DATA PROTECTION AND PRIVACY POLICY AT LÁZZARO

Data of the person responsible for the file

• Identity: Lázzaro Social Impact SL

• Address/ C.P: Calle de la Flor nº12, 28100, Alcobendas,Madrid, Spain

• Telephone: +34 608 46 56 43

• Email: ivan@lazzaro.io

1.- Incorporation of personal data in the files of Lazarus

In compliance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016on the protection of individuals with regard to the processing of personal data and on the free movement of such data and its implementing regulations, and specifically the provisions of its Article 13You are informed that the personal data provided by you will be processed for the purpose of providing you with the requested information about our services or, where appropriate, to manage the contracting of our services and the implementation of your fundraising platforms and crowdfunding projects through our Portal.

2.- Purpose of the collection of personal data

The collection of personal data through the Portal or any platform is intended to enable the correct provision of services and to facilitate the fulfilment and execution of the contractual relationship, to sufficiently accredit the identity of the user to be able to participate in the Projects, to carry out, where appropriate, the management of collections and payments for the services, even when the relationship has ended, to carry out internal studies on the effectiveness of the website, marketing, advertising and sales and to maintain a permanent means of communication with Users and Promoters.

The user who is interested in our services, by accepting this Legal Notice, expressly consents to Lazzaro Social Impact S.L. to send communications relating to the development and purpose of the Portal, information about the main projects that are in the funding round at any time, newsletters, offers, advertising mailings, as well as any other promotional information related to our activity, which we believe may be of interest. At any time the user may inform us of their wish not to receive any further communications. 

3.- Transfer of personal data by Lázzaro

Lazzaro will not transfer or transmit personal data collected through the Portal to any third party, except when expressly authorised to do so, such as to service providers that Lázzaro has commissioned to process the data (e.g. hosting service providers). In this case, the service providers will be bound by a service provision contract that expressly includes equivalent privacy and data protection obligations to those required for Lázzaro's own employees and will be expressly prohibited from transferring said data to any other person or third party. Once the contractual relationship with the service provider has ended, the user data to which they have had access during the provision of services will be returned or destroyed.

In particular, with reference to the transmission to the Promoters of personal data relating to the Investors, such transmission shall be carried out on the basis of the provisions of the contracts binding the Investor to the Promoter, in the development and formalisation of which Lázzaro only intervenes for the purposes of including in the corresponding text the data provided by the User for this purpose. 

The communication of the client's personal data is a necessary requirement for the provision of our services, so that if certain information is not provided, Lázzaro will not be able to provide the service with full guarantees and efficiency, and it is therefore a minimal but necessary transfer for the correct development of the contracted function. Therefore, in the event that the transfer of data is denied, the contractual relationship will not be successful.

In the same way, it is considered that with this transfer the client is aware of and expressly accepts this transfer, the conditions of which are clearly and exhaustively set out in this document, accessible to any user, whether or not he/she is a client.

4.- Automated processing of personal data

For the purposes of the provisions of current legislation on data protection, Lázzaro informs the CLIENT of the existence of automated files containing personal data, created by it and under its responsibility, the purpose of which is to maintain and manage the contractual relationship with the CLIENT, as well as to provide information on the service and other associated services, as well as activities related to the same.  

Likewise, you are informed of the possibility of exercising, in accordance with the provisions of said regulations, the rights of access, rectification, cancellation and opposition, by writing to Lázzaro , e-mail: info@lazzaro.io , enclosing a photocopy of your National Identity Document or equivalent accrediting documentation. 

The data to be processed will be those derived from the contractual relationship with the CLIENT, including but not limited to: identification data, personal characteristics, social circumstances, employment, commercial information, economic, financial and insurance data and transactions, traffic and invoicing data, as well as data relating to the acquisition of products and services by the CLIENT. 

For the purposes of the previous paragraph, the aforementioned traffic data will be processed during the period in which the invoice may be contested or payment may be demanded in accordance with the legislation in force.

Lazzaro undertakes to comply with its obligation of secrecy with regard to personal data and its duty to keep them safe, even after the contractual relationship has ended, adopting the security measures imposed by current legislation to prevent their alteration, loss, unauthorised processing or access.

5.- Third party data

During the process of publication of Projects, creation of platforms provided for in the General Conditions applicable to the Lázzaro Crowdfunding Services, it is possible that the Promoters may provide Lázzarp with data of third parties such as their reference partners, company administrators and key employees. In such a case, it is the Promoter's responsibility to obtain the corresponding authorisation from each of the parties concerned, without prejudice to any communications that may be made by Lázzaro to confirm such authorisation. The Promoter shall indemnify Lázzaro against all damages, including fines, that it may suffer as a result of the Promoter's failure to obtain such authorisation from the affected parties.

6. 6. Security measures

Lázzaro will implement the security measures that are applicable at all times, and in particular those set out in article 9 of the LOPD and in its corresponding implementing regulations.

Any personal information will be encrypted before being transmitted. In this regard, Lázzaro works with a secure server using the SSL (Secure Socket Layer) protocol. The secure server establishes a connection so that the information is transmitted encrypted using 128-bit algorithms, which ensure that it is only intelligible to the Client's computer and the Portal's computer. In this way, the use of the SSL protocol guarantees: 1. That the Client is communicating his data to the Lazarus server centre and not to any other that might try to impersonate it. 2. That between the Client and the Lazarus centre the data is transmitted encrypted, preventing it from being read or manipulated by third parties. 

7.- Retention of data

The personal data of users who have given their express consent to receive commercial communications will be kept for as long as they do not object to such processing.

The personal data of users who register on our Portal for the creation and launch of financing projects will be kept for as long as the contractual relationship is maintained and, once it has ended, will be blocked in our systems as long as liabilities may arise from the provision of services or there is a legal obligation to do so.

8.- Child protection policy

Whoever provides data through the forms or e-mails of this Portal and accepts its processing formally declares to be over 14 years of age. Access to and use of the portal is forbidden to minors under 14 years of age. Lázzaro reminds adults who are responsible for minors that it will be their sole responsibility if a minor enters their data to register or request information about our services. It also informs them that there are computer programmes to limit browsing by filtering or blocking certain contents.

9.-Social Networks

By following our profile on social networks you expressly consent to the processing of your personal data in accordance with their privacy policy. You also expressly consent to Lázzaro's access to the processing of your data contained in the friends list and to news published about the services offered by Lazzaro appearing on your wall. In accordance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT, we inform you that the personal data of Lazzaro's followers on social networks will be included in a file owned by Lázzaro in order to keep you informed through social networks about its crowdfunding, platform creation and technology consulting services.

Your request to connect necessarily implies your consent to the above-mentioned processing.

The publication of comments and content on social networks will become public information, so users should be especially cautious when deciding to share their personal information. Lázzaro is not responsible for the information that users post on the site. However, persons whose personal data is published or included in comments may request Lázzaro to cancel it. 

10.- Rights of access, rectification, cancellation and opposition

At any time, you may exercise your rights of access, rectification, deletion, opposition, limitation of the processing of your data, or directly exercise your right to data portability. You may do so by writing to info@lazzaro.io, accompanied by a copy of an official document that identifies you.

Alternatively, these rights may be exercised by sending a similar letter by post to Lázzaro's registered office at Calle de la Flor 3C 28100, Madrid, with the reference "Derechos RGPD".

We also inform you of your right to lodge a complaint with the Spanish Data Protection Agency if you consider that your rights are not being respected in the processing of your data.