1. Introduction

Welcome to SleepOne.tech. This policy explains what data we collect, how we use it, and your rights regarding your personal data.

2. Data Controller and Contact Information

Company Name: SleepOne S.L.
CIF: B-19810555
Address: Parque Mestre Ferrero 11, 15 - 46870, Ontinyent (Valencia)
Contact Email: contacto@sleepone.es
Supervisory Authority: Spanish Data Protection Agency (AEPD) - www.aepd.es

3. Data we collect

We may collect the following categories of personal data:

✅ Identification Data: Name, surname, email.

✅ Browsing Data: IP address, cookies, web interactions.

✅ Employment Data: CVs and professional qualifications (for hiring processes).

4. Purpose of Data Processing and Legal Basis

The collected data is used for:

✅ Managing user relationships and responding to inquiries (Legal Basis: Contract Performance).

✅ Providing services and website functionalities (Legal Basis: Legitimate Interest).

✅ Sending newsletters and marketing communications (Legal Basis: User Consent).

✅ Handling hiring processes (Legal Basis: Pre-contractual Measures).

✅ Complying with legal and regulatory obligations (Legal Basis: Legal Obligation).

5. Data Recipients

We do not share personal data with third parties except in the following cases:

✅ Service Providers: Hosting, cloud storage.

✅ Public Authorities: To comply with legal obligations.

✅ Payment Services: If applicable, for transactions.

All transfers will be carried out under signed agreements ensuring compliance with the GDPR.

6. International Data Transfers

If data is transferred outside the European Economic Area (EEA), SleepOne S.L. will implement one of the following safeguards:

✅ Standard Contractual Clauses (SCCs) approved by the European Commission.

✅ Adequacy Decision if the country is recognized as having an equivalent level of data protection.

✅ Binding Corporate Rules (BCRs) for global data management within a corporate group.

7. User Rights

Users may exercise the following rights:

✅ Access: Obtain confirmation on whether we process personal data and access such data.

✅ Rectification: Correct any inaccurate or incomplete personal data.

✅ Erasure (Right to be Forgotten): Request data deletion when processing is no longer necessary.

✅ Restriction of Processing: Limit the processing of data under specific circumstances.

✅ Objection to Processing: Object to data processing, particularly for marketing purposes.

✅ Portability: Receive data in a structured, commonly used format and transmit it to another controller.

✅ Not to be subject to automated decision-making: Avoid being profiled or subject to automated decisions with legal effects.

To exercise these rights, send an email to contacto@sleepone.com with the subject "Exercise of Rights". We may request proof of identity to verify requests.

If you believe your data protection rights have been violated, you can file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

8. Data Retention Period

Personal data will be retained:

✅ As long as necessary for the intended purpose.

✅ While the contractual relationship lasts.

✅ Until the user requests its deletion.

✅ As required by applicable legal obligations.

Specific retention periods:

📌 Marketing Data: Until the user unsubscribes.

📌 User Account Data: While the account remains active.

📌 Recruitment Data: Maximum 2 years from receipt.

📌 Billing and Legal Records: 6 years minimum, per legal requirements.

9. Data Security

SleepOne S.L. implements technical and organizational measures to protect personal data, including:

✅ Data Encryption: Secure storage of sensitive information.

✅ Access Control: Limited access based on user roles.

✅ Security Audits: Regular checks for compliance and risk assessment.

✅ Incident Response: Prompt action in case of data breaches.

In case of a security breach affecting personal data, users will be notified within 72 hours if there is a risk to their rights.

10. Use of Cookies and Tracking Technologies

We use cookies and similar technologies to enhance user experience. These may include:

✅ Essential Cookies: Required for website functionality.

✅ Analytics Cookies: Used for website performance analysis.

✅ Marketing Cookies: To personalize ads and promotions.

For more details, see our Cookies Policy.

11. Changes to the Privacy Policy

This policy may be updated periodically to reflect changes in regulations or company practices. We will notify users of significant updates via the website or email.

12. Contact and Complaints

If you have questions about this policy or wish to file a complaint, you can contact us at info@sleepone.com or file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.