Privacy Policy
Protection of personal data — how we collect, process and safeguard your information.
1. Data controller
In compliance with Regulation (EU) 2016/679 General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we inform you that the controller of your personal data is:
- Legal name: Jacar Systems S.L.
- Tax ID (CIF): B83631242
- Address: Calle Maquinilla 13D, 7-4, 28031 MADRID
- Email: info@jacarsystems.com
- Website: https://jacarsystems.com
2. Data Protection Officer
For any matter relating to the processing of your personal data, you may contact the controller by email at info@jacarsystems.com, with subject "Data protection".
3. Personal data we collect
In Jacar Systems S.L. we may process the following personal data depending on the service requested:
Identifying data
- Full name
- NIF / CIF / NIE
- Postal address
- Phone number
- Email address
Professional data
- Company legal name
- Role or function
- Banking data (for billing)
- Project technical information
- History of contracted services
4. Purpose of processing
Your personal data will be processed for the following purposes:
- Management of contact requests and enquiries received through the website forms.
- Preparing, sending and following up on commercial proposals and quotes.
- Management of the contractual relationship in technology consulting, ERP implementation, software development, AI, and public-sector projects.
- Provision of support, maintenance and evolution of the delivered software.
- Billing, collection, and administrative & accounting management.
- Customer support and incident resolution.
- Sending commercial communications about our services, when the user has given express consent.
- Compliance with applicable legal, tax and contractual obligations.
5. Legal basis for processing
The legal basis for processing your personal data is:
- Performance of a contract (art. 6.1.b GDPR): for the provision of contracted professional services.
- Consent of the data subject (art. 6.1.a GDPR): for sending commercial communications and newsletters.
- Legitimate interest of the controller (art. 6.1.f GDPR): to improve our services, customer support, and fraud prevention.
- Legal obligation (art. 6.1.c GDPR): for compliance with tax, accounting and commercial obligations (Law 58/2003 on General Taxation, Commercial Code).
6. Data retention
Personal data will be retained for the duration of the business relationship and, subsequently, for the legally established periods to address potential liabilities:
- Billing data: 6 years (art. 30 of the Commercial Code).
- Tax data: 4 years (art. 66 of the General Tax Law).
- Project contract documentation: during the warranty period of the service provided and any derived liabilities.
- Commercial communications: until you withdraw your consent.
Once these periods elapse, the data will be deleted or, where applicable, anonymised for statistical purposes.
7. Recipients of the data
No data will be transferred to third parties, except where required by law. The data processors necessary for the provision of the contracted service may have access to your data:
- Financial institutions: for managing collections and payments.
- Public authorities: when legally required (AEAT, Social Security).
- Technology providers: acting as data processors under contract (hosting, cloud infrastructure, business software).
- Advisors: tax, labour and accounting, for compliance with legal obligations.
8. International transfers
No international transfers of personal data outside the European Economic Area (EEA) are envisaged. Should they be required, they would be carried out under the appropriate safeguards provided for in the GDPR (standard contractual clauses, adequacy decisions of the European Commission, etc.).
9. Your rights
Under the GDPR and LOPDGDD, any person has the right to:
- Access: know whether your data is being processed and obtain a copy.
- Rectification: request the correction of inaccurate or incomplete data.
- Erasure: request deletion of your data when it is no longer needed.
- Objection: object to processing of your data in certain circumstances.
- Restriction: request restriction of processing in certain cases.
- Portability: receive your data in a structured, commonly used format.
To exercise these rights, you may write to us by letter or email at info@jacarsystems.com, along with a copy of your ID.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es.
10. Cookies
This website uses first-party cookies to ensure correct operation. For detailed information on the cookies we use and how to manage them, please see our Cookie Policy.
11. Security
In Jacar Systems S.L. we have adopted the necessary technical and organisational measures to ensure the security of personal data and to prevent its alteration, loss, processing or unauthorised access, taking into account the state of the art, the nature of the stored data, and the risks to which it is exposed. Among other measures:
- Encrypted communications via HTTPS / TLS.
- Restricted data access via user profiles.
- Periodic backups.
- Staff training on data protection.
12. Modifications
We reserve the right to amend this Privacy Policy to adapt it to legislative or case-law developments, or to changes in our processes. Significant changes will be communicated via the website or by email. We recommend reviewing this page periodically.