Privacy Policy
Data Protection Information
Company name
Identity: iDISC INFORMATION TECHNOLOGIES, S.L. (“iDISC”).
Mailing address: Passeig del Progrés, 96
08640 Olesa de Montserrat
Barcelona – Spain
Phone: +34 937 78 73 00
Email: privacy@idisc.com
Purpose
How do we use personal data?
iDISC collects and processes the personal data necessary to provide the sworn translation services offered through this website, https://traduccion-jurada.idisc.com/, including the processing of requests, quotes, orders, document translation, payments, billing, customer service, and, where applicable, the delivery of translations by mail.
This Privacy Policy sets out the terms under which iDISC processes personal data collected specifically through this website and in connection with the contracting of the sworn translation services offered on it, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”) and applicable Spanish data protection law.
The activity carried out through this website consists of providing sworn translation services for official documents, performed by sworn translators-interpreters authorized by the Ministry of Foreign Affairs, European Union and Cooperation (MAEC). For these services to be provided, the client may submit documents containing their own personal data or that of third parties.
iDISC will process this data exclusively to the extent necessary to handle the request or order, provide the contracted service, carry out the related administrative tasks, and comply with applicable legal obligations.
iDISC collects the following personal data for the purposes indicated below:
- Information requests or contact through the website:
Personal data provided through the contact forms will be used to respond to the inquiry, request for information, or quote request made by the data subject and, where applicable, to maintain the communication needed to handle that request. - Requesting and contracting sworn translations:
To request and contract a sworn translation, iDISC may process the identification and contact data provided by the client, as well as the information needed to identify and manage the order and properly provide the contracted service.
The client may also submit original documents or copies of documents to be translated. These documents may contain personal data of the client or of third parties, such as first and last names, identification documents, data on marital status, academic or professional information, immigration data, asset or financial information, and, depending on the document submitted, health-related data or other special categories of data.
The data contained in the submitted documents will be processed exclusively to the extent necessary to review, manage, and carry out the requested sworn translation service, as well as to perform the checks needed to provide it properly.
The client is responsible for providing only the documents and data necessary for the service and, when submitting documents that contain third parties’ personal data, must have a lawful basis for that disclosure where required.
- Managing orders, payments and billing:
iDISC will process the data necessary to handle the order, confirm the contract, process the payment, issue the corresponding invoices, and meet the accounting, tax, and legal obligations arising from the contracting of the service.
Data relating to the payment method may be processed directly by the payment service providers involved in the transaction, in accordance with their own privacy policies and the terms applicable to the payment service.
- Translation delivery:
When the client requests digital delivery, iDISC will process the data necessary to send them the sworn translation by the means provided for this purpose.
When the client requests delivery by mail, iDISC will process the data necessary to manage the delivery, including identification data, the shipping address, and any other information strictly necessary for the courier service to complete the delivery.
The website offers both digital delivery and delivery by mail of sworn translations.
- Customer service and incident management:
Data provided by the client in their communications with iDISC will be processed to respond to their inquiries, handle issues, clarify matters relating to the order or the documentation submitted, and, in general, provide the necessary assistance in connection with the contracted service. - Commercial communications:
iDISC may use contact data to send commercial communications about its own products or services when it has the corresponding legal basis to do so.
Where applicable law requires the data subject’s consent to send commercial communications, they will be sent only when that consent has been given. The data subject may withdraw their consent at any time and object to the processing of their data for commercial purposes.
- Other iDISC data processing:
Processing of personal data carried out by iDISC on other websites, in the context of its employment relationships, recruitment processes, relationships with professionals or suppliers, corporate activities, or any other activities different from those specifically described in this Policy will be governed by the iDISC corporate website Privacy Policy, available at:
iDISC Corporate Privacy Policy
In particular, this Policy does not replace the corporate Privacy Policy with respect to processing that is not directly related to the provision of the sworn translation services offered through this website.
How long do we keep the data?
Personal data necessary to manage an order and provide the sworn translation service will be retained for as long as necessary to carry out the contractual relationship and, once it has ended, for the legally established periods to address possible liabilities, claims, or requests from Public Administrations.
Data necessary for the administrative, accounting, and tax management of the order will be retained for the periods required by applicable law.
Documents provided by the client for the sworn translation will be retained for as long as necessary to provide the service and handle any related issues. Once that period has ended, they will be deleted or anonymized when it is no longer necessary to retain them, unless there is a legal obligation to retain them or retention is necessary for the establishment, exercise, or defense of legal claims.
Where data is processed on the basis of the data subject’s consent to receive commercial communications, it will be retained until the data subject withdraws consent or objects to the processing.
