In compliance with current regulations on data protection, Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR), Organic Law of Data Protection and Guarantee of Rights Digitales (LOPDGDD, Law 3/2018 of December 5), we inform you of the Personal Data Protection Policy, regarding the processing of personal data, is the one detailed below.
A personal data is any information about an identified or identifiable natural person.
For the purposes established in this Privacy Policy, the person in charge collects and processes the personal data that is explained in each type of treatment, and that will depend on the different services requested or the contractual relationship that it maintains with our entity.
Our organization undertakes to treat with total confidentiality and to apply the appropriate physical, technical and organizational security measures for the protection of your personal data.
You guarantee and respond, in any case, to the veracity, accuracy, validity and authenticity of the personal data provided and undertake to keep them duly updated.
1. What type of personal data do we process?
For what purpose do we process your personal data?
We process the personal data that you provide us for the management of company customer data, to maintain the commercial relationship, accounting, administrative and billing management, as well as tax obligations.
The purpose of advertising and commercial prospecting has also been provided, for which the express consent of the interested party is requested.
The personal data provided will be kept as long as the commercial relationship is maintained. If you decide to cancel your personal data, these may be kept in our databases during the periods provided for by law in order to comply with tax and accounting obligations, and will be eliminated once said legal periods or those that are applicable have prescribed.
3. What is the legitimacy for the processing of your data?
The legal basis for the processing of your data is the execution of a contract, as well as the fulfillment of a legal obligation of the person in charge.
The communication of offers and promotions that could be of your interest is based on the express consent that is requested.
4. To which recipients will your data be communicated?
Your personal data will not be transferred to any entity, except those that are necessary to public bodies by legal obligation. Nor have international transfers of personal data been foreseen.
2. For what purpose do we process your personal data?
We treat the personal data that you provide us in the contact form for the management of business contact data and potential clients.
The personal data provided will be kept as long as the commercial relationship is maintained. If you decide to cancel your personal data, it will be deleted from our contact database.
The legal basis for the processing of your data is the express consent that is requested.
Your personal data will not be transferred to any entity.
Nor have international transfers of personal data been foreseen.
We process the personal data that you provide us with the management of the company’s suppliers’ data, to maintain the commercial relationship, the accounting, administrative and payment management, as well as tax obligations.
We process the personal data that you provide us for the management of the company’s selection processes.
The personal data provided will be kept as long as the interested party has not withdrawn consent in order to continue saving their curriculum vitae for future selection processes. If you decide to cancel your personal data, it will be removed from our database of job candidates.
Your data could be transferred to other companies of the COREN group, to participate in personnel selection processes. An updated list of the companies that make up the COREN group can be consulted at the end of this document. No international transfers of personal data have been foreseen.
We process personal data for the recording of video surveillance images at the company’s facilities for security reasons. Personal data will be kept for the established legal periods (one month).
The legal basis for the processing of your data is the satisfaction of legitimate interests pursued by the person responsible for the treatment.
Your personal data will not be transferred to any entity, except those that are necessary to the Security Forces and Forces by legal obligation. Nor have international transfers of personal data been foreseen.
We process personal data to control visits and access to company facilities for security reasons.
The personal data will be kept as long as the interested party does not request the cancellation. If you decide to cancel your personal data, it will be deleted from our database.
We process the personal data that you provide us to manage the data of the consumers of the company’s products, in order to be able to provide them with after-sales services and management of incidents and claims.
The legal basis for the processing of your data is the execution of a contract.
Your personal data will not be transferred to any entity, nor are international transfers of personal data planned.
We process the personal data that you provide us for the registration of attendees to courses organized by the company.
The personal data provided will be kept as long as you do not request the cancellation of the data. If you decide to cancel your personal data, it will be removed from our database of course attendees.
Assignments that are necessary to comply with legal obligations are made to entities such as the Xunta de Galicia or the Tripartite Foundation. International transfers of personal data have not been foreseen.
We process the personal data that you provide us for the management of teachers of the courses organized by the company.
Assignments that are necessary to comply with legal obligations are made to entities such as the Xunta de Galicia or the Tripartite Foundation, as well as to the Tax Agency or Social Security.
Data transfers are also made for legitimate purposes related to the activity of the company: It will be necessary to communicate the bank details (NIF, name and surname and account number) to the financial entities in charge of intervening in the operation of the payment of teaching fees. International transfers of personal data are not foreseen.
We process the personal data that you provide us to manage the data of the company’s partners, to maintain the contractual relationship, the accounting, administrative and billing management, as well as tax obligations.
What are your rights when you provide us with your data?
In accordance with the applicable regulations on data protection, you have a series of rights in relation to the processing of your personal data. The exercise of these rights will be free for you, except in cases where manifestly unfounded or excessive requests are made, especially repetitive ones.
These rights are as follows:
a. Right to information: You have the right to be informed in a concise, transparent, intelligible and easily accessible manner, with clear and simple language, about the use and processing of your personal data.
b. Right of access: You have the right to ask us at any time to confirm whether we are treating your personal data, to provide you with access to them and to the information about your treatment and to obtain a copy of said data. The copy of your personal data that we provide will be free of charge, although the request for additional copies may be subject to the charge of a reasonable amount based on administrative costs. For our part, we may ask you to prove your identity or require more information that is necessary to manage your request.
c. Right of rectification: You have the right to request the rectification of inaccurate, outdated or incomplete personal data concerning you. You may also request that incomplete personal data be completed, including through an additional statement.
d. Right of deletion: You have the right to request the deletion of your personal data when, among other reasons, the data is no longer necessary for the purposes for which it was collected. However, this right is not absolute, so that our organization may continue to keep them duly blocked in the cases provided for by the applicable regulations.
e. Right to limit the processing: You have the right to request that we limit the processing of your personal data, which means that we may continue to store it, but not continue to process it if any of the following conditions are met:
f. Right to data portability: You have the right to have your data transmitted to another data controller in a structured, commonly used and machine-readable format. This right applies when the processing of your personal data is based on consent or the execution of a contract and such processing is carried out by automated means.
g. Right of opposition: This right allows you to oppose the processing of your personal data, including profiling. We will not be able to attend to your right only when we process your data in the event that we prove legitimate reasons for the treatment or for the formulation, exercise or defense of claims.
h. Right not to submit to automated decisions, including profiling: This right allows you not to be the subject of a decision based solely on automated processing, including profiling, which produces -said decisions- legal effects or affects you in a similar way. Unless said decision is necessary for the conclusion or performance of a contract, is authorized by law or is based on consent.
i. Right to withdraw consent: In cases where we have obtained your consent for the processing of your personal data in relation to certain activities (for example, in order to send you commercial communications), you may withdraw it at any time. In this way, we will stop carrying out that specific activity for which you had previously consented, unless there is another reason that justifies the continuity of the processing of your data for these purposes, in which case, we will notify you of this situation.
j. Right to file a claim with a control authority: You have the right to file a claim with the Spanish Data Protection Agency, C / Jorge Juan, 6, 28001 Madrid, 901 100 099 – 912 663 517 (www.agpd.es ), or at the electronic address: https://sedeagpd.gob.es/sede-electronica-web/vistas/formQuejasSugerencia/seleccionarQuejaSugerencia.jsf
You can exercise the aforementioned rights by sending a communication to our Customer Service Department, or by sending an email to dpo@coren.es, accompanying a document proving your identity and providing the necessary details to process your request.
Interested parties can obtain additional information about their rights on the website of the Spanish Data Protection Agency, www.agpd.es.
GRUPO COREN is the commercial name under which the following group of companies operates: