Policies

Privacy policies, such as security policies, are described below.

Contact

10 October - 3 Min reading.

Description of our policies

Read our policies carefully

Privacy Policy

Within the framework of the service provision relationship, Almaglobal S.L.U will process the personal data provided in accordance with the provisions of Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights, as well as Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016 ("RGPD") and Law 34/2002, of July 11, on information society services and electronic commerce ("LSSI").

This privacy policy applies to the processing of personal data of users browsing the website https://www.dokify.net/ (the "Website") and users of the platform called "Dokify" operated by Almaglobal S.L.U. (the "Platform").

1. Data Controller

Owner: Almaglobal S.L.U. (hereinafter, "AlmaGlobal")

Registered Office: CALLE PROCIÓN, NUM 7, PORTAL 4, PLANTA H-I-J, 28023, MADRID (Spain)

VAT NO: B86311693

Commercial Registry: Madrid, Volume 29387, Folio 99, Section 8, Page M-528963, Entry 1 (25/11/2011)

Phone/Fax: 918 38 80 49

E-mail (DPD): dpo.nalanda@onceforall.com

2. Purposes and basis of processing

All data provided by customers, employees, candidates, users of the Website and the Platform are treated in accordance with the applicable regulations. Before providing any personal data, the data subject must have read and understood this Policy. By accepting it, you warrant that the data provided to AlmaGlobal is accurate, truthful and up to date.

2.1 Matrix of purposes, categories and bases of legitimacy

Purpose	Categories of personal data	Basis of legitimization
1) Contract management and control Conclusion, execution, development, maintenance, management and control of the contractual relationship, including: Platform Registration Platform user management and maintenance AlmaGlobal customer management and maintenance Purchase and sale transactions using the purchase tool Electronic invoice management Documentary management (publication of professional contact data required for validations and authorizations)	Identity and contact information: name and surname, email, telephone number of customers, users, representatives and employees. User names and login credentials Payment information	Art. 6.1.b) RGPD Execution and management of the contractual relationship with AlmaGlobal.
2) Application management Evaluation and management of applications in selection processes.	Identification and contact Professional data (CV)	Art. 6.1.b) RGPD Pre-contractual measures.
3) Employee portal Employee portal management.	Identification and contact information (name, surname, email, ID number, phone number) Users and credentials	Art. 6.1.b) RGPD Employment/contractual relationship.
4) Mailbox and contact forms / social networks Management and response to queries.	Identity and contact information (name, surname, telephone, email, RRSS user) Data related to the consultation	Art. 6.1.b) RGPD Management of the relationship with the user. Art. 6.1.a) RGPD User consent.
5) Security and operation of the Web Site / cookies Normal use of the Web Site and statistical analysis to improve its quality.	Browsing data and IP address.	Art. 6.1.f) RGPD Legitimate interest in analyzing the use and operation of the Website.
5bis) IT security / testing / bug fixes	Browsing data and IP address.	Art. 6.1.f) RGPD Legitimate interest in ensuring security, improving and identifying errors and anomalies.
5ter) Non-technical cookies Management of cookies that are not strictly necessary.	Navigation data.	Art. 6.1.a) RGPD User consent.
6) Sending commercial communications Information about AlmaGlobal products and services, events and activities of AlmaGlobal or its group.	Identification and contact information (name, surname, email, telephone).	Art. 6.1.f) RGPD Legitimate interest for products/services similar to those contracted (right of opposition). Art. 6.1.a) RGPD Consent for commercial communications.
6a) Commercial communications from third party collaborators	Identifiers and contact.	Art. 6.1.a) RGPD User consent.
7) Compliance with legal obligations	Identification and contact information (name, surname, email, telephone number and any other information required by the competent authorities) Payment and billing information	Art. 6.1.c) RGPD Compliance with legal obligations.
8) Photographs and videos for promotional purposes.	Images (photographs and videos) of interested parties.	Art. 6.1.a) RGPD Consent of the data subject for collection and publication.
9) Management of the exercise of data protection rights	Identification and contact information (name, surname, email, ID number, phone number) Personal data contained in the application itself	Art. 6.1.c) RGPD Compliance with legal obligations.

The personal data listed will be included in the register of processing activities under the responsibility of AlmaGlobal. It is our policy not to profile users of our services.

3. Transfers and communications of personal data

Your data may be communicated to Almaglobal group companies. AlmaGlobal is part of the Nalanda Global group and is associated with Once For All Ltd.

Other than the above, we do not disclose personal data except to public or private entities when required by law (e.g., Tax Agency). AlmaGlobal's data processors (service providers who require access to perform their functions) will have access to the data under contract.

If it is necessary to communicate information to other entities outside of the above, we will request your prior permission through clear choices.