Data processed to respond to information or quote requests that do not ultimately lead to a contract will be retained for as long as necessary to handle the request and, afterward, for the periods necessary to address possible legal liabilities.
In all cases, iDISC will apply the retention periods that are necessary and proportionate in light of the purpose for which the data was collected and the applicable legal obligations.
How do we protect your personal data?
iDISC implements appropriate technical and organizational measures to ensure the security, confidentiality, integrity, availability, and traceability of the information it processes, taking particular account of the nature of the documents that may be submitted for the provision of sworn translation services.
Documents provided by clients will be treated as confidential and used only for purposes related to the provision of the contracted service.
You can consult our Security Policy for additional information on the security measures applied by iDISC.
Legal basis
Data necessary for handling requests and orders and providing sworn translation services will be processed by iDISC on the basis of the performance of a contract or the implementation of pre-contractual measures requested by the data subject.
Refusal to provide the data necessary to handle the order or provide the service may prevent iDISC from processing the request, carrying out the translation, processing the payment, issuing the invoice, or making the delivery.
The processing of personal data contained in the documents submitted by the client is likewise justified by the performance of the requested translation service, to the extent that such data is necessary to carry out the sworn translation.
Where the submitted documents contain special categories of personal data, such as data concerning health, the processing will be carried out only when it is necessary to provide the requested service and one of the conditions set out in Article 9 of the GDPR that permits such processing applies.
In particular, where the data subject voluntarily provides documents containing this type of information in order to request the translation, that disclosure may constitute an explicit expression of intent in the context of providing the service, without prejudice to the application of any other legal basis that may be required under applicable law.
With regard to data used for commercial communications, iDISC will process it on the legal basis that applies in each case, including, where necessary, the data subject’s consent. The data subject may withdraw this consent at any time.
With regard to billing, accounting, tax, and other legal obligations, the processing is justified by compliance with the legal obligations applicable to iDISC.
Recipients
Disclosure of data to third parties
Personal data will not be disclosed to third parties unless there is a legal basis that permits or requires it, including cases where the disclosure is necessary to provide the contracted service or to comply with legal obligations.
In particular, to provide the sworn translation service, certain data and documents may be accessible to the sworn translators-interpreters involved in carrying out the service, to the extent strictly necessary to complete the requested translation.
When the client requests delivery of the translation by mail, the data necessary to complete the delivery may be disclosed to the transport or courier companies involved in the service.
In addition, certain data may be processed by technology, hosting, maintenance, communications management, billing, or payment service providers acting as iDISC’s data processors, always subject to the corresponding contractual and security safeguards.
When public authorities, judicial bodies, law enforcement agencies, or other competent bodies legitimately request information, iDISC may disclose the data where there is a legal obligation or legal authorization to do so.
Data categories
Categories of data processed:
Depending on how the website is used and the service requested, iDISC may process the following categories of data:
- Identification data: first and last names, national ID numbers, passport, signature, and other identification data contained in the submitted documents.
- Contact data: email address, phone number, mailing address, and data necessary for communication and delivery.
- Billing and financial information: data necessary for managing the order, billing, and meeting tax obligations.
- Order details: source and target language, document type, number of documents, number of pages, comments, and information necessary to provide the service.
- Information contained in the documents submitted for translation, which may include identification, academic, professional, civil, immigration, financial, asset-related, or legal data.
- Special categories of data when included in the submitted documents, especially data concerning health or other specially protected data.
The nature of the data processed will depend on the document the client requests to have translated. The website offers, among others, translation services for birth, marriage, and death certificates, residence permits, university degrees, driver’s licenses, passports, and other official documents.
iDISC will not ask the client for especially sensitive data that is not necessary to provide the service. However, certain documents voluntarily submitted by the client may contain this type of information.
The client must ensure that the documents they submit are strictly necessary for the requested service.
Rights
You have the right to:
- Withdraw your consent where the processing is based on consent.
- Access your personal data.
- Rectify inaccurate or incomplete personal data.
- Request the erasure of your personal data where applicable.
- Request restriction of processing in the cases provided for by law.
- Object to the processing of your data where appropriate.
- Request portability of your data in the cases provided for by regulation.
- Lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe that the processing of your personal data violates applicable regulations.
- Be informed of any security incident that may affect your rights and freedoms where required by applicable law.
To exercise your rights, you can write to:
privacy@idisc.com
The request must include the information necessary to reasonably verify the identity of the requester and specify the right they wish to exercise.
Exercising these rights is free of charge, except where the regulations allow a reasonable fee to be charged for manifestly unfounded or excessive requests.
For any data processing not specifically covered by this Privacy Policy, the iDISC Corporate Privacy Policy will apply.