Privacy Policy

This privacy policy only applies to data subjects who view this website and/or are interested in the online services offered by DGNET LTD, but have not yet contracted them. DGNET is committed to maintaining the privacy and security of the personal data of visitors or data subjects of the website.

However, for data subjects who are already Pandapé customers, the applicable privacy policy is the one accepted at the time of contracting and which is available on their dashboard after logging in to Pandapé.

This policy does not apply to candidates applying for job vacancies posted by a customer through Pandapé ATS, or to employees who use the Pandapé HCM as part of the services contracted with us. DGNET acts as a data processor within the framework of a service provision contract and for the sole purpose of complying with the instructions and obligations of our customers. If you are an employee of a customer using Pandapé HCM services, or a candidate who has applied for a vacancy through Pandapé ATS, you should consult the privacy policy of your employer/company offering the job.

  1. DATA CONTROLLER 

DGNET LTD acts as the data controller of the personal data processed through this website. The controller details are:

  • Name: DGNET LTD (hereinafter, ‘DGNET’).
  • Registration details: Companies House, Scotland, United Kingdom, under number 189977.
  • Address: 26 Frederick Street, Edinburgh, EH2 2JR, United Kingdom.
  • Contact: Candidates who have applied for job vacancies posted by companies through Pandapé should contact those companies if they have any queries or questions, or intend to exercise their personal data protection rights. 

Pandapé customers who have queries or questions or intend to exercise their personal data protection rights may contact their account executive.

  1. DATA PROCESSING

No prior registration is required to view this website. However, DGNET may collect personal data from visitors to respond to information requests and provide services in the best possible way. Specifically, DGNET may collect the following:

  • Personal data provided by visitors or data subjects when filling out the contact form on the website, subscribing or registering, if this option is available, on the blog. This personal data may include full name, job title, professional email address, country, and the name of the company where they work, which is interested in obtaining information about the services.
  • Details of the actions that data subjects carry out through our website and the provision of our services, if applicable.
  • Details of visits to our website by data subjects, including, but not limited to, traffic data, IP address, location data, duration of activity, other communication data, operating system, web browser and the resources accessed.
  • Data obtained through service providers that help us determine a location based on the IP address to present the services and contents on the website, and for other uses following this Privacy Policy.

DGNET may also collect data through cookies as described below in our Cookies Policy.

  1. PURPOSES AND LEGITIMACY

DGNET processes the data subject’s data for a specific purpose and only processes such data as specified in this Privacy Policy for the following purposes:

  • To respond to requests for information and/or queries made by the data subject through the website. The legal basis for carrying out this data processing is the data subject’s consent, given so that their request can be addressed.
  • In the case of registration for a webinar or event, to provide the service requested by the data subject. The legal bases for carrying out this data processing are the contractual relationship for the provision of said service, even if it is free of charge, and the data subject’s consent.

Likewise, DGNET inform you that the webinar or event may be reproduced live in its entirety or part, photographed and/or recorded, so that your image and voice may be published on DGNET’s internal and external channels and media, as well as online (website, social networks, digital platforms, etc.), for the sole purpose of reporting on the activity carried out by DGNET.

  • To send commercial communications to inform data subjects about products and services, news, updates, surveys, events, and webinars from DGNET and/or other companies in our business group. The legal basis for this data processing is the data subject’s consent.
  • To manage subscriptions and anonymously moderate comments provided, where applicable, on our blog regarding content related to the services, activities, and products of our business group. The legal basis for this data processing is the contractual relationship for the provision of the requested service, even when it is free of charge.
  • To customise, optimise and improve the data subject experience on the website. The legal basis lies in DGNET’s legitimate interest.
  • To anonymise or aggregate data collected through our website and create statistics that can be used for any purpose, provided that such statistics do not identify any data subject or contain personal information. The legal basis lies in DGNET’s legitimate interest.
  • To improve our services by studying data subject behaviour through cookies to adapt the website, mobile application and/or online tool to their needs and preferences. Users can manage cookies by following the instructions in our Cookie Policy. The legal basis lies in DGNET’s legitimate interest.
  • To transfer data to public bodies and authorities, provided that they are required following legal and regulatory provisions. The legal basis lies in compliance with legal obligations applicable to DGNET.
  1. DATA RETENTION 

DGNET will retain the processed data until the statute of limitations applicable to personal data protection infringements has expired, after responding to the exercise of a data subject’s right; until the requested services have been provided; until the data subject requests its deletion; and/or for the required period to comply with legal obligations.

