1. OWNER OF THE WEBSITE AND PARTY RESPONSIBLE FOR ITS PROCESSING
In compliance with article 10 of Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, it is hereby stated:
Who is responsible for the processing of your data?
COMPANY NAME: ACRISTALIA SL (hereinafter, ACRISTALIA)
VAT NUMBER: B92813096
Address: C/ Santa Laura 9, 29651, Mijas Costa, Málaga.
E-mail: comunicacion@acristalia.com
Web: www.acristalia.com
2. PROTECTION OF PERSONAL DATA
2.1 Data Protection Rights
Users’ rights:
– Right of access to personal data, to consult whether the company is processing their data.
– Right of rectification, if the data is incorrect.
– Right of Cancellation or Deletion and linked to these, the right to be forgotten, in which case the data will only be kept for the formulation, exercise or defence of claims.
– Right to object to the processing, the company will stop processing the data in the way you indicate, unless for legitimate reasons it must continue to be processed.
– Right to the limitation of processing, not applying to the data the processing operations that in each case would correspond while the data controller determines whether it is appropriate to respond to other requests.
– Right to data portability, you have the right to receive the personal data concerning you that you have provided to the company in a structured, commonly used and machine-readable format, and to request transmission to another data controller where technically possible.
How to exercise the rights: Interested parties may exercise their rights by means of a written communication to the company’s tax domicile or to the e-mail address provided, including a photocopy of their ID card or official documentation proving their identity.
Possibility of withdrawing consent: In the event that consent has been granted for a specific purpose, you have the right to withdraw consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
Supervisory Authority: If a user considers that there is a problem with the way the company is handling their data, they can address their complaints to the Spanish Data Protection Agency.
2.2 DATA RETENTION
Customer Data: It will vary depending on the service the client contracts.
– 4 years: Law on Infringements and Penalties in the Social Order (obligations regarding affiliation, registrations, cancellations, contributions, payment of salaries…); Art. 66 and following General Tax Law (accounting books…).
– 5 years: Art. 1964 Civil Code (personal actions without special time limit).
– 6 years: Art. 30 Code of Commerce (accounting books, invoices, etc.).
– 10 years: Art. 25 Prevention of Money Laundering and Terrorist Financing Act.
Data in social network profiles: Until the user withdraws permission to do so.
Data of candidates for internships or job vacancies: Up to six months from receipt, even after the selection process has been completed, unless otherwise indicated by the candidate.
2.3 PURPOSES AND LEGITIMACY
According to the type of data processing, we summarise below the basis for the legitimacy of such processing:
PROCESSING
– Accounting and tax management: management of invoicing, tax obligations, allowances, etc… of the company’s customers and/or suppliers.
– Marketing: Commercial actions about our products or services aimed at our customers or those persons who have requested information from us in the past, including the carrying out of customer satisfaction surveys.
– Processing of collaborator management.
– Processing of complaints management (customer service).
– Processing of operations in campaigns through electronic media with potential customers.
– Processing of data protection rights.
– Processing of debt collection operations by third parties on suppliers.
– Processing of operations management with contacts – web users.
– Processing of CVs and job offers.
BASIS OF LEGITIMACY
– Maintenance, development and control of the contractual relationship between the parties. Compliance with legal obligations.
– Free and unequivocal consent of the interested party (potential customers). Please note that the withdrawal of this consent may in no case condition the execution of the contract between the parties. Legitimate interest of the company on the promotion and marketing of products or services similar to those obtained or requested by the persons concerned in the past.
– Maintenance, development and control of the contractual relationship between the parties.
– Consent of the data subject himself/herself.
– Legal obligation.
– The candidate authorises the company to process the documents sent to him/her, all content that is directly accessible through Internet search engines, the profiles he/she maintains in professional social networks, the data obtained in the assessment tests and the information he/she provides in the job interview, for the purpose of assessing his/her candidacy.
2.4 WEB BROWSING (USE OF COOKIES)
A cookie is any type of file or device that is downloaded to a user’s terminal with the ability to store data that can be used and retrieved by the service provider responsible for the installation.
Cookies are necessary for the operation of the Internet, they allow us to improve the navigation and usability of our website, enabling the identification and resolution of possible errors, and all this without causing the slightest damage to the user’s terminal.
By means of this Notice, we inform our users that the company may use the following cookies on this website:
– Cookies strictly necessary for the provision of certain services expressly requested by the user. If these cookies are deactivated, you will not be able to correctly receive our contents and services.
– Analytical cookies for the monitoring and statistical analysis of the behaviour of users as a whole. If these cookies are deactivated, the website may continue to function without prejudice to the fact that the information captured by these cookies on the use of our website and on the success of the advertisements shown on it allows us to improve our services.
DEACTIVATION OF COOKIES. The user may at any time choose which cookies they want to operate on this website by configuring their browser settings, for example:
– Chrome, from: http://support.google.com/chrome/bin/answer.py?hl=es&answer=95647
– Explorer, from http://windows.microsoft.com/es-es/windows7/how-to-manage-cookies-in-internet-explorer-9
– Firefox, from http://support.mozilla.org/es/kb/habilitar-y-deshabilitar-cookies-que-los-sitios-web
– Safari, from http://support.apple.com/kb/ph5042
However, the user should be aware that after disabling cookies your browsing on our website may not be optimal and some utilities may not work properly.
Third-party cookies. On some pages of the Website, embedded or invoked content is displayed through which third-party cookies may be installed.
Social Networks. On other sites where the company has a page or social profile, third-party cookies are installed on all visitors, even if they are not registered users on the corresponding platforms: Facebook Cookie Page, Twitter Privacy Page, LinkedIn Cookie Page, Google Cookie Page.
2.5 DATA PROCESSORS OUTSIDE THE EU
There are no plans to transfer data to countries outside the EU.
2.6 CONFIDENTIALITY AND DESTRUCTION OF DOCUMENTS
Professional secrecy. The company and the collaborators who work with us and who have any kind of intervention in the services provided to the client, are committed to not disclose or make use of the information to which they have had access by reason of their profession. The information provided by the client shall, in any case, be considered confidential, and may not be used for purposes other than those related to the services contracted from the company.
The company undertakes not to divulge or reveal information about the client’s claims, the reasons for the advice requested or the duration of its relationship with the client.
Destruction of documents. In order to preserve and guarantee confidentiality, the company undertakes to destroy all confidential information to which it has had access as a result of the provision of services when they are no longer necessary for the purpose for which they were collected, unless there is a legal obligation to keep them. If the Client wishes to keep the original or a copy of this information, he/she must print it out or keep it by his/her own means or come to the company’s head office to collect it before it is destroyed.