Skip to content

LEGAL

General terms and conditions of contract

Last updated: 22 April 2026

1. Purpose

These General Terms and Conditions govern the acquisition of the services offered on the website https://www.lapsowork.com and related platforms. Acceptance of the services implies agreement with all the conditions listed in this document.

2. Identification

LAPSOWORK, SL operates under the following details:

  • Company name: LAPSOWORK, SL
  • CIF: B10834943
  • Registered office: Avda. Elvas, Edif. PCTEX, s/n, Bloque 2, Puerta 1, 06006 Badajoz (Badajoz)
  • Commercial Registry of Badajoz: Tomo 791, Libro 0, Folio 111, Hoja BA-32810, Inscripción 1ª (25/08/2022)

3. Communications

4. Services

LAPSOWORK, SL reserves the right to decide, at any time, the products and/or services offered to clients. Accordingly, the company may, at any time, add new products and/or services to those currently offered. Access to the contracted services requires the client to register using personal credentials.

5. Purchase and/or contracting process

Requirements:

  • The client must be of legal age.
  • Mandatory registration via a form with truthful and complete details.
  • Express acceptance of the privacy policies and general terms and conditions.

Steps of the process:

  1. Select the service (DEMO or "GET IT NOW").
  2. Choose the type: limited demo or direct contracting.
  3. Complete the form and accept the corresponding policies.
  4. For the workforce platform: select the business plan.
  5. Review the summary with prices, discounts and taxes.
  6. Proceed to payment via the payment gateway.
  7. Receive confirmation by email.
  8. Choose the invoice format (paper or digital).

The electronic contract is sent together with the confirmation. It is advisable for the client to keep a copy on a durable medium.

6. Term, renewal and cancellation

The contract may be cancelled for breach of obligations by either party.

7. Delivery of the services

Once payment has been processed, the client will receive the access credentials to the management platform by email at the account provided during contracting.

LAPSOWORK, SL will not assume responsibility if, due to the client's unavailability or poor internet connectivity, the process is not completed.

8. Prices, charges and taxes

  • Prices are expressed in euros.
  • VAT not included (applicable rate: 21%).
  • Final prices will be communicated before acceptance during the purchase process.
  • Prices may vary; the price in force on the date of contracting will apply.

9. Payment methods

Credit or debit card: secure payment via Stripe's SSL gateway. Refunds will be processed by the same method. Data is protected with the security measures required by the applicable regulations.

10. Returns and withdrawal policy

The General Law for the Protection of Consumers and Users does not apply, since professional orders from companies and/or self-employed persons are governed by the rules of the civil code.

Conditions:

  • DEMO: no minimum term, cancellation at any time without penalty.
  • Annual contract: the first payment is made upon formalising the contract; subsequent payments follow the anniversary date. It is automatically renewed for an equal period unless reliably notified ONE MONTH in advance.
  • Cancellation does not entail the waiver of outstanding debts.

11. Warranties

As this involves the contracting of services, the law on warranties does not apply. For issues with non-receipt of credentials, contact technical support at [email protected].

12. Liability and exemption

LAPSOWORK, SL may suspend, withdraw or cancel the services partially or totally at any time without prior notice.

13. Customer service and complaints

Contact: [email protected].

Dispute resolution: in the event of a dispute, both parties agree to attempt to resolve it through a mediation process, in accordance with Ley 5/2012 on mediation in civil and commercial matters. The mediation will be administered by the Mediation Centre of the Chamber of Commerce of Badajoz. The costs will be paid in equal shares, unless otherwise agreed.

If the mediation concludes with an agreement, the parties undertake to raise said agreement to a public deed. Without agreement, either party may resort to the Courts of the place where the contract was concluded.

Complaints form: you can download and submit the official complaints form via the following document.

Complaints form Official document for submitting a complaint. Download PDF

14. Applicable law

Regime: current Spanish legislation. Language: Spanish.

15. Data protection — data processing agreement (art. 28 RGPD)

The following contract for data access on behalf of third parties is formalised between the parties in accordance with Regulation (EU) 2016/679 (RGPD) and Ley Orgánica 3/2018 (LOPDGDD).

  • Data controller: the Client contracting the service.
  • Data processor: LAPSOWORK, SL (CIF B10834943).
  • Purpose: the Lapsowork platform for managing the Internal Information System (Whistleblowing Channel) and other contracted modules, through the provision of the platform and technical support.
  • Operations: collection, recording, structuring, storage, consultation, communication by transmission, interconnection, restriction and communication.
  • Data: identification and contact data of the persons involved (clients, suppliers, workers) and any data incorporated into the management platform (evidence, third-party data, among others).
  • Term: indefinite for as long as the contractual relationship is maintained.

15.1. Obligations of the data processor

  • Use the personal data subject to processing, or the data collected for inclusion, only for the purpose of this engagement. Under no circumstances may the data be used for its own purposes.
  • Process the data in accordance with the documented instructions of the controller.
  • Keep, in writing, a record of all categories of processing activities carried out on behalf of the controller.
  • Not disclose the data to third parties, unless it has the express authorisation of the controller, in the legally admissible cases.
  • Subcontracting: subcontracting with CEDESA DIGITAL, SL for platform services is authorised. Any additional subcontracting will require prior notification to the controller 30 days in advance.
  • Maintain the duty of secrecy with respect to the personal data to which it has had access, even after the contract ends.
  • Guarantee that the persons authorised to process personal data expressly commit in writing to respecting confidentiality.
  • Keep available to the controller the documentation proving compliance with its obligation.
  • Guarantee the necessary training in personal data protection for the persons authorised to process data.
  • Assist the controller in responding to the exercise of the rights of access, rectification, erasure and objection, restriction of processing, data portability and not to be subject to automated individual decisions.
  • Notification of security breaches: without undue delay and, in any event, within a maximum period of 24 hours. The notification will include a description of the nature of the breach, the categories and approximate number of data subjects affected, the contact details of the DPO, the likely consequences and the measures adopted or proposed.
  • Support the controller in carrying out data protection impact assessments.
  • Support the controller in carrying out prior consultations with the supervisory authority.
  • Make available to the controller all the information necessary to demonstrate compliance with its obligations, as well as for carrying out audits or inspections.
  • Security measures: secure environment, defined and separated roles, access control, identification and authentication, secure storage, anti-malware, backups, secure destruction of equipment, secure transfer, network access control, confidentiality, integrity, availability and resilience, rapid restoration and regular verification, pseudonymisation and encryption.
  • The servers will be owned or subcontracted and located in the EU, except with express authorisation for transfers to third countries.
  • Destination of the data once the provision has ended: certified destruction. The processor may keep a blocked copy for as long as liabilities may arise.

15.2. Obligations of the controller

  • Provide or allow access to the data to the data processor.
  • Carry out the personal data protection impact assessment of the processing operations.
  • Carry out the relevant prior consultations.
  • Ensure compliance with the RGPD by the data processor.
  • Supervise the processing through inspections and audits.

15.3. Information and rights

Legal basis: compliance with a legal obligation established by the personal data protection regulations (art. 6.1.c RGPD).

Retention: for as long as the contract is in force plus the time necessary to address liabilities (a minimum of four years without claims).

Exercise of rights: written request with identification to [email protected].

Complaints: Agencia Española de Protección de Datos (www.aepd.es).