Privacy Policy

At Alhambra, we value your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the Spanish Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD). This policy explains how we collect, use, and safeguard your personal information, as well as the rights you can exercise in relation to it.

The data controller responsible for your personal data is Alhambra, with registered address at Calle Albasanz 16, 4th Floor, 28037, Madrid.

– You may contact our Data Protection Officer (DPO) via email at cumplimiento@alhambraIT.com or by calling +34 91 787 23 00.

– The DPO is the point of contact for any matters relating to the processing of your personal data and the exercise of your rights, as well as for managing data processing agreements with third parties.

At Alhambra, we process your personal data for various purposes, each supported by a specific legal basis under Article 6 of the GDPR:

– Purpose 1: Sending personalized commercial communications regarding Alhambra’s products and services.
We process your data to send you information tailored to your profile, interests, and behavior, using channels such as email, phone, SMS, social media, web notifications, among others.
Legal basis: Your explicit consent (Art. 6.1.a GDPR).

– Purpose 2: Sending commercial communications about products or services of third parties with whom Alhambra collaborates.
We may send you promotional content or offers from partner entities, provided that you have expressly agreed to this use.
Legal basis: Your explicit consent (Art. 6.1.a GDPR).

– Purpose 3: Management of the contractual relationship and service delivery.
We use your data to process, maintain, and execute the services or products contracted with you, including technical, operational, or support-related communications.
Legal basis: Performance of a contract to which you are a party (Art. 6.1.b GDPR).

– Purpose 4: Publication of testimonials on corporate media or social networks.
If you provide us with a testimonial, we may publish it along with your name, position, company, or image in commercial presentations, digital media, or corporate profiles.
Legal basis: Your explicit consent (Art. 6.1.a GDPR).

– Purpose 5: Management of the internal whistleblowing channel.
We process personal data of individuals involved in reports received through our internal channel in order to conduct the relevant investigations.
Legal basis: Compliance with a legal obligation, specifically Law 2/2023 of 20 February on the protection of persons who report regulatory infringements (Art. 6.1.c GDPR).

– Purpose 6: Receipt and management of job applications (CV submission)
If you submit your CV via our website or through any other means, we will process your data to assess your profile and consider you for current or future recruitment processes at Alhambra. Your CV may be retained for a reasonable period in case of future openings matching your profile.
Legal basis: Your consent upon voluntarily submitting your application (Art. 6.1.a GDPR). For ongoing recruitment processes, the legal basis is the implementation of pre-contractual measures at the data subject’s request (Art. 6.1.b GDPR).

In all cases where consent is the legal basis, please note that you may withdraw your consent at any time through the channels provided, without affecting the lawfulness of the processing based on consent before its withdrawal.

Depending on your relationship with Alhambra, we may process the following categories of personal data:

– Identification data (name, surname, ID number).
– Contact data (email address, phone number, postal address).
– Professional data (position, company).
– Browsing data (IP address, web usage behavior).
– Any other information you voluntarily provide via forms, emails, or other communication channels.

We will retain your data for as long as the relationship with you continues or until you revoke your consent. Once the relationship ends or consent is withdrawn, your data will be kept blocked for the periods required to comply with applicable legal or contractual obligations.

– Alhambra will not disclose your personal data to third parties without your consent, unless legally required.

– However, we do work with service providers (e.g., technology, marketing, or customer support providers) who may process data on our behalf as data processors.

– In such cases, we enter into the appropriate contracts and require suitable safeguards, including the implementation of appropriate technical and organizational security measures.

– Currently, no international data transfers are carried out.

– Should it become necessary to transfer data outside the European Economic Area, we will inform you in advance and apply the safeguards required by the applicable regulations, such as standard contractual clauses or adequacy decisions by the European Commission.

As a data subject, you have the following rights, which you may exercise at any time:

– Right of access: to know which data we process and for what purpose.
– Right to rectification: to correct inaccurate or incomplete data.
– Right to erasure: to request deletion of your data when no longer necessary.
– Right to object: to object to certain processing activities, such as marketing.
– Right to restriction of processing: to temporarily limit data processing under certain circumstances.
– Right to data portability: to receive your data in a structured format and transfer it to another controller.
– Right to withdraw consent at any time, without affecting the lawfulness of processing based on prior consent.

To exercise your rights, you may write to cumplimiento@alhambraIT.com or send a letter to Calle Albasanz 16, 4th Floor, 28037 Madrid. We may request additional information to verify your identity.

If you believe your data has not been processed in accordance with the applicable regulations, you may lodge a complaint with the Spanish Data Protection Authority (AEPD) at https://www.aepd.es

– Alhambra may carry out segmentation and profiling for commercial purposes to offer content or services tailored to your interests.

– No fully automated decisions producing legal or similarly significant effects on you are made.

– Alhambra applies appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration, or destruction.

– These measures include encrypted communications, access controls, incident management, regular security reviews, and continuous staff training.

– You can learn more and manage your preferences by accessing our Cookie Policy

– We reserve the right to amend this Privacy Policy to reflect changes in legislation, case law, or operational needs.

– We will inform you of any significant changes, and you may consult the updated version on our website.
This policy was last updated in May 2025.