Privacy policy

In compliance with current legislation, Planet Dataset S.L. (hereinafter referred to as “Planet”) is committed to adopting the necessary technical and organizational measures according to the level of security appropriate to the risk of the collected data. Accessing, browsing, and/or using this Planet portal, as well as interacting in the spaces enabled for communication between the User and Planet (such as comments and/or blogging areas), assigns the condition of User.

At Planet, we are committed to regulatory compliance and respecting Users’ privacy. As part of our duty of transparency, we detail the personal data processing activities we may perform, as well as the rights recognized by the current regulations.

1. Laws Incorporated in This Privacy Policy

This privacy policy complies with current Spanish and European regulations on personal data protection on the internet. Specifically, it adheres to the following laws:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and the free movement of such data (GDPR).
  • Organic Law 3/2018 of December 5 on Personal Data Protection and Guarantee of Digital Rights (LOPD-GDD).
  • Royal Decree 1720/2007 of December 21 approving the regulations implementing Organic Law 15/1999 of December 13 on Personal Data Protection (RDLOPD).
  • Law 34/2002 of July 11 on Information Society Services and Electronic Commerce (LSSI-CE).

2. Identity of the Controller

The controller of the personal data collected is Planet Dataset S.L., with CIF: B02759736 (hereinafter referred to as the “Controller”).

Contact details:

3. Data Protection Officer (DPO)

The Data Protection Officer (DPO) ensures compliance with the data protection regulations applicable to Planet. Users can contact the DPO appointed by the Controller using the following contact details: contacto@planetdataset.com

4. Registration of Personal Data

In compliance with the GDPR and LOPD-GDD, we inform you that the personal data collected by Planet through forms on its pages will be incorporated and processed in our database. This is to facilitate, streamline, and fulfill commitments established between Planet and the User, maintain relationships initiated in the forms completed by the User, or address specific requests or inquiries.

In accordance with the GDPR and LOPD-GDD, unless exempted under Article 30.5 of the GDPR, we maintain a record of processing activities specifying, by purpose, the processing activities performed and other relevant circumstances as outlined in the GDPR.

5. Principles Applicable to the Processing of Personal Data

The processing of the User’s personal data will be subject to the following principles, as outlined in Article 5 of the GDPR and Article 4 and subsequent articles of Organic Law 3/2018 of December 5:

  • Principle of lawfulness, fairness, and transparency: Users’ consent will be required at all times, following completely transparent information on the purposes for which personal data is collected.
  • Principle of purpose limitation: Personal data will be collected for specific, explicit, and legitimate purposes.
  • Principle of data minimization: Only the data strictly necessary for the purposes for which it is processed will be collected.
  • Principle of accuracy: Personal data must be accurate and kept up to date.
  • Principle of storage limitation: Personal data will only be kept in a manner that allows User identification for as long as necessary for processing purposes.
  • Principle of integrity and confidentiality: Personal data will be processed to guarantee its security and confidentiality.
  • Principle of proactive accountability: The Controller will be responsible for ensuring the above principles are complied with.

6. Categories of Personal Data

Depending on the channel used by the User, Planet may process the following categories of personal data:

  • Identification and contact details: Name, surname, email, postal address, phone number.
  • Employment details: Job title, company, professional category, and corporate contact information.
  • Academic and professional data: For CV submissions or job application processes, details may include qualifications, work history, and professional affiliations.
  • Profiling data: Information about website usage, event registrations, service inquiries, or participation in quality surveys.
  • Navigation data: IP address, advertising ID, and browsing behavior.
  • Other data: Data provided directly by the User in communications with Planet.

7. Legal Basis for Processing Personal Data

The legal basis for processing personal data is:

(i) Consent: To manage and address contact requests made by the User. The User may withdraw consent at any time; however, if consent is withdrawn, the inquiry or issue raised cannot be processed.

