Autana Business Partners S.L.
Last updated: January 9, 2025

At Autana Business Partners S.L., we are committed to complying with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), ensuring that personal data is processed lawfully, fairly, transparently, and securely.

1. Purpose of Data Processing

We process personal data for the following purposes:

• Management of employment and contractual relationships.

• Provision of services and customer support.

• Administrative, accounting, and tax management.

• Compliance with legal obligations.

• Management of relationships with suppliers and collaborators.

2. Guiding Principles

We follow the GDPR principles:

• Lawfulness, fairness, and transparency

• Purpose limitation

• Data minimization

• Accuracy

• Storage limitation

• Integrity and confidentiality

• Accountability

3. Data Subject Rights

Individuals may exercise their rights to:

• Access, rectify, erase, restrict or object to processing.

• Data portability.

• Withdraw consent at any time.

To exercise your rights, contact us at:
📧 marketing@autanacrm.com

4. Security Measures

We implement appropriate technical and organizational measures to protect personal data, including:

• Access control.

• Use of personal, non-transferable credentials.

• Protection against unauthorized access.

• Backup protocols.

• Monitoring of information systems usage.

5. Confidentiality and Best Practices

• Access to data is limited to authorized personnel.

• Personal data must not be used for purposes outside company activity.

• Sharing of user credentials is prohibited.

• Only authorized devices and software may be used.

• Confidentiality obligations remain even after the employment relationship ends.

6. Security Breaches

Any incident or breach must be reported immediately.
Autana has protocols in place to:

• Assess risks.

• Notify the relevant authority.

• Inform affected individuals, if required.