Privacy policy

POLICY FROM PROTECTION OF DATA PROTECTION POLICY FROM DATA PROTECTION PERSONAL

AQUALAND ALMERIA S.A. is an organization that collects, by the different means at its disposal, personal data, which gives it an important responsibility in the design and organization of procedures, so that they are aligned with legal compliance in data protection. Therefore, AQUALAND ALMERIA S.A. will adopt all necessary security measures to ensure the protection of the data collected.

In the exercise of these responsibilities, and in order to establish the general principles that should govern the processing of personal data in the Organization, AQUALAND ALMERIA S.A. approves this Policy for the protection of personal data, which notifies and makes available to all its stakeholders, also respecting the following rules:

  1. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
  2. Organic Law 3/2018 of December 5, 2018, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
  3. Law 34/2002, of July 11, 2002, on Information Society Services and Electronic Commerce (LSSI-CE).
  1. FIELD OF APPLICATION

This Personal Data Protection Policy shall apply to AQUALAND ALMERIA S.A., its administrative bodies, management and staff, as well as to all persons related to the Organization, expressly including service providers with access to data (“Data Processors”).

The person responsible for the processing of personal data collected by the Organization is: AQUALAND ALMERIA S.A., holder of Tax Identification Number: A29864956, whose representative is: MªDEL MAR ASESIO GUIXE (hereinafter, Data Controller). Its contact details are as follows:

Address: AVDA. CIUDAD DE VALENCIA 2 B, VERA, ALMERIA, 04621

Contact telephone: 950467337

Contact email: administracion@aquavera.com

  1. INFORMATION ABOUT THE PERSON IN CHARGE AND THE PROCESSING OF PERSONAL DATA AT AQUALAND ALMERIA S.A.

Additional information on data processing is a set of more specific and expanded details that organizations must provide to data subjects on how their personal data is handled. This concept derives from the transparency principle of the General Data Protection Regulation (GDPR) and complements the basic information that is initially provided, providing a greater level of detail about the processing.

Below, AQUALAND ALMERIA S.A. provides additional information on the data processing it carries out:

Additional information additional information about Protection from data

DETAILS ABOUT THE RESPONSIBLE OF TREATMENT

Identity

AQUALAND ALMERIA S.A.

Dirección

AVDA. CIUDAD DE VALENCIA 2 B, VERA, ALMERIA, 04621

Contact telephone number

950467337

Correo electrónico

administracion@aquavera.com

PURPOSES OF TREATMENT FROM THE DATA PERSONAL DATA

Data processing

Purpose of treatment

Conservation period

VIDEO SURVEILLANCE

OTHER PURPOSES , HUMAN RESOURCES , PRIVATE SECURITY , MASS VIDEO SURVEILLANCE , OTHER PURPOSES , HUMAN RESOURCES , PRIVATE SECURITY , MASS VIDEO SURVEILLANCE

Human resources: 4 years. Private security: 5 years.

Massive video surveillance: 1 month.

DAY REGISTER

HUMAN RESOURCES

HUMAN RESOURCES:

during the term of the employment relationship and, once terminated, blocked only during the statute of limitations periods for possible liabilities; after these periods have elapsed, destruction

WEB FORM

PROFESSIONAL CONTACT, CUSTOMER MANAGEMENT, ACCOUNTING, TAX AND

ADMINISTRATIVE ,

ADVERTISING AND COMMERCIAL PROSPECTING

  • Professional contact: up to

1 year since last contact.

  • Customer management: 5 years from the end of the contractual relationship.
  • Accounting, tax and administrative: 6 years.
  • Advertising and commercial prospecting: up to 1 year from the last contact (or earlier if you object or withdraw consent).

CURRICULUMS

HUMAN RESOURCES

HUMAN RESOURCES: 4 years

MEDICAL PARTS

MEDICAL HISTORY

CLINICAL HISTORY:

minimum 5 years from the date of discharge from each care process

CUSTOMERS

E-COMMERCE, CUSTOMER MANAGEMENT, ACCOUNTING, TAX AND

ADMINISTRATIVE ,

ADVERTISING AND COMMERCIAL PROSPECTING

E-COMMERCE:

5 years.

CUSTOMER MANAGEMENT:

for as long as the relationship is maintained and thereafter for 5 years.

ACCOUNTING, TAX AND ADMINISTRATIVE: 6 years.

