Privacy policy

In accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (hereinafter, “GDPR”) and the Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (hereinafter, “LOPDGDD”, you are hereby informed that all personal data provided by the User through the Website https://www.grantthornton.es/ (hereinafter, the “Website”) will be processed by the company Grant Thornton Corporación S.L.P. (hereinafter, “Grant Thornton”), in its capacity as data controller, with the purpose of attending your requests, providing you with information about the professional services provided by Grant Thornton, as well as managing your attendance to events organized or in which Grant Thornton collaborates.

The completion of all the data requested through the Website is necessary for the optimum provision of the services made available to the User. Failure to provide all the data required by the Website does not guarantee that the information and services provided can be provided, are provided correctly or meet the needs of the User.

The term User/s is used here to refer to all persons over the age of 18 accessing the Website.

DETAILED INFORMATION ON PERSONAL DATA PROTECTION

1. Data controller

The company Grant Thornton Corporación S.L.P. with address at Paseo de la Castellana, 81, 28046 Madrid, Spain and CIF B65566143 is responsible for the processing of the User’s data.

For any question, doubt or clarification related to this Privacy Policy or to the data processing that Grant Thornton carries out, you can contact us through the e-mail address dpo@es.gt.com.

 

2. General information: description of the information contained in the Privacy Policy

In this Privacy Policy you will find a table identifying, for each of the different data processing carried out by Grant Thornton, the following information:

1. The purposes of the processing of your personal data, i.e. the reason why Grant Thornton processes your personal data.
2. The legal bases that allow the processing of your data by Grant Thornton for each of the purposes indicated.
3. The possible communication of your data to third parties, as well as the reason for such communication. For this purpose, we inform you that we do not disclose your personal data to third parties unless there is a legal obligation. On the other hand, Grant Thornton’s data processors may have access to your personal data, that is to say, the service providers that have to access your personal data for the development of their functions. The service providers accessing your personal data are generally in the information systems and technology sectors. The table below will indicate, where appropriate, those other sectors in which other potential Grant Thornton service providers are engaged that may need to access your personal data.
4. We inform you that you may request more detailed information about the recipients of your data by sending an e-mail to the address dpo@es.gt.com, indicating the specific processing operation about whose recipients you would like information.
5. The existence of potential international data transfers, we confirm that there are no international transfers of your data.
6. The period of conservation of the data you provide us with. Likewise, we inform you that, once the aforementioned retention period has expired, your data will remain blocked for the purpose of legal, administrative or tax claims during the statute of limitations periods resulting from the applicable legislation.

 

3. Detailed information on processings

The User may voluntarily provide us with personal information, either through certain data collection forms (included on the website, event registrations in paper format, by telephone, etc.), or through the e-mail addresses provided for this purpose.

The processing has the following purposes and characteristics:

	PURPOSE OF PROCESSING	LEGAL BASIS	DATA COMMUNICATION	RETENTION PERIOD
a)	Contact/Events. In the section reserved for queries, the User may request information about the different professional services provided by Grant Thornton. The purpose of the processing of your data provided through the form will be to solve the query or provide the requested information. In case of completing the “Events” form, your data will be processed to ensure your attendance to the event you are interested in.	Legitimate interest of Grant Thornton to attend to the requests for information/requests through the Web or e-mail. For Events, consent of the data subject.	Your data may be transferred to companies of the Grant Thornton Group (the “Group”), depending on the professional line about which your query is made and on the legal basis of Grant Thornton’s legitimate interest in attending your request for information. Your personal data will not be accessed by service providers other than those referred to in paragraph (c).	Until the resolution of your request for information. As for Events, up to the revocation of the consent given.
b)	Receipt of CVs from candidates via the Website. Specific information on this processing can be found here.	Consent of the data subject.	Your data may be transferred to Group companies, depending on the professional line for which you are applying, as well as in the event that there are vacancies that match the candidate’s profile.	For the time necessary to manage after the selection process. In addition, for a period of 5 years for possible future applications.
c)	Send you commercial and promotional information that may be of interest to you (newsletters).	Consent of the data subject. Eventually, legitimate interest due to the contractual relationship in force.	Group entities and other collaborators necessary to carry out the purpose.	Until consent is withdrawn. Until the right to object is exercised.
d)	Statistical analysis of visits to the website and user behaviour on the website (cookies).	Consent of the data subject.	Group entities and other collaborators necessary to carry out the purpose.	.
e)	To properly manage navigation through this website (strictly necessary cookies).	Legitimate interest of the party responsible for ensuring the functionality of the website.	Group entities and other collaborators necessary to carry out the purpose.	For as long as it is not yet obsolete by a new update.

