Esmalglass - Itaca Grupo

PRIVACY POLICY

Privacy is essential to ESMALGLASS-ITACA. This declaration comprises all practices relating to personal data processing in the ESMALGLASS-ITACA sites, and furthermore, the type of information gathered, its monitoring, use and disclosure.

In ESMALGALSS-ITACA the private and safe processing of your personal data is extremely important to us. Thus, we have developed this policy to establish what we do with your data and how we ensure its security. It also explains where and how we collect your personal information, and any other rights relating to personal information we might have on you.

This policy is applied to you when you use our mobile apps, when you visit our web sites or when you interact with us via social media (herein, our “Services”).

In this policy, we define our firm commitment to safeguarding the privacy of your data.

Therefore, we strongly recommend you review and accept our privacy policy before continuing your use of this site.

Latest update of our privacy policy: Monday, June 08, 2018 11:32:31 AM

1. Data Controller Identification

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (herein RGPD), we inform you that any personal data submitted by you will be processed by the party responsible for data processing identified in: https://www.esmalglass-itaca.com/es/contacto/datos-legales

Who is the Data Protection Officer in ESMALGLASS-ITACA? How can I contact the Data Protection Officer?

The Data Protection Officer is the person in ESMALGLASS-ITACA in charge of safeguarding our fundamental right to personal data protection. This Officer is responsible for compliance with the rules and regulations on data protection. You can contact the Data Protection Officer in ESMALGLASS-ITACA at the following e-mail address:

DPO contact: dpo@esmalglass-itaca.com

2. General Privacy Principles.

Whenever we collect and process your personal data, if we do so, we are guided by these practical principles:

All personal data are processes in a fair, legal and transparent manner.
Personal data are collected for specific, explicit and lawful purposes, and are processed in accordance with such purposes.
Collected personal data must be appropriate, relevant and limited to the necessary steps within the purposes of such processing.
All personal data must be accurate and up-to-date. Any inaccurate data must be updated or deleted.
Personal data are kept in a format identifiable only when strictly necessary.
Personal data are safeguarded by taking a number of suitable and efficient technical and organizational measures against any unauthorized or unlawful processing. Additionally, personal data loss, destruction or accidental damaging is avoided by applying adequate technical and organizational actions (“integrity and confidentiality”).
We are committed to the principles of data protection by design, and to data protection by default.

3. How do we collect/use your personal data?

Directly from you: You can browse our website without telling us who you are or disclosing any personal information on you. Nevertheless, for a comprehensive use of the service, personal data are usually gathered. For example, we collect data on you when you request information through the contact form or when a service account is assigned to you. The possible information gathered includes your e-mail address, full name, place of residence and telephone number.
From cookies: We can also obtain information from the “cookies” placed on your computer or mobile device. Cookies are small data files lodged in the hard drive or in the memory of a given device. For further information on cookie use or purpose of the cookies in our website (http://www.esmalglass-itaca.com/), please review our cookie policy. Nonetheless, you can modify your browser’s options to quit accepting cookies or to be asked each time before accepting any cookie in a website you are visiting. If you do not accept cookies, you might not be able to use all the possibilities of our services.
Registers: We can record certain information and store it in protocol files whenever you interact with our services. This information may include IPs or other device addresses or identification numbers, and also information on the type of browser, Internet service provider, etc.

4. When will our website request your personal data?

When subscribing to our newsletter http://www.esmalglass-itaca.com/.
When performing an on-line inquiry via the contact form.
When requesting any offered services and/or products.
When registering in the “work with us” form.

5. What’s the purpose of personal data processing?

5.1 Additional information on “WEB CONTACT MANAGEMENT”

PROCESSING: WEB CONTACT MANAGEMENT

5.1.1. For what purpose are your personal data processed?

Personal data are processed to attend to and answer any communication or request received via e-mail or the contact form in the website: http://www.esmalglass-itaca.com/

5.1.2. How long will my data be held?

Your data will be kept as long as your relationship with the organization is active (and you do not request its removal) and, in any case, for the terms stated in the regulations applicable to the above-mentioned processing.

