PRIVACY POLICY
From ALL INNOVATION FIRM S.L. we understand that it is essential to maintain a transparent relationship with you, therefore, below is our Privacy Policy.our Privacy Policy, so that at all times you are properly informed about how we collect and securely treat any information you provide us with.how we collect and securely handle any information you provide us with.Your data will be processed in accordance with the legislation in force and, in particular, in accordance with the provisions of the Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the protection of personal data and the free processing of personal data and on the free movement of such data. Also with regard to Organic Law 3/2018 of 5 December 2018 on the Protection of Personal Data.December, on the Protection of Personal Data and Guarantee of Digital Rights.A careful reading of our Privacy Policy will provide you with the information you need to know how we will use the data you provide us with. We will give to the data you provide us.


4 WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?
‍If you, or an authorised person, have provided us with your data, we inform you that ALL INNOVATION FIRM S.L., CIF: ESB88196431 is responsible for the treatment of the same. These data will be processed in accordance with the provisions of current regulations on personal data protection.It is possible that there may be other parties responsible for the processing that we carry out, in which case we will always inform you who the person responsible for the processing of your data is.the person responsible for the processing of the data, as well as their identification data.The Website may include hyperlinks or links that allow access to websites of third parties other than www.thatsall.co, and which are therefore not operated by ALL INNOVATION FIRM S.L.. The owners of these websites will have their own data protection policies, being themselves, in each case, responsible for their own processing and privacy practices. their own data processing and privacy practices.ALL INNOVATION FIRM S.L. undertakes to comply with the obligation of secrecy of personal data and its duty to keep them confidential. Personal data and its duty to protect them. For that reason we adopt the necessary measures to avoid its alteration, loss, treatment or unauthorised access in accordance with the provisions of the Regulation.


5 WHERE DO WE INFORM?
‍ALL INNOVATION FIRM S.L. informs you through the web page www.thatsall.co in the section corresponding to the privacy policy. More information in "Legal Notice”.


6 WHAT PERSONAL DATA DO WE PROCESS?
‍The personal data that we process are:- Data that you voluntarily choose to provide us with.- The data derived from the communications that you maintain with us.- The information corresponding to your own browsing in the case of Online Services, (IP address or information derived from cookies or similar devices) derived from cookies or similar devices (you can see our Cookies Policy on the web).- Information that is available in publicly accessible sources, to which we can legitimately access.access.- The data derived from the contractual or pre-contractual relationship you have with us, including your image, always informing you in this case of the possibility of capturing your image.- Data that third parties provide us with about you, where there is a legitimate basis for doing so or where we have obtained your consent to do.The data of third parties that you provide us with, with the prior consent of the third party in question.


7 HOW DO WE PROCESS YOUR DATA?
‍At ALL INNOVATION FIRM S.L. we process your personal data in strict compliance with current legislation.Furthermore, we inform you that we have the appropriate technical and organisational measures in place to guarantee an optimum level of security, guaranteeing that only authorised persons will have access to your personal data, that we will keep themintegrity, avoiding any intentional or accidental loss and that we have reinforced the systems and that we have strengthened our data processing systems and services.However, due to the fact that ALL INNOVATION FIRM S.L. cannot guarantee the impregnability of the internet or the total absence of hackers or others who fraudulently access personal data, you agree to contact us without undue delay when a breach occurs.without undue delay when a breach of security of personal data occurs that is likely to involve a high risk to the rights and freedoms of natural persons. In accordance with the provisions of Article 4 of the GDPR, the following definitions apply breach of security of personal data means any breach of security that leads to the accidental or unlawful destruction, loss oraccidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorised disclosure of or access to such data.The operations, management and technical procedures that we carry out in an automated or non-automated manner and that enable the collection, storage, storage, modification, transfer and other actions on personal data, are considered personal data processing.

8 WHAT IS THE LAWFULNESS OF THE PROCESSING?
‍The basis for the legitimacy of the processing of Personal Data will be that resulting from the contractual or pre-contractual relationship,the employment relationship or any other that is required for the processing of data, such as express consent.


9 HOW DO WE MANAGE ELECTRONIC COMMUNICATIONS?
‍In accordance with the provisions of Law 34/2002 of 11 July 2002, on Information Society Services and Electronic Commerce, and Directive 2002/58/EC, we inform you that you may receive communications and information of an electronic nature.Electronic Commerce, and Directive 2002/58/EC, we inform you that you may receive communications and information of a commercial nature by means of this commercial communications and information by means of this electronic communication system (e-mails, messages of automated response of forms and forms and other communication systems) when you have given us your consent or when it is a question of commercial communications concerning products or services similar to those previously provided by the data controller.responsible for the processing of your data.In the event that you do not wish to receive communications and information of this nature, you can notify us by this same way indicating in the subject "UNSUBSCRIBE FROM COMMERCIAL COMMUNICATIONS" so that your personal data can be removed from our database.from our database. Your request will be acted upon within 1 month of being sent. In the event that we do not express reply from you, we will understand that you accept and authorise our company to continue sending the above-mentioned the aforementioned communications.In the event of receiving such communications by these means, we inform you that the messages are addressed exclusively to the addressee and may contain privileged information.If you are not the intended recipient, you are hereby notified that unauthorised use, disclosure and/or copying is prohibited under applicable law.
10 HOW LONG DO WE KEEP YOUR DATA?The personal data relating to natural persons that ALL INNOVATION FIRM S.L. collects by any means will be kept for as long as the person concerned does not will be kept as long as the interested party does not request their deletion. Likewise, they will be kept for as long as the relationship that the data processing is maintained, respecting in any case the legal periods of conservation. At the end of this period, the personal data will be deleted from all ALL INNOVATION FIRM S.L. systems.

