IMPORTANT: We invite you to read this Privacy Statement carefully to learn why we collect your personal data and how it is processed by Exartia Auditores Informáticos, S.L., Ametller, 1, 4-1, 08906 Hospitalet de Llobregat, Barcelona, in relation to the website(s) it operates (hereinafter, the “Websites”).

This policy is subject to change and should be consulted each time you decide to visit us.

This Privacy Policy was modified on 01/06/2026.

SCOPE

This online privacy statement of Exartia Auditores Informáticos, S.L., is public and accessible to all users and customers of Exartia Auditores Informáticos, S.L., and applies to all websites of Exartia Auditores Informáticos, S.L. being www.exartia.net the main site or domain.

It also applies to those documents or messages issued by Exartia Auditores Informáticos, S.L. that link to this policy or privacy statement or, where appropriate, indicate access to it so that you know how Exartia Auditores Informáticos, S.L. uses your personal data.

Next, we inform you in a general way about the uses of your personal information. These uses and treatments are detailed below.

PERSONAL INFORMATION WE COLLECT

Information on the use of personal data, as provided for in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (RGPD) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, which adapts the Regulation to the Spanish legal system and completes and develops its provisions (LOPDGDDD).

 Exartia Auditores Informáticos, S.L. respects your right to privacy and applies all the regulations in force in order to protect the personal data of its customers and users.

Your personal data are treated with the utmost confidentiality, having adopted Exartia Auditores Informáticos, S.L., as Responsible for Treatment, the technical and organizational measures necessary to ensure the confidentiality and security of personal data, avoiding its alteration, loss, treatment or unauthorized access.

In order for you to receive information and, where applicable, to be able to reserve or use the products and services offered by Exartia Auditores Informáticos, S.L. through the site(s) of Exartia Auditores Informáticos, S.L., it is necessary for you to inform us of certain personal data necessary in order to be able to personalize our services and adjust them to your interests and needs. 

In order for you to receive information and, if applicable, to be able to book or use the products and services offered by Exartia Auditores Informáticos, S.L. through Exartia Auditores Informáticos, S.L.’s website(s), it is necessary that you inform us of certain personal data required to personalize our services and adjust them to your interests and needs.

We remind you that it is the user’s duty to inform us of any change in their data, to Exartia Auditores Informáticos, S.L., and that had registered our sites, to proceed to its maintenance in the corresponding files.

In order to improve the services, we offer you, it is possible that at the end of the service we provide you, you will receive a satisfaction survey. You will be asked for an assessment of the services received and a brief comment on your experience.

We collect your personal information for several reasons:

• Respond to requests for services
• Realization of the services
• Preparation of budgets
• Send you status messages of ongoing services
• Sending of promotions that we consider interesting for our clients
• Quality and satisfaction surveys for the improvement of the services carried out by Exartia Auditores Informáticos, S.L.

In addition, we may collect information related to your use of our websites through various technologies, such as the use of cookies.

You may revoke this consent at any time and exercise your rights of access, rectification, deletion, limitation of treatment, forgetfulness, portability of data and opposition by the means indicated in the chapter “EXERCISE OF RIGHTS” of this document.

COLLECTION METHODS

Exartia Auditores Informáticos, S.L. collects personal data through several channels: on the website www.exartia.net; in the call center of Exartia Auditores Informáticos, S.L.; in the same physical centers of Exartia Auditores Informáticos, S.L., when requesting a quote or a service; on the page of Exartia Auditores Informáticos, S.L.

In any case and as long as it is applicable, we will give you the option of refusing to allow us to use your data for the purpose of sending or advertising communications.

DISCLOSURE TO THIRD PARTIES

For the management and fulfillment of the object of the contract, it may be necessary (and mandatory for the provision of the service), that your data, have to be communicated to suppliers such as:

• Collaborating companies at the level of HR management, such as administrative agencies and/or law firms.
• IT service companies, third parties that help us provide digital and e-commerce services, CRM, web analytics and search engine, among others.
• Third-party transportation companies, e.g., postal services, courier services, etc.
• Third parties that help us provide IT services, such as platform providers, hosting services, maintenance and support on our databases, as well as on our software and applications that may contain data about you.

All these third party companies are of our utmost confidence. They are only provided with the essential information necessary to perform the service contracted by you and in the contract signed between these companies and Exartia Auditores Informáticos, S.L. it is explicitly stated that they cannot use your personal data for any other purpose than the one contracted by you. We always do our best to ensure that all third parties we work with maintain the security of your personal data.

You authorize us to communicate data such as Name, NIF, Bank Data, etc., to the Financial Institutions with which Exartia Auditores Informáticos, S.L. works for the sole purpose of managing transfers, collections and payments arising from the commercial relationship and the use of our services.

Additionally, within the framework of applicable regulations or the contractual relationship you maintain with Exartia Auditores Informáticos, S.L., certain data may be disclosed to: 

• Public administrations with competence in Exartia Auditores Informáticos, S.L.’s areas of activity, when required by current regulations.
• Law enforcement authorities, in compliance with legal requirements.
• Banks and financial institutions for the management of payments and collections related to the services provided.
• Legal professionals, when such disclosure is legally required or necessary for the execution of contracted services

Personal data will not be communicated to third parties, except by legal obligation or court order.

Finally, you authorize us to send the necessary information for the process of any incident covered by your insurance company and that it may require.

INTERNATIONAL DATA TRANSFERS

Exartia Auditores Informáticos, S.L. transfers personal data outside the EEA in a safe and lawful manner. Because some countries lack regulations governing the use and transfer of personal data, we take steps to ensure that third parties comply with the commitments in this Policy. Such measures may include reviewing the privacy and security standards of third parties and signing specific contracts, based on the standard contractual clauses adopted by the European Commission.

Service providers located outside the EEA, such as Facebook, Inc. or Google, LLC, may have access to your personal data. These providers are adhered to the “Privacy Shield”, which commits them to protect your personal data under rules and safeguards established by the European Union.

TREATMENTS AND USES

You may revoke your consent at any time in order to allow your data to be used in a specific manner. Such revocation of authorization may not have retroactive effect.

Realization and management of the contracted service and invoicing

Without the requested data it will not be possible to carry out the service.

The personal data, as well as those related to the service will be kept in our files for the time necessary to be able to make effective the guarantee of the service provided (5 years).

The data relating to the invoicing of the service will be kept in our files for the time necessary to comply with the legal and fiscal obligations applicable to the services provided by Exartia Auditores Informáticos, S.L. (5 years + current year).

With regard to this data processing, you may, if you consider it necessary, exercise the following rights:

• Access to know what data we keep and treat.
• Of rectification in case you consider that the data are not correct or because they have changed (for example, your contact details).

Editing Queries

Personal and contact data, images, will be kept in our files for the time necessary to carry out the requested management.

If you consider it necessary, you will be able to exercise the following rights with regard to this data processing:

• Access to know what data we keep and treat.
• Of opposition and limitation, so that personal data will not be processed -since your request is processed- for the purpose of the information service.
• Of rectification in the case that considers that the data are not correct or because they have changed.
• Deletion or deletion in the event that you withdraw your consent for this treatment.

Quality Service.

In order to comply with our commitments of quality with the client, we carry out a survey punctually to know the satisfaction with the work carried out to our clients and users in order to be able to improve our services.

These surveys are carried out by electronic means (you receive an e-mail with a link to the website where the survey is carried out) and they do not collect any personal data additional to those you have previously provided.

In any case, the personal contact data collected for the purpose of sending you the quality survey will only be used if you give us your explicit consent.

Personal data relating to this processing will be kept for this purpose for 3 months.

You may, if you consider it necessary, exercise the following rights with regard to this data processing:

• Of opposition and limitation, so that personal data will not be processed -since your request is processed- for the purpose of quality service.
• Of rectification in the case that considers that the data are not correct or because they have changed.

Information on the services of Exartia Auditores Informáticos, S.L.

In order to keep you informed about the services provided by Exartia Auditores Informáticos, S.L. and about specific promotions, we need to treat your contact details.

On the other hand, in each communication sent you will be offered the opportunity to unsubscribe from them; additionally, you can exercise the rights indicated below at any time.

You may, if you consider it necessary, exercise the following rights with regard to this data processing:

• Of opposition and limitation, so that personal data will not be processed -since your request is processed- for the purpose of the information service.
• Of rectification in the case that considers that the data are not correct or because they have changed.
• Deletion or deletion in the event that you withdraw your consent for this treatment.

Elaboration of budgets

The data that you provide us, for the preparation of the budget, will be kept in our files until you inform us of the decline of its execution or up to 2 years after this period will be deleted. Otherwise they will become part of the processing of Service Realization.