5.1.3. Are there any automated decisions or profiling?

No automated decisions shall be made on your data.

5.1.4. What are the legal grounds for processing my data?

Legitimate interest of the controller: The legal basis for processing is the legitimate interest on the controller’s part to deal with prospective customer inquiries and requests, via our website. The legitimate interest is justified by an existing intent showed by the data subject when contacting and receiving information from us. Based on this, we intrude minimally in his/her privacy by way of a limited data use (contact data only).

5.1.5. Whom will my data be disclosed to?

5.1.5.1. Recipients:

- Hosting services (Service providers hired by the organization).

- Back-up services (Service providers hired by the organization).

- Computer consulting services (Service providers hired by the organization).

- Technological platforms services (Service providers hired by the organization).

- Other companies from the business group (The Organization has a legitimate interest in transmitting personal data within the business group for internal administrative purposes, i.e. organizational resource optimization).

5.1.5.2. Transmissions:

- G Suite Google (The controller has hired a virtual infrastructure for the management of e-mail accounts, calendars, documents, office applications, file hosting, etc., following the “cloud computing” model. This is implemented by means of the G Suite services from Google LLC, under the EU-US Privacy Shield Framework. For more information: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

5.2 Additional Information on “NEWSLETTER MANAGEMENT”

PROCESSING: NEWSLETTER MANAGEMENT

5.2.1. For what purpose are personal data processed?

The aim of this processing is to submit commercial information regarding special offers, promotions and advertising of our services.

5.2.2. How long will my data be held?

All data gathered for direct merchandising purposes will be held as long as your interest or relationship with the Organization is active. Subsequently, data shall be stored for a maximum of 3 years if the interest is not renewed or if the business relationship with our Organization is not reactivated. Notwithstanding the above, consent may be withdrawn anytime, and data deletion may be requested at any moment.

5.2.3. Are automated decisions or profiling undertaken?

No automated decisions shall be undertaken on your data.

5.2.4. What are the legal grounds for processing my data?

Consent of the interested party. The legal basis for data processing is the consent given by the requesting party. Under no circumstances shall consent withdrawal condition contract performance.

5.2.5. Whom will my data be disclosed to?

5.2.5.1. Recipients:

- Technological platforms’ services (Service providers hired by the Organization).

5.2.5.2. International Data Transfer:

- Newsletter managing with Mailchimp (for advertising information submission and service promotion purposes, our Organization projects to transfer your contact data internationally and has hired a virtual infrastructure, following the “cloud computing” model, with MAILCHIMP, from The Rocket Science Group, LLC, in accordance with the EU-US Privacy Shield Framework. For more information: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active

5.3 Additional Information on “SELECTION PROCESS MANAGEMENT”

PROCESSING: MANAGEMENT OF SELECTION PROCESSES

5.3.1. For what purpose are personal data processed?

The aim of this processing is to correctly manage the job pool within the Organization, to ease the job placement of all candidates or job seekers, and furthermore, to help them participate in all staff selection processes carried out by the Organization.

5.3.2. How long will my data be held?

Your personal data shall be held for 12 months from the date of reception of your CV. In the event that you are hired by the Organization, this information shall be held for as long as the employment relationship lasts.

5.3.3. Are automated decisions or profiling undertaken?

No automated decisions shall be undertaken on your data.

5.3.4. What are the legal grounds for processing my data?

Application of pre-contract measures at the data subject's request: The legal basis is the mutual interest of both parties on applying this processing in order to enter into a contract.

5.3.5. Whom will my data be disclosed to?

5.3.5.1. Recipients:

- Hosting services (Service providers hired by the organization).

- Back-up services (Service providers hired by the organization).

- Computer consulting services (Service providers hired by the Organization).

5.3.5.2. International Data Transfer:

6. Where do the personal data come from?

In some instances, personal data can come from selection companies hired by us to recruit employees.