(ii) Legitimate interest: For the periodic sending of electronic commercial communications, based on the exception provided in Article 21.2 of the Law on Information Society Services and the provisions of Recital 47 of the General Data Protection Regulation. Legitimate interest is grounded in direct marketing to offer the User products and services that may be of interest and foster their loyalty. Nevertheless, the User has the right to object to this processing both at the time of providing their data and at any later time.

If the User wishes to stop receiving commercial or promotional communications from Planet, they can unsubscribe by sending an email to the following address: contacto@planetdataset.com.

When no prior services have been provided to the User by Planet and no prior contractual or pre-contractual relationship exists, data will be processed based on the User’s consent. The User has the right to withdraw their consent at any time.

8. Purposes of Processing Personal Data

Personal data is collected and managed by Planet to facilitate, expedite, and fulfill the commitments established between the website and the User or to maintain the relationship established through the forms filled out by the latter, or to respond to a request or inquiry. Additionally, the data may be used for commercial purposes, including personalization, operations, statistics, and activities aligned with Planet’s corporate objectives, as well as for data extraction, storage, and marketing studies to tailor the offered content to the User, improving the quality, functionality, and navigation of the website.

Planet will process the User’s data for the following specific purposes:

  • To manage and address contact requests made by the User through the forms provided on the website, corporate email addresses, or other indicated contact methods.
  • To periodically send electronic commercial communications regarding services, events, and news related to Planet’s activities and services, unless otherwise indicated or the User objects or withdraws consent.
  • To periodically send commercial and/or promotional information related to the contracted services sector and value-added services for end-users via electronic and/or conventional means, unless otherwise indicated or the User objects or withdraws consent.
  • To manage the User’s registration and attendance at potential events organized by Planet.
  • If the User submits their CV or applies for job openings published on the website through the indicated channels, to evaluate and manage their job application and, if applicable, carry out the necessary actions for selection and hiring, offering positions that match their profile.
  • To generate anonymous statistical reports about users’ access habits, preferences, and behaviors on the website.
  • To create a commercial profile based on the information provided by the User to send personalized commercial communications about the services offered by Planet. The User may oppose this processing at any time.
  • To conduct quality and satisfaction surveys regarding the services provided by Planet and analyze the resulting reports and statistics.
  • To comply with legal obligations, as well as verify compliance with contractual obligations, including fraud prevention.

If the User wishes to stop receiving commercial or promotional communications from Planet, they can unsubscribe by sending an email to the following address: contacto@planetdataset.com.

9. Retention Periods for Personal Data

Personal data will only be retained for the minimum time necessary to fulfill the purposes for which it was collected. If the data has been collected to comply with legal obligations, it will be retained for the legally established periods.

10. Recipients of Personal Data

If the Data Controller intends to transfer personal data to a third country or international organization, the User will be informed at the time the personal data is collected about the third country or international organization to which the data will be transferred, as well as the existence or absence of an adequacy decision by the Commission.

11. Personal Data of Minors

In accordance with Article 8 of the GDPR and Article 7 of Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights, only individuals aged 14 years or older may lawfully give their consent for the processing of their personal data by Planet. If the individual is under 14 years of age, parental or guardian consent will be required for the processing, which will only be considered lawful if authorized by them.

12. Confidentiality and Security of Personal Data

Planet commits to adopting the necessary technical and organizational measures, appropriate to the level of security risk associated with the collected data, to ensure the security of personal data and prevent the accidental or unlawful destruction, loss, alteration, communication, or unauthorized access to the data transmitted, stored, or otherwise processed.

However, since Planet cannot guarantee the invulnerability of the internet nor the complete absence of hackers or other fraudulent actors who might access personal data, the Data Controller undertakes to notify the User without undue delay in the event of a personal data security breach likely to pose a high risk to the rights and freedoms of individuals. As defined in Article 4 of the GDPR, a personal data security breach is any breach that results in the accidental or unlawful destruction, loss, alteration, or unauthorized disclosure or access to personal data transmitted, stored, or otherwise processed.