The companies that make up the Grant Thornton Group, to which data can be communicated, are the following:

• Grant Thornton S.L.P.U.
• Grant Thornton Asesores, S.L.P.
• Grant Thornton Andalucía, S.L.P.
• Grant Thornton Advisory, S.L.P.U.
• Grant Thornton Canarias, S.L.P.
• Grant Thornton Legal Madrid, S.L.P.
• Grant Thornton Quantitative Risk (Spain), S.L.

As for those referred to as collaborators, it refers to third party external service providers that Grant Thornton contracts and that have the condition of data processor (such as IT service providers, data hosting services, software maintenance and data management applications). Said access to your data will always be done prior compliance with all the legal requirements that guarantee that such communication is in accordance with the law. In this regard, we inform you that such providers are located in the European Economic Area.

Grant Thornton will keep the data duly blocked, without giving them any use, as long as they may be necessary for the exercise or defence of claims or any type of judicial, legal or contractual responsibility may arise from their processing, which must be attended and for which their recovery is necessary.

 

4. Data Category

According to the mentioned purposes, Grant Thornton processes the following categories of data obtained through online and offline formats provided by the User:

1. Identification and contact details: name, surname, company, territory, e-mail address, postal address.
2. Professional data: curriculum vitae.
3. Through cookies we collect certain information related to your browsing, such as, for example, device identifier, provider information, language preference, location and time zone. Their processing and purposes are explained in our Cookie policy.

With regard to enquiries made by using the various forms available in the “Contact” or “Event” section, you are allowed to provide information about your enquiry. You will be responsible for the veracity of the data entered in such forms.  Please note that no personal queries can be answered there except those strictly linked to the provision of services of the Web. Under no circumstances should data of special categories (such as, for example, data on health, sexual orientation, religion or political convictions, etc.) be communicated. In case of doing so, the User exempts Grant Thornton from total responsibility. In case inappropriate queries or contents are sent, Grant Thornton will proceed to its elimination.

When providing their data by e-mail or through the form, the User guarantees that these are true, exact, complete and updated, being responsible for any damage or harm, direct or indirect, that could be caused as a consequence of the non-fulfillment of such obligation. In case of providing Grant Thornton with third party data, the User must have the consent of the same and commit to transfer them the information contained in this clause, exempting Grant Thornton from any responsibility in this sense. Nevertheless, Grant Thornton will be able to carry out the verifications to verify this fact, adopting the corresponding due diligence measures, according to the data protection regulations.

 

5. Minors

Minors may not use the services available through the Website without the prior authorisation of their parents, guardians or legal representatives, who shall be solely responsible for all acts carried out through the Website by the minors in their care, including the completion of the forms with the personal data of said minors and the ticking, where applicable, of the boxes that accompany them.

