privacy policy on the web

Identification of the data controller:

ASOCIACIÓN ESTUDIANTIL JUNIOR EMPRESA ZAREN (hereinafter, ZAREN) with NIF G42913509 and domicile in Uribitarte, 6 48001 Bilbao (Vizcaya)

Contact: zarencompany@gmail.com

Who is responsible for the processing of your data?

This privacy policy applies to all personal data that the data subject provides to ZAREN, as well as to any natural person interested in the activities and services that ZAREN offers through its web pages and through any other means of communication. The purpose of ZAREN`S Privacy Policy is to give transparency to information on how we process your personal data in compliance with the current data protection regulations.

The interested party may contact ZAREN through the detailed information in the identification of the data controller.

For what purpose do we process your personal data and with what legitimacy?

ZAREN has a Record of Processing Activities where each of the following processing carried out as the data controller are detailed:


The categories of personal data processed:

1. Identification data:
  • First name
  • Surname
  • DNI / NIE / Passport or equivalent document
  • Postal addresses
  • E-mail addresses
  • Sex
  • Date of birth
  • Place of birth

2. Business information.

3. Financial information:
  • Bank account number
  • Credit card number.


We will treat your information for:
  • Maintenance of the commercial relationship and provision of the contracted service.
  • Manage email communications with interested parties.
  • Management of employees and human resources of the company.


According to the purposes of the collection of our data, the processing of your data is necessary:

1. to manage the business relationship you have entered into and contracted with us.
  • Execution of a contract (enabled by article 6.1.b RGPD).
  • Consent of the data subject (enabled by article 6.1.a RGPD).

2. Manage email communications with data subjects.
  • Consent of the data subject (as referred to in Article 6.1.a RGPD)
  • Legitimate interest (enabled by Article 6.1.f RGPD).

3. Provision of care or health care.
  • Consent of the data subject (covered by Article 6.1.a RGPD).

4. Management of the company's internal employees and human resources.
  • Contractual performance (enabled by Article 6.1.b GDPR).

In the case, duly justified, which requires to know more detail regarding the Record of Processing Activities, you can contact POKHARA through any of the channels identified

How long do we store your personal data?

ZAREN will store the data of the data subjects during their relationship with the organization and thereafter, the data will be preserved according to the provisions of the archive and documentation regulations established by each applicable law. In case you request a right, you will proceed to delete your data according to the right you have requested.

Who has access to your personal data?

ZAREN may make transfers or communications of personal data in order to meet its obligations with the Public Administrations in cases that are required in accordance with the current legislation at any time.

What are the rights of those affected?

We inform you that you may exercise the following rights:
  1. Right of access to your personal data to know which are being processed;
  2. Right of rectification of any inaccurate personal data;
  3. Right to delete your personal data, where this is possible;
  4. Right to request the limitation of the processing of your personal data when the accuracy, the legality or the need for the processing of the data is doubtful, in which case, we may retain the data for the exercise or defense of claims.
  5. Right to object to the processing of your personal data, when the legal basis that enables us for your processing is the legitimate interest. ZAREN will stop processing your data unless it has a compelling legitimate interest or for the formulation, exercise or defence of claims.
  6. Right to the portability of your data, when the legal basis that enables us to process the indicated data is your consent.

Such rights may be exercised free of charge by the interested party and, where appropriate, by written request addressed to Uribitarte, 6 48001 Bilbao Vizcaya.

In addition to the above rights, the data subject shall have the right to withdraw/revoke the consent granted at any time without such withdrawal of consent affecting the lawfulness of the processing prior to his/her withdrawal. ZAREN may continue to process the data of the data subject to the extent permitted by the applicable law.

ZAREN reminds the interested party that he/she has the right to file a complaint with the competent Control Authority of the country in which he is.

Unsubscribe from the sending of commercial communications

The interested party has the right to revoke at any time the consent provided for the sending of commercial communications with the simple notification to ZAREN by which it informs that he/she does not want to keep on receiving commercial communications. For this purpose, the interested party may click on the link included in each communication by canceling the sending of electronic commercial communications or revoking their consent by means of a statement to __________________________________

What security measures do we have implemented?

ZAREN undertakes to comply with its obligation of secret personal data and its duty to keep it, and will adopt the necessary measures to avoid its alteration, loss, treatment or unauthorized access, in accordance with the provisions of applicable regulations.

ZAREN has implemented the technical and organizational security measures necessary to guarantee the safety of your personal data and to avoid its alteration, loss and processing and/or unauthorized access, given the state of the technology, the nature of the data stored and the risks to which they are exposed, whether they come from human action or from the physical or natural environment, according to the provisions of the applicable regulations.


The website of ZAREN may include hyperlinks to other sites that are not operated or controlled by ZAREN. For this reason, ZAREN does not guarantee, nor is it responsible for the lawfulness, reliability, utility, veracity and actuality of the contents of such websites or their privacy practices. Please note before providing your personal information to these websites other than ZAREN that your data protection compliance may differ from us.

Modification of the Privacy Policy

ZAREN You may modify your Privacy Policy in accordance with the applicable law at any time. In any case, any modification of the Privacy Policy will be duly notified to the Affected Party, in order to be informed of the changes made in the processing of its personal data and, in case the applicable regulations so require, the Affected Party may grant its consent.

Latest update of the ZAREN Privacy Policy 31 of May of 2021.