In terms of data protection, Nordés Ancín, S.A. must be considered as the entity responsible for the Treatment regarding the files/treatments that are collected through this website or through any other means such as telephone, email, in-person communication, written communication using forms, legal documents, etc.
Below is the identification information of the owner of this website:
Any personal data that is eventually requested will only be the data that is strictly necessary for identifying and addressing the request made by the owner of such data, henceforth the interested party. This information will be treated in a true, lawful and transparent way regarding the interested party. Furthermore, personal information will be collected for purposes deemed explicit and legitimate, and shall not be treated later in a way that is incompatible with such purposes.
The data collected from each interested party must be adequate, pertinent and not be excessive in relation to the purposes pertaining to each case. They will be updated whenever necessary
The owner of the personal information will be informed —prior to the collection of their information— of the general extreme cases regulated in this policy, to allow them to grant their express and unequivocal consent to the treatment of their data, in conformity with the following aspects.
The precise purposes for which each one of the treatments is carried out are included in the information clauses incorporated into each of the means of data collection (website forms, paper forms, locutions or signs and information notes).
However, the personal information of the interested party will be treated with the sole purpose of providing them with an effective reply and addressing the requests made by the user, as specified next to each option, service, form or data collection system that the user may use.
As a general rule, prior to the treatment of personal information, Nordés Ancín, S.A. obtains the express and unequivocal consent of the owner of such data by means of incorporating informed consent clauses into the different systems of data collection.
However, if the consent of the interested party is not required, the legitimising foundation of the treatment by which Nordés Ancín, S.A. is supported consists in the existence of a specific law or regulation authorising or enforcing the treatment of the data of the interested party.
As a general rule, Nordés Ancín, S.A. does not engage in the cession or communication of data to third entities, save for cases of legal requirement. However, if it were necessary, the interested party would be notified of such cessions or communications of data through informed consent clauses that are contained in the different means of personal data collection.
As a general rule, personal data are always collected directly from the interested party. However, in certain exceptions, data may be collected through third parties, entities or services other than the interested party. In this sense, this exception will be notified to the interested party through the informed consent clauses contained in the different means of data collection and within a reasonable time frame once such data has been obtained, and within one month at the latest.
The information collected from the interested party will be preserved in so far at it is needed for the purpose of complying with the ends to which such personal data were collected. Therefore, the data will be cancelled once such ends are met. Such cancellation will result in the blocking of the data, which will be kept available only for the Public Administration, judges and tribunals, for the purpose of addressing any eventual liabilities resulting from their treatment, during the prescription period thereof. Once the mentioned period is expired, the information will be destroyed.
For information purposes, below are the legal periods for preserving the information, in accordance to various subjects:
|Work-related or social security-related documents||4 years||Article 21 of Royal Legal Decree 5/2000 of 4th August approving the revised text of the Law on infractions and penalties in Social Order.|
|Accounting and fiscal documentation regarding commercial matters||6 years||Art. 30 Code of Commerce|
|Accounting and fiscal documentation regarding fiscal matters||4 years||Articles 66 to 70 General Law on Tax Collection|
|Access control to buildings||1 month||Proceedings 1/1996 of the AEPD (Spanish Data Protection Agency)|
|Video surveillance||1 month||Proceedings 1/2006 of the AEPD (Spanish Data Protection Agency)
Organic Law 4/1997
The regulations pursuant to data protection grants a set of rights to the interested parties or to the owners of said data, to website users or users of the social network profiles of Nordés Ancín, S.A..
The rights granted to the interested parties are the following:
The interested parties may exercise the indicated rights by contacting Nordés Ancín, S.A., in written form at the following address: firstname.lastname@example.org indicating in the subject matter the right that they wish to exercise.
In this sense, Nordés Ancín, S.A. will address your request as soon as possible while bearing in mind the deadlines indicated in the regulations pursuant to data protection.
Furthermore, it must be taken into account that the interested party or owner of the data may at any time present a complaint before the competent control authority.
The security measures adopted by Nordés Ancín, S.A. are the measures required, as set forth in article 32 of the GDPR. In this sense, Nordés Ancín, S.A., bearing in mind the state of technology, the costs of application and the nature, scope, context and purposes of the treatment, as well as the variable risks of probability and severity with regard to the rights and liberties of physical persons, has established the appropriate technical and organisational measures to guarantee the level of security that is required for the existing risk.
In any case, Nordés Ancín, S.A. has implemented sufficient mechanisms to comply with the following: