Privacy Policy

At BUSINESS PROCESS & CONTROL MANAGEMENT SOLUTIONS LLC (hereinafter BP&C) we are committed to protecting your personal data, and respecting your right to privacy.

Our privacy policy explains how we collect, use, process and protect your personal data in accordance with the General Data Protection Regulation (GDPR), as of 27 April 2016, and other applicable legislation.


Personal data means any information related to a natural person, identified or identifiable, directly or indirectly, in particular by name, photograph, identification number, or any other identification element provided for in the current legislation.


The entity responsible for the collection and processing of data is BP&C, taking into account the nature, scope, context and purposes of data processing, as well as the risks to the rights and freedoms of natural persons.


BP&C is committed to protecting the privacy of the users of its services by developing and using technologies which guarantee the best levels of security and privacy.

Users are mostly given the option to browse the BP&C site without providing personal data. Sometimes, however, some information which is essential for the provision of and access to services is collected and stored.


BP&C respects your right to privacy and does not collect personal data other than that which you voluntarily provide to us by filling a form, or by any other legitimate means. By providing personal data to BP&C, the user acknowledges and consents that it will be processed in accordance with this privacy policy, which guarantees that it will only be used for the purposes described at the time of collection.

Whenever personal data is collected by BP&C, the collection of which is dependent on the consent of the data subject, information is given on the specific, defined, explicit and legitimate purposes of the collection.

Should the processing of personal data for a purpose other than that initially described be justified, we will always request explicit consent for this purpose, with the exception of cases in which the processing is lawful without consent, in accordance with the current legislation.

In accordance with the current legislation on the protection of personal data, BP&C may also lawfully process your personal data in specific situations, such as:

  1. where processing is necessary for the performance of a contract to which the data subject is party or for pre-contractual diligences at the request of the data subject;
  2. where processing is necessary to comply with BP&C's legal obligations;
  3. where processing is necessary in order to protect the vital interests of the data subject or of another natural person;
  4. where processing is necessary for the purposes of the legitimate interests pursued by BP&C or a third party, except where the interests, fundamental rights or freedoms of the data subject require protection of personal data;
  5. where processing is necessary for the purposes of carrying out obligations and exercising specific rights of BP&C, or of the data subject, in relation to labour law, social security and social protection under the terms of the GDPR.


The information collected is for use by BP&C in accordance with the purposes stated at the time of collection or to comply with legal obligations.

The information collected will be treated confidentially and may be accessed by a restricted group of BP&C employees, in compliance with their professional duties, within the strict limits and for the purposes of the performance of their functions.


BP&C will apply appropriate and necessary technical and organizational measures to protect the information stored in the system against access, use, modification or removal of personal data.

Personal data shall be stored for the minimum period of time necessary for the specific purposes of the processing which led to its collection or subsequent processing, in compliance with the current legislation.


The data subject has the right to request access to his personal data at any time, as well as to request their rectification or erasure, to restrict their processing, to withdraw their consent and to exercise any other rights provided for by law, within the limits of the current legislation.

Should you withdraw your consent, this shall not affect the lawfulness of the data processing carried out on the basis of the consent previously given.

The data subject also has the right to be notified in case of violation of their personal data, in accordance and under the terms of the GDPR.

For questions related to the processing of personal data and the exercise of your rights under the GDPR, please contact us at


BP&C and its affiliate companies are operated in the United States. Any Personal Information provided to us will be transferred to the United States, and by using the Website and providing BP&C,  and its affiliate companies with your Personal Information, you consent to this transfer.


In the event that users or customers have been given the possibility of creating personal access codes, consisting of a customer code (login) and a password to visit restricted areas, these will be for the user or customer’s own personal use and consequently they will be responsible for all operations carried out with the said codes.

To this end, the user must select characters that are not easily identifiable and keep them secret. Facilitating, using, or attempting to decipher the access codes of others, or disclosing them to other unauthorized persons is considered a serious violation of the rules of use and security. If the user has reason to believe that their password is or may be in the possession of any unauthorized person, they must immediately inform BP&C by email at: in order to be given a new one.


The site may contain links to other pages of third parties, the content of which, despite periodic reviews, it cannot control at all times. Any user connecting from this site to these other sites of the network outside our company will therefore be doing so under their exclusive responsibility. 

Consequently, the site cannot guarantee, in relation to these other pages, their quality, accuracy or appropriacy. In no way shall it be considered that these connections are an extension of our page, or that we share the views expressed in them or have any relationship to the products or services provided or sold by them. 

However, if you observe in them any information that might run counter to law or people’s dignity, or that is of a racist or xenophobic nature, or is apologetic towards terrorism or violence, please notify us by email at the address: so that we can decide whether they should be removed.


Generally, this privacy policy applies to all services provided by BP&C, without prejudice to other policies, agreements or legislation applicable in more specific contexts of collection and processing of personal data.


BP&C may change this privacy policy whenever technically or legally justified.

The changes will apply to new processing of personal data; if the changes have an impact on the processing of personal data already collected, BP&C will inform the data subject about the changes so that they can give explicit consent, or assert their right to object or to erasure.


This website collects anonymous information about its visitors, which is made available by browsers and web servers, such as browser type, language preferences, site of origin, pages visited, duration of visit(s), date and time of each request, search terms, among others. No information is collected intentionally that can be used to identify visitors to the site. The purpose of collecting this information is to understand how our users use the website, so that we can improve the quality and usefulness of the services we provide.

Notwithstanding the anonymous information collected and processed on our Web Analytics platform, technical information about your visit(s) may be collected by the technological infrastructure supporting the system. BP&C does not share this information with third parties, subject to the legal requirements imposed by the current legislation (i.e., this information may be shared with the relevant public authorities in compliance with legislation).