Privacy policy | Mirai Go

At Mirai España S.L. (hereinafter, MIRAI) we are aware of how important it is to You how we use your personal or professional contact information and the way in which we manage it. The purpose of this Privacy and Data Protection Policy is to help you understand what data we collect and for what purpose we process it, as well as our efforts to protect it with appropriate safeguards and in accordance with current regulations.

The personal data you provide through this website will be processed as described in detail below:

Who is responsible for processing your data?

In accordance with Law 34/2002 on Information Society Services and Electronic Commerce (hereinafter, LSSI), Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter, GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (hereinafter, LOPDgdd), we inform you that the personal data provided when completing and submitting the forms published on the website will be included in the files that make up the record of processing activities of the company MIRAI ESPAÑA, S.L., with N.I.F. B-80039340 and registered office at Calle de Orense, no. 12, 1st floor, office 1 – 28020 Madrid.

What personal data do we process?

MIRAI will process the following categories of User data:

Identification data: first name and surname.
Personal or professional contact details: postal address, email address, telephone number, job title, company.
Other data: data provided by the data subjects themselves to foster commercial relationships of mutual interest.

For what purpose and on what legal basis do we process your data?

Handling of contact and information requests received by email and/or web form, and demo bookings. The purpose of the processing is to handle requests received through the website and/or contact email, as well as to organise meetings at the data subject’s request. Legal basis: the data subject’s consent (art. 6.1 a) GDPR).
Management of relationships with our customers. Mirai will process the personal data of professional contacts belonging to corporate customers in order to manage the contractual relationship between the parties. Legal basis: legitimate interest (art. 1. f) GDPR) in relation to art. 19 of Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights. In the case of individual customers, the processing is based on the performance of a contract entered into between the parties (art. 6.1 b) GDPR).
Management of relationships with our suppliers. Mirai will process the personal data of professional contacts belonging to corporate suppliers in order to manage the contractual relationship between the parties. Legal basis: legitimate interest (art. 1. f) GDPR) in relation to art. 19 of Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights. In the case of individual customers, the processing is based on the performance of a contract entered into between the parties (art. 6.1 b) GDPR).
Potential customers and commercial communications. Mirai may process identification and contact data in order to maintain relationships of any kind, and to inform you about its products and services, at your request or with your consent. Legal basis: legitimate interest (art. 6.1 f) GDPR)) in relation to art. 19 of Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights, in the case of professional contacts belonging to legal entities. In the case of potential customers who are individuals, the processing is based on their express consent (6.1 a) GDPR).
Exercise of rights and privacy management. Mirai may process your data in order to handle your requests to exercise data protection rights or for any purpose necessary to comply with the regulations. Legal basis: compliance with a legal obligation (art. 6.1 c) GDPR).
Whistleblowing channel. The purpose of the processing is to manage the communications received through our whistleblowing channel, by which potential irregularities committed by Mirai personnel are brought to our attention. Legal basis: compliance with a legal obligation (art. 6.1 c) GDPR).
Newsletter or blog subscription. The purpose of the processing is to send commercial information to the data subject. Legal basis: express consent (art. 6.1 a) GDPR).
Content downloads. The purpose of the processing is to send you Mirai resources. Legal basis: express consent (art. 6.1 a) GDPR).
Cookies. The use of cookies on our website involves the processing of your personal data. The purpose of the processing is, on the one hand, to allow you to browse our web pages without errors, through the installation of technical cookies on your device and, on the other hand, to improve the website’s functionality through the information gathered from the analytics cookies we install on your device, if you give your consent (art. 6.1 a) GDPR).

To whom will we disclose your personal data?

MIRAI will only disclose personal data to:

Those third parties, bodies and public institutions of the General State Administration, of regional and local administrations, including the courts, to which it is legally obliged to provide them.
Collaborating companies and/or partners so that they can manage the contractual relationship with You.
Service providers contractually linked to MIRAI, as data processors who will process your data strictly following the information privacy instructions and with the necessary safeguards, for the purposes of the processing.
Other entities of the MIRAI GROUP (made up of the following entities: MIRAI ESPAÑA, S.L., MIRAI USA LLC, MIRAIFUTURE PORTUGAL, LDA, MIRAI FRANCE, SARL, MEXICO MIRAI HOTELIER S DE RL DE CV). When strictly necessary for the request made and/or when necessary to carry out the administrative purposes of the business group.

How long will we keep your data?

Depending on the purpose for which we process your data, the retention period may vary:

Handling of contact and information requests received by email and/or web form. If you contact MIRAI to request information, your data will be kept for two years from the user’s last communication, and this period is renewed each time the user makes a new contact or approach.
Sending of commercial communications, newsletters, etc. If you are not a MIRAI customer, your data will be processed for this purpose until you withdraw your consent or object to receiving commercial communications. If you are a customer, your data will continue to be kept in order to manage our contractual relationship, but you will not be sent commercial communications from the moment you object to receiving them.
Management of relationships with our customers and suppliers. The personal data of our customers and suppliers will be kept for as long as the contractual relationship remains in force and, afterwards, until any possible legal liabilities lapse, duly blocked.
Management of recruitment processes. CV data and any other data you have provided to take part in our recruitment processes will be kept for the duration of the selection process.
Exercise of rights and privacy management. If you have exercised your data protection rights, or we need to process your data to comply with legal obligations set out in data protection regulations, your data will be kept for the time necessary to comply with our obligations and, afterwards, until any possible legal actions lapse, duly blocked.
Whistleblowing channel: The personal data contained in communications received through our whistleblowing channel will be processed for the strictly necessary time. Personal data contained in the communication that is unnecessary will be deleted immediately. Personal data necessary to manage the relevant investigations will be kept for the duration of the investigation and, afterwards, until any possible legal actions lapse, duly blocked.
Video surveillance: Personal data captured by video surveillance cameras is kept for one month from capture. However, it may be kept for longer periods if it needs to be preserved to prove the commission of acts that threaten the integrity of people, property or facilities.

What security measures will apply to your personal data?

The personal data provided will be processed by adopting the technical and organisational measures necessary to prevent its loss, misuse, alteration and unauthorised access, taking into account the state of the art, the nature of the data and the risk analysis carried out.

How can you exercise your rights in relation to your personal data?

To withdraw the consents given, and to exercise the rights of access, rectification, erasure, objection, restriction and portability, as well as the right not to be subject to automated individual decision-making, you may write to the postal address at Calle de Orense, no. 12, 1st floor, office 1 – 28020 Madrid or to the email address protecciondatos@mirai.com.

If the data subject considers that the above rights have not been dealt with in accordance with current legislation, they may lodge the corresponding complaint for protection of rights with the Spanish Data Protection Agency (Agencia Española de Protección de Datos).