At REVITA, we are deeply committed to protecting the privacy and security of personal data we manage. This policy outlines how we process personal data within the scope of our services, strictly adhering to the General Data Protection Regulation (GDPR) and other applicable regulations.
1. HI IBERIA’s Role in Data Processing
HI IBERIA, as a service provider for THE CLIENT, may access information and personal data under THE CLIENT’s responsibility, such as user data from the REVITA application. This access will not be considered a transfer of data, as HI IBERIA acts solely as a Data Processor. All data processed will comply with GDPR requirements and applicable data protection regulations, always respecting the rights of the data subjects.
2. HI IBERIA’s Obligations as a Data Processor
HI IBERIA commits to:
- Implementing appropriate technical and organizational measures, as stipulated in Article 32 of the GDPR, to ensure the security, confidentiality, and integrity of personal data.
- Processing data exclusively for the agreed purposes (support and maintenance of REVITA) and not deviating from the agreed purpose.
- Maintaining professional secrecy regarding the processed data and ensuring the same level of commitment from all personnel involved.
- Acting solely under THE CLIENT’s instructions and not sharing or transferring data to third parties without explicit consent or legal obligation.
- Deleting or returning data to THE CLIENT upon service completion, except for data necessary to meet potential legal responsibilities.
3. THE CLIENT’s Responsibilities as the Data Controller
THE CLIENT is responsible for:
- Ensuring that the data entered into REVITA is managed in compliance with the GDPR and notifying data subjects about the processing being carried out.
- Indemnifying HI IBERIA for any claims arising from inadequate communication with data subjects.
4. Data Entry into the REVITA Application
The entry of personal data into REVITA is the sole responsibility of THE CLIENT and, ultimately, the users of the application. HI IBERIA is not responsible for the inclusion of sensitive data or for any misuse of the tool. However, HI IBERIA applies risk-based security measures to ensure the protection of processed data.
5. Confidentiality
Both parties agree to:
- Maintain the utmost confidentiality regarding any classified information obtained during the contractual relationship.
- Extend this confidentiality obligation indefinitely, even after the termination of the contractual relationship.
- Ensure that their personnel and collaborators comply with these commitments through specific agreements, if necessary.
6. Data Deletion Policy
Users may request the deletion of their personal data stored in REVITA by following this procedure:
Data Deletion Request
Send an email to soporte@revita.io with the following information:
- Full name.
- Email address associated with the account.
- A brief description of the data to be deleted.
Procedure
- Verify the user’s identity to ensure data security.
- Process the request within a maximum of 30 business days.
- Confirm data deletion to the user upon completion.
Consequences of Data Deletion
- Data deletion is irreversible.
- The user will lose access to services linked to the deleted data.
- A new account must be created to use the application again.
7. Disclaimer of Liability
HI IBERIA will not be responsible for:
- Unauthorized use of REVITA, including the input of sensitive data beyond the tool’s intended functionalities.
- Any failure by THE CLIENT to fulfill their responsibilities as the Data Controller.
8. Contact
For any inquiries related to this privacy policy, please contact us at: soporte@revita.io
Last updated: November 2024.