  1. DATA TRANSFERS 

The data subject’s personal data will not be transferred for use by third parties unless their consent has been obtained or when legally required. Notwithstanding the foregoing, in the course of our activities and for the same purposes as those described in this privacy policy, such data may be processed by our specialised service providers, including companies in our business group, who help us to provide our services. These service providers, who are considered data processors, are carefully selected and regularly monitored per applicable personal data protection regulations and are obliged to protect the confidentiality and security of your personal data.

These providers may be located in jurisdictions that do not provide the same levels of security as the jurisdiction where the data subject is located, in which case DGNET will implement the necessary legal mechanisms to protect personal data. DGNET has signed the corresponding data processing agreements with each of the providers that provide us with services to ensure that personal data is treated with due confidentiality and security, and only for the purpose for which it has been shared, with limited access to such information and acting under DGNET’s instructions.

The processing of personal data by DGNET will involve the international transfer of such data. DGNET will provide cloud services through Amazon Web Services, a company that holds certifications with demanding security standards such as ISO 27001, SOC 1/2/3 and PCI DSS Level 1, and its data processing agreement includes the relevant legal mechanisms for data transfer.

Likewise, personal data may also be transferred in cases where there is a legal obligation to do so.

  1. USER RIGHTS

The data subject may exercise their rights of access, rectification, erasure, restriction of processing, data portability, objection, and not to be subject to automated individual decision-making, including profiling, before DGNET. Similarly, in the processing of data subject data whose legitimacy is based on the consent given by the data subject, the data subject has the right to withdraw such consent at any time, without this affecting the lawfulness of the processing based on the consent before its withdrawal.

It should be noted that these rights are subject to certain limitations, as established by applicable legislation. Individual requests will be processed within the time frame assigned by the relevant regulations, which begins from the moment DGNET confirms your request. DGNET may charge a fee for subsequent requests from the same person, which will be determined by DGNET and applied only to the extent permitted by applicable law.

To exercise these rights, data subjects may send their request in writing as indicated in section 1. As much information as possible should be provided in the request: company name, full name, email address used for our services and the reasons for the request, specifying, where applicable, the right you wish to exercise. It will also be necessary to attach any documentation deemed necessary to support the request and process it.

If, after contacting DGNET, the query or complaint is not resolved, it is also possible to contact the data protection authority and other competent public bodies for any claim arising from the processing of personal data.

  1. SECURITY

The data will be processed with the appropriate level of protection, adopting appropriate technical and organisational measures to prevent its alteration, accidental loss, unauthorised disclosure or access, and any other form of improper processing. In applying these measures, consideration is given, among other aspects, to the nature of the data processed, the risks, as well as technological advances and the costs of implementation.

DGNET has implemented procedures to deal with any suspected breach of the security of the personal data DGNET processes. DGNET will notify the Customer and the applicable authority in the event of a breach of personal data security, when required by law. Unfortunately, the transmission of information via the Internet is not completely secure. Although DGNET has adopted security measures and technical means to protect personal data, it cannot guarantee the security of data transmitted over the Internet; therefore, any transmission is at the Visitor’s and Customer/Client Company Users’ own risk. Once DGNET has received the personal data, DGNET will follow strict procedures and security measures to prevent unauthorised access.

  1. MINIMUM AGE

To access or use our website, data subjects must be at least 16 years of age. If you are under 18 years of age or the legal age of majority in your country, your use of our website must be supervised by your parents or legal guardians. If DGNET becomes aware that a minor has provided us with information without authorisation, DGNET will delete that information from its database.

  1. UPDATES

DGNET may update this Privacy Policy by publishing an updated version on the website. Users should periodically review this Privacy Policy to stay up to date on any changes. By using the website, customers agree to the processing of their personal data per DGNET’s updated privacy policy.

Last update: 8th September 2025