PROCESSING OF PERSONAL DATA
At Aceros Inoxidables Olarra, S.A. we are concerned with the personal data we process, and with strict compliance with regulations in force in relation to the protection of personal data, among others, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, and also Spain’s Organic Law 3/2018 of 5 December on the Protection of Personal Data and Digital Rights.
Pursuant to this, we wish to provide information on the following aspects of our processing of personal data at Aceros Inoxidables Olarra, S.A.:
Who is the data controller in charge of your personal data?
Identity: Aceros Inoxidables Olarra, S.A.
Tax number: A48663546
Postal address: calle Larrabarri, nº 1
48180 de Loiu (Vizcaya)
E-mail: protecciondatos@olarra.com
Principles in relation to processing
The processing of personal data observes the principles required by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter “GDPR”):
- Principle of lawfulness, fairness and transparency:the data we collect are processed lawfully, fairly and transparently, with the prior consent of data subjects when necessary or, as appropriate, for the purposes of performing a contract to which the data subject is a party or for the application of precontractual measures at the request of the data subject, or, if processing is necessary for the purposes of compliance with a legal obligation applicable or to satisfy legitimate interests pursued by the data controller or by a third party, provided that the interests or rights and basic freedoms of the data subject requiring the protection of personal data do not prevail over said interests, especially when the data subject is a child.
- Principle of purpose limitation:: the personal data we process are used for the purposes stated in the section “For what purposes do we use your personal data?”
- Principle of data minimisation: pursuant to this principle, the only personal data we gather from users are those which are strictly necessary to manage contractual relations, registration for the purposes of downloading documentation, or to address any consultations and/or requests made of us.
- Principle of accuracy: the personal data we gather will remain accurate and, if necessary, they will be updated. To this end, in the event of any changes in personal data, the user must notify us of these to enable us to carry out a proper update.
- Principle of storage limitation: the personal data we process will be stored over the periods stipulated in the section“How long will we keep your personal data?”
- Principle of integrity and confidentiality: in order to comply with this principle, personal data will be processed in such a way as to guarantee proper security of the data, including protection against unauthorised or unlawful processing or against the loss or destruction of or accidental damage to data, applying proper technical and organisational measures to this end.
Which categories of personal data do we process?
The categories of data we process on this web site are:
- Data collected via the contact form: name, company, post, e-mail address, phone number, country and message sent by the user.
- Data collected via the registration form: name, company, post, e-mail address, phone number, country and message sent by the user.
All the personal data requested in the forms are mandatory, and therefore, if the user fails to supply some of these data, we cannot administer the request for registration or the consultation or request made of us, as applicable.
Cookies collect information on the use made by users of the web site, the pages visited, origin, geographic location and IP addresses, although this information will be collected in an aggregate fashion, i.e. with no identification of the users. You may consult information on the cookies used in the Cookies Policy.
How did we obtain your personal data?
All the personal data we process at Aceros Inoxidables Olarra, S.A. are supplied to us by the data subjects or their legal representatives.
The personal data we collect on this web site were obtained through various forms or via the e-mail address provided to establish contact with us.
For what purposes do we use your personal data (whether or not you are users of the web page)?
Customer data: for proper maintenance, development, compliance and control of the contractual relationship with our customers, and of the services they request.
Data of potential customers: for the purposes of commercial prospection, to manage and reply to requests for estimates, to monitor these, and to carry out commercial management tasks to capture customers.
Supplier data: for proper maintenance, development, compliance and control of the contractual relationship with our suppliers, and of the services they provide for us.
Staff data: for proper maintenance, development, compliance and control of the contractual relationship with our staff, and compliance with any regulations in force in relation to employment, Social Security and Prevention of Occupational Hazards that may be applicable.
CV data: to manage the participation of data subjects in any staff selection processes we may carry out.
Data gathered through the contact form: to manage and respond to consultations or requests made by data subjects.
Data gathered through the registration form: to manage your registration, for the purposes of safely downloading the documentation requested by users.
What is the legitimate basis for the processing of your personal data?
Customer data: the legal basis legitimising the processing of customers’ personal data is that this is necessary to perform the contract to which they are a party.