 

6. Exercise of rights

We inform you that you may exercise the following rights:

• Right of access to your personal data in order to know which personal data are being processed and the processing operations carried out on them, as well as to obtain a copy of them;
• The right to rectify any inaccurate personal data;
• The right to erasure of your personal data, where possible;
• The right to request the restriction of the processing of your personal data where the accuracy, lawfulness or necessity of the data processing is in doubt, in which case we may retain the data for the purpose of pursuing or defending claims;
• The right to portability of your personal data, where the legal basis for the processing of your personal data as indicated in the table above is the contractual relationship or consent and where the processing is carried out by automated means;
• The right to object to the processing of your personal data, where the legal basis that enables us to process your personal data as indicated in the “Purpose of Processing” section of this Policy is legitimate interest. For these purposes, we will stop processing your data unless we have a compelling legitimate interest or for the formulation, exercise or defence of claims.
• The right to withdraw your consent at any time.

You may exercise your rights at any time and free of charge by sending an e-mail to dpo@es.gt.com , indicating as reference: Data Protection, indicating the right you wish to exercise and your identification details sufficient to identify you, or by post by writing to:

Grant Thornton Corporación S.L.P.

Paseo de la Castellana, 81, 28046 Madrid, Spain.

 

You guarantee the truthfulness and accuracy of the data you provide us with and undertake to keep them duly updated.

If you consider that we have not processed your personal data appropriately, you can contact us at dpo@es.gt.com, indicating as reference: Data Protection. However, we inform you that you have the right to lodge a complaint with the Spanish Data Protection Agency if you consider that a breach of data protection legislation has been committed with regard to the processing of your personal data (www.aepd.es ).

 

7. Security measures

Grant Thornton adopts the security levels required by the RGPD appropriate to the nature of the data being processed at all times. Notwithstanding the above, the technical security in a medium such as the Internet is not impregnable and there may be malicious actions of third parties, although Grant Thornton puts all the means at its disposal to prevent such actions.

If you detect or suspect any technical vulnerability affecting Grant Thornton Services, please send an email to dpo@es.gt.com or visit this Website to report it.

 

8. International transfer of data

The personal data that we hold about you will only be processed in member states of the EU or the European Economic Area, respectively. However, in the event of processing by a provider located in a country without corresponding data protection laws, appropriate measures will be taken to ensure an adequate level of protection of your data. For this purpose, use shall be made of the Standard Contractual Clauses approved by the 2021 implementing decision of the European Commission.

If you wish, we can provide you with information about adequate or appropriate safeguards, as well as the option to obtain a copy of them, upon request. To this end, you may request further information to this effect by writing to dpo@es.gt.com indicating the reference Data Protection and the request you intend to make.

 

9. Scope of application

The structure of files, equipment and information systems with the purpose of complying with the legislation in force regarding data protection, will be applied to all the files, temporary or permanent, owned by Grant Thornton that contain personal data, as well as to any equipment or information system that processes them.

 

10. Commercial and promotional information

If the User has authorized us to do so, the personal data provided through this form “Newsletter Registration” will be processed by Grant Thornton with the purpose of notifying you advertising content and commercial communications from Grant Thornton. In this case, you may revoke your consent at any time by clicking on the link provided in each newsletter or by email to dpo@es.gt.com , indicating as reference: Unsubscribe Newsletters.

Newsletters may also contain links to third party sites. We will store your data for as long as you have subscribed to the newsletter. After you unsubscribe, we will block your data in this context so that you will not receive any more newsletters from us in the future.

 

11. Opposition or revocation of data processing

If you have given your consent to the processing of your data for the purpose of commercial information, you may revoke this consent at any time in the future. You can send your revocation to dpo@es.gt.com. Likewise, these commercial communications include a link that enables you to “unsubscribe” from them.

Please note that, despite any objection or revocation made, we may be legally obliged to store the data. You can object and revoke your consent to the processing of your personal data for advertising purposes at any time. The contact details can be found under Point 1. In any case, the revocation will not affect the processing carried out prior to the revocation.

 

12. Options and modifications of information

Our marketing emails contain an “unsubscribe” procedure, as set out in section 10 of this policy.  If you choose to unsubscribe, we may still send you non-marketing emails relating to the business relationship with you.