You may, if you consider it necessary, exercise the following rights regarding this data processing:

• Access to know what data we keep and treat.
• Of rectification in the case that you consider that the data are not correct or because they have changed (for example, your contact details).
• Deletion in the event that you definitively reject the action budgeted by Exartia Auditores Informáticos, S.L.

Study of job applications

The data you provide us, to participate in our recruitment processes, if you are selected for the next phase, we will inform you of this decision.  The data provided by you will be kept for a maximum of 1 year last which will be deleted.

If you consider it necessary, you may exercise the following rights with regard to this data processing:

• Access to know what data we keep and process.
• To rectify if you consider that the data are not correct or because they have changed (for example, your contact details).
• Deletion or deletion in the event that you withdraw your consent for this treatment.

Navigation

By browsing Exartia Auditores Informáticos, S.L. you can collect unidentifiable data, which may include, IP addresses, geographic location (approximately), a record of how services and sites are used, and other data that can not be used. be used to identify the user. Among the non-identifying data are also those related to your browsing habits through third-party services.

We use this information to analyze trends, administer the site, track the movements of users around the site and to gather demographic information about our user base as a whole.

Service reCAPTCHA

The browsing IP address will be sent to Google as part of the system in order to discern a human from an automated form filling and submission system.

Full details about Google’s privacy policy can be found at https://policies.google.com/privacy?hl=en.

LEGAL BASIS FOR PROCESSING YOUR DATA 

The processing of personal data carried out by Exartia Auditores Informáticos, S.L. is based on different legal grounds, depending on the purpose for which the data is used: 

Performance of a contract or application of pre-contractual measures 

• To perform and manage the contracted service and billing, it is necessary to process the user’s personal data. Without this information, the service could not be provided.
• To prepare estimates, we process the data provided in order to manage the economic proposal, retaining it until the user decides not to proceed with the execution or for a maximum of two years.
• To manage job applications, we process candidate data during selection processes, storing it for a maximum of one year if the candidate is not selected.

Compliance with a legal obligation 

• Data related to billing is retained for the necessary period to comply with legal and tax obligations, as established by law (5 years plus the current year).

Legitimate interest of Exartia Auditores Informáticos, S.L. 

• To manage inquiries, we store personal data until the requested assistance is completed.
• To evaluate service quality, we conduct satisfaction surveys to improve our services. These data are processed only if the user has given their consent.
• To analyze website navigation, we collect non-identifiable data through third-party tools to improve user experience and optimize the website.

User consent 

• To send commercial communications and promotions, we process contact details only if the user has given explicit consent. This consent can be revoked at any time, without retroactive effect.
• To conduct quality surveys, they are only sent if the user has agreed to receive them.

In any case, the user may exercise their rights of access, rectification, erasure, restriction, objection, and data portability under the terms established by data protection regulations.

TYPES OF DATA WE PROCESS 

In accordance with the purposes mentioned above, Exartia Auditores Informáticos, S.L. processes the following categories of personal data: 

• Identification data: name, surname, postal address, email address, postal code, and phone number.
• Academic and professional data: education, qualifications, academic background, work experience, and membership in professional associations, in the context of recruitment processes.
• Traffic and location data.
• Metadata derived from electronic communications.
• Commercial information.
• Economic, financial, and banking data.

The user agrees to provide truthful, accurate, complete, and up-to-date information, assuming responsibility for any damages that may arise from non-compliance with this obligation. 

If the user provides third-party data, they declare that they have obtained the third party’s consent and undertake to inform them about the content of this clause, thereby exempting [COMPANY NAME] from any liability in this regard. However, Exartia Auditores Informáticos, S.L. may carry out necessary verifications to confirm compliance with this requirement, applying due diligence measures in accordance with data protection regulations.

SECURITY MEASURES WE APPLY TO PROTECT DATA 

At Exartia Auditores Informáticos, S.L., we are committed to protecting personal data and ensuring the privacy of our users. To guarantee the security of the information covered by this Privacy Policy, we implement technical and organizational measures designed to prevent loss, manipulation, disclosure, or alteration of data. 

The security measures adopted include: 

• Encryption of communications between the user’s device and our servers.
• Perimeter protection of information through firewalls, corporate antivirus software, backups, and updated operating systems on servers and devices.
• Additional security measures to prevent unauthorized access to user data.

