1. Privacy Policy and Data Protection

Distrijazz S.L. (hereinafter referred to as "the Entity") is committed to due diligence and compliance with data protection regulations as established by Regulation 2016/679 on the protection of individuals regarding the processing of personal data and the free movement of such data (General Data Protection Regulation - GDPR) and Organic Law 3/2018 on Data Protection and the Guarantee of Digital Rights (LOPDGDD).

Below is detailed information about the privacy policy and personal data protection in compliance with the aforementioned regulations.

Data Controller Information and Contact Details for the Data Protection Officer (DPO):

- Identity: Distrijazz S.L.
- Address / Postal Code: c/Corsega 202 bajos izq / 08036
- Phone: 934407105
- Email: info@jazzmessemgers.com
- DPO Contact: Carlos Agustín Calembert
- Data Protection Channel: www.corporate-ethicline.com/distrijazz

2. Purposes of Data Processing

The Entity will process the information provided by interested parties for the following purposes:
- To manage their attention, visits, and meetings at our facilities, as well as the management and delivery of contracted services/products.
- To handle any requests, suggestions, or inquiries regarding our professional services from interested parties.
- Informational and commercial communications: processing their data to inform them about activities, articles of interest, and general information related to our activity and the contracted services/products.
- To manage data provided by job candidates through their Curriculum Vitae (CV) for the purpose of selection and recruitment processes.
- For the successful completion and development of the aforementioned purposes, the data subject consents to the processing of their data for these purposes, all in strict compliance with data protection regulations and the policy we are detailing. At any time, they may exercise their rights (see specific section).

3. Data Retention Criteria

-Management of contracted services/products with the Entity: Personal data provided in contracts, offers, and/or service proposals, as well as that of other individuals whose involvement is necessary, will be retained for the duration of the contracted services. Upon completion of the contracted service(s), personal data will be retained in cases where responsibilities may arise with the Entity and/or in compliance with other regulatory frameworks applicable to the Entity or legal standards requiring such retention. Personal data will be maintained in a manner that allows for the identification and exercise of the rights of the affected parties, under the necessary technical, legal, and organizational measures to ensure confidentiality and integrity.

-Curriculum Vitae Management: The Entity, as a standard practice, retains CVs for a maximum period of one year; after this period, they will be automatically destroyed, in compliance with the data quality principle.

-Other: Any other data and information provided by the user through any means will be retained for as long as necessary to fulfill the purpose for which it was collected.

4. Legitimacy

The legal basis that enables the Entity to process personal data of users, clients, and potential clients is as follows:
- The consent of the interested parties for processing and managing any requests for information or inquiries about our services and products.
- The consent provided by job candidates for selection and recruitment purposes.
- The framework of service/product provision and/or contracting with the Entity.
- The legitimate interest in sending informational, commercial communications and/or promotional offers related to the Entity’s activity and contracted services/products via email or any other means.

5. Recipients

No personal data is transferred to third parties, except as legally required.

6. Source

Personal data is obtained directly from interested parties and our collaborators. The categories of personal data provided by our collaborators are as follows:
- Identification data.
- Postal or electronic addresses.
- Data provided and/or consented to by the interested parties related to and necessary for the management and provision of the requested service/product.

7. Rights

- Right to Access, Rectification, and Deletion: Interested parties have the right to obtain confirmation as to whether the Entity is processing personal data concerning them. They have the right to access their personal data, as well as to request rectification of inaccurate data or deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

-Right to Limitation and Opposition: In certain circumstances, interested parties may request the limitation of their data processing, in which case we will only retain it for the exercise or defense of claims. In certain circumstances, and for reasons related to their particular situation, interested parties may object to the processing of their data. The Entity will cease to process the data in this case, unless there are compelling legitimate grounds or for the exercise or defense of potential claims. These rights may be exercised through our Data Protection Channel (see specific section).

8. Data Protection Channel

The Entity has implemented a Communication and Reporting Channel that incorporates relevant aspects and necessities in data protection, considering the highest commitment, rigor, and professionalism in security, experience, independence, and knowledge in handling the received communications, incorporating the requirements set forth in Article 24 of the LOPDGDD for such channels. The Data Protection Channel has been established through a web platform developed and managed by an independent external expert, to ensure our aforementioned commitments. Through the Data Protection Channel, you can communicate and process the exercise of your rights (see previous section) and report any indications or knowledge of potential security breaches and/or possible non-compliance or irregularities regarding data protection regulations or this Entity's policy. Access details for the Data Protection Channel are provided at the beginning of this policy.

9. Assistance and Support

Interested parties may communicate any questions regarding the processing of their personal data or the interpretation of our policy by contacting the Data Protection Officer (DPO) at the address indicated at the beginning of this policy.