Privacy Policy

Privacy Policy

Privacy Policy

1. Who Processes the Data?

1. Who Processes the Data?

Identity:

TOC Systems, SL – hereinafter That Open Company.

NRT:

L718520Z

Address:

Urbanización Solà del Tarter 49, Edificio Bellesguard Bloc C, 3-1, AD100, El Tarter, Canillo, Andorra

Email:

hey@bimmaster.org

The Data Controller of personal data is committed to protecting the privacy of users and to developing technology that provides the safest experience on the website. This privacy statement is valid for the website www.thatopen.com and governs the collection and use of data.

2. What Legislation Applies?

2. What Legislation Applies?

Our Privacy Policy has been designed in accordance with the legal framework established by Law 29/2021 of October 28, the Qualified Law on Personal Data Protection, and as per the General Data Protection Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016, regarding the protection of individuals with respect to the processing of personal data and the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation).

By providing us with your data, the user declares that they have read and are aware of this Privacy Policy, giving their unequivocal and express consent to the processing of their personal data in accordance with the purposes and terms outlined herein.

That Open Company may modify this Privacy Policy to adapt it to legal, jurisprudential, or interpretative updates from the Andorran Data Protection Agency (APDA). These privacy conditions may be supplemented by the Legal Notice, Cookie Policy, and the General Conditions that may apply to specific products or services if access involves a particular aspect regarding personal data protection.

3. Data Retention

3. Data Retention

The data collected will be kept only as long as necessary to fulfill the purpose for which they were collected, and in any case, to determine potential responsibilities that may arise from this purpose, considering the periods established by the relevant regulations.

Data Processing

Purpose and Legal Basis

Retention Period

Contact Form

Contact Form

Respond to requests and/or inquiries made by users, with explicit consent as the legal basis in accordance with Article 6.1.a) of the LQPD.

Respond to requests and/or inquiries made by users, with explicit consent as the legal basis in accordance with Article 6.1.a) of the LQPD.

CV Management

Data will be processed to respond to your request and assess your profile to participate in selection processes, with the legal basis being pre-contractual measures or the intention to conclude a contract, in accordance with Article 6.1.b) of the LQPD.

The data will be retained for the necessary period to fulfill the purpose for which they were collected, and in any case to determine potential responsibilities.

Sending Informative Communications

Subscription to news, promotions, and offers, with explicit consent as the legal basis in accordance with Article 6.1.a) of the LQPD.

The data will be retained while the subscription to communications is in force, or until the user exercises their right to object or delete the data.

Email Management

The purpose of the data processing is to respond to inquiries received and manage the business and/or professional relationship, with the legal basis being the contractual relationship between the Data Controller and the user, in accordance with Article 6.1.b) of the LQPD.

The data will be retained for the necessary period to fulfill the purpose for which they were collected, and in any case to determine potential responsibilities.

Training

Management of course registrations, with explicit consent as the legal basis in accordance with Article 6.1.a) of the LQPD.

The data will be retained for the necessary period to fulfill the purpose for which they were collected, and in any case to determine potential responsibilities.

4. Security Measures

4. Security Measures

As part of our commitment to ensuring the security and confidentiality of users' personal data, we have adopted the necessary technical and organizational measures to ensure the security of personal data and prevent its alteration, loss, unauthorized processing, or access, considering the state of technology, the nature of the data stored, and the risks to which they are exposed, in accordance with Article 32 of the GDPR (EU) 679/2016 and Article 35 of Law 29/2021 of October 28 on the protection of personal data.

5. Data Transfer

5. Data Transfer

Users are informed that a subsidiary company That Open Company LLC, acts as the Data Processor for managing contact form and sending informative communication. Data will be communicated to the parent company That Open Company, which acts as the Data Controller for such data. Data will not be communicated to other third parties, except for those authorized by tax, commercial, and telecommunications legislation, or when required by a judicial authority.

6. International Transfers

6. International Transfers

Users are informed that That Open Company LLC is based in the United States, and as a result, an international data transfer takes place. This transfer is necessary to execute a contract between the user and the Data Controller.

Additionally, the international transfer is protected by the Standard Contractual Clauses adopted by the European Commission and with adequacy guarantees according to the GDPR.

7. User Rights and How to Exercise Them

7. User Rights and How to Exercise Them

Every interested party has the right to obtain confirmation on whether personal data concerning them is being processed or not. Interested parties have the right to access their personal data and to request the rectification of inaccurate data or request their deletion when, among other reasons, the data is no longer necessary for the purposes for which they were collected.

In certain circumstances, users may request the limitation of the processing of their data, in which case they will only be retained for the exercise or defense of claims. Users may object to the processing of their data based on reasons related to their particular situation.

Additionally, users may exercise the following rights:

Right of Access:

You can request information about the purpose of the processing, the categories of personal data being processed, and the recipients of the data, among others.

Right to Rectification:

If your data is inaccurate or incomplete, you have the right to request its correction.

Right to Data Portability:

Users have the right to receive their personal data in a structured, commonly used, and machine-readable format.

© 2024, That Open Company

Follow us

Be Free Again

© 2024, That Open Company

Follow us

Be Free Again

© 2024, That Open Company

Follow us

Be Free Again

© 2024, That Open Company

Follow us

Be Free Again

© 2024, That Open Company

Follow us

Be Free Again

© 2024, That Open Company

Follow us

Be Free Again