When Exartia Auditores Informáticos, S.L. uses service providers located outside the European Union for platform maintenance, international data transfers are carried out in compliance with the security and data protection standards required by applicable regulations, ensuring the integrity and confidentiality of the information.

reCAPTCHA

We use the reCAPTCHA service of Google Inc. (Google) service to protect the data sent through the forms on our users’ pages. This service differentiates data sent by individuals from automated messages and involves the transmission of IP address and other data required by Google to use the reCAPTCHA service. For this purpose, the data will be transmitted to Google to be used. The IP address will be encrypted by Google in the member states of the European Union as well as in the states associated with the European Economic Area. Only in exceptional cases will IP addresses be transmitted to Google’s server in the United States for encryption. On behalf of the owner of this website, Google will use this information to evaluate the use of the service by users. The IP address transmitted by reCAPTCHA will be kept separate from other Google data. The Google privacy policy applies to this data. Full details of Google’s privacy policy can be found at https://policies.google.com/privacy?hl=en.

By using the reCAPTCHA service, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

GOOGLE ANALYTICS

This website uses Google Analytics, a web analytics service provided by Google, Inc. a Delaware company whose principal office is at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States (“Google”).

Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the website. The information generated by the cookie about your use of the website (including your IP address) will be directly transmitted to and stored by Google on servers in the United States. Google will use this information on our behalf for the purpose of tracking your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage.

Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, you should be aware that if you do so you may not be able to use the full functionality of this website. By using this website you consent to the processing of information about you by Google in the manner and for the purposes set out above.

EXERCISE OF RIGHTS

In line with our philosophy, we consider the protection of your personal data to be fundamental. Therefore, we inform you that, regarding the privacy of your data, you have the following rights:

• Right to transparency of information which involves receiving all information about how we use your personal data in a transparent, clear and simply worded manner. If you wish to exercise this right, please use any of the channels we indicate at the end of this section.
• Right of Access: You have the right to know and access all your personal information that our company has. If you wish to exercise this right, please use one of the channels indicated at the end of this section.
• Right of Deletion (also known as Right to be Forgotten). Any person has the right to request the deletion of his or her personal information from Internet service providers, provided that there is no legitimate reason for such data to be retained. Upon request, we are obliged to notify third parties with whom we have shared your data of the need to remove any link, copy or replica of that information. The purpose is to remove from the network and search engines any trace of the data of the person who wishes to be “forgotten” permanently. If you wish to exercise this right, please use one of the channels indicated at the end of this section.
• Right to restrict: You have the right to ask our company to restrict the processing of your data when it is inaccurate, the processing is improper, it is not necessary for our purposes, or if you have filed an objection under Article 21(1) of the GDPR, while we determine whether our company’s legitimate grounds override your interests. If you wish to exercise this right, please use one of the channels indicated at the end of this section.
• Right to data portability: The European Data Protection Regulation, together with Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, which implements it in Spain, and Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI), provides for the possibility of transmitting, transferring, copying or moving data from our databases to others. This gives you the right to have, where technically possible, your personal data transferred directly. If you wish to exercise this right, please use one of the channels indicated at the end of this section.
• Right of Rectification: You have the right to have your personal data rectified when it is inaccurate or no longer valid or to have it completed when it is incomplete. If you wish to exercise this right, please use any of the channels indicated at the end of this section.
• Right of Opposition: You may object at any time to our company processing your personal data. If you wish to exercise this right, please use one of the channels indicated at the end of this section.

You may direct written communications for the exercise of your rights to:

Exartia Auditores Informáticos, S.L.
Ametller, 1, 4-1, 08906 Hospitalet de Llobregat, Barcelona
B64857691

You can also direct your communications through the following channels:

• In person, in our offices
• By e-mail to the address info@exartia.net
• Contacting to the telephone +34 932 924 007 where we are to your disposition to take care of you.

Submitted data requests may require you to provide additional documentation necessary to confirm your identity.

You can also complain directly to the Spanish Data Protection Agency (AEPD) in these situations:

1. if you have requested to exercise your rights and have not received a response from the data controller within one month.
2. If you have received a response, but do not agree with it.
3. If you believe that the controller has violated data protection regulations in any of its activities.

In any case you can obtain general information about privacy and Personal Data Protection at the following link: www.aepd.es