Privacy Policy

COMMERCIAL CONTACT: handling of inquiries and contact requests received through any channel regarding the company's services, as well as the maintenance of business relationships:

Data collected: Name, telephone, email and enquiry.

Purpose: To respond to information requests made by the data subject through any means regarding the company's products and services, and to establish and maintain commercial relationships.

Legal basis: Based on the data subject's consent, the company is entitled to process the data provided through the contact request, and in accordance with its legitimate interest in the development and maintenance of commercial relationships.

Retention periods: Data will be retained until the data subject requests its deletion, and once deleted it will remain available to public authorities, judges and courts for the legally established periods for the handling and defence of any liabilities arising from the processing.

CV OR EMPLOYMENT: submission of a curriculum vitae through the website or through any other means to the company.

Data collected: Professional area, name, surnames, telephone, e-mail, CV, cover letter and any other personal data associated with the curriculum vitae or professional profile.

Purpose: Management of the data subject's application to published selection processes or other vacancies suited to their professional profile that may arise in the future within the company's activities.

Legal basis: Consent of the data subject.

Retention periods: Data will be retained until a position is assigned or until deletion is requested. It will therefore be retained for the time necessary for the purpose of the processing, and once completed it will remain available to public authorities, judges and courts for the legally established periods for the handling and defence of any liabilities arising from the processing.

Recipients: data provided and derived from the selection process may be shared with third-party companies identified by the data subject for reference checks that may be required for candidate selection.

PROMOTIONAL COMMUNICATIONS OR NEWSLETTERS: sending information, news, notices, reminders and promotions that may be of interest, related to the company's activities.

Data collected: Email address, name and surnames.

Purpose: To register data subjects for the sending of information, news and promotions, and to establish and maintain commercial relationships.

Legal basis: Consent of the data subject to sign up for promotional services, and the legitimate interest in the development of commercial relationships.

Retention periods: Data will be retained until the data subject requests its deletion, and once deleted it will remain available to public authorities, judges and courts for the legally established periods for the handling and defence of any liabilities arising from the processing.

SERVICES: Data provided for the provision of the company's services. The specific services will be identified at the time the data is collected and registered.

Data collected: Name, surnames, ID number, contact address, home address, email, contact telephone and any other data required depending on the service requested, which will be strictly necessary for registration in the company's services.

Purpose: To register data subjects for the provision of services and to establish and maintain commercial relationships.

Legal basis: The existing legal or contractual relationship necessary for the provision of the service and the legitimate interest in the development of commercial relationships.

Retention periods: Data will be retained for the time necessary for the purpose of the processing, and once completed it will remain available to public authorities, judges and courts for the legally established periods for the handling and defence of any liabilities arising from the processing.

REGISTRATION AND MONITORING OF CORPORATE SOCIAL MEDIA ACCOUNTS: the personal data that you provide or make available to social networks by becoming a follower of them. The company's corporate social media accounts are the following:

Data collected: Name, surnames, ID number, contact address, home address, email, contact telephone and any other data provided by the corresponding social network.

Purpose: Social network monitoring and establishing and maintaining commercial relationships.

Legal basis: Consent of the data subject and legitimate interest in the development of commercial relationships.

Retention periods: Data will be retained for the time necessary for the purpose of the processing, and once completed it will remain available to public authorities, judges and courts for the legally established periods for the handling and defence of any liabilities arising from the processing.

CLIENTS/SUPPLIERS: professional personal data provided by clients/suppliers for the provision of services and management of the legal or contractual relationship.

Data collected: Name, surnames, ID number, professional contact address, email, contact telephone.

Purpose: Management of the contractual relationship for the service.

Legal basis: The existing legal or contractual relationship necessary for the provision of the service.

Retention periods: Data will be retained for the time necessary for the purpose of the processing or until deletion is requested, and once completed or deleted may be retained for a period of six years for the handling and defence of any liabilities arising from the processing.

ACCESS CONTROL AND SECURITY: data collected by video surveillance cameras or provided for access control to the company's premises.

Data collected: Name, surnames, ID number and images.

Purpose: To control access and manage the internal security of the company's premises.

Legal basis: Legitimate interest in ensuring security on the premises, which justifies recording data in the access control system and the necessary capture of images upon entry to those premises.

Retention periods: Data will be retained for a maximum period of one month, unless it is necessary to retain them for longer in order to clarify any offence or unlawful act detected.

Data is shared with third parties for the provision of services by third-party processors with whom the company has signed the corresponding Data Processing Agreements and verified that they provide sufficient guarantees to implement appropriate technical and organisational measures, ensuring that processing is carried out in accordance with GDPR requirements and guarantees the protection of the data subject's rights.