Privacy policy

Information for users

Lucerna Soluciónes Tecnológicas S.L., as Data Controller, informs you that, in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), we will process your data as described in this Privacy Policy.

This Privacy Policy explains how we collect your personal data and why, what we do with it, who we share it with, how we protect it and your choices regarding the processing of your personal data.

This Policy applies to personal data collected by the company in connection with the provision of its services. By accepting this Policy, you agree that we may process your personal data as described here.

Identification details

Company name: Lucerna Soluciónes Tecnológicas S.L.

Tax ID: B75438127

Domicilio: Pontevedra, España

E-mail of privacidad: contacto@lucernasoftware.com

Key principles

We are committed to providing our services to a high standard, including processing your data securely and transparently. Our principles are:

• Lawfulness: We will only collect your personal data for specific, explicit and legitimate purposes.
• Data minimisation: We limit the collection of personal data to what is strictly relevant and necessary for the purposes for which it was collected.
• Purpose limitation: We will only collect your personal data for the stated purposes and in accordance with your choices.
• Accuracy: We will keep your personal data accurate and up to date.
• Data security: We apply technical and organisational measures appropriate and proportionate to the risks to prevent unauthorised disclosure or access, accidental or unlawful destruction, loss, alteration or other unlawful processing.
• Access and rectification: We provide means for you to access or rectify your data when appropriate.
• Retention: We retain personal data lawfully and appropriately only for as long as necessary for the purposes for which it was collected.
• International transfers: where your data are transferred outside the EU/EEA, appropriate safeguards will be applied.
• Third parties: Access to and transfer of personal data to third parties is carried out in accordance with applicable laws and regulations and appropriate contractual safeguards.
• Direct marketing and cookies: we comply with applicable advertising and cookie legislation.

Collection and processing of personal data

The types of data that may be requested and processed include:

• Identification data.

We also automatically collect data about your visit to our website as described in the Cookie Policy.

Whenever we request personal data, we will clearly inform you what data we collect and for what purpose. In general, we collect and process personal data in order to:

• Provide information, services, products, relevant information and sector updates.
• Send communications.

Lawful basis

Under applicable data protection law, your personal data may be processed where:

• You have given consent to the processing. You may withdraw your consent at any time.
• Processing is required by law.
• We have a legitimate interest that is not overridden by your privacy rights, for example to send commercial information where you have subscribed to our newsletter or are an existing customer.
• Processing is necessary to provide one of our services under a contract between you and us.

Affiliate and referral programme

When someone applies to join the Affiliate Programme, we process identification, contact, professional, tax and payment data to assess the application, manage the relationship, attribute opportunities, calculate commissions, prevent fraud and comply with legal and accounting obligations.

When a participant registers a potential opportunity, we may process the minimum data needed to recognise the same contact later. Where possible for attribution purposes, we use hash-derived identifiers and avoid showing participants unnecessary commercial or personal information about the end customer.

Disclosure of personal data

Data may be disclosed to companies related to Lucerna Soluciónes Tecnológicas S.L. for the provision of services as data processors. The company will not disclose data to other parties except where required by law.

Your rights

In relation to the collection and processing of your personal data, you may contact us at any time to:

• Access your personal data and any other information referred to in Article 15(1) GDPR.
• Rectify inaccurate or incomplete personal data under Article 16 GDPR.
• Request erasure of your personal data under Article 17 GDPR.
• Restrict processing of your personal data under Article 18 GDPR.
• Request portability of your data under Article 20 GDPR.
• Object to processing of your personal data under Article 21 GDPR.

Where you have given consent for a specific purpose, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Puede ejercer estos derechos enviando una comunicación motivada y acreditada a contacto@lucernasoftware.com.

You also have the right to lodge a complaint with the competent supervisory authority (www.aepd.es) if you believe the processing does not comply with applicable law.

8. LEGAL INFORMATION

The requirements of this Policy supplement and do not replace any other requirement under applicable data protection law, which will prevail in the event of conflict.

This Policy is reviewed periodically and may be amended by the company at any time. Where this happens, we will inform you of changes and may ask you to read the latest version and confirm your acceptance.