1. USER INFORMATION

   Who is responsible for the processing of your personal data?

CERTIS OBRES I SERVEIS SA is the RESPONSIBLE for the processing of the USER’s personal data and informs the USER that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679, of 27 April (GDPR), and Organic Law 3/2018, of 5 December (LOPDGDD).

What do we process your personal data for?

To maintain a business relationship with the USER. The operations envisaged to carry out the processing are:

• Sending commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that make it possible to carry out commercial communications. These communications will be made by the RESPONSIBLE PARTY and will be related to its products and services, or those of its collaborators or suppliers, with whom it has reached a promotional agreement. In this case, third parties will never have access to the personal data.
• Manage the reception of resumes and the processing of applications for a job. Candidates’ personal data will be treated confidentially and exclusively for the processing of their application.
• Conduct market research and statistical analysis.
• To process quotes, orders, requests, respond to queries or any type of request made by the USER through any of the contact forms made available on the CONTROLLER’s website.
• Send the online newsletter about news, offers and promotions RESPONSIBLE.
• Management of the blog with related news about the activity of the CONTROLLER.
• Whistleblowing Channel Management. The CONTROLLER has a whistleblowing channel that ensures the right of individuals to report incidents, misconduct and other substantially incorrect behaviour. As provided for by current regulations, these reports can be anonymous. In the event that the complainant identifies themselves, we will process their data for the sole purpose of processing the complaint and preparing the corresponding report. Under no circumstances will this data be used for purposes other than the management of the complaint and will be kept only for the time necessary to carry out the purpose or until there is a legal obligation to keep them.

Why may we process your personal data?

Because the processing is legitimized by Article 6 of the GDPR in the following way:

• With the consent of the USER: the management of their application for a job, management of the blog, sending commercial communications and the newsletter.
• For the legitimate interest of the CONTROLLER: to carry out market research, statistical analysis and process quotes, orders, requests, etc. at the request of the USER.
• By legal obligation: management of the whistleblowing channel.

How long will we keep your personal data?

They will be kept for no longer than is necessary to maintain the purpose of the processing or there are legal prescriptions that dictate their custody and when it is no longer necessary to do so, they will be deleted with appropriate security measures to guarantee the anonymisation of the data or the total destruction of the same. Job candidates’ data will be kept for one year.

Who do we provide your personal data to?

No communication of personal data to third parties is foreseen unless, if necessary for the development and execution of the purposes of the processing, to our service providers related to communications, with whom the RESPONSIBLE PARTY has signed the confidentiality and data processor agreements required by current privacy regulations or there is a legal obligation.

What are your rights?

The rights of the USER are:

• Right to withdraw consent at any time.
• Right of access, rectification, portability and deletion of your data, and of limitation or opposition to its processing.
• The right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with the regulations in force.

Contact details to exercise your rights:

CERTIS OBRAS Y SERVICIOS SA. C.17 Km. 49, 446, – 08550 Balenyà (Barcelona). E-mail: certis@certis.cat

Contact details of the Data Protection Officer: info@badia-adv.com

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

The USER, by ticking the corresponding boxes and entering data in the fields, expressly and freely and unequivocally accepts that his/her data is necessary to attend to his/her request. The RESPONSIBLE PARTY will indicate which data is necessary for the provision of an optimal service to the USER. In the event that such data is not provided, there is no guarantee that the information and services provided will be fully tailored to your needs. The USER guarantees that the personal data provided to the CONTROLLER is truthful and is responsible for communicating any modification thereof.

3. SECURITY MEASURES

That in accordance with the provisions of the current regulations on the protection of personal data, the RESPONSIBLE PARTY is complying with all the provisions of the GDPR and LOPDGDD regulations for the processing of personal data for which it is responsible, and manifestly with the principles described in article 5 of the GDPR, by which they are treated lawfully,  fair and transparent in relation to the data subject and adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The CONTROLLER guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of the USERS and has communicated to them the appropriate information so that they can exercise them.

For more information on privacy guarantees, you can contact the RESPONSIBLE PARTY through CERTIS OBRES I SERVEIS SA. C.17 Km. 49, 446, – 08550 Balenyà (Barcelona). E-mail: certis@certis.cat

Contact details of the Data Protection Officer: info@badia-adv.com