1. – Data Controller
Controller: ENVITA DIGITAL SOLUTIONS S.L
Tax ID: B-27867621
Email: legal@envita.es
Address: C/ Pintor Colmeiro 1, Entlo. 36211 – Vigo (Pontevedra)
Representative:
Name: Noelia López Vázquez
Email: legal@envita.es
Data Protection Officer: We have appointed a Data Protection Officer, who can be contacted at legal@envita.es.
Acceptance of ENVITA’s privacy policy (hereinafter “Privacy Policy”) is a necessary condition for using our website and online platform (hereinafter “Service”).
This Privacy Policy governs the collection, processing, and use of your personal and non-personal information as a user of the Service, effective from the date indicated in the header.
ENVITA does not sell your personal information to third parties and will always request your consent before using your data for any purpose other than those described in this Privacy Policy.
To process your personal data, ENVITA complies with applicable local and European legislation, as well as its implementing regulations.
Therefore, it adopts the necessary technical and organizational measures to prevent loss, misuse, alteration, unauthorized access, and theft of the personal data provided, always in accordance with the state of technology, the nature of the data, and the risks to which they are exposed.
By providing us with data, you declare and assume that all the information you provide to access the Service or for any other purpose described below, before and during its use, is true, complete, and accurate.
2. – Information Collected
ENVITA provides its service through its clients (companies and organizations) who offer “Life Stories” to residents, users, and members of their communities.
Therefore, ENVITA adopts different roles concerning personal data:
1. Regarding the data of the protagonists of the “Life Stories”:
ENVITA acts as the “data processor” for the data of these protagonists since access to the service is always through our clients, who will be the “data controllers.” Thus, ENVITA will only process the data of the protagonists to provide the service to the client and print the corresponding book when applicable.
2. Regarding the data of our clients, users, candidates, and other data collected directly through our website (inquiries, newsletters, downloadable content, etc.), ENVITA acts as the “data controller.”
The Service can be used as a registered user in different modes. The distinction between “registered” users for personal use, professional use, guest users, demo users, or testing users is made when a user account is created.
The personal and non-personal information collected by the Service will vary accordingly.
The personal and non-personal information collected by the Service will come through three means: 1) Automatically collected data, 2) Voluntarily provided data, and 3) Data provided by third parties.
2.1. Automatically Collected Data
This information will include:
Data collected through cookies or similar mechanisms stored on your device, always with your consent. Please refer to our Cookie Policy for more information.
The IP address used for the connection, the type of device used and its characteristics, the operating system version, the type of browser, the language, the date, the country, the time of the request, the referrer URL, or the mobile network used (among other data).
Service usage data and any errors detected during its use.
Data about your physical location through different technologies: GPS signals sent by a mobile device or information about nearby Wi-Fi access points or cell towers. In any case, these data are collected according to your device’s privacy settings.
Additionally, ENVITA uses the following services:
Google Analytics, an analytical service provided by Google, Inc., headquartered in the United States at 1600 Amphitheatre Parkway, Mountain View, California 94043. For these services, cookies are used to collect information, including the user’s IP address, which will be transmitted, processed, and stored by Google under the terms set on www.google.com, including the possible transmission of such information to third parties for legal reasons or when third parties process the information on behalf of Google. You can disable Google Analytics cookies from here.
Mailjet, an online marketing platform based in Europe, part of the Sinch company. For these services, cookies are used to collect information, including the user’s IP address, which will be transmitted, processed, and stored by Mailjet under the terms set on their privacy policy page at https://www.mailjet.com/es/legal/politica-privacidad/, including the possible transmission of such information to third parties for legal reasons or when third parties process the information on behalf of Mailjet. You can disable Mailjet cookies from here.
2.2. Information Provided Voluntarily
This information will include:
Data required by ENVITA when creating a user profile, where you must provide at least the information marked with an asterisk: name, surname, email, and password. If you participate in programs where ENVITA collaborates with other entities, this management may be done through that entity.
Regarding your password, you are responsible for its protection. You will assume any damage or loss resulting from its improper use or its disclosure to third parties.
