Privacy Policy

The Data Controller corresponds to the owner of the website, whose identifying details are as follows:

This policy explains how we process the data of people who visit our website, request information or use our services.

The contact details of the Data Protection Officer are: dpo@auriahr.com.

If you are an employee or collaborator of a company that uses Auria HR, to exercise your rights over that data you should contact your employer directly (the data controller), without prejudice to Auria HR providing the necessary support to address them.

The data processed will vary depending on the services used by the user:

• Data obtained directly from the user: the data provided when completing our forms, such as the contact request or demo request forms. This includes identification and contact data, such as your name and email address.

  Each form indicates which fields are mandatory and which are optional.

• Data not obtained from the user: while browsing, data such as that sent by your browser, the IP address assigned by your provider, or information about the device used may be collected. Where you consent to this by accepting the relevant cookie categories, this information may be used to personalise the content and adverts shown to you.

We may process your personal data for the following purposes:

• Demo Request: if you request a demo or trial of our application/software, our sales team will contact you.
• Contact Request: your data will be used to respond to the information requested.
• Access: if you request a demo or trial of our application/software, our sales team will contact you.
• Work With Us: the CV data you submit will be used for present and future recruitment processes, although our recruitment teams reserve the right to delete the information provided at any time.

In all cases, the user's email address must be validated, to prevent fraudulent requests.

In accordance with the processing carried out, we set out below the legal basis for each of them:

• Consent: validly given and obtained unambiguously. This consent may be withdrawn at any time through the means provided for that purpose.
• Adoption of Pre-contractual Measures: which will coincide with sending a proposal for access to and use of the application/software.
• Legitimate Interest: used to send informative or promotional communications that may be of interest to the user.
• Contract Performance: for the duration of the contractual relationship between the client and us.

No data transfers or disclosures are envisaged.

To fulfil the purposes set out in this Privacy Policy, we may rely on third parties, such as technology service providers, customer service providers, and marketing and advertising providers, where applicable.

No international transfers of data outside the European Union are envisaged.

When a company hires the Auria HR Platform to manage the data of its own employees, we will act as data processor, with the client company holding the role of data controller for its staff's data.

This relationship is governed by the Data Processing Agreement, contained in the Terms and Conditions, which have been drafted in accordance with the requirements of Article 28 of the GDPR. This agreement establishes, among other things, the subject matter, duration, nature and purpose of the processing, the type of data and categories of data subjects, and Auria HR's obligations and security measures as a processor.

Data will be retained for as long as necessary to fulfil the purpose for which it was collected and, in any case, for as long as the freely given consent has not been withdrawn.

Any person has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where applicable, its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, data subjects may request the restriction of the processing of their data or object to it, in which case we will only retain it for the exercise or defence of claims.

To do so, users may exercise the rights recognised by law (i) by email to dpo@auriahr.com or (ii) by post to the address indicated above.

A complaint may be lodged with the Spanish Data Protection Agency, available at https://sedeagpd.gob.es

As a general rule, your data is hosted on servers located within the European Economic Area. If any provider involves an international transfer, it will be carried out with appropriate safeguards (adequacy decision or standard contractual clauses).

We apply appropriate technical and organisational measures to ensure a level of security adequate to the risk, including encryption of data in transit and at rest, access controls, multi-factor authentication (MFA) and regular backups.

If we detect a security breach affecting the confidentiality, integrity or availability of your data, we will notify the affected data subjects and/or client company without undue delay, and, where legally required, the Spanish Data Protection Agency. If you suspect your credentials have been compromised, contact us at security@auriahr.es.

We may update this policy to reflect regulatory changes or new services. We will publish any changes on this page, indicating the date of the last update.