ADVERTISING AND PROSPECTING

COMMERCIAL: until consent or opposition is withdrawn (and,

subsequently blocked during the statute of limitations period for possible liabilities).

BILLING AND ACCOUNTING

CUSTOMER MANAGEMENT, ACCOUNTING, TAX AND ADMINISTRATIVE MANAGEMENT

CUSTOMER MANAGEMENT:

during the term of the contractual relationship and, thereafter, blocked during the statute of limitations for possible liabilities.

ACCOUNTING, TAX AND ADMINISTRATIVE: 4 years

(tax obligations) and, when applicable to commercial/accounting documentation, 6 years.

PAYROLL AND PERSONNEL

PAYROLL MANAGEMENT , OCCUPATIONAL RISK PREVENTION , HUMAN RESOURCES , HUMAN RESOURCES

PAYROLL MANAGEMENT: 4 years

RISK PREVENTION

LABOR: minimum 5 years (clinical documentation); 40 years if there is exposure to carcinogens

HUMAN RESOURCES: 4 years

LEGITIMIZATIONS FROM TREATMENT FROM THE DATA PERSONAL DATA

Data processing

Legitimation

VIDEO SURVEILLANCE

Public interest safety of facilities

DAY REGISTER

Legal obligation labor legislation

WEB FORM

Express consent of the person concerned

CURRICULUMS

Express consent of the person concerned

MEDICAL PARTS

Express consent of the person concerned

CUSTOMERS

Execution of a sales contract

BILLING AND

Execution of a contract for the provision of services and/or

ACCOUNTING

buying and selling

PAYROLL AND PERSONNEL

Execution of an employment contract

TARGET FROM YOUR DATA PERSONAL DATA

Data processing

Forecast of assignments

International transfers

VIDEO SURVEILLANCE

PUBLIC ADMINISTRATION WITH COMPETENCE IN THE MATTER

No

DAY REGISTER

PUBLIC ADMINISTRATION WITH COMPETENCE IN THE MATTER

No

WEB FORM

No assignments are foreseen

No

CURRICULUMS

No assignments are foreseen

No

MEDICAL PARTS

PUBLIC ADMINISTRATION WITH COMPETENCE IN THE MATTER, INSURANCE COMPANIES, INSURANCE COMPANIES, ETC.

No

CUSTOMERS

No assignments are foreseen

No

BILLING AND ACCOUNTING

PUBLIC ADMINISTRATION WITH COMPETENCE IN THE MATTER, BANKING OR FINANCIAL INSTITUTIONS

No

PAYROLL AND PERSONNEL

PUBLIC ADMINISTRATION WITH COMPETENCE IN THE MATTER, BANKING OR FINANCIAL INSTITUTIONS

No

RIGHTS WHAT LES CORRESPONDEN Y MEDIA A SU PROVISION

Any person has the right to obtain confirmation as to whether AQUALAND ALMERIA S.A. is processing personal data concerning him/her.

Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data, or if necessary, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, the interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims, as well as to meet the legally established retention periods.

Likewise, interested parties may object to the processing of their personal data. Therefore, AQUALAND ALMERIA S.A. will stop processing their data, except for legitimate and compelling reasons, or in the exercise of possible claims.

In the same sense, under certain circumstances and where technically possible, the data subjects shall have the right to have their personal data transferred directly to another data controller or data processor, upon request.

To exercise the rights indicated above, you should contact us by writing to:

  • AQUALAND ALMERIA S.A. AVDA. CIUDAD DE VALENCIA 2 B, VERA, ALMERIA,

04621, or by e-mail to administracion@aquavera.com. We recommend accompanying your application with a copy of your ID card.

III. PRINCIPLES APPLICABLE AL TREATMENT DE DATA PERSONNEL

The Personal Data Protection Policy is a measure of Responsibility proactive, which aims to ensure compliance with applicable law in this area and in relation to this, respect for the right to honor and privacy in the processing of personal data of all persons who are related to AQUALAND ALMERIA S.A..

In development of the provisions of this Policy, the Principles governing the processing of data in the organization and, consequently, the procedures and organizational and security measures that the persons affected by this Policy undertake to implement in their area of responsibility are established.

In relation to the above, AQUALAND ALMERIA S.A. will ensure compliance with the following principles:

  • Lawfulness, Loyalty, transparency and limitation of the purpose.

