Home Info Privacy Policy

Privacy Policy

13 July 2018

SCATI LABS, S.A. (hereinafter referred to as SCATI) considers as a basic objective to ensure the privacy and confidentiality of the personal data of Users collected through any system, which allows for the transmission of data and declares its commitment to comply with the regulations established on personal data protection; General Regulation for Data Protection ((UE) Regulation 2016/679 of the European Parliament and Council, of 27 April 2016, on the protection of individuals with regards to the processing of personal data and the free movement of such data and repealing Regulation 95/46/CE). In this regard, we hereby inform you of the following:

1. Data controller

SCATI, with registered office at Bari, 23, Parque Empresarial PLAZA, 50197 Zaragoza (Spain) and VAT number A-50768050, and registered in the Commercial Register of Zaragoza (Spain) Volume 2300, Sheet 76, Section 8, Page Z-23.154, is responsible for the processing of your personal data.

2. Data security

SCATI provides the technical and organisational measures needed for the security and integrity of personal data it holds, preventing their alteration, loss, processing or unauthorised access, considering the state of technology, the nature of the stored data and the risk they are exposed to, either from human action or from the physical or natural environment.

3. Purpose of the data processing

The purpose of the collection and processing of personal data at SCATI is:

  • Maintenance of the contractual relationship between the data holder and SCATI.
  • Execution, maintenance and management of any type of relationship between SCATI and the data holder: commercial, administrative, accounting, labour, marketing, human resources or training and any other provision of services requested by the data holder from SCATI.
  • Sending of technical, operational, publicity or promotional information on the products provided by SCATI, provided that consent has been given or there is a previous commercial/contractual relationship with the legal person or the professional relating to the sending of commercial communications on similar products or services that were originally the purpose of the contract with the customer (Article 21.2 of Law 34/2002, of 11 July, on Information Society and Electronic Commerce Services).

In no case, data shall be used for purposes other than those for which they have been collected.

4. Duty of information and consent of the data subject

Requested data shall be added to the processing system SCATI is responsible for, these data being processed for the purpose and legal basis set in the clause attached to each form and with the appropriate protection level according to the General Regulation on Data Protection.

In this regard, the sections in the web where personal data are collected and the purpose for that collection are as follows:

  • Professional contact: contact and processing of requests; sending commercial information if prior consent has been given.
  • Register: application for registration to facilitate access to restricted documentation and sending information if prior consent has been given.
  • Sending of CV: receiving applications to manage the selection processes.

In all cases, legitimacy of the processing is based on the consent of the data subject when sending their data, once the set conditions have been accepted and the corresponding boxes checked.

If consent has been requested for any kind of processing (such as the sending of commercial information), we hereby inform you that such consent can be withdrawn at any time.

5. Data retention

Information on the data subject shall be kept as long as such information is necessary for meeting the purpose for which it was collected. Therefore, once the purpose has been met, those data shall be cancelled. Such cancellation leads to the data being blocked and maintained solely at the disposal of the public administrations, judges and the courts, for the purpose of determining any liability arising from the processing and for the duration of such liability. After the termination of that period, the information will be destroyed.

For information purposes, the legal periods for storing information with regards to different subjects are as follows:




Labour documentation or  documentation related to the social security

4 years

Article 21 of Royal Legislative Decree 5/2000, of 4 August, approving the restated text of Law on Labour Infringements and Penalties

Accounting and tax documentation for mercantile purposes

6 years

Art. 30 Commercial Code

Accounting and tax documentation for tax purposes

4 years

Articles 66 to 70 General Taxation Law

CV data (applicants)

2 years

Not applicable

Data of contact persons

While not requesting deletion

Not applicable

6. Data transfer

As a general rule, SCATI shall not inform on their personal data to third parties, except when the Holder has given consent for that purpose or when the transfer is authorised by Law.

However, your personal data can be transferred to companies belonging to Grupo SCATI, considering that communication has the purpose of fulfilling the objectives directly related to the legitimate functions of the assigner and the assignee, and for being necessary for the provision of the service or for the supply of goods.

7. Rights of the data holder  

The regulation on data protection grants certain rights to the data subjects or holders of the data.

These rights of the data subjects are as follows:

  • Right of access: right to obtain information on whether their data are being processed, the purpose of the processing, the categories of data concerned, the recipients or categories of recipients, the period of time the data are to be stored and origin of those data.
  • Right of rectification: right to obtain the rectification of inaccurate or incomplete personal data.
  • Right of deletion: right to obtain the deletion of data in the following cases:
    • When data are no longer needed for the purpose for which they were collected.
    • When the holder of the data withdraws their consent.
    • When the data subject opposes the processing.
    • When the data are to be deleted to comply with a legal obligation.
    • When the data have been obtained by virtue of an information society service based on the provisions in Article 8 section 1 of the European Regulation on Data Protection.
  • Right of opposition: right to object to a specific processing based on the consent of the data subject.
  • Right of limitation: right to obtain the limitation of the data processing in the following cases:
    • When the accuracy of personal data is contested by the data subject, for a period enabling the company to verify their accuracy.
    • When the processing is unlawful, and the data subject opposes their suppression.
    • When data are no longer needed by the company for the purpose for which they were collected, but the data subject needs such data to make, exercise or defend complaints.
    • When the data subject has opposed the processing while verifying if the legitimate grounds of the company prevail over those of the data subject.
  • Right of portability: right to obtain the data in a structured format, of common use and mechanical reading, and to transfer such data to another person responsible for their processing when:
    • The processing is based on the consent.
    • The processing is carried out by automated means.
  • Right to submit a complaint to the competent control authority.

The data subjects may exercise the above-mentioned rights by sending a letter to the following address: Bari, 23, Parque Empresarial PLAZA, 50197 Zaragoza (Spain) or to the electronic email address: dpo@scati.com, attaching a photocopy of the National Identity Document or any other legally valid document that enables the accreditation of that person’s identity.


© 2021 Scati Labs, S.A. Parque Empresarial PLAZA - 50197 Zaragoza (Spain)
info@scati.com - Phone +34 976 466 575 Website Map - Legal information - Privacy policy - Cookies.