Privacy Policy of Plug and Play

Overview

PLUG AND PLAY is committed to respecting the privacy of users and the protection and security of their personal data.
Therefore, through this privacy policy, users (hereinafter, "Users") are informed of the way in which PLUG AND PLAY collects, processes and protects the personal data provided to it through the website: https://www.plugandplaytechcenter.com/ (hereinafter, "Website").

1. WHO PROCESSES YOUR PERSONAL DATA

Data controller: The party responsible for the processing of your personal data in your contractual and business relations with us is PLUG AND PLAY PLATFORM SPAIN, S.L., with Tax Identification Number B98446487 and address at Av. del Testar, nº8, 46980 Paterna, Valencia (Spain).

Joint controllers: In addition, for certain processing operations that we will inform you about in detail in this policy, some of the PLUG AND PLAY companies detailed here will jointly process your data with other companies, jointly deciding on the purposes ("what is the data used for") and the means used ("how the data is used") and are therefore jointly responsible for these processing operations. Detailed information on the data processed jointly can be found under heading 6 "What processing operations we carry out on your data", as well as the essential aspects of the processing agreements between the parties in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter "GDPR").

Both the data controller and the joint controller entities described above are hereinafter referred to as "PLUG AND PLAY", unless they are expressly and individually identified as "Data Controller" or "Joint Controllers” for the processing.

2. HOW WE PROCESS YOUR PERSONAL DATA

PLUG AND PLAY will process the personal data of Users for different purposes, always in accordance with the provisions of current legislation, respecting their rights and providing information with total transparency.

In consideration of the above, this data protection policy applies to European citizens, taking into consideration that this policy complies with the GDPR. This is without prejudice to any applicable local data protection regulations.

3. DATA PROTECTION OFFICER (DPD)

PLUG AND PLAY entities located in Europe have appointed a Data Protection Officer, who will be available to answer any questions regarding the processing of your personal data and the exercise of your rights.

You can send the Data Protection Officer your suggestions, queries, doubts or complaints via this email address dpo@pnptc.com.

4. REPRESENTATIVE OF DATA CONTROLLERS NOT ESTABLISHED IN THE EUROPEAN UNION

In accordance with article 27 of the GDPR, all entities that form part of the PLUG AND PLAY group of companies and are located outside the European Union have a representative in the European Union to whom data subjects may address in the event of queries regarding the processing of data carried out by said entity: 

• Identification of the representative: PLUG and PLAY PLATFORM SPAIN, S.L.
• Contact address: privacy@pnptc.com

5. WHAT PERSONAL DATA WE PROCESS

The following personal data will be used for the processing operations in this privacy policy. Not all of the data we inform you about is used for all data processing.

The type and details of the personal data used by the different processing operations described in section 6 are as follows:

• Identification data: name and surname
• Contact details: e-mail address and, where appropriate, telephone number.
• Data relating to your professional/employment activity: job position, sector of activity, name of the company.
• Educational data: qualifications, training and professional experience, languages, etc.
• Data on personal circumstances: date of birth, address of residence.
• Socio-economic data: income or earnings, family unit or circle, level of wealth, fiscal data and tax data.
• User browsing data

6. HOW THE PROCESSING OF YOUR PERSONAL DATA IS LAWFUL

PLUG AND PLAY legitimizes the processing of User data in accordance with the following lawful bases:

• In order to take steps at the request of the data subjects prior to entering into a contract (performance of the pre-contractual relationship).
• Execution of the contractual relationship
• Consent

7. HOW WE PROCESS YOUR DATA

7.1.1 MANAGEMENT OF CONTACT FORMS

Identification of joint controllers

This processing will be carried out jointly by certain entities that make up PLUG AND PLAY, as detailed in the attached list.

• Purpose: Receive and manage contact requests received through the web forms: from representatives of start-ups, large corporations or venture capitalists or joint ventures.

• Lawful basis: Execution of the pre-contractual and, where appropriate, contractual relationship.

• Type of data processed: Identification data, contact data (if applicable, telephone number), and data relating to the profession.

7.1.2 MANAGEMENT OF EVENTS AND ACTIVITIES

Identification of joint controllers

This processing will be carried out jointly by certain entities that make up PLUG AND PLAY are detailed in the attached list.

• Purpose: Manage the registration of interested parties in events, activities, training, etc., organised by PLUG AND PLAY.

• Lawful basis: Execution of the contractual relationship.

• Type of personal data processed: Identification data, contact data and professional data.

7.1.3 MANAGING OF NEWSLETTERS

Identification of joint controllers

This processing will be carried out jointly by certain entities that make up PLUG AND PLAY are detailed in the attached list.

• Purpose: Manage the subscription of newsletters of those Users who have consented to such sending.

• Lawful basis: Consent of the data subject.

• Type of personal data processed: Identification data, contact data and sectors of activity of interest.

7.1.4 MANAGEMENT OF RECRUITMENT PROCESSES

Identification of the Data Controller: All entities of the PLUG AND PLAY group receiving job applications, which can be found listed in the attached document.

• Purpose: Manage the recruitment processes and job applications received from Users interested in the job offers published.