The data processing must always be informed to the affected person, by means of established clauses and procedures; and it will only be considered legitimate if there is consent for the data processing (with special attention to the consent given by minors), or it has another valid legitimacy, and the purpose of the processing is in accordance with the applicable regulations.

  • Minimization of data.

The data processed must be adequate, relevant and limited to what is necessary in relation to the different purposes of the processing.

  • Accuracy.

The data must be accurate and, if necessary, updated. In this respect , the necessary measures shall be taken to ensure that personal data that are inaccurate with respect to the purposes of the processing are deleted or rectified without delay.

  • Limitation of the time limit of conservation.

The data will be kept in such a way as to allow the identification of the persons concerned for no longer than is necessary for the purpose of the processing in question.

  • Integrity y Confidentiality.

Personal data shall be processed in such a way as to ensure appropriate security, including protection against unauthorized or unlawful processing, and against accidental loss, destruction or damage, by implementing appropriate technical or organizational measures.

  • Transfers of data.

It is forbidden to purchase or obtain personal data whose origin comes from illegitimate sources, or in those cases in which such data have been collected or transferred in contravention of the law or where their legitimate origin is not sufficiently guaranteed.

  • Hiring from suppliers with access a data.

Only suppliers that offer sufficient guarantees for the application of appropriate technical and security measures in the processing of data shall be selected for contracting. With these, the appropriate contract will be documented in this respect.

  • Transfers transfers from data.

Any processing of personal data subject to European Union regulations involving a transfer of data outside the European Economic Area must be carried out in strict compliance with the following

requirements established in the applicable law .

  • Rights from the persons affected.

The Organization will facilitate the exercise of the rights of access, rectification, deletion, limitation of processing, opposition and portability to the affected persons, establishing for this purpose the internal procedures, and in particular, the models necessary and appropriate for their exercise, which must satisfy, at least , the legal requirements applicable in each case.

AQUALAND ALMERIA S.A. will promote that the principles contained in this Personal Data Protection Policy are taken into account :

    1. In the design and implementation of all work procedures, the following are included
    2. In the products and services offered
    3. In all contracts and obligations entered into or assumed by them, and
    4. In the implementation of all systems and platforms that allow access to its employees or third parties and/or the collection or processing of personal data.
  1. DETAILS PERSONAL DATA FROM MINORS FROM AGE

Respecting the provisions of articles 8 of the RGPD and 7 of the Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, only those over 14 years of age may give their consent for the processing of their personal data in a lawful manner by AQUALAND ALMERIA S.A.. In the case of a minor under 14 years of age, the consent of the parents or guardians will be required for the processing, and this will only be considered lawful to the extent that they have authorized it.

  1. SECRET Y SECURITY FROM THE DATA PERSONAL DATA

AQUALAND ALMERIA S.A. undertakes to notify the user, without undue delay, when a breach of security of personal data occurs that is likely to involve a high risk to their rights and freedoms. Following the provisions of Article 4 of the GDPR, a breach of security of personal data means any breach of security resulting in the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorized communication or access to such data.

Personal data will be treated as confidential by the Data Controller, who undertakes to inform and ensure by means of a legal or contractual obligation that such confidentiality is respected by its employees, partners, and any person to whom it makes the data accessible .

information.

  1. COMMITMENT FROM STAFF COMMITMENT FROM AQUALAND ALMERIA S.A.

Therefore, we express that the workers of AQUALAND ALMERIA S.A., are informed of this Policy, and declare themselves aware that personal information is an asset of AQUALAND ALMERIA S.A., and in this regard adhere to it, committing themselves to the following:

  • To take the data protection awareness training that AQUALAND ALMERIA S.A. makes available to you.
  • Apply the security measures at user level that apply to your job, without prejudice to the responsibilities in their design and implementation that could be attributed to you depending on your role within AQUALAND ALMERIA S.A.
  • Use the formats established for the exercise of rights by the affected users, and inform AQUALAND ALMERIA

S.A. immediately, so that the response can be made effective .

  • To inform AQUALAND ALMERIA S.A., as soon as it becomes aware of any deviation from the provisions of this Policy, in particular “Personal Data Security Violations”, using the form established for this purpose.
  1. CONTROL Y EVALUATION

AQUALAND ALMERIA S.A. will carry out an annual verification, evaluation and assessment, as well as every time there are significant changes in the data processing, of the effectiveness of the technical and organizational measures to ensure the security of the processing.

AQUALAND ALMERIA S.A.