spain.

We consider the privacy of people important, both of visitors to our website https://www.gescobro.com (hereinafter, the “website”) and of any other affected persons who provide us with information through it, whose Data is processed by GESCOBRO as part of the provision of services (hereinafter and jointly, “you” or the “user” and in a plural way, “you” or the “users”). In this sense, GESCOBRO undertakes to process your data in accordance with the applicable personal data protection regulations in force at all times. Specifically, GESCOBRO will comply with the premises established in: Organic Law 15/1999, of December 13, of protection of personal data and Royal Decree 1720/2007, of December 21, which approves the Development Regulation of the aforementioned Organic Law, as well as those related to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016 regarding the protection of natural persons with regard to the processing of personal data and free movement of these data and by which Directive 95/46 / CE and any other correlative applicable regulations in force at all times are repealed.

If you decide to provide us with your personal data, GESCOBRO may have the data that appears in each of the forms that you fill in or those that you provide via the different email accounts that GESCOBRO makes available to contact us.

These data are processed when you interact with GESCOBRO and our representatives; when you participate or request to be considered to participate in activities related to GESCOBRO, such as services; when you interact with the website when it asks you to provide personal data, as described in this Privacy Policy and Cookie Policy; by registering on our website or using certain features without registering, such as participating in our interactive services.

a) Personal data that our website obtains from your computer or electronic device:

• Cookies, only for https://www.gescobro.com

For more information on the use of cookies by GESCOBRO, see our Cookies Policy.

How do we use personal data of users?

GESCOBRO communicates to the users to whom it applies, that the personal data that they provide, and we collect will be identified in the Register of Treatment Activities owned by GESCOBRO, being used for the purpose of:

• Respond to inquiries or requests for information that users may make.
• Provide our services in accordance with the Legal Notice.
• The use or provision of services, where appropriate, prior user registration, in accordance with the general conditions of use of the Web and the conditions of certain services.
• Personalize and improve the tools and functionalities of the Web, as well as guarantee the technical functioning of the same.
• In the event that the user has ticked the corresponding box for such purposes, keep them informed by sending notifications / newsletters by email and / or other electronic means, the content of which will be mainly about our services, activities, projects, updates and new features of the website. Use them for any other purpose required or permitted by applicable law or for which you have given your consent.

Why do we process your personal data?

GESCOBRO may process your personal data based on any of the following legal bases:

A. Legitimate commercial purposes.
B. When you have given your consent.
C. When necessary to comply with the legal and regulatory obligations of GESCOBRO.
D. As necessary for the performance of a contract to which you are a party.

Who can access your personal data?

Depending on the purposes for which the personal information is collected, the following people can access such information, interchangeably:

• Authorized GESCOBRO personnel or their representatives acting on behalf of GESCOBRO, subject to the applicable data protection laws.
• Regulatory authorities or other third parties in accordance with applicable laws.
• Third parties (service providers that process information as data processor, under the instructions of GESCOBRO). All this only after taking the necessary measures to ensure that we can share such information in compliance with applicable data protection laws. We will not sell or disclose to third parties any information or personal data that you have provided on our website that could directly or indirectly identify you.

Where is your personal data processed?

GESCOBRO will not carry out transfers of personal data outside the European Economic Area (EEA). In the event that such transfers were made, GESCOBRO would do so in compliance with the applicable data protection laws. Regardless of where your personal data is collected or processed, GESCOBRO watches over and guarantees that service providers maintain appropriate administrative, technical, and physical security measures to protect information about you.

For more information on the use of the contract models by GESCOBRO, please contact us at compliance@gescobro.com

How do we protect your personal data?

GESCOBRO maintains the security levels of protection of your data required by Royal Decree 1720/2007, of December 21, which approves the Regulations for the development of the Organic Law on Protection of Personal Data and other correlative regulations of application and in force at all times and has established all the technical means at its disposal to prevent the loss, misuse, alteration, unauthorized access and theft of the data that the user provides through the website.

In any case, GESCOBRO will take appropriate technical and organizational measures, both when designing the data processing system and at the time of the processing itself, to preserve security and prevent unauthorized processing. However, despite the diligent implementation of such measures, the user must know that Internet security measures are not impregnable.

How long will we keep your personal data?

