1 . DATA CONTROLLER
Who is responsible for your data?
Headline: POLIURETANOS RIVAS S.A. (hereinafter RIVAS).
Registered office: Pog. Ind. Montecicos, c/A, s/n, Cabañas de Ebro -50638 (Zaragoza) Spain.
CIF: A-50305523
Registration data: Zaragoza Mercantile Register, Volume 833, General 559, Section 3, Folio 189, Register Sheet no. 9.985.
Telephone: (+34) 976 617131
E-mail: info@poliuretanosrivas.es
E-mail Data Protection Delegate: dpd@poliuretanosrivas.es
2. PURPOSE OF DATA PROCESSING AND CATEGORIES OF DATA PROCESSED
For what purposes will we process your personal data?
RIVAS will process the user's data for the following purposes:
- To deal with queries, requests or suggestions made through the contact form and corporate e-mail accounts.
- Manage contracting, invoicing and guarantee contracted services.
- Manage the publication on our blog of comments made by interested parties.
- Access our private customer area.
- To send electronic communications about news and updates on contracted products and/or services, unless otherwise indicated or unless the user opposes or revokes their consent.
- Regularly send commercial information (newsletter) about services and news related to our professional activity, provided that the data subject has given us his/her consent to do so and provided that he/she has the possibility to revoke the aforementioned consent.
- In the event that you send us your CV or register for the different job offers that we may publish, we will process your data in order to assess and manage your job application and, where appropriate, to carry out the necessary actions for the selection and recruitment of personnel, in order to offer you positions that match your profile. Unless otherwise indicated, the provision of the required data is necessary, and failure to provide it will prevent the continuity of the selection process.
- Fulfilling legally established obligations, as well as verifying compliance with contractual obligations, including fraud prevention.
What categories of data do we process?
For the above-mentioned purposes, RIVAS processes the following categories of data:
- Identifying data: name, first name, surname, postal address, e-mail address, postcode, telephone number.
- Academic and professional data: training/qualifications, professional experience, membership of professional bodies or associations, in the case of selection procedures.
- Electronic communications metadata.
- Commercial information data.
- Economic, financial or banking data.
- In some cases the personal data requested are mandatory, so that refusal to provide them will make it impossible to carry out the provision of the contracted services. These cases will be indicated by the Data Controller.
The user guarantees that the data provided are true, accurate, complete and up to date, being responsible for any damage or loss, direct or indirect, that may be caused as a result of non-compliance with this obligation. In the event that the user provides data of third parties, he/she declares that he/she has their consent and undertakes to provide them with the information contained in this clause, exempting RIVAS from any liability in this regard. However, RIVAS may carry out checks to verify this fact, adopting the corresponding due diligence measures, in accordance with data protection regulations.
What is the legitimacy for the processing of your data?
The legitimacy for the processing of data collected from queries, requests or suggestions made by means of the contact form and/or through corporate emails, lies in our own legitimate interest in responding to a potential client and in the consent, clear affirmative action of the user who, by making the query, is authorising us to process their data solely and exclusively for the purpose of responding to the same.
For the management of the contracting of services, payment, invoicing and corresponding deliveries, the legitimacy lies in the execution of the contract itself.
The legitimacy to manage the publication of comments on our blog lies in our own legitimate interest in knowing the opinions of the interested parties and in the consent, clear affirmative action of the user, who by writing said comment is enabling us to process their data solely and exclusively for this purpose.
Access to our private customer area is legitimised by the user's consent given when creating the account in the aforementioned private area and by the contractual relationship maintained with RIVAS.
To send electronic communications about news and updates on contracted products and/or services, the legitimacy of the processing is found in the legitimate interest of RIVAS/BOLN to carry out such processing in accordance with current legislation.
To periodically send commercial information (newsletter) on services and news related to our professional activity, the legitimacy is found in the consent of the user.
The legitimacy for the processing of data in relation to the sending of CVs and registrations for professional offers that we may publish is based on the consent of the user who sends his or her data.
Finally, the processing of data to comply with legally established obligations, as well as to verify compliance with contractual obligations, including fraud prevention, finds its legitimacy as the description of its purpose indicates in the fulfilment of a legal obligation.
How long do we keep your data?
RIVAS will keep users' personal data for the time necessary to carry out the purposes for which they were collected and as long as they do not revoke the consents granted. Subsequently, if necessary, the information will be kept blocked for the legally established periods.
In the case of the data you provide in relation to the job offers to which you wish to subscribe, they will be kept for one year from the date of the last update. After this period has elapsed, without having been updated, the data will be deleted, unless you tell us otherwise.
What security measures do we put in place to safeguard your data?
RIVAS is committed to the protection of personal data, the privacy of users and cybersecurity, so in order to protect the different types of data reflected in this privacy policy it will implement the necessary technical and organisational security measures to prevent their loss, manipulation, dissemination or alteration, such as encryption of communications between the user's device and the RIVAS servers, perimeter security systems or proactive IDS/IPS systems, among others.
3. DATA COMMUNICATION
To which recipients will your data be communicated?
The Data Controller contracts with third party processors in order to provide its services. With the exception of these entities, your data will not be disclosed to other third parties. If for any reason it is necessary to communicate such data to third parties, you will be informed in advance and, where appropriate, your consent will be requested and the purposes of the communication and the identity of the third party to whom the data will be communicated will be specified.
This is with the exception of cases in which a legal requirement makes it necessary to communicate such data to a third party.
4. USERS' RIGHTS
What rights does the data subject have?
Individuals who provide us with their data have the following rights:
- Right of access
- Right of rectification or erasure
- Right to restriction of processing
- Right to portability
- Right to object
- Right to withdraw consent
- If you would like more information about your rights, we suggest you visit the website of the Spanish Data Protection Agency.
These rights may be exercised by sending a letter, accompanied by a copy of an official document that identifies you, addressed to POLIURETANOS RIVAS S.A., P. Ind. Montecicos calle A, s/N, Cabañas de Ebro 50038 (Zaragoza) Spain, for the attention of the data protection delegate. You can also contact us for this purpose at the following e-mail address dpo@poliuretanosrivas.es.
Additionally, we inform you about the possibility of filing a complaint with the competent Control Authority, in this case, the Spanish Data Protection Agency, especially in the event that you have not obtained satisfaction in the exercise of your rights. You can contact the Spanish Data Protection Agency by telephone on 901 100 099 and 912 663 517 or by visiting them at their address C/ Jorge Juan, 6. 28001 - Madrid.