Privacy policy
This English version is provided for information. In case of discrepancy, the Spanish version prevails.
This website does not collect users’ personal data without their knowledge, nor does it pass them on to third parties.
For information on the cookies we use to collect information from users, please read the Cookie policy section of our website.
Basic data protection information
Below we set out the data protection policy of Manifest Investments, S.L. (hereinafter THE OWNER).
Who is the data controller?
Any personal data collected directly from the data subject will be treated confidentially and included in the corresponding processing activity owned by THE OWNER.
How do we obtain your personal data?
We collect your personal data on different occasions:
- Whenever you contact us directly, for example through the contact section or any other section where you fill in a form on the website, or through our customer phone lines, to request information about our products and services.
- When you buy or contract a product or service directly from us. THE OWNER’s products and services, and its promotional campaigns, are mostly aimed at adults. We will therefore only collect and process your personal data if you are at least 16 years old. We reserve the right to verify the age of people who provide personal data. Any data of a person under 16 will be deleted.
- We would be grateful if you helped us keep your personal data up to date by informing us of any change in your contact details or preferences.
What information may we obtain about you?
Through the different services and contact channels described in this Privacy Policy, the following types of data may be collected, depending on your relationship with the data controller:
- Clients and users: identification and contact data (name, address, phone numbers, email). Financial data: bank account number / credit card number.
- Job applicants: identification and contact data (name, address, phone numbers, email). Academic and professional data. Studies and qualifications. Employment and Social Security data. Personal characteristics: marital status, date and place of birth, age, sex, nationality and degree of disability.
For what purposes do we process your personal data?
As a website user, we will process the personal data you provide in order to answer your enquiry and send you commercial information about the company’s products and services.
As a client, we will process your data to provide the service requested and for the administrative and commercial management of our client portfolio.
As a job applicant, the data provided will be processed solely for present or future recruitment processes carried out by the company.
What is the legal basis for processing your data?
Users and subscribers: GDPR article 6.1.a), consent of the data subject to the processing of their personal data for one or more specific purposes.
Clients: GDPR article 6.1.b), processing is necessary for the performance of a contract to which the data subject is party, or to take steps at their request prior to entering into a contract. GDPR article 6.1.a), consent of the data subject for one or more specific purposes.
Employees: GDPR article 6.1.b), processing is necessary for the performance of a contract to which the data subject is party. GDPR article 6.1.c), processing is necessary for compliance with a legal obligation of the controller.
Job applicants: GDPR article 6.1.c), processing is necessary for compliance with a legal obligation of the controller.
For other processing activities not covered by this privacy policy, please contact the data controller for more information.
How long will we keep your data?
Personal data will be kept for as long as necessary to fulfil the purpose for which they were collected and to determine any liabilities that may arise from that purpose, in addition to the periods established by records and documentation regulations.
Who will we share your data with?
As a general rule, personal data will not be disclosed to third parties, except where required by law, which may include disclosures to organisations directly related to the controller (tax, employment and accounting advisers; financial institutions; the Spanish Tax Agency; training companies; the entity responsible for occupational risk prevention; the National Social Security Institute; the General Treasury of Social Security; trade unions; marketing and advertising companies; recruitment companies), the State security forces, the courts and the Public Prosecutor’s Office.
Although absolute protection against intrusion cannot be guaranteed for data transmitted over the internet or from a website, we make every effort to maintain the physical, electronic and procedural safeguards needed to protect your information in accordance with applicable data protection requirements.
All your data are kept on secure servers (or secure physical copies) owned by us or by our data processors, and our security criteria and policies (or equivalent ones of our processors) apply to accessing and using them.
Do we make international data transfers?
THE OWNER does not plan any international data transfers.
How do we keep your data protected?
To ensure the protection, security, integrity and availability of your data, we use various security measures.
Although absolute protection against intrusion cannot be guaranteed for data transmitted over the internet or from a website, both we and our data processors make every effort to maintain the physical, electronic and procedural safeguards needed to protect your data in accordance with the applicable legal requirements. These measures include:
- Limiting access to your data to those people who need to know them for their work.
- As a general rule, transferring collected data in encrypted form.
- Storing the most sensitive data (such as bank details) only in encrypted form.
- Installing perimeter protection systems (firewalls) on IT infrastructure to prevent unauthorised access, for example by hackers.
- Regularly monitoring access to IT systems to detect and stop any misuse of personal data.
Where we have given you (or you have chosen) a password that allows you to access certain parts of our websites or any other portal, application or service under our control, you are responsible for keeping it secret and for complying with all other security procedures we notify you of. You must not share your password with anyone.
What rights do data subjects have?
Anyone has the right to obtain confirmation of the processing of their data carried out by THE OWNER.
You can exercise your rights of access, rectification, erasure and portability of your data, restriction of and objection to processing, not to be subject to decisions based solely on automated processing, and to withdraw consent, before THE OWNER, or by sending an email to the contact address on this website with the subject “Data protection”.
Data subjects may also contact the competent data protection supervisory authority for further information or to lodge a complaint.