Privacy policy
In accordance with the provisions of current legislation on data protection, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, RGPD), as well as in the Organic Law 3/2018, of 5 December, on Data Protection and guarantee of digital rights (hereinafter, LOPD-GDD), the user is informed in accordance with the provisions of articles 13 of the RGPD and 11 of the LOPD-GDD:
-
RESPONSIBLE
Who is responsible for processing your data?
- Company name:SUMA CRUZ SL
- CIF:B86240819
- Address:Calle CLAUDIO COELLO 47, 1CENTRO DERECHA 28001 MADRID
- E-mail:[email protected]
- Details of entry in the Commercial Register:T 29007, F 182, S 8, H M 522332, I/A 1 (2.09.11)
-
PURPOSE
For what purpose will we process your personal data?
SUMA CRUZ SL treats your information to:
- Maintenance of the commercial relationship and provision of the contracted service.
- Preparation of a quotation tailored to your needs.
- Manage email communications with stakeholders.
- To carry out the company's selection processes.
- Management of the company's employees and human resources.
- Sending commercial information related to our sector:DISEÃO JOYAS
- Monitoring the security of the facilities (video surveillance).
- Managing training activities
How long will we have your data?
The personal data you provide us with will be kept for as long as the current business relationship is maintained. However, in order to be as transparent as possible with you, we would like to point out that the general calculations we work with are as follows:
- Generic identification data (e-mail, name, surname, first name, telephone number, etc.): for the duration of the business relationship or until consent is revoked. In any case, they will be deleted when they are not going to be used for the purpose for which they were collected.
- Accounting, tax and labour: six (6) years.
- Labour: ten (10) years.
- Selection processes: two (2) years from the delivery of the curriculum vitae.
- Video surveillance: thirty (30) days, unless recording an offence and/or crime.
- Likewise, given the sending of commercial information, even if the relationship between the parties is terminated, SUMA CRUZ SL will continue to keep your information for sending newsletters related to our products and services1. You can always exercise your rights under current legislation by contacting us through the most convenient way for you.
Despite the existence of these general deadlines, we will periodically review our systems to delete data that is no longer legally required.
-
LEGITIMACY
What is the legitimacy for the processing of your data?
Depending on the purposes for which our data is collected, the processing of your data is necessary:
-
To manage the business relationship you have entered into and contracted with us.
- Performance of a contract (enabled by Article 6(1)(b) GDPR)
- Consent of the data subject (covered by Article 6(1)(a) GDPR)
-
Preparation of a quotation tailored to your needs.
- Execution of a contract and/or pre-contractual relationship (enabled by Article 6(1)(b) GDPR)
-
Manage email communications with stakeholders.
- Consent of the data subject (covered by Article 6(1)(a) GDPR)
- Legitimate interest (enabled by Article 6(1)(f) GDPR)
-
To carry out the company's selection processes.
- Consent of the data subject (covered by Article 6(1)(a) GDPR)
-
Management of the company's employees and internal human resources.
- Contractual enforcement (enabled by Article 6(1)(b) GDPR)
-
Sending commercial communications.
- Consent of the data subject (enabled by Article 6.1. RGPD)
- Consent of the data subject (enabled by Article 20 LSSICE)
- Legitimate interest (enabled by Article 6(1)(f) GDPR)
-
Monitoring the security of the facilities (video surveillance).
- Legitimate interest (enabled by Article 6(1)(f) GDPR)
-
Managing training activities.
- Performance of a contract (enabled by Article 6(1)(b) GDPR)
- Consent of the data subject (covered by Article 6(1)(a) GDPR)
Furthermore, all data collected are necessary for the provision of the service. However, those data marked with an asterisk (*) are mandatory. In the event that the obligatory data are not providedSUMA CRUZ SL will not be able to provide the contracted service.
-
-
RIGHTS OF THE PERSONS CONCERNED
What rights do I have in terms of data protection?
In accordance with the provisions of articles 13 RGPD and 11.2.c) LOPDGDD, you may exercise any of the following rights by contacting us at the postal address Calle CLAUDIO COELLO 47, 1CENTRO DERECHA 28001 MADRID or at the e-mail address [email protected]. In any case, according to current legislation, you have the following recognised rights in accordance with the provisions of articles 15 to 22 RGPD and 12 to 18 LOPDGDDD:
- Right to request access to personal data relating to the data subject.
- The right to request its rectification or erasure.
- The right to request the restriction of processing.
- Right to object to processing.
- Right to portability.
You can request the forms to exercise your rights from the Data Controller, via the email address indicated in the data controller's details. Additionally, you can file a complaint with the Spanish Data Protection Agency (AEPD). More information in Section VII of this document.
-
TARGET
To which recipients will your data be communicated?
You will always be informed and, where appropriate, your express consent will be requested to transfer your personal data or carry out international transfers in accordance with the regulations in force (arts. 13.1.e) and 44 RGPD, as well as art. 11.1 and 40 LOPDGDD 3/2018).
-
ORIGIN OF YOUR DATA
How did we obtain your data?
The personal data it usesSUMA CRUZ SL come from the interested party itself, thus complying with the aforementioned articles 13 RGPD and 11 LOPDGDDD, or from companies of the group or collaborators, about which you can obtain more information by writing to the following e-mail address[email protected] or at the Responsible Party's office at the postal address indicated in this document.
What categories of data do we handle?
The categories of personal data processed:
-
Identification data
- Name
- Surname
- DNI / NIE / Passport or equivalent document
- Postal addresses
- E-mail addresses
- Sex
- Date of birth
- Place of birth
- Contact telephone (mobile / landline)
Commercial information
-
Economic data
- Bank account number
- Credit card number
-
Curriculum vitae
- Academic data
- Qualifications
- Hobbies
- Membership of associations or clubs
-
Video surveillance
- Image
The processing of sensitive data will be carried out in accordance with the provisions of Articles 9 RGPD and 9 LOPDGDDD, informing the data subject in any case about which data will be used by the data controller.
-
-
SUPERVISORY AUTHORITY
SUMA CRUZ SL We do our utmost to comply with data protection regulations, as this is our most valuable asset. However, we inform you that in the event that you feel that your rights have been undermined, you can file a complaint with the Spanish Data Protection Agency (AEPD), located at C/ Jorge Juan, 6. 28001 - Madrid. More information about the AEPD. http://www.agpd.es/ . Documentation by LegalDPO. https://legaldpo.es/