Privacy and Cookies Policy + Legal Notice
Privacy Policy
Your privacy is important to Cebacor (“Cebacor”). This Privacy Policy covers what we collect and how we use, disclose, transfer and store your information when you use this website.
1. Cebacor identity
If you have any questions about this Privacy Policy, you may contact us using the information below.
Cebacor
Plaza Arcipreste Juan Hernandez, 1 Bajo
18800 Baza (Granada) Spain
Phone: + 34 958 70 10 71
Email:
2. What information do we collect?
You can visit our site anonymously.
If you choose to register on our website, 3 categories of data will be processed from you and on your behalf:
Account Information
When you register an account on our site, place an order, subscribe to our newsletter or respond to a survey, basic contact data is collected, such as email address and the name of your contact person, company name, address, telephone number, Dni / Nie / Nif (VAT Number), preferred language and currency, any purchase order number, any email address recipients of the invoice and masked credit card or bank account data.
End User Data
Data generated by End Users browsing your website using the Service. When an End User submits a consent from their websites, the following data is automatically recorded in Cebacor:
The end user's IP number anonymously (last three digits are set to '0').
The date and time of consent.
User agent of the End User's browser.
The URL from which the consent was sent.
An anonymous, random, encrypted key value.
The consent status of the End User, which serves as proof of consent.
The key and consent status are also saved in the end user's browser in the first-party cookie "CookieConsent" so that the website can automatically read and honor the user's consent. final on all subsequent page requests and future end-user sessions for up to 12 months. The key is used as proof of consent and as an option to verify that the consent state stored in the End User's browser is not modified compared to the original consent sent to Cebacor.
If you enable the Service's "bulk consent" feature to allow consent from multiple websites through a single End User submission, the Service will also store a separate, random, unique ID with the consent of the End User. If all of the following criteria are met, this key will be stored in encrypted form in the third-party cookie "CookieConsentBulkTicket" on the End User's browser:
Enable the mass consent feature in the service settings.
The End User allows third-party cookies through the browser settings.
The end user has disabled "Do Not Track" through the browser settings.
The end user accepts all types of cookies, or at least the "preferences" type, when consented.
Data generated by the System
The Service automatically creates and stores metadata based on the other types of data, for example:
Subscription data, such as start date, date of the last invoice and the result of a mandatory validation of the tax identification number. Issued invoices are stored so that you can access issued invoices from the Service Manager.
Definitions of cookies found when the Service has scanned your websites, including reports on the result of each scan.
Cumulative statistical data on the consent of the End User.
You may issue instructions to Cebacor through the configuration or execution of relevant functions offered by the Service from the Service Manager. If a specific instruction regarding personal data cannot be carried out through the Service Manager, you can send us the instructions through the help desk provided in the https: //cebacor.com/en/contact
Cebacor will inform you about relevant changes related to the Service, such as the implementation of additional features, by email, if you subscribe to the Cebacor newsletter from the account settings page in Service Manager.
3. What do we use this information for?
Any pieces of information we collect from you may be used for one or more of the following purposes:
3.1. To personalize your experience (the information will help Cebacor better respond to your individual needs);
3.2. To allow you to control the user experience towards End Users and allow the Service to automatically apply End User consent to your other websites;
3.3. To improve our website (Cebacor continually strives to improve our website offerings based on the information and feedback we receive from our customers);
3.4. To identify you as a contracting party;
3.5. To enable secure login for you in the Service Manager at cookiebot.com;
3.6. Establish a primary channel of communication with you;
3.7. Allow Cebacor to issue valid VAT invoices and process transactions (your information will not be sold, exchanged, transferred or given to any other company for any reason, without your consent, other than for the express purpose of providing the requested service); br />3.8. To enable automated management of subscriptions;
3.9. Produce and display cookie statements to End Users and store and display scan reports;
3.10. Provide you with cumulative information about End Users' choices regarding the types of cookies accepted and generate a graphical representation in the Service Manager; or
3.11. To send periodic emails (the email address you provide for order processing may be used to send you information and updates related to your order, in addition to receiving occasional company news, if accepted, updates, related products or services , etc.)
4. Legal basis
4.1. EU General Data Protection Regulation (GDPR)
The processing of your data is based on your consent or where the processing is necessary for the performance of a contract to which you are a party, or to take steps where necessary. request before entering into a contract (see GDPR art. 6(1)(a)-(b)).
If the processing is based on your consent, you can withdraw your consent at any time by contacting us using the contact information in clause 1.
