privacy policy

The owner of the Website https://www.zestconsultancy.eu/ is ZEST CONSULTANCY, S.L., as well as the person responsible for the processing of personal data supplied by its users.

The treatment of personal data that is carried out through this Website observes the provisions of Regulation (EU) 2016/679, General Data Protection, in Organic Law 3/2018, of December 5, Protection of Personal Data and with the appropriate technical and organizational security measures to guarantee a level of security appropriate to the risk of the treatment.

Information on data protection

If the user decides to request information on our Website, the data strictly necessary to achieve the purpose for which our Website is intended will be requested, which is the information and promotion of our services, all of which are available on our Website. In no case will they be used for purposes other than those for which they have been voluntarily entered on the Web.

The personal data that the user provides us will be processed, having been informed of the purposes of the treatment and other information before clicking on the button “SEND” “PLACE THE ORDER”.

Those who voluntarily provide their data to the owner of the Web by any of the means established for this purpose at all times, have had at their disposal in a transparent and clear way, having clicked on the corresponding box, the following aspects:

1.1 The DATA CONTROLLER is ZEST CONSULTANCY, S.L., address at Paseo de la Castellana 123, Esc. Izq., 6th Floor, Puerta B, 28046 Madrid and NIF: B66415688.

1.2 The PURPOSES of the treatment are the following:

the management of the request, request or query, and the maintenance of relations between the Web and its users.
Unequivocal authorization that the data provided can be used to send you, by any means of communication, including electronic ones, commercial communications, with information of interest, and reminder communications, provided that you have checked the corresponding box or have stated, by any means, of unequivocally your authorization.
contract any of the specific products or services
information on the use of cookies for specific and specific purposes reported at all times in this privacy policy.

1.3 The LEGAL BASIS for the treatment is based on the established relationship, on compliance with legal obligations and on your unequivocal consent, if it has been provided. We inform you that you can revoke your consent at any time, through an easy and simple means. In the case of contact persons of a legal person, the legal basis for the treatment is the legitimate interest of this entity in maintaining relations with said legal person.

1.4 We inform you that the PERIOD OF CONSERVATION of your data will be that of the validity of the contract and after its termination, in the case that is determined by law, while the conservation obligation lasts and, where appropriate, during the prescription period of the corresponding actions. WE WILL KEEP your data in the event that the legal basis is consent as long as you do not revoke your authorization, and once it is revoked, it will be set according to the criterion of exhausting the limitation periods for actions.

1.5 RECIPIENTS: no recipients of your data are foreseen, except legal obligation.

1.6 We guarantee your RIGHTS to access, rectify or delete your data, as well as your right of limitation or portability, according to the remaining information offered in this Privacy Policy.

Information about users

We do record your IP (Internet Protocol) data assigned to the subscriber who owns the telephone line at the time of connection with this website, for the purpose of security and collaboration with the Justice. The data will be kept by the service provider for the time set by current legislation.

Rights of Access, Rectification, Opposition, Suppression, Limitation, unless the subject of automated decisions and Portability

At any time, the user has the right to access their information, to rectify it if their data is wrong, to oppose any type of treatment associated with the maintenance of the contractual relationship, to revoke the consent granted, to request the limitation or deletion of its treatment, not to be subjected to automated decisions, and to unsubscribe from the services of ZEST CONSULTANCY, SL

These rights can be made effective after accreditation of the personality in the forms and within the terms established in the General Data Protection Regulation, by writing to the postal address that appears in the Legal Notice of the Web.

The processing of personal data and the sending of communications by electronic means, where appropriate, are adjusted to the regulations established in the General Data Protection Regulations, Organic Law 3/2018, of December 5, on Data Protection Personal and in Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce.

Remaining information on data protection.

