PRIVACY POLICY

The purpose of this policy is to inform interested parties about the various processing activities carried out by this organization through the website that affect their personal data, in accordance with Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016.

1. IDENTIFICATION AND CONTACT DETAILS OF THE DATA CONTROLLER

The organization GLOBAL JOURNEY CONSULTING SL, located at C/ O'DONELL 1, OFFICE 1, (28009 MADRID), MADRID, with N.I.F. B87880191, and email info@gj-consulting.com.

2. PURPOSES OF PROCESSING PERSONAL DATA

WEBSITE USERS/NAVIGATORS

We will process the personal data you provide through our web forms to:

Respond to requests, complaints, and incidents submitted through our contact channels on the website.
Understand user behavior on the website in order to detect potential cyberattacks.
Comply with legal obligations directly applicable to our activity.
Protect and exercise our rights or respond to claims of any kind.
Where applicable, send commercial communications related to the goods or services offered, and/or news or newsletters related to our sector.
Manage and send requested quotes.
Schedule the requested appointments.
Manage, administer, and supervise your activity on the integrated blog/forum.

CLIENTS

We will process the personal data you provide through our web forms to:

Manage the commercial relationship.
Provide the services you have contracted.
Handle matters related to the shipping and receipt of products purchased through the website.
Manage administrative, accounting, and tax processes.
Respond to requests, complaints, and incidents submitted through our contact channels on the website.
Understand user behavior on the website to detect potential cyberattacks.
Where applicable, send commercial communications related to the goods or services offered, and/or news or newsletters related to our sector.
Comply with legal obligations directly applicable to our activity.
Protect and exercise our rights or respond to claims of any kind.

3. LEGAL BASIS FOR PROCESSING

WEBSITE USERS/NAVIGATORS

Your consent to process your data for the purposes indicated. Refusal to provide your personal data will prevent us from processing your data for the purposes mentioned.
To comply with applicable legal obligations. In this case, you cannot object to the processing of personal data.
Our legitimate interest in protecting our image, business, and track record from attacks on our website. In this case, you cannot object to the processing of personal data, although you may exercise the rights recognized in section 8 of this policy.

CLIENTS

Performance of a contract in which you are a party or application of pre-contractual measures. Refusal to provide your personal data will prevent us from processing your data for the purposes mentioned.
Your consent for processing data for purposes unrelated to the performance or execution of an existing contract. Refusal to provide personal data will prevent us from processing it for these purposes.
To comply with applicable legal obligations. You cannot object to the processing of personal data in this case.
Our legitimate interest in protecting our image, business, and track record from attacks on our website. You cannot object to the processing of personal data in this case, although you may exercise the rights recognized in section 8 of this policy.

4. DATA RETENTION PERIODS OR CRITERIA

Personal data provided will be retained for the time necessary to fulfill the purposes for which they were initially collected.

Once the data is no longer necessary for the relevant processing, it will be properly blocked and, if applicable, made available to the competent Public Administrations, Courts, or the Public Prosecutor, for the statute of limitations applicable to any actions arising from the relationship with the client and/or the legally established retention periods.

BLOCKING PERIODS:
- Civil Code: 5 to 15 years depending on the case, in accordance with Article 1964.2.
- Commercial Code: 6 years, in accordance with Article 30, applied to commercial information (invoices, receipts, corrective invoices, bank documents, etc.).
- General Tax Law: 4 years, in accordance with Articles 66 to 70, applied to tax-related information.

5. AUTOMATED DECISIONS AND PROFILING

The website does not make automated decisions or create profiles.

6. RECIPIENTS

During the period of personal data processing, the organization may disclose your data to the following recipients:

Courts and Tribunals.
State Security Forces.
Other competent authorities or public bodies, when the data controller has a legal obligation to provide personal data.
Banks and financial institutions, if contracted by the client.
SEPBLAC (Executive Service of the Commission for the Prevention of Money Laundering and Monetary Offenses).

7. INTERNATIONAL DATA TRANSFERS

The organization does not carry out any international data transfers.

8. RIGHTS

Interested parties may exercise, at any time and free of charge, the rights of access, rectification, and deletion, as well as request the limitation of their personal data processing, object to it, request data portability (where technically possible), or withdraw previously given consent. When applicable, they also have the right not to be subject to a decision based solely on automated processing, including profiling.

To do so, you may use the forms provided by the organization or send a written request to the postal address or email indicated above. Requests must be accompanied by a copy of your ID or equivalent document to verify identity.

If you believe your data protection rights have been violated, especially if you have not obtained satisfaction in exercising your rights, you may file a complaint with the competent Data Protection Authority (Spanish Data Protection Agency) via www.agpd.es.

In accordance with Article 21 of Law 34/2002 on Information Society Services and Electronic Commerce, if you do not wish to receive further information about our services, you can unsubscribe by emailing info@gj-consulting.com with the subject “UNSUBSCRIBE” or by clicking the unsubscribe link in our emails.

9. ACCURACY OF DATA

The data subject guarantees that the data provided is true, accurate, complete, and up to date, committing to inform of any changes through the channels indicated in section 1. They will be responsible for any direct or indirect damages caused by failing to comply with this obligation.

If the user provides third-party data, they declare that they have obtained consent from the data subjects and agree to convey this information, holding the organization harmless from any liability arising from failure to comply.

10. SOCIAL MEDIA

Social networks are part of the daily lives of many Internet users, and the organization has created various profiles on some of them.

Users visiting our website may join our social media accounts or groups. However, unless we directly request your data (e.g., via marketing, contests, promotions, or any other valid method), your data will belong to the respective social network. We recommend reviewing their terms of use and privacy policies and configuring your preferences regarding data processing.

11. MODIFICATIONS/UPDATES

This privacy policy may be modified or updated due to legal requirements or to adapt it to instructions from the Spanish Data Protection Agency or changes to our website.

We advise users to periodically review our privacy policy.

If you have questions about this policy, you can contact GLOBAL JOURNEY CONSULTING SL at info@gj-consulting.com.