To perform a contract regarding the purchase of the Cebacor Service, you must provide us with the required personal data. If you do not provide us with all the required information, it will not be possible to deliver the Service.
4.2. Compliance with the Online Privacy Protection Act
Because we value your privacy, we have taken the necessary precautions to be in compliance with the Online Privacy Protection Act. Therefore, we will not distribute any personal information to third parties without your consent, except as set out in clause 7.
As part of the Privacy Protection Act, all users of our website can make changes to their information at any time by logging into their account and navigating to < a href="https://cebacor.com/" target="_blank" rel="noopener noreferrer">https://cebacor.com
4.3. Compliance with the Children's Online Privacy Protection Act
Cebacor complies with the requirements of the Children's Online Privacy Protection Act. We will not intentionally collect any information from anyone under 13 years of age. Our site, products and services are directed to individuals who are at least 13 years of age or older.
5. How we protect your information
Cebacor implements the following technical, physical and organizational measures to maintain the security of your personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorized use, unauthorized modification, disclosure or access and against all other unlawful forms of processing.
5.1. Availability
The Service uses extensive features of the cloud environment to ensure high availability, such as full redundancy, load balancing, automatic capacity tiering, continuous data backup and georeplication along with a traffic manager for automatic geographic fault tolerance in data center-level disasters. All fault tolerance mechanisms are fully automated.
No personal data is stored permanently outside of Cebacor platforms. Physical security is maintained by Cebacor subcontractors (see clause 7). Cebacor Dedicated Server meets industry standards such as ISO 27001 for physical security and availability; for example, using 24-hour security personnel, two-factor access control using card readers and biometrics, barriers, fences, security cameras and other measures.
5.2. Integrity
To ensure integrity, all data transits are encrypted to align with best practices to protect data confidentiality and integrity. For example, all credit card information supplied is transmitted via Secure Socket Layer (SSL) technology and is then encrypted into our payment gateway provider's database for access by those authorized to access said systems and who must maintain the confidentiality of the information.
For data in transit, the Service uses industry-standard transport protocols between devices, data centers, and within the data centers themselves.
5.3. Confidentiality
All personnel are subject to full confidentiality and any subcontractors and subprocessors must sign a confidentiality agreement if full confidentiality is not part of the main agreement between the parties.</p >
Whenever authorized personnel access personal data, access is only possible over an encrypted connection. When accessing data in a database, the IP number of the person accessing the data must also be pre-authorized to gain access.
Any device used to access personal data is protected by Cebacor's Azure Active Directory (AAD), Cebacor's server-based identity and access management service. , and has the Cebacor corporate antivirus solution installed. If personal data is temporarily stored on a device, the device's storage drive must also be strongly encrypted.
Local devices that temporarily store personal data are, at all times, except when not in use or actively moved under continuous supervision, locked in a safe. Personal data is never stored on mobile devices such as USB sticks and DVDs.
5.4. Transparency
Cebacor will keep you informed at all times about changes in processes to protect data privacy and security, including practices and policies. At any time you can request information about where and how data is stored, protected and used. Cebacor will also provide summaries of any independent audit of the Service.
5.5. Isolation
All access to personal data is blocked by default, using a "zero privileges" policy. Access to personal data is restricted to individually authorized personnel. The Cebacor Administrator issues authorizations and maintains a record of the authorizations granted. Authorized personnel have minimal access if needed through our AAD.
5.6. Ability to intervene
Cebacor enables your rights of access, rectification, deletion, blocking and objection mainly by providing integrated functions for data management in the Service Manager, by offering the option to send instructions through Cebacor's support service and also by informing and offering the customer the possibility to object when Cebacor plans to implement changes in relevant practices and policies.
Overall responsibility for data security lies with the Cebacor Data Protection Officer, who trains and updates all staff on the data security measures described in the Cebacor security manual and in this Privacy Policy.
5.7. Supervision
Cebacor uses security reports to monitor access patterns and to proactively identify and mitigate potential threats. Administrative operations, including system access, are logged to provide an audit trail if unauthorized or accidental changes are made.
System performance and availability are monitored from internal and external monitoring services.
5.8. Personal data breach notice
In the event that your data is compromised, Cebacor will notify you and the competent supervisory authorities within 72 hours by email with information on the scope of the compromise. violation, the data affected, any impact on the service and Cebacor's action plan with measures to protect the data and limit any possible negative effects on the interested parties.
"Personal data breach" means a breach of security that leads to accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data. personal data transmitted, stored or processed related to the provision of the Service.
6. How we use cookies
See Cebacor's cookie declaration at HERE for information about the cookies we use.