11 WILL YOUR DATA BE COMMUNICATED TO THIRD PARTIES?
‍There will be no assignment, transmission or transfer of personal data, except for those already informed, other than as a result of a legal obligation. If, at the request of the Public Administration or the Autonomous Community Institutions within the scope of the functions that the law expressly functions expressly attributed to them by law, we are asked for your data, these will be transmitted.In the event of any assignment, transmission or transfer of personal data outside of the aforementioned cases, you will be previously informed so that, if necessary, you can give us your consent.But in order to be able to organise ourselves correctly, to have good operations and procedures that guarantee good management, ALL INNOVATION FIRM S.L. may need to hire the services of consultants, professionals, or other service companies to process data under our service companies to process data under our instructions.This processing on behalf of third parties is regulated in a contract in writing or in some other legally accepted form that allows us to accredit their that allows us to accredit its conclusion and content, expressly specifying that the data processor will process the data in accordance with our instructions and will not apply or use them for any purpose other than that stated in the contract,nor communicate them, even for storage purposes, to other persons.


12 WHAT ARE YOUR RIGHTS?
‍Data protection regulations give you the following rights:- Right of access: This is the User's right to obtain confirmation as to whether or not ALL INNOVATION FIRM S.L. is processing or not their personal data and, if so, to obtain information on their specific personal data and on the processing that ALL INNOVATION FIRM S.L. ispersonal data and of the treatment that ALL INNOVATION FIRM S.L. has carried out or will carry out, as well as, among other things, the available information available on the origin of said data and the recipients of the communications made or planned of the same.- Right of rectification: This is the User's right to have his or her personal data modified if they prove to be inaccurate or, taking into account the purposes of the processing, incomplete.- Right of erasure ("the right to be forgotten"): This is the User's right, unless otherwise, to obtain the erasure of his or her personal data when they are no longer necessary for the purposes for which they were collected or for which they were purposes for which they were collected or processed; the User has withdrawn his or her consent to the processing and the processing is not otherwise other legal basis; the User objects to the processing and there is no other legitimate reason to continue the processing; the personal data have been processed for the purposes for which they were collected or processed; the User has withdrawn his or her consent to the processing and the processing has no other legal basis the personal data have been processed unlawfully; the personal data must be erased in compliance with a legal obligation; or the personal data have been obtained as a result of a direct offer of information society services to a person under 14 years of age. In addition to the erasure of the data, the controller shall, taking into account the technology available and the cost of its implementation, take reasonable steps to inform controllers who are processing the personal data of the data subject's request for the erasure of any link to those personal data. erasure of any link to those personal data.- Right to restriction of processing: This is the User's right to restrict the processing of his or her personal data.
The User has the right to obtain the restriction of processing where he or she contests the accuracy of his or her personal data; the processing is unlawful; the Controller no longer needs the personal data, but the User needs it for the purpose of making claims; andthe processing is unlawful; the Controller no longer needs the personal data, but the User needs it to make claims; and where the User has objected to the processing.- Right to data portability: In the event that the processing is carried out by automated means, the User shall be entitled to receive from the Data Controller the right to receive from the Data Controller the personal data concerning him/her.User shall have the right to receive from the Data Controller his or her personal data in a structured, commonly used and machine-readable format, and to and machine-readable format from the Controller and to transmit it to another Controller. Where technically feasible, the Controller shall transmit the data directly to that other controller.Right to object: This is the User's right to prevent the processing of his or her personal data or to stop the processing of his or her personal data or to cease their processing by ALL INNOVATION FIRM S.L.
- The right not to be subject to a decision based solely on automated processing, including profiling: This is the User's right not to be subject to a decision based solely on automated processing, including profiling: This is the User's right not to be subject to an individualised decision based solely on the automated processing of his or her personal data, including profiling.automated processing of his or her personal data, including profiling, except where otherwise provided for by current legislation in force stipulates otherwise.
If you would like more information regarding the processing of your data, rectify any data that is inaccurate, oppose and/or restrict any processing which you consider unnecessary, or to request the cancellation of the processing when the data is no longer necessary, you can write tonecessary, you can write to ALL INNOVATION FIRM S.L. at NOVICIADO N° 20. 4 IZQ, , 28015 - Madrid (Madrid) or by e-mail to hello@thatsall.co.
- This communication must include the following information: Name and surname(s) of the user, the request, address and supporting data.- The exercise of rights must be carried out by the user himself/herself. However, they may be executed by an authorised person authorised as the authorised person's legal representative. In this case, documentation must be provided to prove the interested party'saccrediting this representation of the interested party must be provided.


13 ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
‍It is necessary that the User has read and agrees with the conditions on the protection of personal data contained in this Privacy Policy, as well as to accept the processing of their personal data so that the Data Controller can proceed in the manner, during the periods and for the purposes indicated. The use of the Website implies acceptance of the Privacy Policy of the same.ALL INNOVATION FIRM S.L. reserves the right to modify its Privacy Policy, according to its own criteria, or motivated by a legislative, jurisprudential or doctrinal change of the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User. The User is recommended to consult this page periodically to keep abreast of the latest changes or updates.
This Privacy Policy was updated to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. data and the free movement of such data (GDPR) and the Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Personal Rights (Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Personal Data and guarantee of digital rights.
This Privacy Policy document has been revised as of : 23/03/22