Introduction 1.1 Purpose: This Personal Data Treatment Policy aims to establish the principles and guidelines that will govern the handling and protection of personal data collected and processed by Burnout-Zero, in compliance with applicable data protection laws and regulations.
1.2 Scope: This policy applies to all personal data collected, used, disclosed, or stored by Burnout-Zero in the course of its business operations. It applies to all employees, contractors, and third parties who have access to such data.
Definitions 2.1 Personal Data: Refers to any information relating to an identified or identifiable natural person. This includes, but is not limited to, names, addresses, telephone numbers, email addresses, financial information, and any other data that can be used to identify a person.
2.2 Personal Data Processing: Refers to any operation or set of operations performed on personal data, such as collection, storage, use, disclosure, transfer, or deletion of such data.
Principles of Personal Data Treatment Policy3.1 Legality and Consent: Burnout-Zero is committed to collecting and processing personal data in a lawful and transparent manner. We will obtain the consent of data subjects before collecting or using their personal information unless otherwise provided by law.
3.2 Purpose Limitation: Personal data will be collected and used only for the specific purposes for which it was obtained and in accordance with the consent provided by data subjects. We will not use the data for incompatible purposes.
3.3 Data Quality: We strive to maintain personal data accurate, complete, and up-to-date. We will take reasonable steps to correct or delete any incorrect or outdated data as soon as possible.
3.4 Data Security: We implement technical, administrative, and physical measures to protect personal data against unauthorized access, loss, disclosure, or alteration. Data security awareness and training will be promoted among our staff.
Data Subject Rights 4.1 Access and Correction: Data subjects have the right to access their personal data held by Burnout-Zero and request corrections or updates if necessary. Requests for access or correction should be submitted to the designated contact person mentioned in Section 6.
4.2 Data Retention: Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law or regulatory obligations.
4.3 Data Transfer: We may transfer personal data to third parties, including affiliates, partners, or service providers, only when necessary for the purposes stated in this policy and with appropriate safeguards in place to ensure data protection.
4.4 Data Removal: Users can request all of their data to be deleted from our systems by writing to the designated contact person mentioned in Section 6
Compliance and Accountability
5.1 Data Protection Officer: Burnout-Zero has appointed a Data Protection Officer (DPO) who is responsible for overseeing the implementation and compliance of this policy. The DPO can be contacted at the email address provided in Section 6.
5.2 Complaints and Inquiries: Any complaints, inquiries, or requests regarding personal data should be directed to the designated contact person mentioned in Section 6.
Contact Information: For any questions, concerns, or requests related to the treatment of personal data by Burnout-Zero, please contact:
Data Protection Officer: Martín Carrasco
Email:
dpo@burnout-zero.com
Effective Date: 01/04/2023
Review Date: 01/04/2024
Approved by: Martín Carrasco - CTO - Burnout-Zero