At the Powens Group, we consider transparency in the processing of your personal data to be a fundamental value and the foundation of the trust you place in us.
By using our services, you entrust us with important information, and we assume, with the utmost rigor, our responsibility to protect it and ensure its confidentiality, all in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and any other applicable local regulations in force regarding personal data protection, depending on the relevant jurisdiction.
The purpose of this Privacy Policy is to clearly and accessibly explain what we do with your information. In this document, you will find direct answers about:
What data we collect: the exact information we process in order to provide our services or respond to your requests. Why we use it: the specific purposes and legal bases that justify the use of your data. How we protect it: our ongoing commitment to implementing the necessary measures to improve security and prevent any unauthorized access to your personal information. Your rights: the tools available to you to access, rectify, or delete your data, maintaining full control over it at all times.
The Powens Group is composed of several entities whose details you can consult via the relevant link. Depending on the service you use or your interaction with us, one entity or another within the Group will be responsible for protecting your data.
Do not worry: in every form or section where we request your data, we will always clearly and expressly indicate which specific Powens Group company will act as the data controller of your information.
We collect different types of data, always limited to what we genuinely need:
We always obtain your data directly from you for one of the following reasons:
We may also obtain your data indirectly through:
We process your information based on different legal grounds for the following purposes:
Legal basis: legitimate interest in ensuring the security, integrity, and continuous improvement of the service, as well as compliance with legal obligations and website terms of use.
Legal basis: pre-contractual measures, contractual performance, and legitimate interest in properly assisting users.
Legal basis: consent where required by law and legitimate interest in customer loyalty and business development. In all cases, you may object at any time to receiving commercial communications.
Legal basis: contractual performance, compliance with legal accounting and tax obligations, and legitimate interest in efficient business management.
Legal basis: legitimate interest in promoting services and pre-contractual measures where applicable.
Legal basis: pre-contractual measures, legitimate interest in talent acquisition, and consent when required for CV retention.
Legal basis: compliance with legal obligations and legitimate interest.
Legal basis: legal obligations and legitimate interest in ensuring operational continuity and security.
Legal basis: fulfillment of a legal obligation.
We will retain your personal data only for as long as strictly necessary to fulfill the purposes for which it was collected, including compliance with any legal, tax, accounting, or regulatory obligations.
As a general rule, your data will be stored until the purpose of its processing has been fulfilled, unless specific laws (such as anti-money laundering regulations or tax legislation) require us to retain it for a different period.
In any case, commercial data used for advertising campaigns or marketing activities will be retained for a maximum of three (3) years from our last contact with you.
Candidate data will be kept for the duration of the recruitment process and for two (2) years from our last contact with you.
In addition, connection data such as logs, IP addresses, etc., will be stored for one (1) year, and cookies are generally retained for a maximum of thirteen (13) months.
Once the applicable retention periods have expired, the deletion of your personal data will be irreversible and we will no longer be able to provide it to you. At most, we may retain anonymized data for statistical purposes.
Please also note that, in the event of litigation, we are required to retain all personal data relating to you for the duration of the case, even after the expiration of the retention periods described above.
We require most of the information we collect from you in order to provide the requested and, where applicable, contracted services, as well as to comply with our legal obligations. This means that if you do not provide the information we request, it is highly likely that we will not be able to deliver our services properly.
Your personal data may be shared with:
Your data is hosted on servers located within the European Union. If at any time we need to use a technology provider located outside the European Economic Area, we ensure that we enter into the “Standard Contractual Clauses” approved by the European Commission, so that your information remains equally protected.
We take security very seriously. We implement technical and organizational measures (such as secure storage, data encryption, and strict access controls) to prevent your information from being lost, altered, or accessed by unauthorized parties. Should a security incident ever occur, we would promptly notify you and the relevant authorities.
You may exercise the following rights at any time and free of charge:
All requests must be clear and, if we have any doubts regarding your identity, we may request a copy of your identification document. We will respond as soon as possible and always within the time limits established by the applicable data protection regulations.
To exercise these rights, you may contact the relevant data controller within the Powens Group directly by post or via the email address provided in this privacy policy or in the relevant section of the website, where you can find the contact details of the entities that form part of the Powens Group.
If you have any questions or wish to exercise your rights before the relevant data controller within the Powens Group, you may contact the corresponding Data Protection Officer (DPO) directly.
In the case of Powens SAS, you may contact: dpo@powens.com.
For Unnax Regulatory Services EDE, S.L.U. and Unnax Payment Systems S.L.U., you may contact: dpo@unnax.com.
If you believe that your rights have been infringed, you have the right to lodge a complaint with the competent supervisory authority, depending on the jurisdiction in which the relevant Powens Group entity is located:
Our website uses cookies when you browse it. For more information, please refer to our Cookie Policy, which you can find on our website.