Personal or non-personal information contained in messages you send through the Service’s contact channels, such as your name, alias, or email.
– If you use a third party’s email, you acknowledge having their consent to do so.
– If you use the Envita platform, you can create your “Life Story” or another person’s, provided you have their consent. You can include anecdotes, memories, and everything that forms part of the life story. You can also add photos, images, and links to external files. Some of this data may be considered “special categories of data” or sensitive data (health, ideology, religion, etc.). Including such data is entirely voluntary, and you are not obligated to do so. Only people you authorize (e.g., a family member or someone from your care center assisting with your life story, with your consent) will have access.
– If you include information about third parties: family, friends, etc., you are responsible for it. Envita only provides this tool to the center that granted you access but does not monitor or share the information.
You can also use your voice to dictate stories and anecdotes, which will be transcribed into text. We use a tool that converts voice to text. The audio files are stored on a server in Europe (specifically on Google Cloud Storage) and can be deleted whenever you wish. You have full control over these files. If you want to delete them, you can do so from the app. If you delete your account, the audio files will also be deleted from the server automatically. We emphasize that Envita always acts as a “data processor” for managing these data.
– If you are a collaborator or supplier, we will need minimal information to manage our contractual relationship, limited to what is necessary to execute that relationship.
– If you send us a CV, we may process the data to consider it in our recruitment processes. However, if we do not have an open process, we will delete it.
2.3. Information Provided by Third Parties
This information will include:
Information provided by payment systems or credit card processors, such as the time of purchase or its amount.
For accounts contracted by entities, they may provide essential data about the professionals using the platform, such as an associated email account and/or workplace, so that Envita personnel can create access.
3. – Purposes
Please note that completing the forms is voluntary. However, failure to complete the required fields will prevent the use of the Service.
The personal data you provide will be processed by ENVITA, as the data controller, to meet your requests, provide the requested service as a client, and keep you informed about the company’s activities and services.
If you send us a CV and apply for a vacancy, we will only use your data to manage your application within the selection process.
ENVITA will use the collected data to:
– Manage, provide, and update the Service.
– Address your inquiries.
– Process your payments if applicable.
– Send you, via email, if you have authorized it or as provided by applicable regulations, our newsletter and/or offers from our business partners. You can unsubscribe from them directly from the received email, from your user account, or by contacting us at legal@envita.es. However, you will not be able to unsubscribe from certain correspondence from us, such as messages related to the security of your data or the terms and conditions of the Service.
– Manage your application in selection processes.
– Plan and develop the commercial activities of the Service.
– Maintain the security of the Service, investigate illegal activities, enforce our terms and conditions, and assist law enforcement authorities in the context of their investigations. Additionally, ENVITA may use users’ personal and non-personal information in the form of aggregated and anonymous data to display it to third parties. It may also share statistics and demographic information about users and their use of the Service with third parties. None of this will allow those third parties to personally identify you.
– Analyze and prepare reports, anonymously, that allow us to improve the operation and quality of the platform.
4.- Legal Bases
We inform you that the processing of your data is primarily based on your consent. That is, this Service is voluntary. Also, if you send us your CV or a suggestion or contact us. You can revoke your consent at any time. Contact your center for this purpose.
However, both to contract the Service and to use it and obtain all its advantages, you will need to include all the information requested by the platform; if you do not include it, the Service cannot be fully provided. The Life Story will be as complete as the content you add. That is, as it is a contractual relationship, the processing of data (especially some essential minimum data) is necessary for us to fulfill our part of the provision. The information you include in your life story will always be based solely and exclusively on your consent.
In the case of collaborators and suppliers, we will also base the processing on the execution of the contract.
Regarding payment data and commercial transactions, we are obliged to comply with tax and legal requirements.
We may carry out analytics to improve the website and Service based on our legitimate interest. We may also send commercial information to our clients and users based on our legitimate interest.
For sending commercial information without a prior contractual relationship, we will always request your consent.
5.- Data Retention
We will retain your personal data for as long as necessary to provide the service and comply with our legal obligations. If you cancel the service, we will delete the data after 15 days unless otherwise indicated.
