This Privacy Policy has been developed in accordance with the provisions of the Spanish Organic Law on Personal Data Protection currently in force, as well as Regulation 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, hereinafter referred to as the GDPR.
The purpose of this Privacy Policy is to inform data subjects, who are being asked to provide personal information, about specific aspects relating to the processing of their data, including, inter alia, the purposes of the processing, contact details for exercising their rights, data storage periods and security measures.
DATA CONTROLLER
In terms of data protection, METACENTRO CONSTRUCCIONES, S.L. must be considered the Data Controller in relation to the files/processing identified in this policy, specifically in the section on Data Processing.
The identification particulars of the owner of this website are as follows:
- Data Controller: METACENTRO CONSTRUCCIONES, S.L.
- Postal address: Polígono Industrial Costa del Sol, Calle Platino, 12, 29603 Marbella, Málaga
- Telephone No.: +34 952 82 45 02
- E-mail address: info@metacentro.es
DATA PROCESSING
Any personal data requested, where appropriate, will consist solely of data that is strictly necessary to identify and respond to the request made by the owner of said data, hereinafter referred to as the data subject. This information will be processed fairly, lawfully and in a transparent manner in relation to the data subject. Furthermore, personal data will be collected for specific, explicit and legitimate purposes, and will not be further processed in a manner incompatible with those purposes.
The data collected from each data subject will be adequate, relevant and not excessive in relation to the purposes for which they are processed, and will be updated whenever necessary.
The data subject will be informed, prior to the collection of their data, of the general points regulated in this policy so that they can give their express, precise and unequivocal consent to the processing of their data, in accordance with the following aspects.
PURPOSES OF PROCESSING
The explicit purposes for which each type of processing is performed are set forth in the information clauses included in each of the data collection channels (web forms, paper forms, announcements or posters, and information notices).
Notwithstanding, the data subject’s personal data will be processed for the sole purpose of providing an effective response and answering the requests made by the user, specified alongside the option, service, form or data collection system used by the data subject.
LEGAL STANDING
As a general rule, prior to processing personal data, METACENTRO CONSTRUCCIONES, S.L. obtains express and unequivocal consent from the data subject by including informed consent clauses in the various information collection systems.
Notwithstanding, in the event that the consent of the data subject is not required, the legal standing for processing the data, which allows METACENTRO CONSTRUCCIONES, S.L. to process such data, is the existence of a specific law or regulation that authorises or requires the processing of the data subject’s data.
RECIPIENTS
As a general rule, METACENTRO CONSTRUCCIONES, S.L. does not transfer or disclose data to third parties, except when legally required to do so. Notwithstanding, should this be necessary, the data subject will be informed of such data transfers or disclosures through the informed consent clauses set forth in the various personal data collection channels.
SOURCE
As a general rule, personal data is always collected directly from the data subject. Notwithstanding, in certain exceptional cases, data may be collected through third parties, entities or services other than the data subject. In this regard, this will be conveyed to the data subject through the informed consent clauses set forth in the various data collection channels within a reasonable period of time, once the data has been collected, and no later than one month thereafter.
STORAGE PERIODS
The information collected from the data subject will be stored for as long as necessary to comply with the purpose for which the personal data was collected; therefore, once the purpose has been complied with, the data will be cancelled. Such cancellation will result in the data being blocked, which will only be made available to the public administrations, judges and courts in order to address any liabilities arising from their processing, during the the statute of limitations applicable to said liabilities. Once this period has expired, the information will be destroyed.
For informative purposes, the following is a list of the legal storage periods for the information in relation to different matters:
DOCUMENT | RETENTION PERIOD | LEGAL REFERENCE |
---|---|---|
Employment-related or social security documentation | 4 years | Article 21 of Royal Legislative Decree 5/2000, of 4 August, approving the revised text of the Law on Offences and Penalties in the Social Order. |
Accounting and tax documentation for commercial purposes | 6 years |
Article 30 of the Commercial Code. |
Accounting and tax documentation for tax purposes | 4 years | Articles 66 to 70 of the General Tax Law. |
Access control to buildings | 1 month | Instruction 1/1996 of the Spanish Data Protection Agency (AEPD). |
Video surveillance | 1 month | Instruction 1/2006 of the Spanish Data Protection Agency (AEPD), Organic Law 4/1997. |
BROWSING DATA
With regard to the browsing data that may be processed through the website, in the event of collecting data to which the regulations are applicable, we recommend consulting the Cookies Policy published on our website.
RIGHTS OF DATA SUBJECTS
Data protection regulations confer a series of rights on data subjects or data owners, website users, or users of the social media profiles of METACENTRO CONSTRUCCIONES, S.L.
These rights granted to data subjects are as follows:
- Right of access: right to obtain information about whether their data is being processed, the purpose of the processing, the categories of data being processed, the recipients or categories of recipients, the storage period and the source of the data.
- Right of rectification: the right to rectify any inaccurate or incomplete personal data.
- Right of erasure: the right to have the data erased in the following situations:
- When the data is no longer necessary for the purposes for which it was collected
- When the data subject withdraws consent
- When the data subject objects to the processing
- When it must be deleted in compliance with a legal obligation
- When the data has been obtained by virtue of an information society service based on the provisions of Article 8(1) of the European Data Protection Regulation.
- Right to object: the right to object to certain processing based on the data subject’s consent.
- Right to restriction: the right to obtain restriction of data processing in any of the following situations:
- When the accuracy of the personal data is contested by the data subject, for a period enabling the company to verify the accuracy of the personal data.
- When the processing is unlawful and the data subject opposes the erasure of the data.
- When the company no longer needs the data for the purposes for which such data was collected, but they are required by the data subject for the establishment, exercise or defence of legal claims.
- When the data subject has objected to processing while it is being verified whether the legitimate grounds of the company override those of the data subject.
- Right to portability: the right to obtain data in a structured, commonly used and machine-readable format, and to transmit it to another data controller when:
- The processing is based on consent
- The processing is carried out by automated means
- Right to file a claim with the competent supervisory authority
Data subjects may exercise their aforesaid rights by sending a written communication addressed to METACENTRO CONSTRUCCIONES, S.L. to the following address: info@metacentro.es, indicating in the subject line the right they wish to exercise.
In this regard, METACENTRO CONSTRUCCIONES, S.L. will respond to your request as soon as possible, taking into account the time limits set forth in data protection regulations.
SECURITY
The security measures adopted by METACENTRO CONSTRUCCIONES, S.L. are those required in accordance with the provisions of Article 32 of the GDPR. In this regard, METACENTRO CONSTRUCCIONES, S.L., taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, has established appropriate technical and organisational measures to ensure a level of security appropriate to the risk.
In any case, METACENTRO CONSTRUCCIONES, S.L. has sufficient mechanisms in place to:
- Ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services.
- Restore the availability and access to personal data in a timely manner in the event of a physical or technical incident.
- Regularly test, assess and evaluate the effectiveness of the technical and organisational measures implemented to ensure the security of the processing.
- Pseudonymise and encrypt the personal data, where appropriate.