AIMEN Personal Data Protection Policy

AIMEN Personal Data Protection Policy

In compliance with current regulations on data protection, consisting of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Organic Law 3/2018 of 5 December, on Data Protection and Guarantee of Digital Rights, you are hereby provided with the following information about the data processing carried out by AIMEN:

Personal Data Controller

The personal data controller is the legal person determining the purposes and means of the processing of personal data. In other words, the controller decides how and why personal data are processed.

For the purposes of this Personal Data Protection Policy, the personal data controller is:

• Identity: ASOCIACION DE INVESTIGACION METALÚRGICA DEL NOROESTE (AIMEN). NIF (Spanish Tax ID number): G36606291
• Address: C/ Relva 27 A, 36410 TORNEIROS-PORRIÑO (Pontevedra)
• Contact telephone number: 986 34 40 00
• Contact e-mail: privacidad@aimen.es
• Privacy Officer: privacidad@aimen.es
• Data Protection Delegate: dpo@aimen.es

What personal data do we process and how do we protect the data?

“Personal data” is any information relating to an identified or identifiable natural person.

For the purposes hereof, the data controller collects and processes the data explained in each type of processing, which will be subject to the services requested or to the contractual relationship you have with our organization.

Our organization undertakes to process the data in full confidentiality and to apply the appropriate physical, technical and organizational safeguards to protect your personal data.

You guarantee and are liable for, at all times, the truthfulness, accuracy, validity and authenticity of the personal data provided and undertake to keep such data duly updated.

Processing of personal data from “Clients”

What categories of personal data do we process?

• Identification data: name, ID number, address, telephone number, e-mail address.
• Financial data: bank account number, credit card details.
• Academic and professional data: occupation, position, experience, qualifications.
• Data on transactions: supplied products and services.

Why do we process your personal data?

We process your personal data to facilitate the management of our clients’ data, to maintain our business relationship, our accounting, administrative and invoicing activities, and our tax obligations.

We also intend to use the data for advertising and sales prospection, wherefor the data subject is requested his or her express consent.

Our organization undertakes to process the data in full confidentiality and to apply the appropriate physical, technical and organizational safeguards to protect your personal data.

The personal data provided will be retained for the duration of our business relationship. If you decide to cancel your personal data, those may be retained in our data bases for the period stipulated by law to meet our tax and accounting obligations. They will be deleted once such legal time limits or the applicable time limits have elapsed.

What are the legal grounds for processing your data?

The legal grounds for processing your data is the subscription of a contract, as well as the fulfillment of the controller’s legal obligations.

Who will be communicated your data?

• Gestoría G5; company in charge of accounting and tax management
• Ayco.net; company in charge of informative mailing activities.

Your personal data will not be transferred to any other organizations, except to public bodies if so requested by law.

No international personal data transfers are intended.

Processing of personal data from “Contacts and prospective clients”

What categories of personal data do we process?

• Identification data: name, address, telephone number, e-mail address.

Why do we process your personal data?

We process the personal data you provide in the contact form to manage the data of business contacts and prospects.

We also intend to use the data for advertising and sales prospection, wherefor the data subject is requested his or her consent.

Our organization undertakes to process the data in full confidentiality and to apply the appropriate physical, technical and organizational safeguards to protect your personal data.

The personal data provided will be retained for the duration of our business relationship. If you decide to cancel your personal data, they will be deleted from our contact data base.

What are the legal grounds for processing your data?

The legal grounds for processing your data is the express consent requested to you.

Who will be communicated your data?

Your personal data will not be transferred to third parties.

No international personal data transfers are intended.

Processing of personal data from “Suppliers”

What categories of personal data do we process?

• Identification data: name, ID number, address, telephone number, e-mail address.
• Financial data: bank account number.
• Academic and professional data: occupation, position, qualifications.
• Data on transactions: supplied products and services.

Why do we process your personal data?

We process your personal data to facilitate the management of our suppliers’ data, to maintain our business relationship, our accounting, administrative and payment activities, and our tax obligations.

Our organization undertakes to process the data in full confidentiality and to apply the appropriate physical, technical and organizational safeguards to protect your personal data.

The personal data provided will be retained for the duration of our business relationship. If you decide to cancel your personal data, those may be retained in our data bases for the time stipulated by law to meet our tax and accounting obligations. They will be deleted once such legal time limits or the applicable time limits have elapsed.

What are the legal grounds for processing your data?

The legal grounds for processing your data is the subscription of an agreement, as well as the fulfillment of the controller’s legal obligations.

Who will be communicated your data?

Your personal data will not be transferred to any third-party organizations, except to public bodies if so requested by law.

No international personal data transfers are intended.

Processing of personal data from “Candidates”

What categories of personal data do we process?

