Privacy Policy

Last updated: 05 Dec 2023

Rose Technologies Sociedad Limitada treats confidentiality and data protection as operating requirements rather than formalities. We collect only what we need, keep it only as long as we need it, and do not use it for purposes you have not been told about.

This policy explains who controls your data, why we process it, on what legal basis, how long we retain it, who receives it, and what you can require of us. It applies to personal data collected through .

  1. Data controller

    Controller Rose Technologies Sociedad Limitada
    Registration number B16625865
    Address C/Greco No 19 BJ Alcudia Illes Balears 07400 Spain, Spain
    Contact for data protection [email protected]
  2. What we process, why, and on what basis

    We only collect data you choose to send us. We do not build profiles and we do not acquire personal data from third-party sources.

    Contact form

    Data: the identifying and contact details you enter in the form, and the content of your message.

    Purpose: to respond to your enquiry and manage any resulting correspondence. Where you separately tick the relevant box, also to send you information about our activity and services, including by electronic means.

    Legal basis: your consent, given by submitting the form. Where you request information about our services with a view to engaging them, the processing may also rest on pre-contractual measures taken at your request. Commercial communications rest on the separate consent given by ticking the corresponding box.

    Retention: until your enquiry is resolved and any legal limitation period covering it has elapsed, unless the exchange gives rise to a further relationship, in which case the data is retained under that relationship. Where you have consented to commercial communications, until you withdraw that consent.

    Correspondence by e-mail

    Data: your e-mail address, any identifying details you include, and the content of your message and attachments.

    Purpose: to answer your questions and handle your requests.

    Legal basis: your consent, given by writing to us.

    Retention: until the matter is closed and any applicable limitation period has elapsed, unless a further relationship arises.

    Applications and CVs

    Data: the professional and contact information contained in your CV and covering message.

    Purpose: to assess your application and, where relevant, include you in current or future selection processes.

    Legal basis: your consent, given by sending us your application. Where an offer is made, pre-contractual measures taken at your request.

    Retention: for the duration of the selection process to which you applied, and for a maximum of one year thereafter so that we may consider you for future openings, unless you ask us to delete it sooner.

  3. Providing your data

    Supplying personal data through the Site requires a minimum age of 14 years or, failing that, sufficient legal capacity to contract.

    The data marked as required is the minimum we need to act on your request. Without it we cannot respond to you or provide the service you are asking for. Anything not so marked is optional and its omission has no consequence.

  4. Who receives your data

    We do not sell your data and we do not disclose it for third-party marketing.

    Your data may be accessed by service providers who process it on our behalf and under our instructions — for example hosting, e-mail, or IT maintenance suppliers. Each is bound by a processing agreement meeting the requirements of Article 28 GDPR and may use the data only for the purpose we have set.

    Beyond that, disclosure occurs only where required by law or by a competent authority, or where necessary to establish, exercise or defend legal claims.

    Where a provider processes data outside the European Economic Area, we ensure the transfer is covered by an adequacy decision, by Standard Contractual Clauses approved by the European Commission, or by another mechanism permitted under Chapter V GDPR. Details of the safeguards in place are available on request at [email protected].

  5. Your rights

    You may at any time withdraw consent you have given. Withdrawal takes effect going forward and does not affect the lawfulness of processing carried out before it.

    You may also require us to:

    • confirm whether we process your data and give you access to it;
    • correct data that is inaccurate or incomplete;
    • delete data that is no longer necessary for the purpose it was collected for, or that we hold on the basis of consent you have withdrawn;
    • restrict processing in the circumstances the regulation provides for;
    • transmit the data you supplied to another controller in a structured, commonly used, machine-readable format;
    • stop processing your data where you object on grounds relating to your particular situation, and at any time and without reason where the processing is for direct marketing.

    How to exercise them. Write to [email protected], or to the postal address in section 1, stating the right you wish to exercise and the data concerned. We may ask for information confirming your identity. We will respond within one month of receipt; where the request is complex we may extend that period by a further two months and will tell you if we do.

    Complaints. If you consider that we have not handled your data correctly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es), or with the supervisory authority of your place of residence.

  6. Security

    We apply technical and organisational measures appropriate to the risk in order to protect personal data against loss, alteration, unauthorised disclosure and unauthorised access. These measures are reviewed and updated as our systems and the state of the art evolve. No transmission over the internet can be guaranteed entirely secure, and we cannot warrant the security of data while in transit to us.

  7. Accuracy and third-party sites

    Please tell us when your details change, so that the data we hold stays accurate. We are not responsible for inaccuracies arising from information we have not been notified about.

    The Site contains links to third-party resources. We do not control how their operators handle personal data and accept no responsibility for their privacy practices. Review each destination's own policy before providing data to it.

  8. Changes to this policy

    We may amend this policy to reflect changes to the Site, to our processing operations, or to applicable law and regulatory guidance. The current version is always the one published here, identified by the date at the top of the page. Please review it each time you send us personal data.