For what purpose will we process your personal data?<\/strong><\/p>\nASC GRUPO ERSI SLU\u00a0 processes your data for the following purposes:<\/p>\n
– Mantenimiento de la relaci\u00f3n mercantil y prestaci\u00f3n del servicio contratado<\/p>\n
– Realizaci\u00f3n de un presupuesto ajustado a sus necesidades<\/p>\n
– Gestionar comunicaciones por correo electr\u00f3nico con interesados<\/p>\n
– Llevar a cabo los procesos de selecci\u00f3n de la sociedad<\/p>\n
– Gesti\u00f3n de los empleados y recursos humanos de la sociedad<\/p>\n
– Env\u00edo de informaci\u00f3n comercial vinculada con nuestro sector<\/p>\n
\u00a0How long will we keep your data?<\/strong><\/p>\nThe personal data you provide to us will be retained for as long as the business relationship remains in force. However, to ensure maximum transparency with you, we would like to point out that the general timeframes we work with are:<\/p>\n
– General identification data (email address, first name, surname, telephone number, etc.): for the duration of the business relationship or until consent is withdrawn. In any event, such data will be deleted when it is no longer to be used for the purpose for which it was collected<\/p>\n
– Law on Offences and Penalties in the Social Security System (obligations relating to registration, enrolment, deregistration, contributions, payment of wages, etc.); Articles 66 et seq. of the General Tax Law (accounting records, etc.): four (4) years<\/p>\n
– Personal actions with no specific limitation period (Article 1964 of the Civil Code): five (5) years<\/p>\n
– Accounting, tax and employment matters (Article 30 of the Commercial Code \u2013 accounting records, invoices, etc.): six (6) years<\/p>\n
– Employment: contracts, records of working hours, payslips and social security contributions, identification documents \u2013 four (4) years; in the case of occupational health and safety reports, records of illness or accidents, and contracts with occupational health and safety service providers \u2013 five (5) years<\/p>\n
– Data subject to the Law on the Prevention of Money Laundering and Terrorist Financing (Article 25): ten (10) years<\/p>\n
– Recruitment processes: two (2) years from the date of submission of the CV<\/p>\n
– Furthermore, as regards the sending of commercial information, even if the relationship between the parties comes to an end, the data controller will continue to retain your information for the purpose of sending newsletters relating to our products and services[1]. You may always exercise the rights granted to you under current legislation by contacting us via the method that is most convenient for you<\/p>\n
– Disaggregated and anonymised data: no deadline<\/p>\n
Notwithstanding these general time limits, we would like to inform you that we will periodically review our systems in order to delete any data that is not legally required<\/p>\n
<\/p>\n
III. LEGITIMACY<\/span><\/b><\/span><\/b><\/h4>\nWhat is the legal basis for the processing of your data?<\/strong><\/p>\nDepending on the purposes for which your data is collected, the processing of your data is necessary:<\/p>\n
\u00a0–\u00a0To manage the commercial relationship you have entered into and agreed with us
Performance of a contract (pursuant to Article 6(1)(b) of the GDPR)
Consent of the data subject (pursuant to Article 6(1)(a) of the GDPR)<\/p>\n
– Preparation of a quotation tailored to your needs.
Performance of a contract and\/or pre-contractual relationship (pursuant to Article 6(1)(b) of the GDPR)<\/p>\n
–\u00a0Managing email communications with data subjects
Consent of the data subject (pursuant to Article 6(1)(a) of the GDPR)
Legitimate interest (pursuant to Article 6(1)(f) of the GDPR)<\/p>\n
– To carry out the company\u2019s recruitment processes.