Personal data will be treated as confidential by the Data Controller, who undertakes to ensure that this confidentiality is respected by its employees, partners, and any individuals to whom the information is made accessible, through a legal or contractual obligation.

13. Rights Derived from the Processing of Personal Data

Users have the following rights regarding Planet, which they may exercise with the Data Controller as recognized under the GDPR and Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights:

  • Right of Access: Users have the right to confirm whether Planet is processing their personal data and, if so, to access their specific personal data and information about its processing. This includes details about the origin of the data and the recipients of any communications involving it.
  • Right of Rectification: Users have the right to request that inaccurate personal data be corrected or, considering the purposes of processing, completed if incomplete.
  • Right of Erasure (“Right to be Forgotten”): Users have the right to request the deletion of their personal data, provided that current legislation does not dictate otherwise. This right applies when:
    • The data is no longer necessary for the purposes it was collected or processed for.
    • Users have withdrawn their consent and there is no other legal basis for processing.
    • Users object to the processing, and there is no legitimate reason to continue.
    • The data has been processed unlawfully.
    • The data must be deleted to comply with a legal obligation.
    • The data was collected in connection with the direct offer of information society services to minors under 14 years of age.

Additionally, the Data Controller must adopt reasonable measures, considering available technology and implementation costs, to inform other data controllers processing the personal data about the deletion request, including any links to the data.

  • Right to Restriction of Processing: Users may request the limitation of the processing of their personal data. This applies when:
    • Users contest the accuracy of the data.
    • Processing is unlawful.
    • The Data Controller no longer needs the data for processing, but the User needs it to make or defend claims.
    • The User has objected to the processing.
  • Right to Data Portability: When processing is carried out by automated means, Users have the right to receive their personal data in a structured, commonly used, and machine-readable format and to transfer it to another data controller. Where technically feasible, the Data Controller will transfer the data directly to the other controller.
  • Right to Object: Users may object to the processing of their personal data or request that Planet cease its processing.
  • Right Not to Be Subject to Automated Decision-Making, Including Profiling: Users have the right not to be subject to a decision based solely on automated processing, including profiling, unless otherwise specified by applicable law.

Exercising Rights

Users can exercise their rights by submitting a written request to the Data Controller, referencing “GDPR-Planet,” and specifying:

  1. Full Name and ID Copy: Include the User’s full name and a copy of their ID. In cases where representation is allowed, the representative must also be identified, and proof of representation provided. A photocopy of the ID may be substituted with any legally valid document proving identity.
  2. Reason for the Request: Clearly specify the reasons for the request or the information sought.
  3. Address for Notifications: Provide an address for notification purposes.
  4. Date and Signature: Include the date and the User’s signature.
  5. Supporting Documents: Attach any documents that support the request.

This request, along with any additional documents, may be sent to the following address or email:

14. Links to Third-Party Websites

The website may include hyperlinks or links granting access to web pages operated by third parties other than Planet. The owners of these websites will have their own data protection policies and are solely responsible for their files and privacy practices. Planet is not responsible for any potential damage or harm caused to the User or for non-compliance with current regulations by these third parties.

15. Complaints to the Supervisory Authority

If a User believes there is an issue or violation of current regulations regarding the processing of their personal data, they have the right to file a complaint with a supervisory authority, particularly in the country where they reside, work, or where the alleged violation occurred. In Spain, the supervisory authority is the Spanish Data Protection Agency (http://www.agpd.es).

16. Acceptance and Changes to this Privacy Policy

Users must read and agree to the terms on personal data protection outlined in this Privacy Policy and consent to the processing of their personal data so the Data Controller can proceed as described, within the specified timelines and for the stated purposes. Use of the website implies acceptance of the Privacy Policy.

Planet reserves the right to modify this Privacy Policy at its discretion or due to legislative, jurisprudential, or doctrinal changes by the Spanish Data Protection Agency.