• Lawful basis: performance of the pre-contractual relationship

• Type of personal data processed: (email address, telephone number), academic and professional data, personal circumstances (data relating to birth, address), as well as any other data provided in the curriculum vitae or included in the LinkedIn profile that the User voluntarily provides.

7.1.5 MANAGING APPLICATIONS FOR CO-WORKING SPACES IN SILICON VALLEY

Identification of the Data Controller: PLUG AND PLAY LLC
Identification of the representative in the EU: In accordance with art. 27 GDPR, PLUG AND PLAY LLC has appointed a representative in the EU to whom data subjects may contact in the event of any queries regarding the processing of their data:

• Identification of the representative in the EU: PLUG AND PLAY PLATFORM SPAIN, S.L.
• Contact address: privacy@pnptc.com

• Purpose: Manage the User’s requests sent through the web form to carry out an office tour of our offices in Silicon Valley (USA) and to manage the provision of the co-working space rental service.

• Lawful basis: execution of the pre-contractual and, where appropriate, contractual relationship.

• Type of personal data processed: User identification data (name, surname), contact data (e-mail), and job position.

7.1.6 MANAGEMENT AND PUBLICATION OF JOB VACANCIES FROM THIRD PARTIES (STARTUPS).

We inform Users that the data controller will be the specific start-up for which the vacancy has been published on our website and which will therefore directly manage the application and selection process of Users.

PLUG AND PLAY acts as a data processor with respect to the data provided by candidates in accordance with the provisions of art. 28 RGPD.

8. RECIPIENTS

8.1 Communication of data to third parties

The User is informed that the personal data provided through our Website may be communicated to third parties (start-ups, corporates, joint ventures), as well as, where appropriate, to companies that make up PLUG AND PLAY provided that such communication is necessary for the proper provision of services.

8.2 Data processors

Depending on the purpose for which the personal data is processed, the personal data of the Users may be processed by suitable providers necessary for the provision of services included in our website such as, for example, the sending of newsletters. These service providers will only process the data in their capacity as data processors, for the purposes and with the instructions established by PLUG AND PLAY.

9. INTERNATIONAL DATA TRANSFERS

International data transfers involve a flow of personal data from the EU to recipients established in countries outside the European Economic Area (the countries of the European Union plus Liechtenstein, Iceland and Norway).

PLUG AND PLAY processes your data within the European Economic Area and we contract with service providers located within the European Economic Area or in countries that have been declared to have an adequate level of protection.

Without prejudice to the foregoing, if PLUG AND PLAY contracts any of its services with suppliers that carry out processing outside the European Economic Area or in countries that have not been declared with an adequate level of protection, we will ensure that we guarantee the security and legitimacy of the processing of your data.

Likewise, we inform Users that in exceptional cases international data transfers may be carried out by PLUG AND PLAY PLATFORM SPAIN and/or Plug and Play entities located in Europe to PLUG AND PLAY LLC (USA).

For these purposes, international data transfers are carried out in accordance with some of the conditions for carrying out such transfers, as established in the GDPR, for example, through the adoption of binding corporate rules that guarantee the protection of information in a manner similar to that established by European standards or by subscribing to the Standard Contractual Clauses approved by the European Commission. In this sense, Users may request a copy of the appropriate guarantees required by PLUG AND PLAY by sending their request to the e-mail address privacy@pnptc.com.

10. DATA RETENTION PERIODS

PLUG AND PLAY will keep the personal data of the Users for the period of time set out below, in accordance with the specific purposes:

• Data necessary for the management of contact requests: for the time necessary to fulfill the purpose for which they were collected and, where appropriate, until the erasure of the data is requested.

• Data necessary for the management of events: until the event ends, without prejudice to the fact that in the event that the User has authorized it, their personal data will be kept in order to send them newsletters about events carried out by PLUG AND PLAY.

• Data necessary for the subscription of newsletters: Until the User revokes their consent, unsubscribing to the newsletter and/or exercising the right to erasure their personal data for this purpose.

• The data necessary for the management of job applications: For as long as the selection process lasts and a candidate is assigned to the job vacancy. Without prejudice to the foregoing, candidates' data will be kept for the time necessary to fulfil the purpose for which they were collected and, where appropriate, until the User requests the erasure of their personal data.

• Data necessary for the management of requests for information on the office tour: During the period of time necessary to deal with the request and manage the appointment to be able to make the tour of the co-working offices located in the USA and in any case, until the User exercises the right to erasure their personal data.

11. USERS' DATA PROTECTION RIGHTS

Users may, at any time and free of charge, exercise their rights to access, to have inaccurate data rectified, object to the processing, to erase the personal data, right to data portability and the right to restrict the processing of their personal data and portability of their data, by sending their request to the e-mail address privacy@pnptc.com, indicating specifically which data protection right the User wishes to exercise.

Without prejudice to the foregoing, the User may exercise the aforementioned rights before any of the joint controllers indicated in the first section of this Privacy Policy.

In any case, the User is informed that, in the event that the User considers that PLUG AND PLAY has violated, or may have violated the rights that are recognized by the applicable data protection regulations, the User may contact the data protection officer by sending a letter to the e-mail address dpo@pnptc.com or, where appropriate, file a complaint with the corresponding supervisory authority. You can obtain information on the competent supervisory authorities here.

Last update: January 2023