7. What kind of data do we process?

- Identification data:

Tax identification number/ID card number
Imagen/Voz
E-mail address
Full name
Address
Telephone number

- Other categorized data:

Personal circumstances
Social circumstances
Academic and professional data
Employability data

- Specially protected data shall not be processed.

8. How do we share your personal data?

ESMALGLASS-ITACA does not sell your personal information. We feel that this information is a vital part of our business relationship. Despite this, under certain circumstances we may share personal data with third parties, as described below:

With your express consent: We shall not share your personal data with companies, organizations or individuals not associated to ESMALGLASS-ITACA unless we have your affirmative consent to do so.
In sales, merging, acquisition or similar operations: Should we be involved in a merge, acquisition, full sale or in the sale of a substantial part of our assets, or in any similar sale transaction, your information could be transferred as part of this transaction. We shall inform you of this transfer or of any decision regarding your personal data, via e-mail and/or a prominent notice in our website.
To fulfil our legal duties: if such disclosure is necessary for complying with our duties under certain laws, regulations, legal procedures or governmental requests.
To lodge a complaint, to make a claim or when courts of justice act in their judicial role: Under special circumstances, disclosure of personal data may be mandatory under a court injunction, judicial order or summons.
For service provision by providers acting in our behalf. Occasionally, we perform contracts with carefully chosen third parties for web service assistance, such as:

E-marketing platforms: to manage the submission of electronic newsletters and advertisements on our services via e-mail.
Hosting in order to perform hosting and e-mail services.
Web Platform: to offer technical support on the code created for the website.

Aggregated or Non-identifying Data: We can share with third parties aggregated data or other personal information that does not directly identify you, for the purpose of enhancing the general experience of our services.

9. Personal Data Retention

We shall retain your personal information as may be necessary to fulfill the purpose of the processing for which they were gathered. Your personal data shall be held as may be necessary to meet our business or contract requirements. At the end thereof, any processed personal data will be held for the periods prescribed by law or for the term ordered by a court of justice, respecting the limitation period of each legal action.

Any data processed for direct merchandising purposes shall be held as long as the interest or relationship with the Organization is active. Subsequently, these data shall be stored for maximally 3 years, if the interest is not renewed or if the business relationship is not reactivated. This is without prejudice to the right to withdraw your consent anytime, or to the right to request deletion of your personal data.

10. Submission and Registration of Personal Data

Submission of personal data is obligatory in accordance with the goals described in number 5. If such data are not provided or if the present privacy policy is not accepted, this shall result in the impossibility to subscribe, register or receive information on ESMALGLASS-ITACA products and services.

11. Security Precautions in Personal Data Processing

ESMALGLASS-ITACA has implemented and applied technical and organizational security mechanisms and measures to ensure a level of security appropriate to the risk presented.

Based on objective assessment, ESMALGLASS-ITACA has identified, analyzed and assessed the variable probability and severity of the risks to the rights and liberties of individuals (risk assessment stage). Furthermore, ESMALGLASS-ITACA has applied relevant and efficient security mechanisms and measures to suppress or diminish hazards identified in the risk evaluation stage. Specifically, technical and organizational precautions have been taken to mitigate possible risks of destruction, loss, accidental or unlawful alteration of data submitted, stored or processed differently, or else any unauthorized communication or access to such data.

In addition, ESMALGLASS-ITACA ensures the user full compliance with the obligation of professional secrecy and confidentiality regarding the user’s personal data, and with the obligation to store these data safely.

12. Subject’s Rights

As a user, you can address your messages and exercise your ARCO rights in compliance with the formalities set forth in the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

In all our operations relating to privacy, we strive to comply with the current legislation, which lists the following subject rights:

Your Rights

Right to be informed

You are entitled to be informed in a clear, concise, transparent and comprehensible manner about the way we use your personal data and about your rights. This information is provided in this policy under chapter 5.

Right of access

You have the right to access the personal data we hold about you (subject to certain limits).

Any requests that are manifestly unfounded, disproportionate or repetitive may not be considered.

To exercise this right, you must contact us by any means set out below.

