Terms of use

The personal data subject to processing, the documents provided and any other information provided in the complaint that contains personal information, will be treated in a manner confidential by those responsible for the complaints channel in order to comply with the obligation to investigate and manage the complaint presented as well as to comply with the legal obligations of the company (BULLNET GESTIÓN SGEIC S.A) established in Law 2/2023, of February 20, regulating the protection of people who report regulatory violations and the fight against corruption. No personal data will be collected whose relevance is not evident to process a specific information or, if collected by accident, deleted without undue delay.

The processing of personal data will be carried out ensuring compliance with Law 2/2023, of February 20, regulating the protection of people who report violations regulations and the fight against corruption, of Regulation (EU) 2016/679 of the Parliament European Union and of the Council, of April 27, 2016, of the Organic Law 3/2018, of December 5, of Protection of Personal Data and guarantee of digital rights and of Organic Law 7/2021, of May 26, on the protection of personal data processed for the purposes of prevention, detection, investigation and prosecution of criminal offenses and execution of criminal sanctions.

Responsible: BULLNET GESTIÓN SGEIC S.A

Recipients:
Access to personal data contained in the internal information system will be limited to:
a) The person in charge of the System and whoever manages it directly.
b) The person in charge of human resources or the duly designated competent body, only when disciplinary action against a worker may proceed. In the case of the public employees, the competent body for processing it.
c) The person in charge of the legal services of the entity or body, if the adoption of legal measures in relation to the facts reported in the communication.
d) Those in charge of the treatment that are eventually designated.
e) The data protection officer.

The data may be brought to the attention of the Legal Department, Lawyers, Organs Judicial and State Security Forces and Corps in the event that any of the information received were likely to be considered a crime or legal infraction of some kind.

Legal basis of treatment: The processing of personal data, in the cases of communication internal, shall be understood to be lawful by virtue of the provisions of Articles 6.1.c) of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, 8 of the Organic Law 3/2018, of December 5, and 11 of Organic Law 7/2021, of May 26, when, according to the established in articles 10 and 13 of the law, it is mandatory to have an internal system of information. If it is not mandatory, the processing will be presumed covered by article 6.1.e) of the mentioned regulation.
The processing of personal data in the cases of external communication channels is shall be considered lawful by virtue of the provisions of articles 6.1.c) of Regulation (EU) 2016/679, 8 of Organic Law 3/2018, of December 5, and 11 of Organic Law 7/2021, of May 26.

Rights of the interested party: access, rectification, deletion, limitation, portability and opposition, of free of charge by email to: msuarez@bullnetcapital.com in legally provided cases.

Conservation: The data will be kept for the legal period established for the processing of the file (3 months) and for the time necessary for the exercise of legal actions or if necessary It is necessary to leave evidence of the channel management.

The interested party in turn has the right to submit a claim to the AEPD at www.aepd.es for request protection of your rights.