You may submit requests to us regarding your personal information through the procedure set out in section 6 of this Policy. You may request to change contact options or marketing options and to update, access, delete or make other changes with respect to your personal information or content that you post on the Services. In some cases, we may not agree to all such requests unless required by law.

 

13. Social media

We have set up social media icons on our website. With a simple click of the mouse you can access the following social media platforms: Facebook, X (Twitter), LinkedIn, TikTok and YouTube. When visiting our website, no personal data is transmitted to the providers, however, if the User clicks on the icon he/she will be redirected to the social network referenced. You can recognise the platform provider by the logo. We offer you the opportunity to go directly to Grant Thornton’s publications in each social network via the icon. We have no influence on the data collected and the data processing procedures on these social networks, nor are we aware of the full extent of data collection, processing purposes and retention periods. Nor do we have any information about the deletion of data. For this purpose, you should contact the owner of these social networks and websites.

In case the followers of our profiles contact Grant Thornton through said networks or publish images or information in our profile that contains personal data, it will be exclusive responsibility of the User and/or follower, being Grant Thornton exempt of any responsibility regarding the content that the User and the follower incorporates in our public profiles. Due to the fact that Grant Thornton’s profiles in the social networks are public, Grant Thornton is not responsible for any direct or indirect action carried out by third parties derived from the publication of the User’s personal data in our profiles. Therefore, we strongly request that you do not share personal or sensitive information and that you carefully read the Privacy Policies and Terms and Conditions of such social platforms to configure your profile with the degree of privacy you wish. Anyone who no longer wishes to be a follower of Grant Thornton in the social networks where it is present, can stop following such profile according to the Terms and Conditions of the corresponding social platform.

Below are the addresses of the social media platforms where you will find information on data protection.

• X, Inc, 1355 Market St, Suite 900, San Francisco, California 94103, USA; twitter.com/privacy.
• LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; linkedin.com/legal/privacy-policy.
• Facebook Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland; facebook.com/privacy/explanation
• Youtube (Google LLC YouTube)
• TikTok (TikTok Technology Limited), 10 Earlsfort Terrace, Dublin, D02 T380, Ireland;

 

14. Confidentiality and professional secrecy

The data collected in all the private communications between Grant Thornton and the Users will be processed with absolute confidentiality, committing Grant Thornton, including all its personnel, to the obligation of secrecy of the personal data, to its duty to keep them and to adopt all the necessary measures to avoid their alteration, loss and processing or unauthorized access, according to what is established in the applicable data protection regulations.

In addition, information of any kind that the parties exchange between themselves, that which they agree to be of this nature, or that which simply concerns the content of said information, shall also be considered confidential. The visualisation of data through the Internet shall not imply direct access to the same, except with the express consent of the owner on each occasion.

 

15. Links to other websites

This Web Site also contains links or links to other web sites not managed by Grant Thornton, therefore Grant Thornton does not exercise any control over them, nor is it responsible for the information accessed. We ask you to visit these websites directly to obtain information of their Privacy Policy, which provides information regarding data protection, security, data collection and provisions related to data transmission. Grant Thornton shall not be liable for any action taken by, or the contents of, these websites.

Unless Grant Thornton has previously authorized it in writing, a link, hyperlink, framing or similar link may not be inserted in the Web Site.

 

16. Changes to security and data protection policy

Grant Thornton reserves the right to modify this policy in order to adapt it to new legislation or jurisprudence, as well as those that may arise from existing standard codes on the subject, with effect from the date of publication of such amendment on the Website. Relevant updates will be communicated.

 

17. Cookies

Grant Thornton will only use data storage and recovery devices (“Cookies”) when the User has given his previous consent to do so, or when they are necessary for the proper functioning of the Web, according to what is indicated in the pop-up window of the user’s browser when he accesses the Web Site for the first time and in the other terms and conditions indicated in the Cookie policy that every user must know.

 

Last updated: May 2024.