4. International data transfers

In the course of our activities, data may be transferred outside the EEA (EU, Norway, Iceland, Liechtenstein) and may be subject to foreign laws on access by authorities. In case of transfers to non-EEA countries, we use standard contractual clauses approved by the European Commission or verify the existence of an adequacy decision.

5. Conservation

We keep the data for the time necessary for the purposes for which they were collected or until the interested party exercises his right of opposition when appropriate. Subsequently, they will be blocked for the purposes of judicial, administrative or tax claims during the legal periods.

The customer may request the complete deletion of his information by writing to the DPD: dpo.nalanda@onceforall.com. The data will then be inaccessible, without prejudice to legal retention obligations.

Specific deadlines:

Clients and users: during the contractual relationship and 6 years from its termination (art. 30.1 Commercial Code). Data relevant to AML/CFT: 10 years (art. 25 Law 10/2010).
Potential customers: 2 years.
Workers (portal): 5 years from its deactivation (art. 4 RDL 5/2000, LISOS).
Candidates: 1 year from the closing date of the vacancy (or from receipt if it is a spontaneous application).
Commercial with consent: as long as they do not revoke the consent.

6. Security

In order to guarantee the security of the data managed, measures have been implemented to ensure the confidentiality, integrity and availability of the same. Specific security levels have been adopted for the protection of personal data, and both technical and organizational means have been implemented to prevent the loss, misuse, alteration, unauthorized access and theft of personal data provided through the Web Platform.

AlmaGlobal has ISO/IEC 27001:2022 certification (which certifies compliance with the requirements related to Information Security Management Systems (ISMS), as well as certification of compliance with the National Security Scheme (ENS) and the specific compliance profile NIS2.

7. Your Rights

You may exercise the following rights:

A) Access to your data and processing operations.
B) Rectification of inaccurate data.
C) Deletion when the data is no longer necessary or when there is a legal basis that allows it. If they cannot be deleted due to legal obligation, they will be blocked.
D) Limitation when accuracy, legality or necessity is in question; we may retain them for the defense of claims.
E) Opposition to the processing; we will stop processing except for contractual/legal obligations, compelling legitimate reasons or defense of claims.
F) Portability in a structured, machine-readable format; may request transmission to another responsible party.
G) Revocation of the consent granted.

To exercise them, write to NALANDA GLOBAL, S.A., C/ Proción 7, Edificio América II, Portal 4, 2º I, 28023 (Madrid) or email dpo.nalanda@onceforall.com, proving your identity.

You will receive a response within a maximum of 1 month from receipt; this may be extended by an additional 2 months if the request is complex or numerous.

You may file a complaint with the supervisory authority (in Spain, AEPD). Prior to this, you can contact the DPD, which will resolve your complaint within a maximum of two months.

8. Updates

AlmaGlobal may modify this policy to adapt it to new legislation or case law. Where appropriate, it will be notified in a timely manner.

9. Third party data

If a customer or user provides personal data of third parties, he/she declares to have their express consent and to have previously informed them of the processing of their data in accordance with this Policy.

10. Other treatments

Cookies and similar technologies

You can consult our Cookies Policy.

11. History of Changes - Privacy Policy

Version	Date	Major changes
Initial document	-	Updated document
V.2	01/07/2025	Inclusion of Once For All Ltd. as part of the corporate group. Update of the legal basis for the use of cookies (informed consent). Conservation detail (clients, users, employees, candidates, suppliers). Reference to certifications (ISO/IEC 27001:2003, ISO 9001:2015) and security policies of the Nalanda Group. Adjustments on international transfers and security measures. Review of commercial communications and consent.

/* --- Fix tablas responsivas --- */ .politica-privacidad table{ /* si la tabla es más ancha que el contenedor, que se pueda hacer scroll */ display: block; /* permite overflow en X sin romper estilos */ overflow-x: auto; -webkit-overflow-scrolling: touch; max-width: 100%; min-width: 720px; /* fuerza scroll en móviles, evita que se desborde */ table-layout: auto; } .politica-privacidad th, .politica-privacidad td{ white-space: normal; /* que el texto pueda bajar de línea */ word-break: break-word; /* rompe palabras largas/URLs si hace falta */ hyphens: auto; } /* La clase .nowrap estaba pensada para desktop; en móviles dejamos que corte */ @media (max-width: 768px){ .politica-privacidad table{ min-width: 560px; font-size: .94rem; } .politica-privacidad th, .politica-privacidad td{ padding:.5rem .55rem; } .politica-privacidad .nowrap{ white-space: normal; } } /* opcional: un scroll bar discreto */ .politica-privacidad table::-webkit-scrollbar{ height:8px } .politica-privacidad table::-webkit-scrollbar-thumb{ background:#d1d5db; border-radius:4px }

Security policies

Security policy

See security policy