Right to rectification

You are entitled to have your personal data rectified if they are found to be imprecise or no longer valid, or to request their completion, should they be incomplete.

To exercise this right, you must contact us by any means set out below. If you have an account, it may be easier for you to correct them yourself by modifying your profile.

Right of erasure/oblivion

In certain instances, you have the right to have your personal data erased or deleted. It should be noted that this is not an absolute right, since we may have legal or legitimate reasons to keep them.

If you wish to have your personal data deleted, please contact us by any means set out below.

Right of opposition to direct marketing, including profiling

You can cancel your subscription to our direct marketing communications anytime.

The easiest way to cancel your subscription is to click on the “Unsubscribe” link provided in all e-mails or other communications received from us. Otherwise, you can send us an e-mail to: esv-info@esmalglass-itaca.com or call us at +34 964 626 544.

To object to profiling, please contact us by any means set out below.

Right to withdraw consent at any time, if the data processing is based on consent

If consent has been given for certain purposes informed of during the referred processing, you have the right to withdraw your consent at any time, and this shall not affect the lawfulness of processing based on consent before its withdrawal.

To find out what processing is based on given consent, please review chapter 5 of this policy.

If you wish to withdraw your consent, please contact us by any means set out below.

Right to object to processing based on legitimate interest satisfaction

You can object at any time to the processing of data concerning you, if the processing is based on legitimate interest satisfaction. To find out what processing is based given consent, please review chapter 5 of this policy.

If you wish to exercise this right, please contact us by any means set out below.

Right to lodge a complaint with a supervisory authority

If you consider that your personal data have not been processed in compliance with the current regulations, you can contact the Data Protection Officer at dpo@esmalglass-itaca.com. You may also file a claim at the Spanish Data Protection Agency (www.agpd.es).

Please, do not hesitate to contact us by any means stated below to file a complaint with the competent authority in the field of data protection.

Right to data portability

The data subject shall have the right to receive the personal data concerning him or her (which he or she has provided to a controller) in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller, if the processing is based on a contract or on consent, and if the processing is carried out by automated means. To find out what processing is based given consent, please review chapter 5 of this policy.

For more information, please, contact us by any means set out below.

Right to restriction of processing

The data subject shall have the right to obtain restriction of processing. Where the data processing right has been exercised, such processing shall be limited, and the personal data merely stored but not used nor processed.

This right may only be exercised under certain circumstances defined in the General Data Protection Regulation, as follows:

the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
the processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims;
the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.

If you wish to exercise this right, please, contact us by any means set out below.

Right to disable Cookies

You can disable our Cookies any time. Usually, the Internet browser settings are set by default to accept Cookies, but you can deactivate this easily by changing these settings.

Many Cookies are used to improve website usability and functionality. Therefore, disabling them may prevent you from fully enjoying all or part of the services offered in our website, and you might experience usage problems or have trouble when login in.

If you wish to restrict or block all Cookies established in our websites (which will prevent you from using certain web elements) or in any other websites/applications, you can introduce these changes at the browser settings.

How can I exercise my right to data protection?

To exercise your right to data protection, you must submit a written request to Ctra.CV-20 km.2,3 de Villarreal 12540 (Castellón), or to the following e-mail address: esv-info@esmalglass-itaca.com, stating in the subject: “RGPD”. You are asked to specify what rights you wish to exercise and, also, you must submit a copy of your ID card or equivalent identification document. Should you act by means of a representative, be it legal or volunteer, he/she must also present a document proving the nature of its representation. You can find a model for this at:

◦ You can also use the official model provided by the Agency: http://www.agpd.es/portalwebAGPD/CanalDelCiudadano/derechos/index-ides-idphp.php

◦ Or you can request a model from us: esv-info@esmalglass-itaca.com

13. Processing of Special Categories of Personal Data and Personal Data relating to Criminal Convictions and Offences

In the form fields, the introduction of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation, and personal data on criminal convictions and offenses shall all be prohibited. In the event that information on any of the aspects stated above is entered in any of our forms or sent via e-mail, they shall immediately be deleted in our data systems without answering the consultation, since these data are not necessary nor relevant to the scope of the processing performed in this website.

