Insertion Order
Ecom7 will be solely responsible for any direct damages caused to the customer due to its fault or negligence while providing the services outlined in this agreement. However, this liability will not cover indirect damages or loss of profits. The maximum compensation will be limited to the total amount paid by the customer in the three months preceding the incident that caused the damage.

Data Controller
Ecom7 acts as the data controller for all personal data included in this agreement, specifically concerning the legal representatives and partners of both parties (hereafter referred to as "stakeholders"), as well as any data generated during the execution of this agreement.

Necessity of Data Processing
The processing of personal data is a mandatory contractual requirement for implementing this agreement. Stakeholders must provide the necessary data, as failure to do so may result in the agreement being delayed, unenforceable, or even terminated.

Purpose of Data Processing
The collected personal data will be processed for the following purposes:

Management and execution of the contractual relationship.

Sending communications (via email or postal mail) related to the contract.

Inclusion in the company’s contact directory for internal communication.

Financial, accounting, and tax management related to the contractual relationship.

Filing and record-keeping of the contractual agreement.

Data Retention Period
Personal data will be retained for the duration of the agreement.

If data deletion is not requested, it will be kept for the legally required limitation period applicable to any potential claims.

Data may also be stored for compliance with official bodies (e.g., Tax Authorities, Social Security Administration).

In any case, the maximum retention period will be five years from the termination of the agreement.

Legal Basis for Data Processing
The processing of stakeholders' data is essential for the execution of the contract in which they are involved as legal representatives or partners. Additionally, Ecom7’s inclusion of stakeholders in its contact database is based on legitimate business interest.

Recipients of Personal Data
Personal data may be shared with the following third parties:

Judicial authorities (courts and judges) when required for legal proceedings.

Financial institutions for managing payments and collections.

Tax authorities to comply with tax obligations.

Financial auditors to fulfill financial reporting requirements.

Public notaries in cases where legal documents need to be notarized.

Regulatory or administrative bodies for compliance with inspection, registration, and control procedures.

International Data Transfers
Ecom7 does not transfer personal data internationally.

All data is processed within Spain and the European Union (EU) under applicable data protection regulations.

Data Processors
Personal data may be shared with third-party service providers within Spain or the EU for essential services like data hosting, invoicing, or IT support.

These third parties operate under a service agreement that mandates them to either return or delete the data once the service is completed.

Stakeholder Rights
Stakeholders have the right to:

Access their personal data.

Request corrections if data is inaccurate.

Request deletion of personal data when legally applicable.

Object to data processing under specific circumstances.

Restrict data processing in certain conditions.

Request data portability, where legally applicable.

To exercise these rights, stakeholders must submit a written request to Ecom7’s postal address, clearly specifying the right they wish to invoke and providing a copy of their identity document (ID card or legal identification document).

If stakeholders believe their data protection rights have been violated, they have the right to file a complaint with the Spanish Data Protection Agency.