GESCOBRO processes your personal data for the period necessary to fulfill the purposes established in this Privacy Policy, as well as to keep your personal information in compliance with the provisions of the relevant laws and regulations.

The criteria we follow for this is determined by:

• The purpose of the data collected and the fulfillment of said purpose.
• The reasons why the data is collected; for example, in case of consent, you can revoke it at any time.
• Mandatory storage periods according to contractual and regulatory requirements.
• The personal data of candidates in selection processes (resumes) are kept as a rule for a maximum of twelve (12) months from the end of each process, unless the interested party renews their authorization to keep them for a longer period

Keep in mind that in some cases GESCOBRO is obliged to keep certain data about you.

Confidentiality

The professionals who work at GESCOBRO and who have some kind of intervention in the services provided to the user, are committed not to disclose or make use of the information they have accessed. The information provided by the user will, in any case, be considered confidential, without it being used for purposes other than those related to the management linked to their requests and the services contracted from GESCOBRO, when appropriate. In this sense, we undertake not to disclose or reveal information about the user's claims, the reasons for the requested advice or the duration of their relationship with the user.

Social networks

GESCOBRO is present on some of the main social networks on the Internet, and for which it acts as the data controller in relation to the data published by GESCOBRO.

GESCOBRO will process the data in each social network according to the rules established for this purpose by each social network. Therefore, and as long as the contrary is not stated, GESCOBRO can inform its followers in the corresponding social network about our activities, events, and other related topics, including attention to the follower, through the channels that the social network provides for this purpose.

GESCOBRO will not extract personal data from social networks unless the user gives us their express consent.

Special category of personal data

We will not collect or process any particularly sensitive personal data or included in the special category of users' personal data unless they have been explicitly provided to us. The special categories of personal data refer to information related to race or ethnic origin, political opinions, religious or philosophical beliefs or other beliefs of a similar nature, union affiliation, genetic data, biometric data for the exclusive purposes of identifying a natural person, health data, sex life or sexual orientation.

Policy on child use

This website is not designed or directed to children under eighteen (18) years of age, without parental or legal guardian authorization. In this regard, we do not knowingly collect information from such individuals. In any case, if parents or legal representatives consider that their children have sent us personal data, without their consent, contact us by writing to compliance@gescobro.com

Direct marketing

We will not use the personal data of users for direct marketing purposes without their express prior consent.

If at any time you decide to stop receiving commercial or promotional information from GESCOBRO, you can, free of charge and without having to provide a justification, unsubscribe from direct marketing campaigns and oppose the future processing of your personal data for such purposes by sending us an email to compliance@gescobro.com or by clicking on the 'opt-out' (unsubscribe) in the subject of the email. You can also use the unsubscribe procedure provided in any promotional message you receive from GESCOBRO.

Note that even if you decide not to subscribe or unsubscribe from promotional emails or newsletters, we may still need to contact you regarding important non-commercial information, such as troubleshooting, error detection and prevention or in general to comply with the Legal Notice and / or Terms and Conditions of the website.

Automated decision making

We will not use automated decision-making processes, including profiling, unless you have explicitly authorized us to do so. In that case, we would inform you about the logic used in the decision, as well as about the meaning and expected consequences of such processing for you.

Links to other websites

On the GESCOBRO websites there are links to other websites that we consider potentially useful and informative for you. However, keep in mind that we do not endorse or recommend the content or services of such websites, nor are we responsible for their privacy policies. We recommend that you consider and read the privacy policies of all the sites you visit. Remember that what is indicated in this Privacy Policy only applies to the data that GESCOBRO collects and / or processes.

Modifications and integrity of our Privacy Policy

We will only use your personal data as established in the Privacy Policy in force at the time we collect your personal data. GESCOBRO reserves the right to modify this Privacy Policy at any time, publishing such modifications on our website, so we recommend that you visit it each time you access the Privacy Policy. If at any time we decide to use personal data in a different way than what was declared at the time it was obtained, we will notify you by email, as long as we have it. At that time, you will be given the option to authorize other uses or disclosures of the personal data that you have provided us before the modification of our Privacy Policy.

In the event that any clause of this Privacy Policy is annulled or considered void, the rest of the conditions will not be affected, fully preserving their validity and, in accordance with current regulations applicable at all times.