Digital Footprint Privacy Policy

1.-  Identification and contact details of the data controller.

Youforget.me, a company with address at Avenida de la Borbolla, 41, (41013) in Seville, is responsible for the processing of personal data through this website (hereinafter “the website”).

The purpose of this privacy policy is to provide information on the rights of the user under the General Data Protection Regulations (GDPR) and the Organic Law on Data Protection and Guarantees of Digital Rights.

If you have any questions regarding the processing of your personal data, contact the Company at the following address: dpd@youforget.me

2.- General information: description of the information contained in the privacy policy.

In this privacy policy you will find a table identifying the treatments carried out by Youforget.me. In these tables you will be informed about:

• The reasons for processing your personal data
• The legal bases that allow the processing of data by Youforget.me for the indicated purpose.
• The possible transfer or communication of your data to third parties, as well as the reason for this communication. For these purposes, we inform you that we do not transfer your personal data, except when there is a legal obligation (Public Treasury, Judges and Courts, Security Forces and Bodies, etc.) or we expressly indicate it in the table that appears below in the following point.
• On the other hand, those in charge of processing the company may have access to your personal data, that is, the service providers who, in order to carry out their functions, have to access your personal data. The service providers that access your personal data, in general, are dedicated to the information systems and technology sectors. The table below indicates, where appropriate, the sectors in which other potential service providers who may access your personal data are engaged.

We inform you that you can request more detailed information regarding the recipients of your data by sending an email to the address: dpd@youforget.me

• The existence of potential international data transfers.
• The term of conservation of the data that you provide us. We inform you that, subsequently, your data will remain blocked for the attention of judicial, administrative or fiscal claims, for the periods legally determined by each applicable regulation.

3.- Necessary and updated information

The blank fields provided to you in the forms on our website that contain asterisks are mandatory to fill in. Omitting one or more of these fields will leave us unable to provide you with our services, so you won’t be able to receive your digital footprint report. Please ensure all information provided is accurate and current.

So that your information is always up to date and does not contain errors, you must notify Youforget.me, as soon as possible, of the modifications and rectifications of your personal data that occur through the following email: dpd@youforget.me

4.-  Exercise of your personal data rights

We inform you that you can exercise the following rights:

* Right of access to your personal data  to know which ones are being processed and the processing operations carried out with it.

* Right to rectification any inaccurate personal data.

* Right to erasure your personal data

* Right to restriction of  processing  your personal data , when the accuracy, legality or necessity of data processing is in doubt, in which case, we may keep the data for the exercise or defense of claims.

* Right to object the processing of your personal data,  when the legal basis that enables us to process it, of those indicated in the table included in section 5, is legitimate interest. Youforget.me will stop processing your data, unless it has a compelling legitimate interest or for the formulation, exercise or defense of claims.

* Right to data portability of your personal data, when the legal basis that enables us to process those indicated in the table included in section 5 is consent.

* Right to withdraw your consent at any time.

You can exercise your rights at any time and free of charge in the following ways:

• By sending an email to dpd@youforget.me indicating the right you want to exercise and your identification data.
• Addressing a written request to Youforget.me, Avda de la Borbolla, 41 (41013) Seville, indicating the right you wish to exercise and your identification data.

We would also like to inform you that you have the right to file a claim with the Spanish supervisor (Agencia Española de Protección de Datos) if you consider that an infringement of data protection legislation has been committed regarding the processing of your personal data.

5.- Detailed information on the treatments carried out by service:

5.1.- Purpose of the treatment

5.1.1.- Attend to queries sent through the demo request form

• Legal basis: Legitimate interest of Youforget.me, SL to attend to the requests submitted to the company through its demo request form
• Recipients: Your personal data will not be transferred to any third party nor will access be provided to any service provider in addition to what is indicated in section 2
• General information: description of the information contained in the privacy policy
• International transfers: See point 9 International data transfers
• Conservation period: Until the resolution of the query
• What data do we obtain and keep? Name and surnames and email address

5.1.2.- Service provision of the Youforget.me application for the processing of administrative requests managed in professional offices and digital footprint service

• Legal basis: contract for the provision of services for the processing of administrative requests and consent for the fingerprint service.
• Recipients: Your personal data will not be transferred to any third party nor will access be provided to any service provider in addition to what is indicated in section 2. General information: description of the information contained in the privacy policy.
• International transfers: See point 9 International data transfers
• Storage period: as stipulated in the treatment order contract with each professional office or otherwise, until the end of the contract.
• What data do we obtain and keep?

o From our clients (professional firms):

• Name and surname
• Email address
• Phone number
• Company name (legal persons)
• Address
• Service provision contracts
• payment details
• Tax identification number
• Name and surnames of employees registered on the platform
• Email address of employees that are registered on the platform

o Of the interested parties, through our clients (data controllers):

• Name and surname
• Email address
• ID
• Phone number
• Address
• Public data on the internet for the provision of fingerprint service (if contracted)
• Family book (if necessary for service provision)
• payment details
• Biometric data: for the digital footprint service, photographs provided by the user if they consent to this service.

5.1.3.- Sending commercial information, offers and new products or services.

• Legal basis: consent to send you our commercial information
• Recipients: Your personal data will not be transferred to any third party nor will access be provided to any service provider in addition to what is indicated in section 2. General information: description of the information contained in the privacy policy.
• International transfers: no international transfers of your personal data will be made
• Storage period: Until consent is withdrawn
• What data do we obtain and keep? Name and surnames and email address.

6.- Security

Youforget.me has implemented and maintains the security levels required by the GDPR to protect the personal data of the interested parties against accidental loss and unauthorized access, treatment or disclosure, while also taking into account the state of the technology, the nature of the data stored and the risks to which they are exposed.

However, the transmission of information over the Internet is not completely secure. For this reason, Youforget.me, despite making its best efforts to protect the data of interested parties, cannot guarantee their security during transit to the website.

Therefore, all the information you provide will be sent at your own risk. Once your data is received, Youforget.me will use rigorous procedures and security features to prevent any unauthorized access.

7.- Confidentiality

The personal data that we may collect through the website or through the different communications that we maintain with you, will be treated confidentially, committing ourselves to keep secrecy regarding them in accordance with the provisions of the applicable legislation.

8.- Minors

Children under 14 years of age may not use the services available through the website. In this sense, and to the extent that Youforget.me does not have the capacity to control whether or not the interested parties are minors, it is warned that it must be the parents and guardians who enable the necessary mechanisms to prevent minors from accessing the website and/or provide personal data without their supervision. Youforget.me does not accept any responsibility in this regard.

9.- International data transfers

For  the “digital footprint” service, Youforget.me carries out international transfers with the Republic of the Seychelles Islands, through the Pimeyes platform. The data object of said transfers are: biometric data of facial images.

When the digital footprint assistant is done through a privacy professional, the data controller expresses his consent to said international transfer of data in countries that do not comply with the adequacy agreement with the European Union, by signing the contract and your processing order.

Additionally, the consent of the end user is also given, if he requires this service. The end user always decides which data provide to us, not being mandatory to give all the types of data mentioned. 

Youforget.me carries out data transfers with the United States through Hubspot exclusively for our Marketing services. In this case, Youforget.me, requires that said recipient comply with measures designed to protect personal data and for that it is based on mechanisms approved by the EU such as the Contract Clauses Type (EU) 2021/914 of June 4.

10.- Updating of the privacy policy

This privacy policy is currently in effect and has been updated in April 2022.