• Identification data: name, ID number, date of birth, address, telephone number, e-mail address, image.
• Data on personal characteristics: Sex, marital status, nationality, age, date and place of birth.
• Academic and professional data: occupation, position, experience, qualifications.

Why do we process your personal data?

We process the personal data you provide to us for recruitment purposes.

Our organization undertakes to process the data in full confidentiality and to apply the appropriate physical, technical and organizational safeguards to protect your personal data.

The personal data provided will be retained as long as the data subject withdrawn consent to keep his or her CV for future recruitment processes. If you decide to cancel your personal data, they will be deleted from our candidate data base.

What are the legal grounds for processing your data?

The legal grounds for processing your data is the express consent requested to you.

Who will be communicated your data?

Your personal data will not be transferred to third parties.

No international personal data transfers are intended.

Processing of personal data from “Training”

What categories of personal data do we process?

• Identification data: name, ID number, date of birth, address, telephone number, e-mail address, image.
• Data on personal characteristics: Sex, marital status, nationality, age, date and place of birth.
• Academic and professional data: occupation, position, experience, qualifications.
• Data on transactions: supplied products and services.

Why do we process your personal data?

We process your personal data to facilitate the management of training courses that are taught at AIMEN.

Our organization undertakes to process the data in full confidentiality and to apply the appropriate physical, technical and organizational safeguards to protect your personal data.

The personal data provided will be retained as long as the data subject withdrawn consent for management of future training courses. If you decide to cancel your personal data, they will be deleted from our data base.

What are the legal grounds for processing your data?

The legal grounds for processing your data is the express consent requested to you.

Who will be communicated your data?

Your data may be communicated to entities in charge of data processing for the issuance of certificates, such as FROSIO, CESOL and AEND.

Your personal data will not be transferred to third parties.

No international personal data transfers are intended.

What are your rights when you provide your data to us?

According to applicable regulations on personal data protection, you are entitled to a number of rights regarding the processing of your personal data. You may exercise such rights free of charge, unless those are clearly unreasonable or excessive, or particularly repetitive.

Your rights are listed below:

• Right to information: You have the right to be informed in a concise, transparent, intelligible and easily accessible form, using clear and plain language, about the use and processing of your personal data.
• Right to access: You have the right to request confirmation at any time about whether we are processing your personal data, to be provided access to such data and to be informed about their processing, and to obtain a copy of the data. The copy of your personal data provided by us will be free of charge. However, any additional copies may be subject to the payment of a reasonable amount based on the administrative costs incurred. We may ask you to prove your identity or require any necessary information to manage your request.
• Right of rectification: You have the right to obtain the rectification of inaccurate, outdated or incomplete data concerning you. You may also have the incomplete personal data completed, including by means of providing a supplementary statement.
• Right to erasure: You have the right to obtain the erasure of your personal data when, among other reasons, the data are no longer necessary in relation to the purposes for which they were collected. However, this right is not an absolute right, so our organization may keep them, if duly blocked, as stipulated under applicable regulations.
• Right to restriction of processing: You have the right to obtain restriction of processing of your personal data, which means we may store such data but not process them if any of the following conditions apply:
  • You contest the accuracy of the personal data, for a period enabling the controller to verify their accuracy;
  • The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
  • Our company no longer needs the personal data for the purposes of processing, but they are required by you for the establishment, exercise or defense of legal claims;
  • You have objected to processing, pending the verification whether our legitimate grounds override yours.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used and machine-readable format to transmit those data to another controller. This right is applicable when the processing of your personal data is based on consent or on the subscription of an agreement and if such processing is carried out by automated means.
• Right to object: This right allows you to object to the processing of your personal data, including profiling. We will not be able to observe your right solely when we process your data in the event we can prove legitimate grounds for processing or for establishing, exercising or defending legal claims.
• Right to object to automated decision-making, including profiling: This right allows you to not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affecting you. Unless such decision is necessary for entering into, or performance of, a contract between you and us, is authorized by law or is based on your explicit consent.
• Right to withdraw consent: In the event we have obtained your consent for processing your personal data regarding certain activities (e.g. to send you sales communications), you may withdraw such consent at any time. Thus, we will cease to carry out the specific activity you had consented in the past, unless the continuity of the processing of your personal data is otherwise justified, in which case you will be notified.
• Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint before Spanish Data Protection Agency, C/ Jorge Juan, 6, 28001 Madrid, 901 100 099 - 912 663 517 (www.agpd.es), or at: https://sedeagpd.gob.es/sede-electronica-web/vistas/formQuejasSugerencias/seleccionarQuejaSugerencia.jsf

You may exercise the rights above by sending a communication to the controller’s mailing address or e-mail address, together with a document proving your identity and providing any details necessary to process your request.

The data subjects may obtain additional information on their rights from the website of the Spanish Data Protection Agency, www.agpd.es.