In our agreements with some care centers, the data will be retained for up to six months after the user unsubscribes.
6.- Data Shared with Third Parties
There are third parties that manage part of the Service. ENVITA requires them to comply with this Privacy Policy as applicable, in addition to having their own policy. However, ENVITA will not be responsible for the compliance of that policy.
Under no circumstances will ENVITA share your data with institutions with which it reaches agreements. These agreements will be to facilitate access for their members, associates, or users of our platform, but you will have to register and enjoy the Service yourself. A different matter is if you request help using the platform or invite others to write in your life story. ENVITA will never share that information with anyone.
Under certain circumstances, ENVITA may share, use, or preserve some of the collected personal information with third parties, but it will be the minimum necessary:
To provide the Service: Service providers that perform functions on our behalf, such as credit card processing, web hosting, business analytics, customer service, or marketing. These providers may collect and access the information necessary to perform their functions but are not allowed to share or use the information for any other purpose.
We try to ensure that all data processing takes place in the European Union (e.g., Google Cloud Storage, whose servers are in Belgium and Spain). The servers are located in the European Union.
To cooperate with competent authorities: If we believe it is reasonably necessary to meet any law, legal process, or legitimate interest anywhere in the world. In any case, we will only provide the strictly required information.
If we believe this action is appropriate to enforce ENVITA’s terms and conditions.
If necessary to detect or prevent fraud or security issues related to ENVITA, its providers, and users.
7.- Rights
You will always be able to revoke your consent when this is the legal basis on which we base the processing.
You can also exercise at any time the rights of access, rectification, cancellation, opposition, limitation of processing, and portability of your personal data, as well as contact our Data Protection Officer by email at legal@envita.es or by postal address: C/ Pintor Colmeiro 1, Entlo. 36211 – Vigo (Pontevedra).
In both cases, you must identify yourself with your full name, along with a copy of your ID or national ID card.
Here you can find the different forms to exercise these rights.
If you are a user of the “Life Stories” or a family member and wish to request the deletion of data, you must contact the center through which you accessed this service. In any case, if you contact us, we would inform the center as we are not the owners of that data.
You also have the right to file a complaint with the Spanish Agency for the Protection of Data if you believe we have done something wrong, but we have taken all measures to protect your data and that of the people you care about and have included in your story. If you have any doubts, please contact us first.
ENVITA is committed to respecting the confidentiality of the collected and processed data, using it according to its intended purpose, fulfilling its custody obligation, and adopting all required measures to avoid alteration, loss, processing, or unauthorized access to data, in accordance with applicable regulations.
8.- Delete Account
You can delete your account from your control panel by requesting its deletion at legal@envita.es.
ENVITA has adopted the necessary compliance and security measures to ensure that access to information is made with the utmost respect for the privacy of individuals, who may revoke their consent at any time without ENVITA retaining personal data after thirty days of cancellation.
9.- Security Measures
ENVITA adopts all the necessary technical and organizational measures to protect the security and integrity of the personal and non-personal information collected, both against unauthorized access and accidental alteration, loss, or destruction.
The sending and submission of data you make through the Service is protected by electronic security techniques on the network, such as the SSL protocol. Additionally, the information provided and stored in ENVITA’s databases is also protected by security systems that prevent access to them by unauthorized third parties.
ENVITA makes its best efforts to have the most up-to-date systems for the effectiveness of these security mechanisms. Furthermore, ENVITA stores personal and non-personal information for as long as allowed and required by regulations. Information that is not needed is periodically destroyed.
Despite the above, ENVITA cannot guarantee the absolute security of the information collected, so you must collaborate and always use common sense regarding the information shared, especially personal information.
10.- Changes to the Privacy Policy
We may update this Privacy Policy in the future.
We will inform you of any changes by sending a notice to the email address provided and/or placing a notice in a prominent place on our website.
11.- Contact
If you have questions about this Privacy Policy or wish to contact our Data Protection Officer, reach out to us at:
Email: legal@envita.es
Address: C/ Pintor Colmeiro 1, Entlo. 36211 – Vigo (Pontevedra)
Updated in January 2024