14. Links to other Websites

We may sometimes offer links to other websites, but these are not under our control. Consequently, we are not responsible before you for any problem arising during the use of your personal data by them, the website content nor the services offered in such websites. We therefore recommend you review the privacy policy and the terms and conditions in each website to find out how each provider processes the data.

15. Data Quality

For the purpose of compliance with the principles of privacy, especially as regards data quality, ESMALGLASS-ITACA informs you that you must only provide your own personal data and not any data on third persons, unless you represent them legally. In addition, to optimize data quality, we need your data to be correct, updated, accurate and truthful.

If the data provided refer to a person different than yourself that you do not represent, or if your own data or the data of the person you represent are false, incorrect, not up-to-date or inappropriate, you shall be held responsible for any direct and/or indirect damages caused to third parties or to ESMALGLASS-ITACA.

The data requested by the User marked with an asterisk (*) shall be only the strictly necessary ones to be able to contact the User. Under no circumstances shall providing more data than the strictly necessary ones be a hindrance to service quality.

16. Data concerning Minors or Disabled Individuals

Minors are not permitted to use the service. Therefore, we ask any person under 16 to refrain from using our website services.

ESMALGLASS-ITACA may request information or additional information for the purpose of verifying the subject’s age, considering the available technology.

17. Consent to Direct Mail Marketing

The User is the only source of information on his/her personal data. To this end, ESMALGLASS-ITACA shall ask you to keep your data updated at any time in accordance with the RGPD principles, and to communicate them to the above-given address for exercising the access, rectification, cancellation and opposition rights, any variation on these data, or to state when your activity at the represented institution ceases, so as to perform the relevant cancellations and/or historic data processing.

18. Consentimiento para envíos publicitarios.

In accordance with the LSSI Law ESMALGLASS-ITACA shall not submit any advertisements or promotional offers via e-mail or any other electronic means of communication without prior request or express authorization by the recipient, including acceptance of the present privacy policy, or based on other authorization methods used by ESMALGLASS-ITACA.

In the case of users with an existing previous contractual relationship, ESMALGLASS-ITACA shall be authorized to send them commercial communications regarding products or services from ESMALGLASS-ITACA that are similar to those initially contracted by the customer. In any case, the user may voluntarily request to be excluded from direct mailing of commercial information, by contacting the Customer Service office, providing proof of his/her identity, or by cancelling his/her subscription via the link in the commercial e-mail itself.

The subject’s personal data shall then be stored in our information system indefinitely for marketing campaign purposes on our products and services, as long as the subject does not exercise its right to object to such direct mailings.

19. Social Media

When you become a fan, follower or similar of our company in any social media, you must be aware that in the processing of your data ESMALGLASS-ITACA shall only check or cancel your data in a restricted manner, since you have a specific profile. Any rectification of your data or any information or publication restrictions must be performed in your profile settings or in the user set-up of the social media itself. By default, you agree to:

The processing of your personal data within a given social media and pursuant to its Privacy policy.
The access by ESMALGLASS-ITACA to the data contained in your profile or biography. Depending on the privacy settings you have in each social network, these will be more or less extensive.
The appearance of news or comments on our events in your wall or biography.
To receive communications on our products/events.

If you want to stop following us, you just need to click on “Stop being a fan” or on “Stop following”.

20. Modification of this Privacy Policy

ESMALGLASS-ITACA reserves the right to modify the present Privacy policy to adapt to future new legislation or case law, and to new industry practices, informing users previously of such changes.

The uninterrupted use of ESMALGLASS-ITACA by the user shall constitute a ratification of this document, with the corresponding modifications and changes.

For the same reasons state above, ESMALGLASS-ITACA reserves the right to modify or interrupt the ESMALGLASS-ITACA service totally or partially with prior or no notice to the user. ESMALGLASS-ITACA shall not be held responsible before the user or any third party for exercising its right to modify or interrupt the ESMALGLASS-ITACA service.

download service