Privacy Policy

Data controller

FIABILIS HOLDING, S.L., hereinafter, "FIABILIS".
Address: Av. Albufera, 321, 28031 Madrid, Spain
Email: contact@fiabiliscg.com
Phone: (+34) 913281285
N. I.F.: B86701125

Data Protection Officer

FIABILIS has appointed a Data Protection Officer, who can be contacted at the privacy@fiabiliscg.com address or by written communication addressed to the address of the data controller.

Personal data processed

The following categories of personal data may be processed through the website:

• identification and contact data, such as name, surname, company, job title, role, email address and telephone number;

• data included by the user in the message, observations or request sent through the contact forms or channels;

• data relating to the company or entity that the user represents, when acting on behalf of a legal entity or requesting information in the context of a professional relationship;

• data derived from communications with FIABILIS, including enquiries, requests for advice, requests for information, requests for submissions or commercial communications;

• browsing data and technical data, such as IP address, online identifiers, device type, browser, operating system, pages visited, date and time of access, referring URLs and data derived from the use of the website;

• data relating to the user's preferences for cookies and similar technologies;

• any other data that the user voluntarily provides in their communications with FIABILIS.

The user must avoid including unnecessary data, data from third parties without sufficient legitimacy or special categories of personal data in the forms or communications, unless they are strictly necessary to manage their request.

Processing carried out through the website

As a structuring criterion, the purposes of the processing are presented together with their corresponding legal basis and with the categories of personal data processed, in order to provide the user with clear, complete and understandable information at the time of collection of their data.

a) Request for advice, contact or information through web forms

Purpose of processing: to manage and respond to requests for advice, information or contact sent by the user through the forms provided on the website, as well as to contact the user in relation to the services requested.

Legal basis: the application of pre-contractual measures at the request of the interested party when the request is related to the possible contracting of services, or the legitimate interest of FIABILIS in attending to and managing the communications received.

Categories of personal data processed: identification and contact data, mainly name, surname, email address and, where applicable, telephone number, company, professional position, function and content of the message or comments sent by the user.

b) Request for presentation or personalized explanation of services

Purpose of the processing: to manage the request for presentation, information or personalised explanation of the services of FIABILIS, to attend to the query raised and to contact the user in relation to said request.

Legal basis: the application of pre-contractual measures requested by the interested party or, where appropriate, the legitimate interest of FIABILIS in responding to the requests received and presenting its services to potential customers.

Categories of personal data processed: identification and contact data, such as name, surname, e-mail address, telephone number, company, position or professional function and content of the request or message sent.

c) Management of contacts received by phone, email, Teams or other corporate channels

Purpose of processing: to respond to requests, queries or communications received through the contact channels published on the website, including telephone, email, Teams, forms or other corporate means enabled by FIABILIS.

Legal basis: the application of pre-contractual measures at the request of the data subject, when the communication is intended to request information about services or to initiate a professional relationship, or the legitimate interest of the controller in managing the communications received and maintaining the relationship with users, potential customers, customers, suppliers or collaborators.

Categories of personal data processed: identification and contact data, such as name, surname, email address, telephone number, company, professional position, function, data included in the communication and, where appropriate, information necessary to respond to the query raised.

d) Sending commercial communications, newsletters or direct marketing

Purpose of the processing: to send commercial communications, newsletters, promotional information or communications relating to services, content, events, initiatives or news from FIABILIS.

Legal basis: the consent of the interested party, when the user ticks the specific box enabled to receive commercial communications or newsletters. The sending of contact forms, requests for advice, requests for presentation or requests for information must not be conditioned on the acceptance of commercial communications.

Categories of personal data processed: identification and contact data, such as name, surname, email, company, position or professional function and preferences or interests related to FIABILIS' services.

e) Operation, security and maintenance of the website

Purpose of the processing: to allow browsing the website, ensure its proper functioning, maintain the security of the systems, prevent unauthorised access, detect misuse, resolve technical incidents and protect the integrity and availability of the page.