Data of potential customers: the legal basis legitimising the processing of the personal data of data subjects is that they are necessary to satisfy the legitimate interests pursued by the company to establish and manage commercial relations, although, in the case of requests made for estimates, the legitimate basis is the need for processing to apply precontractual measures at the request of the data subjects.
Supplier data: the legal basis legitimising the processing of their personal data is that this is necessary to perform the contract to which they are a party.
Staff data: the legal basis legitimising the processing of the personal data of employees is that this is necessary to perform the employment contract between the company and its employees.
CV data: the legal basis legitimising the processing of personal data is that this is necessary for the application of precontractual measures at the request of the data subject.
Data gathered through the contact form: the legal basis legitimising the processing of the personal data supplied to us by data subjects is that this is necessary to enact the legal relationship which commences when this form is filled in, and therefore, to manage the consultations or requests they make of us.
Data gathered through the registration form: the legal basis legitimising the processing of the personal data supplied to us by data subjects is that this is necessary to enact the legal relationship which commences when this form is filled in, and therefore, to manage the requests they make of us.
To whom will your personal data be sent?
The personal data of customers, suppliers and employees will be sent, where applicable, to the tax authority for the purposes of compliance with legal and tax obligations, and to the bank/s through which Aceros Inoxidables Olarra, S.A. manages its receivables (in the case of customers) and payables (in the case of suppliers and employees).
Likewise, for certain issues we use services provided by third parties, which act as data processors, and with which we have signed the corresponding data processing contract pursuant to the provisions of Article 28.3 of the GDPR.
Transfer of data to third countries
We do not make any international data transfers, notwithstanding those arising from cookies on this web site. You may consult information in this regard in our Cookies Policy. .
How long will we keep your personal data?
Customer data: the legal basis legitimising the processing of customers’ personal data is that this is necessary to perform the contract to which they are a party.
Data of potential customers: the legal basis legitimising the processing of the personal data of data subjects is that they are necessary to satisfy the legitimate interests pursued by the company to establish and manage commercial relations, although, in the case of requests made for estimates, the legitimate basis is the need for processing to apply precontractual measures at the request of the data subjects.
Supplier data: the legal basis legitimising the processing of their personal data is that this is necessary to perform the contract to which they are a party.
Staff data: the legal basis legitimising the processing of the personal data of employees is that this is necessary to perform the employment contract between the company and its employees.
CV data: the legal basis legitimising the processing of personal data is that this is necessary for the application of precontractual measures at the request of the data subject.
Data gathered through the contact form: the legal basis legitimising the processing of the personal data supplied to us by data subjects is that this is necessary to enact the legal relationship which commences when this form is filled in, and therefore, to manage the consultations or requests they make of us.
Data gathered through the registration form: the legal basis legitimising the processing of the personal data supplied to us by data subjects is that this is necessary to enact the legal relationship which commences when this form is filled in, and therefore, to manage the requests they make of us.
What are your rights when you provide us with your personal data?
- Right to request access to your personal data: in order to gain access to and verify the lawfulness of processing, you may at any time request confirmation as to whether Aceros Inoxidables Olarra, S.A. is processing your personal data, in which case we will inform you, among other aspects, as to which data we are processing, the purpose, the origin of the data, the intended period of conservation of the data and, where applicable, the recipients or categories of recipients.
- Right to request rectification of data: you may request that we rectify any personal data that are inaccurate, or that we complete any data that are incomplete, even in an additional statement. In this case your request must state the data to which you refer and the correction to be made, and, where applicable, must be accompanied by the documentation demonstrating the inaccuracy or incompleteness of the data being processed.
- Right to request erasure (“right to be forgotten”): you may issue a request to us for your personal data to be erased and no longer be processed where the data are no longer necessary for the purposes for which they were gathered or otherwise processed, where you have withdrawn your consent, where they have been processed unlawfully, or must be erased for the purposes of compliance with a legal obligation.
- Right to request the limitation of processing of your personal data: in this case Aceros Inoxidables Olarra, S.A. will only keep your personal data for the purposes of formulation, exercise or defence of claims, or with a view to protection the rights of another natural person or legal entity, or for substantial reasons in the public interest.
- Right to the portability of your personal data: you can ask us to furnish your personal data to yourself or to another party responsible specified by you, in a structured, commonly used, machine-readable format.
