Privacy policy
1. Privacy and data protection policy
This Privacy Policy is an integral part of the Legal Notice of the Site.
In compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”), as well as other implementing rules, the Entity informs Users that their data will be incorporated into the Entity’s databases, according to the details below:
1.1. Details of the person responsible for the file and contact details of the Security Officer
- Identity: ATICA REDEX, S.L.
- Telephone: 948702317
- E-mail: lopd@aticaredex.com
- Security Manager: Edurne Arbiol Aguerri
- Contact details of the Security Officer: lopd@aticaredex.com
1.2. Purpose of processing
The data that the Entity will keep on you are your name, address, telephone number, e-mail address and, if you are a customer, your user name and password and your payment details.
The Entity shall process the information in its possession in relation to the persons concerned for the following purposes:
- Handle any type of request, suggestion or question about our professional services made by interested parties.
- In-house research and development of products and services.
- Commercial communications, involving the processing of your data to inform you about activities, articles of interest and general information about our services by e-mail.
Interested parties may unsubscribe from these communications at lopd@aticaredex.com.
- Manage the data provided by job applicants through the Curriculum Vitae (CV) they provide us with for the selection and recruitment process.
- Likewise, we may be required to use and retain personal information for legal and compliance reasons.
- We may also use personal information to fulfil internal and external audit requirements and as we otherwise deem necessary or appropriate: (a) under the applicable law (b) to respond to requests from courts, law enforcement, regulatory agencies and other public and government authorities (c) for compliance with our terms and conditions, and (d) to protect our rights, privacy, safety or property, or those of others.
We will treat your data and information provided for selection processes with the utmost confidentiality, taking the necessary technical and organisational measures to prevent loss, misuse, alteration and/or unauthorised access.
Data Retention
- Management of Curriculum Vitae: the organisation may keep your Curriculum Vitae for a maximum period of one year, after which it will be automatically destroyed, in accordance with the principle of data quality.
- When determining retention periods for other data, the organisation takes into account local laws, contractual obligations and the expectations and requirements of our customers. When personal data are no longer needed for the purpose for which they were collected, we securely delete or destroy them.
1.3. Legitimation
We process personal data in accordance with the law and in a transparent and fair manner. Data are processed
- For the performance of contracts concluded with the Institution, the processing being necessary for the fulfilment of our obligationsa towards you.
- With your consent.
- For the fulfilment of a legitimate interest pursued by the subjects of the Entity.
- In accordance with the law.
1.4. Data flow
Processors: the Entity may provide access to certain personal data when it deems it necessary to provide its services, as well as to improve its services. When we share personal information, we do so in accordance with data privacy and security requirements.
- Group companies: we share personal data between group companies to perform and improve the services you have contracted with us.
Transfer of data: we do not transfer personal data to third parties, except in cases provided for by law.
Access to and/or processing of personal data for which Users are responsible is not considered a transfer of data when this is necessary for the proper provision of the services they have contracted.
1.5. Origin
Source: The Entity collects the user’s personal information from the following sources:
- Information provided directly by you when you request information from us, enter into a contract or use our services, or when you request customer service.
- We may also obtain information from third parties that we believe is publicly available or on a commercial basis in order to provide you with services that we believe may be of interest to you and to maintain data accuracy and improve our products and services.a
1.6. Rights
Right of access, rectification and deletion: data subjects have the right to obtain confirmation as to whether or not the Entity is processing personal data concerning them. Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
Right of restriction and objection: In certain circumstances, data subjects may request the restriction of the processing of their data, in which case the data will only be retained for the exercise or defence of rights. Under certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. The Entity shall stop processing the data, except for compelling legitimate reasons or for the exercise or defence of any claims.
Right of portability: data subjects have the right to request the portability of their data, enabling it to be transmitted directly to an entity or company, provided this is technically possible.
These rights may be exercised by any means of communication with the Entity at the address indicated in section 2 of this Legal Notice, enclosing a photocopy of the identity card of the person concerned or at lopd@aticaredex.com.
1.7. Updates and modifications
The organisation reserves the right to amend and/or update the data protection notice when this is necessary for proper compliance with the Data Protection Regulation. In the event of changes, the new text will be published on this page, where the current information can be accessed. In any case, the relationship with Users will be governed by the legislation in force at the precise moment in which the website is accessed.
1.8. Communication channel and support
Interested parties may communicate any questions concerning the processing of their personal data or the interpretation of our policy to the following address: lopd@aticaredex.com.
In accordance with the provisions of Law 34/2002, of 11 July, on Information Society and Electronic Commerce Services, you may revoke your consent to receive advertising or promotional communications by e-mail or other equivalent means of electronic communication from ATICA REDEX, S.L. at any time by sending an e-mail with the subject “UNSUBSCRIBE E-MAIL” to the following address: lopd@aticaredex.com.
The organisation maintains an active profile on the main Internet social networks (Facebook, Twitter, LinkedIn, Youtube and Google+). The processing that the organisation will carry out with the data of its followers will in any case be that which the social network allows for company profiles. The organisation may then inform its followers by any means allowed by the social network about its activities, presentations, offers, as well as provide personalised customer service. Under no circumstances may the organisation extract data from social networks, unless the specific and explicit consent of the user has been obtained.