The following information is extended information on data protection, available at any time:

In case you are a client:

Information on data protection. The person responsible for the treatment is: ZEST CONSULTANCY, S.L. Personal data will be processed for the purpose of CUSTOMER MANAGEMENT, OPERATIONAL CONSULTANT, FINANCIAL INTERMEDIATION, VIRTUAL POS MANAGEMENT, BILLING AND MAINTENANCE.

The legal basis of the treatment is the contract entered into, the fulfillment of a legal obligation, the legitimate interest in the case of contact persons of legal persons and the consent, where appropriate, revocable at any time.

The criteria established for the conservation of your data is the limitation period for actions. In the event that the basis of the treatment was consent, the data will be kept until the revocation of the consent or opposition to the treatment and, subsequently, during the period of filing of claims.

1. The recipients of your data is the tax administration and banking entities, where appropriate.

   You have at your disposal the exercise of access rights including the right to obtain a copy of the personal data subject to treatment, rectification, opposition, deletion or erasure, where appropriate, portability and limitation of treatment, by writing to the person responsible for the treatment to the following address: Paseo de la Castellana 123, Esc. Izq., Piso 6, Puerta B, 28046 Madrid, Telf: 34 678008076, E-mail: pk@zest.global. You have the right to file a claim with the supervisory authority.

   2- Data treatment agreement.

   In the event of provision of a service for which personal data of the client or Contractor is processed, the Property will act as the data controller, with the client or contractor being the data controller, who has decided to choose this MANAGER because the latter offers sufficient guarantees to apply appropriate technical and organizational measures to the data provided, guaranteeing that the processing commissioned complies with Regulation (EU) 2016/679, on Data Protection (RGPD). In this regard, the person responsible for the treatment will provide data that he has obtained lawfully, and the person in charge of the treatment will be obliged to the following:

   2.1- It will only process the data in accordance with the instructions of the DATA CONTROLLER, and for the purpose of this proposal or contract, not communicating them to any third party, not even for their conservation. The processing of personal data is necessary for the provision of the service. The type of personal data may be POS transaction data and data derived from them, provided by the CONTROLLER, and the categories of personal data may refer to customers or users (Identification, contact, mobile phone, or payment used and transaction). The treatment operations are: collection, recording, consultation, sending, modification, assignment, conservation, deletion and destruction.

   2.2- It undertakes to guarantee that the people who are part of the DATA CONTROLLER’s structure and who process data have committed to comply with confidentiality rules, and the MANAGER undertakes to adopt the necessary security measures and guarantee the rights of the affected persons. , as established in Art. 32 of the RGPD, having to establish the following measures:

   the pseudonymization and encryption of personal data;
   the ability to guarantee the confidentiality, integrity, availability and permanent resilience of the treatment systems and services;
   the ability to restore availability and access to personal data quickly in the event of a physical or technical incident;
   have established a process of regular verification, evaluation and assessment of the efficiency of technical and organizational measures to guarantee the security of the treatment;
   will make available to the person in charge all the information necessary to demonstrate compliance with the obligations established in the RGPD, as well as to allow and contribute to the performance of audits, including inspections, by the person in charge or another auditor authorized by said person in charge.
   will assist the person in charge, whenever possible, to facilitate the response to the rights exercised by the interested parties, and will help them to comply with the security measures of Art. 32 and 36 of the RGPD, taking into account the nature of the treatment and the information available to the manager.
   It will adopt the rest of the requirements of Art. 28 of the RGPD.

2.3- Once the contractual provision has been fulfilled, the personal data must be destroyed or returned to the CONTROLLER, at their option, who must state, unless there is any legal provision that requires their conservation. The data, where appropriate, must be returned in the same way in which they were obtained and within a period of two months from the effective end of the service, and the RESPONSIBLE must not hinder its receipt. Whenever responsibilities may arise between the CONTROLLER and the MANAGER, the latter may keep the data duly blocked. The TREATMENT MANAGER will notify the RESPONSIBLE in case of receiving a request for the exercise of rights by an interested party and will do so within three business days following receipt of the request and in the same way that the RESPONSIBLE is usually communicated. and MANAGER, preferably electronic means. It is not the responsibility of the MANAGER to attend and respond to requests for these rights.