Consent of the data subject (as provided for in Article 6(1)(a) of the GDPR)<\/p>\n
–\u00a0Management of the company\u2019s employees and internal human resources
Performance of a contract (pursuant to Article 6(1)(b) of the GDPR)<\/p>\n
– Sending commercial communications
Consent of the data subject (pursuant to Article 6(1) of the GDPR)
Consent of the data subject (pursuant to Article 20 of the LSSICE)
Legitimate interest (pursuant to Article 6(1)(f) of the GDPR and Article 21(2) of the LSSICE)<\/p>\n
Furthermore, all the data collected is necessary for the provision of the service. However, any data marked with an asterisk (*) is mandatory. Should the mandatory data not be provided, the data controller will be unable to provide the contracted service<\/p>\n
Finally, please note that only persons aged 14 or over may provide personal data on this website. In accordance with the LOPD and GDD, in the case of children under the age of 14, the consent of their parents or guardians is required before we can process their personal data<\/p>\n
Furthermore, only persons aged 18 or over may contract our services. In the case of persons under the age of 18, the consent of their parents or legal guardians is a mandatory requirement for us to be able to provide the services on offer, unless the minor has been emancipated<\/p>\n
<\/p>\n
IV. RIGHTS OF DATA SUBJECTS<\/span><\/b><\/h4>\nWhat rights do I have regarding data protection?<\/strong><\/p>\nIn accordance with the provisions of Article 13 of the GDPR and Article 11.2.c) of the LOPDGDD, you may exercise any of the following rights by writing to us at the postal address AVD. DE CASTILLA, 2 KUDOS, EDF. HUNGR\u00cdA, PL. 2, ESC. B – 28830, SAN FERNANDO DE HENARES, MADRID or by email to GDPR@ERSIGROUP.COM. In any event, in accordance with current legislation, you are entitled to the following rights as set out in Articles 15 to 22 of the GDPR and Articles 12 to 18 of the LOPDGDD:<\/p>\n
\u00a0– Right to request access to personal data relating to the data subject<\/p>\n
– Right to request the rectification or erasure of your personal data<\/p>\n
– Right to request restriction of processing<\/p>\n
– Right to object to processing<\/p>\n
– Right to data portability<\/p>\n
You may request the forms required to exercise your rights from the Data Controller via the email address provided in the Data Controller\u2019s contact details. In addition, you may lodge a complaint with the Spanish Data Protection Agency (AEPD). Further information can be found in Section VII of this document<\/p>\n
<\/p>\n
V. TARGET AUDIENCE<\/span><\/b><\/p>\nTo whom will your data be disclosed?<\/strong><\/p>\nYou will always be informed and, where applicable, your express consent will be sought before your personal data is disclosed or transferred internationally, in accordance with current legislation (Articles 13(1)(e) and 44 of the GDPR, as well as Articles 11(1) and 40 of Law 3\/2018 on the Protection of Personal Data and Children\u2019s Rights). We therefore inform you that the third parties with whom the Data Controller works have their servers located within the EU, the EEA or Switzerland, and have adequate security measures in place to ensure that data is processed appropriately and confidentially<\/p>\n
Apart from the cases mentioned above and unless required by law, your data will not be transferred or disclosed to any third party, except in cases provided for by law or where it is strictly necessary for the provision of a service. In general, data may be transferred to:<\/p>\n
– Technology service providers<\/p>\n
– Payment service providers<\/p>\n
– Payment service providers<\/p>\n
– Third parties or intermediaries, acting as service providers, who operate on our behalf (administrative agencies, consultancy firms, self-employed contractors, etc.)<\/p>\n
– Third-party data processors, partners or parties with a close commercial relationship with the data controller, for the sole purpose of providing our services<\/p>\n
– Where necessary for the provision of our services, subject to prior notification and consent, your data may be processed by our overseas branches<\/p>\n
\u00a0Any transfer of data will be carried out in strict confidence, using the necessary measures, such as the signing of confidentiality agreements or adherence to the privacy policies set out on their respective websites. The User (a term defined to refer to the natural or legal person who uses or browses the website published under the domain name WWW.ERSIGROUP.COM) may object to the transfer of their data to Data Processors by means of a written request, using any of the methods referred to above. The data controller shall not transfer or disclose your data to any third party, except in cases provided for by law or where the provision of a service requires a contractual relationship with a data processor. Accordingly, the User accepts that some of the personal data collected may be provided to these Data Processors (payment platforms, accountancy firms, intermediaries, etc.), where necessary for the effective provision of a contracted service or purchased product. The User also accepts that, in the case of the provision of services, these may be, in whole or in part, subcontracted to other individuals or companies, who shall be regarded as Data Processors, with whom the relevant confidentiality agreement has been entered into, or who have adhered to their privacy policies, as set out on their respective websites. The User may object to the transfer of their data to Data Processors by submitting a written request via any of the means referred to above<\/p>\n
<\/p>\n
VI. SOURCE OF YOUR DATA<\/span><\/b><\/p>\nHow did we obtain your data?<\/strong><\/p>\nThe personal data processed by ASC GRUPO ERSI SLU is provided by the data subject themselves, thereby complying with the provisions of Articles 13 of the GDPR and 11 of the LOPDGDD, as mentioned above, or is obtained from group companies or partners; further information regarding these can be obtained by writing to the email address GDPR@ERSIGROUP.COM or by contacting the Data Controller\u2019s office at the postal address indicated in this document<\/p>\n
\u00a0What categories of data do we process?<\/strong><\/p>\nThe categories of personal data processed:<\/p>\n