Privacy Policy
In compliance with current legislation on data protection, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 (GDPR), Organic Law on the Protection of Personal Data and Guarantee of Digital Rights (LOPGDD , 3 /2018 – Spain), we inform you about the Personal Data Protection Policy, with regard to the processing of personal data, which is detailed below.
Responsible for processing personal data
The data controller is the legal entity that determines the purposes and means of processing personal data.
In other words, the controller decides how and for what purposes personal data is processed.
For the purposes of this Data Protection Policy, the person responsible for processing personal data is:
- Company name: FORESA TECHNOLOGIES, S.L.U.
- NIF (VAT): B-94193919
- Registered in the Commercial Register of Pontevedra (Spain), Sheet PO-65699 Tomo (File) 4298 Folio (Page) 45
- Registered office: Avda. de Doña Urraca no 91 (Apt. 8), CP 36650 Caldas de Reis (Pontevedra) Spain
- Tel.: +34 986 05 92 00
- Fax: +34 986 54 08 55
- email: privacidad@foresatechnologies.com
What personal data do we process and how do we protect them?
Personal data is any information about an identified or identifiable natural person.
For the purposes established in this Privacy Policy, the responsible person collects and processes the personal data explained in each type of processing, which will depend on the different services that the user requests or the contractual relationship they maintain with our entity.
Our organization is committed to treating you with complete confidentiality and applying appropriate physical, technical and organizational security measures to protect your personal data.
The user guarantees and is responsible, in any case, for the veracity, accuracy, validity and authenticity of the personal data provided and undertakes to keep them duly updated.
Processing of “Job Applications” data
1. What type of personal data do we process?
- Identifying data: name, ID, date of birth, address, telephone, email address, image.
- Personal characteristic data: gender, marital status, nationality, age, date and place of birth.
- Academic and professional data: profession, position, experience, qualifications.
2. For what purpose do we process your personal data?
We process the personal data you provide to us to manage the company's selection processes.
The personal data provided will be kept as long as the interested party does not withdraw consent so that we can continue to store their curriculum vitae for future selection processes.
In any case, CVs will be deleted one year after submission.
3. What is the legitimacy for processing your data?
The legal basis for processing your data is the express consent requested.
4. To which recipients will your data be communicated?
Your data may be transferred to companies in the FINSA group, the group of companies to which FORESA belongs. Parent company of FORESA TECHNOLOGIES, S.L.U. and whose parent company of the Group is FINANCIERA MADERERA, S.A, for which your consent is obtained:
FINSA group companies to which your data may be transferred:
- FINANCIERA MADERERA, S.A
- BRESFOR, INDUSTRIA DO FORMOL, S.A.
- FORESA FRANCE, S.A.S
- NORFIN LOGISTICS, S.L
- FORESA INDUSTRIAS QUIMICAS DEL NOROESTE, S.A.
Your personal data will not be transferred to any entity outside the group.
IT is carried out in the United States of America under the Privacy Shield, through the Google data processor (Gsuite).
Processing of «Customers and Suppliers» data
1. What type of personal data do we process?
- Identifying data: name, ID, address, telephone, email address.
- Financial data: bank account, credit card details.
- Academic and professional data: profession, position, experience, qualifications.
- Data relating to transactions: products and services provided.
2. For what purpose do we process your personal data?
We process the personal data you provide to us to manage the data of the company's customers and suppliers, to maintain the commercial relationship, accounting, administrative and invoicing management, as well as tax obligations.
The purpose of advertising and commercial prospecting is also foreseen, to maintain the commercial relationship between the parties.
The personal data provided will be kept as long as the commercial relationship is maintained.
If you decide to cancel your personal data, it may be kept in our databases for the periods established by law to comply with tax and accounting obligations, and will be deleted once the aforementioned legal or applicable deadlines have expired.
3. What is the legitimacy for processing your data?
The legal basis for processing your data is the execution of a contract, as well as compliance with a legal obligation of the person responsible.
The communication of offers and promotions that may be of interest to you is based on the legitimate interest of maintaining the commercial relationship between the parties.
4. To which recipients will your data be communicated?
We inform you that your data may be communicated to the parent company of FORESA TECHNOLOGIES, S.L.U: which is FORESA, INDUSTRIAS QUIMICAS DEL NOROESTE, S.A.U. and to the parent company of the FINSA Group of Companies, which is FINANCIERA MADERERA, S.A, or to third parties that provide services related to the processing purposes for which the data was collected, and subject to your consent when necessary.
Furthermore, your data will not be transferred to countries outside the European Union, except for reasons of providing technical services, such as when the servers of system providers or technological resources are hosted outside the European Union.
IT is carried out in the United States of America under the Privacy Shield, through the Google data processor (Gsuite and Cloud Platform).
However, you may transfer your data to third parties if such transfer is required by law, by a regulatory provision or by a court ruling, or if this disclosure is necessary to ensure the protection and defense of your rights.
