PRIVACY POLICY

The “COMPANY” will collect the following data:

COMMERCIAL CONTACT: Handling inquiries and contact requests received by any means regarding the services of the “COMPANY,” as well as maintaining commercial relationships:

• Data collected: Name, phone number, email, and inquiry.
• Purpose: To respond to requests for information made by the data subject through any means about the products and services of the “COMPANY,” and to establish and maintain commercial relationships.
• Legal Basis: Based on the provision of consent, the “COMPANY” is authorized to process the data provided by the data subject through the contact request and pursuant to legitimate interest for the development and maintenance of commercial relationships.
• Retention Periods: Data will be retained until the data subject requests its deletion or removal. Once deleted, the data will remain available to public authorities, judges, and courts for the legally established periods to address and defend potential liabilities arising from the processing.

CURRICULUM OR EMPLOYMENT: Submission of a Curriculum Vitae (CV) through the website or by any other means to the “COMPANY.”

• Data Collected: Professional area, first and last name, phone number, email, CV, cover letter, and any other personal data associated with the CV or professional profile.
• Purpose: To manage the applicant’s candidacy in the selection processes published or for other vacancies that align with their professional profile, which may arise in the future within the activities of the “COMPANY.”
• Retention Periods: Data will be retained until the applicant is assigned a job position or requests its deletion. It will therefore be retained for the time necessary to fulfill the purpose of the processing, and once this purpose is complete, the data will remain available to public authorities, judges, and courts for the legally established periods to address and defend potential liabilities arising from the processing.
• Legal Basis: Consent provided by the applicant.
• Recipients: The data provided and derived from the selection process may be shared with:
  • Third-party companies identified by the applicant for reference requests that may be necessary for the candidate’s selection process.

PROMOTIONAL OR NEWSLETTERS: Sending information, updates, notices, reminders, and promotions that may be of interest, related to the activities of the “COMPANY.”

• Data Collected: Email address, first and last name.
• Purpose: To register interested individuals for the delivery of information, updates, and promotions, as well as to establish and maintain commercial relationships.
• Legal Basis: Consent provided by the individual to the “COMPANY” for subscription to promotional services, and legitimate interest in the development of commercial relationships.
• Retention Periods: Data will be retained until the individual requests to unsubscribe or delete their data. Once deleted, the data will remain available to public authorities, judges, and courts for the legally established periods to address and defend potential liabilities arising from the processing.

SERVICES: Data provided for the delivery of the “COMPANY” services. The services will be identified at the time of data collection and registration.

• Data Collected: First and last name, ID (DNI), contact address, home address, email, phone number, and any additional data necessary depending on the requested service, which will be exclusively required for registration in the “COMPANY” services.
• Purpose: To register interested individuals for the provision of services and to establish and maintain commercial relationships.
• Legal Basis: The existing legal or contractual relationship necessary for the delivery of the service, as well as the legitimate interest in the development of commercial relationships.
• Retention Periods: Data will be retained for the duration necessary to fulfill the purpose of the processing. Once the purpose is complete, the data will remain available to public authorities, judges, and courts for the legally established periods to address and defend potential liabilities arising from the processing.

CLIENTS/SUPPLIERS: Professional personal data provided by clients/suppliers for the provision of services and the management of the legal or contractual relationship.

• Data Collected: First and last name, ID (DNI), professional contact address, email, and phone number.
• Purpose: Management of the contractual relationship for the service.
• Legal Basis: The existing legal or contractual relationship necessary for the provision of the service.
• Retention Periods: Data will be retained for as long as necessary to fulfill the purpose of processing or until its deletion. Once concluded or deleted, it may be retained for a period of six years, remaining available to public authorities, judges, and courts for addressing and defending potential liabilities arising from the processing.

ACCESS CONTROL AND SECURITY: Data collected through surveillance cameras or provided for access control to the “COMPANY” buildings:

• Data Collected: First and last name, ID (DNI), and images.
• Purpose: To monitor access and manage internal security at the “COMPANY” facilities.
• Legal Basis: Legitimate interest in ensuring the security of the facilities by the owner, which justifies the collection of data for access control and the necessary recording of images when entering these facilities.
• Retention Periods: Data will be retained for a maximum period of one month unless it is necessary to retain them longer to clarify an infraction or unlawful act.

Data is shared with third-party service providers acting as data processors, with whom the “COMPANY” has signed corresponding Data Processing Agreements and verified that they provide sufficient guarantees to implement appropriate technical and organizational measures. This ensures that processing complies with GDPR requirements and guarantees the protection of the rights of the data subject.