Legal basis: the legitimate interest of FIABILIS in guaranteeing the security, availability and correct functioning of the website and its computer systems.

Categories of personal data processed: browsing data and technical data, such as IP address, online identifiers, device type, browser, operating system, date and time of access, pages visited, referring URLs, technical logs and data derived from the use of the website.

f) Statistical analysis, measurement and improvement of the website

Purpose of the processing: to analyse user browsing, measure the performance of the website, know the interaction with the contents, detect errors, compile aggregate statistics and improve the services and functionalities offered.

Legal basis: the user's consent, when cookies or similar technologies are used that require it. In the event of using technical tools, aggregated or configured in a non-invasive way that do not require consent in accordance with applicable regulations, the legal basis may be the legitimate interest of FIABILIS in improving the website.

Categories of personal data processed: browsing data, online identifiers, IP address, device and browser information, pages visited, browsing time, interaction with content and cookie preferences.

g) Defence of rights, regulatory compliance and management of responsibilities

Purpose of the processing: to prevent, detect or manage improper use of the website, legal or contractual breaches, claims, audits, internal investigations, requests from authorities or actions necessary for the formulation, exercise or defence of claims.

Legal basis: compliance with applicable legal obligations and FIABILIS' legitimate interest in protecting its rights, interests, systems and legal position.

Categories of personal data processed: identification data, contact details, browsing data, technical records, communications with the user, documentation associated with the relationship or request and any data necessary to prove the facts or manage the corresponding claim.

Data recipients

Personal data may be processed by authorised FIABILIS personnel and communicated, when necessary, to the following categories of recipients:

• providers of technological services, web hosting, maintenance, security, computer support, management tools, email, forms, CRM, web analytics, Teams or communications;

• professional advisors, auditors, consultants, insurance companies, financial institutions or collaborators necessary for the management of the requested relationship;

• group companies or related entities, when necessary to respond to the request, provide services or coordinate internal activities;

• public authorities, administrative bodies, courts or third parties when there is a legal obligation or it is necessary for the defence of rights.

Providers who process data on behalf of FIABILIS shall act as processors in accordance with Article 28 of the GDPR and shall be subject to the corresponding contractual obligations.

International Data Transfers

In general, FIABILIS will ensure that personal data are processed within the European Economic Area. However, some technology providers, tools integrated into the website or third-party services may involve international data transfers.

When international transfers take place, FIABILIS will adopt the guarantees required by the applicable regulations, such as adequacy decisions, standard contractual clauses approved by the European Commission, complementary measures or other legally valid mechanisms.

Retention periods

Personal data will be kept for the time necessary to fulfil the purpose for which they were collected and, subsequently, for the periods necessary to meet possible legal responsibilities.

In particular:

• data relating to requests for contact, advice, presentation or information will be kept for the time necessary to manage the request and, where appropriate, for the period necessary to accredit the care provided;

• data relating to contractual or pre-contractual relationships will be kept for the duration of the relationship and for the applicable legal retention and limitation periods;

• the data processed for commercial communications will be kept until the data subject withdraws their consent or objects to the processing;

• data derived from cookies will be kept for the periods indicated in the Cookie Policy;

• The data necessary for the defence of rights may be kept for the applicable legal limitation periods.

Rights of data subjects

The user may exercise, under the terms provided for by the applicable regulations, the rights of access, rectification, deletion, opposition, limitation of processing, data portability and withdrawal of consent.

To exercise these rights, the interested party may contact FIABILIS through the address contact@fiabiliscg.com, the email of the Data Protection Officer privacy@fiabiliscg.com, or by written communication addressed to the address of the data controller.

The interested party also has the right to file a complaint with the Spanish Data Protection Agency, without prejudice to any other administrative or judicial appeal that may correspond to them.

Automated decisions

In general, FIABILIS does not make decisions based exclusively on automated processing that produces legal effects on the users of the website or significantly affects them in a similar way.

Policy Update

FIABILIS may modify this Privacy Policy when necessary to adapt it to regulatory, technical, organisational changes or modifications in the processing carried out through the website.