- Right to object to processing: Aceros Inoxidables Olarra, S.A. will cease to process your personal data after the fashion you stipulate, unless we have to continue to process them for imperious legal reasons for the purposes of formulation, exercise or defence of potential claims.
Aceros Inoxidables Olarra, S.A. will respond to all requests in the timeframes and conditions required by regulations in force concerning the protection of personal data.
How to submit a complaint to the Spanish Data Protection Agency: if you believe that we have not processed your personal data properly or that we have not responded to you properly in the exercise of your data protection rights, you may submit a complaint to the Spanish Data Protection Agency (Agencia Española de Protección de Datos) either electronically or at its physical address, calle Jorge Juan, nº 6, C.P. 28001 Madrid.
Further information available on data protection rights and complaints to the Authority at www.aepd.es.
Security
Pursuant to the provisions of Article 32 of the GDPR, Aceros Inoxidables Olarra, S.A. has adopted proper technical and organisational measures to ensure a level of security appropriate to the risk.
For the purposes of assessing the suitability of the level of security, particular consideration has been given to the risks involved in data processing, especially as a result of the destruction, loss or accidental or unlawful alteration of personal data transmitted, kept or otherwise processed, or communication or unauthorised access to these data.
Duty of secrecy
Aceros Inoxidables Olarra, S.A. has taken measures to ensure that any person acting on their respective authority and gaining access to the personal data furnished to us by users can only process these in accordance with the instructions issued by the company, and must also maintain professional secrecy in relation to same, for an indefinite duration.
To this end, our employees have signed a document in relation to confidentiality and duty of secrecy with respect to the personal data and information processed concerning the relationship of employment with the company.
Use of the web site by minors
We ask users to read the policies concerning the use of the web site by minors, which we have posted in the “Legal notice” section on our web site.
Social networks
Pages or profiles on social networks: Aceros Inoxidables Olarra, S.A. has a profile or page on LinkedIn, and so there may be some processing of the personal data of our followers, of people appearing in the posts, and of persons sending us private messages.
Processing of data and purpose: the processing of data by Aceros Inoxidables Olarra, S.A. will be limited and conditioned by the policies and functions of the social network.
When a user becomes one of our followers on LinkedIn, they authorise their personal data to be used by us only within the scope of the corresponding social network to manage our page or profile and of any two-way communications we may maintain with our followers through chats, messages or other means of communication permitted by the Social Network at the present time and in the future. This means that we will have access to the information in their profile which appears in the comment, for example, although the following is not exhaustive, to their user name, image (if users have posted photographs on their profile), and the comments made.
We also wish to state that, when a user becomes one of our followers, any news items we post may also appear on their wall and that, if they make comments on ours, both their comment and the name of their profile will be accessible to the other followers, in addition to, where applicable, any photograph they may have on the profile. In any case, users are responsible for any use they may make of the Social Network.
We will not use the personal data of users for any purposes other than those stipulated in the preceding paragraphs, or to send them information via an environment other than the social network.
Unless the data subject grants their consent or asks us to do so for the purposes of responding to a request they may make, we will not extract their personal data from the environment of the social network.
Data protection rights: with respect to rights of access, rectification or erasure, limitation of processing, objection and portability of your personal data, we can only act in accordance with the possibilities permitted by the social network. Aceros Inoxidables Olarra, S.A. will provide all possible assistance for data subjects to enable them to exercise these rights.
Any of our followers may withdraw from our page or profile at any time, in such a way that we would no longer have access to their personal data, although the social network may keep any comments they have already made on our page or profile.
In any case, users are responsible for any use they may make of the Social Network, and thus Aceros Inoxidables Olarra, S.A. does not undertake any kind of responsibility in this regard.
Below you may consult the privacy policy on the social networks where Aceros Inoxidables Olarra, S.A. has a page or a profile:
- Facebook: Data policy
- LinkedIn: Privacy policy
Cookies are small text files stored in the hard disk or memory of computers which access or visit the pages of certain web sites, to discern the preferences of users when they reconnect. Cookies stored on the user’s hard disk cannot read the data there, gain access to personal information, or read the cookies created by other suppliers.
See information on the cookies used on this web site in the “Cookies policy” section.
Text date: 1 March 2022