Our commitment to personal data protection
The Management / Governing Body of MENTALPAGE S.L., hereinafter referred to as the Data Controller, assumes full responsibility and commitment for establishing, implementing and maintaining this Data Protection Policy.
This policy ensures the continuous improvement of the Data Controller in order to achieve excellence in complying with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation - GDPR), as well as the applicable Spanish legislation on personal data protection.
Proactive accountability
The Data Protection Policy of MENTALPAGE S.L. is based on the principle of accountability.
According to this principle, the Data Controller is responsible for complying with the applicable legal framework and must be able to demonstrate such compliance before the competent supervisory authorities.
Principles governing the processing of personal data
The Data Controller shall be guided by the following principles, which serve as a framework and reference for all personnel involved in the processing of personal data.
1. Data protection by design
The Data Controller shall implement appropriate technical and organizational measures both when determining the means of processing and during the processing itself.
These measures, such as pseudonymisation, are designed to effectively apply data protection principles, including data minimisation, while integrating the necessary safeguards into all processing activities.
2. Data protection by default
The Data Controller shall implement appropriate technical and organizational measures to ensure that, by default, only the personal data necessary for each specific processing purpose is processed.
3. Data protection throughout the information lifecycle
Measures designed to protect personal data shall apply throughout the entire lifecycle of the information.
4. Lawfulness, fairness and transparency
Personal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject.
5. Purpose limitation
Personal data shall be collected for specified, explicit and legitimate purposes and shall not be further processed in a manner incompatible with those purposes.
6. Data minimisation
Personal data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.
7. Accuracy
Personal data shall be accurate and, where necessary, kept up to date.
Every reasonable step shall be taken to ensure that inaccurate personal data is erased or corrected without delay.
8. Storage limitation
Personal data shall be kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the data is processed.
9. Integrity and confidentiality
Personal data shall be processed in a manner that ensures an appropriate level of security.
This includes protection against unauthorized or unlawful processing and against accidental loss, destruction or damage through the implementation of appropriate technical and organizational measures.
10. Information and training
One of the key elements in ensuring the protection of personal data is providing appropriate information and training to all personnel involved in data processing.
Throughout the information lifecycle, all personnel with access to personal data shall receive suitable training regarding their responsibilities under data protection legislation.
Communication and implementation of this policy
The Data Protection Policy of MENTALPAGE S.L. is communicated to all personnel of the Data Controller and made available to all interested parties.
This policy applies to every member of the organization, who must understand it, assume responsibility for it and apply it in their daily activities.
Each member of staff is responsible for complying with the applicable data protection rules within their area of activity and for identifying opportunities for continuous improvement.
Policy review
This Data Protection Policy shall be reviewed by the Management / Governing Body of MENTALPAGE S.L. whenever necessary.
The purpose of these reviews is to ensure that the policy remains fully aligned with current personal data protection legislation.