Linkedin Xing

Privacy Policy

When we need to obtain information from you, we will always ask you to voluntarily provide it expressly. The data collected through the data collection forms on the website or through other means will be incorporated into the data processing systems of CAQ Consulting.

CAQ Consulting will treat the data confidentially and solely for the purpose of providing the requested services, in full compliance with the legal and security guarantees established by Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and Law 34/2002, of July 11, on Information Society Services and Electronic Commerce.

Who is responsible for processing your data?

The data controller is: Carolina Arango Quijano
Tax ID (CIF): 72184356Y
Email: carolina.arango@caq-consulting.com

For what purpose do we process your personal data?

At CAQ Consulting, we process the information provided by interested parties in a fair, lawful, and transparent manner in accordance with Regulation (EU) 2016/679 of April 27 and Organic Law 3/2018 of December 5 on Data Protection and Guarantee of Digital Rights.

If you are a CLIENT/PATIENT or USER:

We process the following categories of personal data:

  • Identifying data (name, surname, ID…)

  • Contact data (email, WhatsApp…)

  • Banking data (account number, bank card…)

  • Financial data (payroll, solvency documents…)

  • Other data (provided in open fields or communications)

Purposes:

  • Manage requested services, products, and/or information.

  • Send relevant communications (if prior consent has been given).

  • Comply with legal obligations.

If you are an EMPLOYEE or JOB APPLICANT:

We process the following categories of personal data:

  • Identifying data (name, surname, ID…)

  • CV data (education, work experience, hobbies…)

  • Contact data (email, WhatsApp…)

  • Banking data (account number, SEPA mandate…)

  • Image

  • Other data (provided in open fields or communications)

Purposes:

  • Manage rights and obligations related to the contractual relationship.

  • Candidate selection.

  • Use, reproduction, or publication of image, name, and voice (with prior consent).

  • Fulfill legal obligations.

If you are a SUPPLIER:

We process the following categories of personal data:

  • Identifying data (name, surname, ID…)

  • Contact data (email, WhatsApp…)

  • Banking data (account number, invoicing…)

  • Other data (provided in open fields or communications)

Purposes:

  • Administrative, accounting, and tax management.

  • Monitor and control the commercial relationship.

  • Fulfill legal obligations.

Am I obliged to provide my personal data?

CAQ Consulting will only request data that is strictly necessary for the intended purpose. If such data is not provided, we will not be able to deliver the requested service.

How long will we retain your data?

The personal data provided, and those obtained during the relationship between the data subject and CAQ Consulting, will be retained for a maximum of 5 years from the last expression of interest or as long as legally required. In such cases, data will be properly blocked and deleted when no longer necessary.

What is the legal basis for processing your data?

In compliance with Article 6.1 of the GDPR (EU Regulation 2016/679), the legal bases for data processing are:

  • The data subject has given consent for one or more specific purposes.

  • Processing is necessary for compliance with a legal obligation.

  • Processing is necessary for the legitimate interests pursued by the data controller or a third party, provided such interests are not overridden by the rights and freedoms of the data subject.

Who will receive your data?

Your data may be disclosed to third parties when required by law.

In addition, CAQ Consulting works with service providers (e.g., administration, accounting, taxation, marketing, labor) who may require access to data. These relationships are governed by Article 28 of the GDPR. Data accessed by these third parties will only be used for the necessary business purposes and will not be stored for any other use.

What are your rights when you provide us your data?

Any data subject has the right to:

  • Confirm whether CAQ Consulting is processing their personal data.

  • Access their personal data.

  • Request the rectification of inaccurate or incomplete data.

  • Request deletion of data when it is no longer necessary for the original purpose.

  • Request the restriction of processing under certain circumstances.

  • Object to data processing; CAQ Consulting will stop processing unless there are compelling legitimate grounds.

  • Withdraw previously granted consent at any time.

  • Request data portability.

  • Contact the DPO at CAQ Consulting.

  • File a complaint with the relevant supervisory authority (www.aepd.es) if their rights have been violated.

To exercise these rights, send a written request to CAQ Consulting, either to the address of the controller or via email (as provided above), including a copy of your ID.

Security Measures

CAQ Consulting applies the appropriate security levels required by data protection laws. These measures are also mandatory for third parties who access our data under contract (in compliance with Article 28 GDPR).

However, CAQ Consulting is not responsible for damages caused by third parties who unlawfully alter computer systems, files, or user devices.

Cookies

Cookies may be used during website services. These are files stored on the user’s device. Users can configure their browser to prevent or notify the use of cookies. Please consult our cookie policy for more information.

External Links

If you leave our website through links to non-affiliated sites, CAQ Consulting is not responsible for the privacy policies of those websites or the cookies they may store.

Email Policy

Our email policy is to send only those communications you have requested.

If you prefer not to receive further messages, you may opt out using the method provided in each email, in accordance with Title III, Article 22 of Law 34/2002 on Information Society Services and Electronic Commerce.

More Information

2025 © CAQ Consulting