Privacy Policy

This Privacy Policy explains how the personal data
of users of Kurriku.com
is processed and what rights they can exercise.

1. Data controller

2. What data we may process

Depending on how you use the site, we may process the following
categories of information:

• Contact details:
  name and email address when you use
  the contact form.
• Information you choose to include in your message:
  subject, enquiry and any other information you decide to provide.
• Technical and security data:
  IP address, browser, device, access date and time,
  technical logs and data needed to prevent abuse
  or protect the site.
• Statistical or advertising data:
  where you have given the relevant consent for
  cookies or non-essential technologies.

We do not request special categories
of personal data through the contact form. We recommend that you do not include sensitive information
that is not needed to deal with your enquiry.

3. Why we process your data

Responding to enquiries and communications

We use the information provided through the form or by email
to receive, manage and respond to your enquiry,
request, issue or communication.

Security and prevention of abuse

We may process certain technical data to protect Kurriku,
prevent spam, fraud, attacks and misuse of the service.

Site analytics and improvement

If you have given your consent, measurement tools may be used
to gather statistics on how the website functions and is used
and to improve its content.

Advertising

Where advertising services are enabled and processing
requires consent, they may only be used in accordance
with the user’s choice in the cookie consent
system.

4. Legal bases

The legal bases that may legitimise processing are:

• Consent:
  for voluntarily submitting enquiries and for non-essential
  technologies where required.
• Pre-contractual steps requested by the data subject:
  where a communication has this nature and this basis applies.
• Legitimate interests:
  to protect website security, prevent abuse and ensure
  the service operates technically, while always respecting users’
  rights.
• Legal obligation:
  where we are required to retain or disclose certain information
  by law or by a competent authority.

5. Data retention

Enquiry data will be retained for as long as necessary
to deal with the enquiry and carry out any reasonable follow-up
arising from it.

As a general rule, once a communication has been dealt with, data may
be retained on a restricted basis for as long as necessary to
address potential liabilities or meet legal obligations.

Technical and security logs will be retained for the
period strictly necessary for their purpose.

Where processing is based on consent, it may be withdrawn
at any time without affecting the lawfulness of processing before
its withdrawal.

6. Recipients and data processors

We do not sell personal data.

To operate the site, certain information may be accessed by
providers of web hosting, email,
security, maintenance, analytics or technology infrastructure services,
acting as data processors where applicable.

Data may also be disclosed to public administrations, authorities
or courts where there is a legal obligation to do so.

7. International transfers

Some technology providers may operate or use
infrastructure located outside the European Economic Area.
Where an international data transfer takes place,
the mechanisms and safeguards provided for by applicable law will be used.

The use of certain tools from Google or other
external providers will also depend on your settings and
cookie consent where required.

8. Individuals’ rights

Where applicable, you can exercise the following rights:

• Access to your personal data.
• Rectification of inaccurate or incomplete data.
• Erasure of your data.
• Right to object to processing.
• Restriction of processing.
• Data portability.
• Withdrawal of consent.
• The right not to be subject to decisions based solely
  on automated processing, where applicable.

To exercise your rights, you can write to

info@kurriku.com ,
stating which right you wish to exercise and providing only
the information needed to verify your identity, where necessary.

9. Complaints

If you consider that the processing of your personal data does not comply
with the regulations, you can lodge a complaint with the
Spanish Data Protection Agency (AEPD).

You can find information and forms at

www.aepd.es
.

10. Minors

Minors must use Kurriku’s services in accordance
with the rules on legal capacity and consent established by the
applicable regulations.

For processing based solely on the consent of a
child under 14 years of age, the involvement of the person exercising
parental responsibility or guardianship will be required where legally applicable.

11. Security

Reasonable technical and organisational measures are applied to
protect data against loss, alteration, access,
disclosure or unauthorised processing.

No system connected to the Internet can guarantee
absolute security, so the measures will be reviewed and adapted when
necessary.

12. Third-party links

Kurriku contains links to companies, job portals and
other external websites. Each external website is responsible for
its own privacy policy and the processing it carries out.

13. Changes to this policy

This Privacy Policy may be updated when Kurriku’s services,
processing activities or applicable regulations change.