Legal Notice & Privacy Policy

The Management/Governing Body of TEACUP CONSULTING, S.L. (hereinafter referred to as the data controller) takes on the utmost responsibility and commitment to establishing, implementing, and maintaining this Data Protection Policy, ensuring continuous improvement in compliance with the Regulation (EU) 2016/679 of the European Parliament and of the Council, dated 27 April 2016, concerning the protection of natural persons with regard to the processing of personal data, the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJEU L 119/1, 04-05-2016), and the Spanish data protection regulations (Organic Law, specific sectoral legislation, and its implementing regulations).

TEACUP CONSULTING, S.L.'s Data Protection Policy is based on the principle of proactive responsibility, meaning the data controller is accountable for compliance with the regulatory and jurisprudential framework governing this Policy and can demonstrate this to the relevant supervisory authorities.

In this regard, the data controller will adhere to the following principles that should guide all its personnel in the processing of personal data:

• Data protection by design: Appropriate technical and organizational measures, such as pseudonymization, will be applied to effectively implement data protection principles, like data minimization, and integrate necessary guarantees into data processing.
• Data protection by default: Only the personal data necessary for specific processing purposes will be processed.
• Data protection throughout the information's life cycle.
• Lawfulness, fairness, and transparency: Personal data will be processed transparently concerning the data subject.
• Purpose limitation: Personal data will be collected for explicit and legitimate purposes and not processed inconsistently with those purposes.
• Data minimization: Personal data will be relevant and limited to what's necessary for the purposes they're processed for.
• Accuracy: Personal data will be accurate and updated as needed.
• Storage limitation: Personal data will be stored in a way that permits data subject identification only as long as necessary for processing purposes.
• Integrity and confidentiality: Personal data will be processed securely, protected against unauthorized or unlawful processing, and against loss, destruction, or damage using appropriate technical or organizational measures.
• Information and training: Ensuring data protection is about providing training and information to personnel involved in data processing. Everyone with data access will be adequately trained and informed about their data protection obligations.

TEACUP CONSULTING, S.L.'s Data Protection Policy is communicated to all personnel and made available to all interested parties. As a result, this policy involves all the data controller's personnel, who must know and adhere to it, viewing it as their own. Each member is responsible for its application and must ensure the data protection rules relevant to their work are followed, identifying and suggesting improvements for compliance excellence. The Management/Governing Body of TEACUP CONSULTING, S.L. will review this policy as often as necessary to adhere to current data protection provisions