2.4- In the event that the DATA CONTROLLER uses the data for another purpose, communicates them or uses them in breach of this contract, they will also be considered responsible for the treatment. In the event that the TREATMENT MANAGER decides to subcontract all or part of this service, she must have prior written authorization from the DATA CONTROLLER. Once the subcontracting has been authorized, the SUB-CHARGER of the treatment must be subject to the same conditions and to the same written form as the MANAGER, with the MANAGER responding to the CONTROLLER in the event of the SUB-CHARGER’s breach.

2.5- Professional secrecy is required with respect to the personal data that is the object of the treatment, and must be kept secret during the treatment and after its completion. It guarantees that the persons authorized to process personal data that are the object of this contract have expressly agreed to respect confidentiality and the duty of secrecy, a commitment that has been documented and is available to the CONTROLLER.

2.6- The treatments to which the MANAGER will access as a result of this contract are all the necessary treatments to fulfill the object of the contract. The CONTROLLER authorizes the MANAGER to transfer the data submitted to treatment that are necessary to the third parties referred to in this agreement or expressly indicated by the RESPONSIBLE, to comply with the provisions of this contract. “

In case you are a provider:

Information on data protection. The person responsible for the treatment is: ZEST CONSULTANCY, S.L. Personal data will be processed for the purpose of managing suppliers and payments. The criteria established for the conservation of your data is the limitation period for actions.

The legal basis of the treatment is the contract concluded, the fulfillment of legal obligations, the legitimate interest in the case of contact persons of legal persons.

The recipients of your data is the tax administration and banking entities, where appropriate.

You have at your disposal the exercise of access rights including the right to obtain a copy of the personal data subject to treatment, rectification, opposition, deletion or erasure, where appropriate, portability and limitation of treatment, by writing to the person responsible for the treatment to the following address: Paseo de la Castellana 123, Esc. Izq., Piso 6, Puerta B, 28046 Madrid, Telf: 34 678008076, E-mail: pk@zest.global. You have the right to file a claim with the supervisory authority

In case you are a user of accounts in social networks of this entity:

Information on data protection. Your profile data and all those provided by you become part of data processing and you will be considered an interested person in our company. You should know and when you become a friend or follower of the profile or account of the company that the data that you have in the open may be processed by us for the purpose of information about it or about services it can provide. Your data may also be consulted by other members who have become friends or added to this company, being you who can decide your degree of privacy in the social network. The person responsible for the treatment is: ZEST CONSULTANCY, S.L .. The legal basis is the consent, which you assume once you have decided to be part of the account, consent that you can revoke at any time. Your data will not be kept once you have decided not to be part of the network, account or profile of this entity. In the event that you wish to exercise your rights of access, including the right to obtain a copy of the personal data that is the object of treatment, rectification, opposition, deletion or erasure, where appropriate, portability and limitation of treatment, write to Paseo de la Castellana 123 , Esc. Izq., Piso 6, Puerta B, 28046 Madrid, Telf: 34 678008076, E-mail: pk@zest.global, you have the right to file a claim with the supervisory authority.

In case you visit our facilities, you should know that it is a video-monitored area

Information on Data Protection.

Responsible for the treatment is ZEST CONSULTANCY, S.L., and informs you of the following:

Purposes of the treatment: video surveillance for security purposes.

Conservation period is one month.

Legal basis of the treatment is the legitimate interest.

Recipients of your data: they may be transferred to Courts and Tribunals or to the State Security Forces and Bodies.

Rights: you can exercise your rights of access, rectification, opposition, cancellation or deletion, where appropriate, and limitation of treatment before the person responsible for the treatment, at the following address: Paseo de la Castellana 123, Esc. Izq., Piso 6, Puerta B , 28046 Madrid, Telf: 34 678008076, E-mail: info@zestconsultancy.eu