Your personal data will not be transferred to any entity, unless it is necessary to public organizations due to legal obligation.
Processing of “Contacts and potential customers” data
1. What type of personal data do we process?
- Identifying data: name, address, telephone, email address.
2. For what purpose do we process your personal data?
We process the personal data you provide to us on the contact form to manage data on commercial contacts and potential customers.
The purpose of advertising and commercial prospecting is also foreseen, for which the express consent of the interested party is requested.
The personal data provided will be kept as long as the commercial relationship is maintained.
If you decide to cancel your personal data, it will be deleted from our contact database.
3. What is the legitimacy for processing your data?
The legal basis for processing your data is the express consent requested.
4. To which recipients will your data be communicated?
The data may be communicated to data controllers who carry out management tasks for sending communications, as well as managing social networks.
IT is carried out in the United States of America under the Privacy Shield, through the Google data processor (Gsuite).
“Security” data processing
1. What type of personal data do we process?
- Identifying data: name, CC, address, telephone, signature, image/voice.
We process the personal data you provide to us to guarantee the security of the company's facilities through the recording of video images (video surveillance).
We also process the data to manage access control.
Personal data will be kept for a maximum of the legal deadlines provided (one month).
3. What is the legitimacy for processing your data?
The legal basis for processing your data is the satisfaction of legitimate interests pursued by the data controller.
4. To which recipients will your data be communicated?
Your data may be communicated to PROTECCION E INTEGRIDAD, S.A (PROINSA), the entity in charge of processing security data, as well as to companies that install and maintain alarm and access control services.
Your personal data will not be transferred to any entity, except those that are necessary for the Security Forces and Bodies due to legal obligation.
International transfers of personal data are not foreseen either.
What are your rights when you provide us with your data?
In accordance with the applicable data protection legislation, you have a series of rights regarding the processing of your personal data.
The exercise of these rights will be free of charge for the user, except in cases where requests are made that are manifestly unfounded or excessive, especially because they are repetitive.
These rights are as follows:
1. Right to information:
You have the right to be informed in a concise, transparent, intelligible and easily accessible way, with clear and simple language, about the use and processing of your personal data.
2. Right of access:
You have the right to ask us, at any time, to confirm if we are processing your personal data, access it and information about its processing and to obtain a copy of said data.
The copy of your personal data that we provide you with will be free, although the request for additional copies may be subject to a certain fee based on administrative costs.
For our part, we may ask you to prove your identity or request more information that is necessary to process your request.
3. Right of rectification:
You have the right to request the rectification of inaccurate, outdated or incomplete personal data that concerns you.
You can also request that incomplete personal data be completed, including through an additional declaration.
4. Right to erasure:
You have the right to request the erasure of your personal data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
However, this right is not absolute, so our organization may continue to keep them duly blocked in the cases provided for in the applicable legislation.
5. Right to restriction of processing:
You have the right to request that we restrict the processing of your personal data, which means that we may continue to store it, but not continue to process it if any of the following conditions are met:
- if you contest the accuracy of the data, for a period that allows the person responsible to verify its accuracy;
- if the processing is unlawful and you object to the erasure of the data and request instead the restriction of its use;
- if our entity no longer needs the data for processing purposes, but you need it for the formulation, exercise or defense of claims;
- if you object to the processing, while verifying whether the legitimate reasons of our entity prevail over yours.
6. Right to data portability:
You have the right to have your data transmitted to another data controller in a structured, commonly used and machine-readable format.
This right applies when the processing of your personal data is based on consent or the execution of a contract and this processing is carried out through automated means.
7. Right to object:
This right allows you to object to the processing of your personal data, including profiling.
We will not be able to satisfy your right when we process your data if we prove legitimate reasons for processing or for the formulation, exercise or defense of claims.
8. Right not to be subject to automated decisions, including profiling:
This right allows you not to be subject to a decision based solely on automated processing, including profiling, that produces - such decision - legal effects or that affects you in a similar way.
Unless such decision is necessary for the conclusion or performance of a contract, is authorized by law or is based on consent.
9. Right to withdraw consent:
If we have obtained your consent to process your personal data in relation to certain activities (for example, for the purpose of sending commercial communications), you may withdraw your consent at any time.
In this way, we will no longer carry out that specific activity for which you had previously given your consent, unless there is another reason that justifies the continued processing of your data for these purposes, in which case we will notify you of this situation.
10. Right to lodge a complaint with a supervisory authority:
You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, Spain + 34 901 100 099 - + 34 912 663 517 (www.agpd.es), or via email address: https://sedeagpd.gob.es/sede-electronica-web/vistas/formQuejasSugerencias/ seleccionarQuejaSugerencia.jsf
You can exercise the rights indicated above by sending us a communication to the physical or email address indicated, attaching a document accrediting your identity and providing the data necessary to process your request.
Interested parties can obtain additional information about their rights on the Spanish Data Protection Agency website, www.agpd.es.