7. Do we disclose information to third parties?
From time to time, and based on our discretion, we may include or offer third-party products or services on our website. These third-party sites have separate privacy policies. Therefore, we assume no responsibility for the content and activities of these linked websites. However, we seek to protect the integrity of our website and welcome any feedback about these sites.
9. Where do we store the information?
Cebacor will not transfer, backup, or recover any data stored outside the European Union.
9.1. Location of personal data
All data is stored in databases and file repositories hosted on the Cebacor Dedicated Server, at Cebacor's Hosting provider, OVH. All data is automatically replicated in real time to failover secondary databases and file repositories in the OVH - Europe data center.
Databases are backed up daily to allow restoration at any time. Backups are stored in the file storage location, located in the same geographic location as the database.
A copy of the account data is also stored in Cebacor's accounting system.
9.2. Installing software on the client's system
No software installation is required to use the Service. The Connected Service Manager can be accessed through a standard web browser, automatically using an encrypted https connection for all communications between your browser and the Cebacor server, in order to prevent any information from being intercepted during network transfers. .
From time to time, and based on our discretion, we may include or offer third-party products or services on our website. These third-party sites have separate privacy policies. Therefore, we assume no responsibility for the content and activities of these linked websites. However, we seek to protect the integrity of our website and welcome any feedback about these sites.
9. Where do we store the information?
Cebacor will not transfer, backup, or recover any data stored outside the European Union.
9.1. Location of personal data
All data is stored in databases and file repositories hosted on the Cebacor Dedicated Server, at Cebacor's Hosting provider, OVH. All data is automatically replicated in real time to failover secondary databases and file repositories in the OVH - Europe data center.
Databases are backed up daily to allow restoration at any time. Backups are stored in the file storage location, located in the same geographic location as the database.
A copy of the account data is also stored in Cebacor's accounting system.
9.2. Installing software on the client's system
No software installation is required to use the Service. The Connected Service Manager can be accessed through a standard web browser, automatically using an encrypted https connection for all communications between your browser and the Cebacor server, in order to prevent any information from being intercepted during network transfers. .
10. Access assistance, data portability, migration and transfer
At any time you can obtain confirmation from Cebacor as to whether personal data concerning you is being processed or not.
At any time you can request a complete data copy, which you can transmit to another data controller.
11. Request for rectification, restriction or deletion of personal data
11.1. Rectification
At any time you can obtain, without undue delay, a rectification of inaccurate personal data that concerns you. See clause 5.6.
11.2. Restriction of processing of personal data
At any time you can request Cebacor to restrict the processing of personal data when one of the following cases occurs:
a. If you dispute the accuracy of the personal data for a period that allows Cebacor to verify the accuracy of the personal data.
b. If the processing is unlawful and you object to the deletion of the personal data and request the restriction of its use instead.
c. If Cebacor no longer needs the personal data for processing, but you require it for the establishment, exercise or defense of legal claims.
11.3. Elimination
You may, without undue delay, request the deletion of personal data that concerns you, and Cebacor must delete personal data without undue delay when any of the following cases occur:
a. If the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
b. If you withdraw the consent on which the processing of the data is based, and there is no other legal basis for the processing.
c. If you object to the processing if it is for direct marketing purposes.
d. If the personal data have been processed illegally.
e. Whether personal data must be erased to comply with a legal obligation in EU or national law.
12. Data retention
12.1. Data retention policy
Your Invoices and Orders will be held by tax regulations for up to five full tax years from the cancellation of your Service Account.
Configuration data and system-generated data will be deleted immediately when you cancel or delete the User account.
The End User's data will be automatically deleted after canceling - deleting their Account.
12.2. Data retention to comply with legal requirements
You cannot require Cebacor to change any of the default retention periods, except for the erasure reasons set out in accordance with clause 11.3, but you may suggest changes to comply with the sector-specific laws and regulations.
12.3. Restoration or deletion of data
No data will be kept once the User Account is deleted, except the Invoice and Order Data issued in the period that you were a User.
13. Accountability
Cebacor uses the wide range of built-in logging functions and audit logs. Cebacor also logs all system updates, configuration changes, and access to provide an audit trail if unauthorized or accidental changes are made.
14. Cooperation
Cebacor will cooperate with you to ensure compliance with applicable data protection provisions, for example to effectively guarantee the exercise of the rights of data subjects (right of access , rectification, deletion, blocking, opposition) to manage incidents, including forensic analysis in case of security breach.
15. Conditions
Also visit our Conditions section.
16. Your consent
By using our site, you agree to this Privacy Policy.
17. Changes to our Privacy Policy
If we decide to change our Privacy Policy, we will post those changes on this page or update the Privacy Policy modification date below. This Privacy Policy was last modified on October 21, 2018.
18. Claim
At any time you can lodge a complaint with a supervisory authority regarding Cebacor's collection and processing of your personal data. In Spain, you can file a claim with the Spanish Data Protection Agency.
Cookie Policy
A Cookie is a file that is downloaded to your computer when you access certain web pages. Cookies allow a website, among other things, to store and retrieve information about the browsing habits of a user or their equipment and, depending on the information they contain and the way in which they use their equipment, they can be used to recognize to the user.
Cookies are essential for the functioning of the Internet, providing countless advantages in the provision of interactive services, facilitating the navigation and usability of our website.
The information we provide below will help you understand the different types of cookies:
Types of Cookies.
ACcording to the entity that manages them.
Own cookies: these are those that are collected by the editor itself to provide the service requested by the user.
Third-party cookies: these are those that are collected and managed by a third party, these cannot be considered their own.
BASED ON THE PERIOD OF TIME THEY REMAIN ACTIVATED.
Session cookies: collect data while the user browses the network in order to provide the requested service.
Persistent cookies: are stored in the terminal and the information obtained, it will be used by the person responsible for the cookie in order to provide the requested service.
ACcording to its purpose.
Technical cookies: these are necessary for correct navigation through the website.
Personalization cookies: allow the user the characteristics (language) to navigate the website.
Analysis cookies: allow the provider to carry out analysis linked to the navigation carried out by the user, with the purpose of tracking the use of the website, as well as compiling statistics. the most visited contents, number of visitors, etc.
Advertising cookies: allow the editor to include advertising spaces on the website, according to the content of the website itself.
Behavioral advertising cookies: allow the editor to include advertising spaces on the website according to the information obtained through the user's browsing habits.
According to the provisions of article 22.2 of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).
Cebacor informs about the cookies used on our website:
– Own technical and session cookies.
– Analysis cookies.
Google Analytics: Stores cookies to be able to compile statistics on the traffic and volume of visits to this website. By using this website you consent to the processing of data about you by Google. Therefore, the exercise of any right in this regard must be done by communicating directly with Google.
Google Analytics cookies are stored on servers located in the United States and you agree not to share them with third parties, except in cases where it is necessary for the operation of the system. or when the law requires this purpose. According to Google, it does not store your IP address. Google Inc. is a company adhered to the Safe Harbor Agreement that guarantees that all transferred data will be treated with a level of protection in accordance with European regulations. You can consult detailed information in this regard through the following link: https:// support.google.com/analytics/answer/6004245.
If you wish, you can use the Google Analytics Opt-out Add-on for browsers through whose instructions you can reject the analytical cookies of said service in all browsers. For more information https://tools.google.com/dlpage/gaoptout
Cebacor informs the user that they have the possibility of configuring their browser so that they are informed of the receipt of cookies, and may, if so, If you want, prevent them from being installed on your hard drive.
Below we provide you with the links for various browsers, through which you can perform this configuration:
Firefox from here / Explorer from here / Safari from here / Opera from here.
Legal Notice
Cebacor.com cannot assume any responsibility derived from the incorrect, inappropriate or illicit use of the information that appears on the Internet pages of https://cebacor.com
With the limits established by law, https://cebacor.com does not assume any responsibility derived from the lack of truthfulness, integrity, updating and accuracy of the data or information contained on its Internet pages.
The contents and information do not bind https://cebacor.com nor do they constitute opinions, advice or legal advice of any kind as they are merely a service offered for informational and informative purposes.
The Internet pages of https://cebacor.com may contain links to other third party pages that https://cebacor.com cannot control. Therefore, https://cebacor.com cannot assume responsibility for the content that may appear on third-party pages.
The texts, images, sounds, animations, software and the rest of the content included in this website are the exclusive property of https://cebacor.com or its licensors. Any act of total or partial transmission, distribution, transfer, reproduction, storage or public communication must have the express consent of https://cebacor.com</ a>.
Likewise, to access some of the services that https://cebacor.com offers through the website, you must provide some personal data. staff. In compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free movement of With these data, we inform you that, by completing these forms, your personal data will be incorporated and processed in Cebacor's files in order to be able to provide and offer you our services as well as to inform you of improvements to the website. Likewise, we inform you of the possibility of exercising your rights of access, rectification, cancellation and opposition of your personal data, free of charge by email to
