PRIVACY POLICY
- PERSONAL DATA PROTECTION ACCORDING TO LOPDDD
In compliance with current legislation, PASEK (hereinafter also referred to as the Website or the Company) commits to adopting the necessary technical and organizational measures, according to the appropriate level of security for the risk of the data collected.
This privacy policy is adapted to the current Spanish and European regulations on personal data protection on the internet. Specifically, it complies with the following regulations:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
- Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
- Royal Decree 1720/2007 of 21 December, which approves the Regulation for the development of Organic Law 15/1999 of 13 December on the Protection of Personal Data (RDLOPD).
- Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).
- Organic Law 7/2021 on the protection of personal data processed for the purposes of prevention, detection, investigation, and prosecution of criminal offenses and execution.
- IDENTITY OF THE DATA CONTROLLER
In accordance with the current legislation on Personal Data Protection, we inform you that the data controller of the provided data is PASEK, with NIF A33014465 and registered office at Calle Dr. Carreño, 1- Bajo 33405 Salinas- Asturias, Spain. Contact Phone: +34 985 501 691. Email: pasek@pasek.group
You can contact the data controller via email at gdpr.pasek@pasek.es, through the web form, by phone at +34 985 501 689, or by sending a letter to PASEK’s registered office.
This Privacy Policy aims to provide information about the rights you have under the General Data Protection Regulation (GDPR).
- GENERAL INFORMATION: DESCRIPTION OF THE INFORMATION CONTAINED IN THE PRIVACY POLICY
In this privacy policy, you will find a table identifying, for each of the different data processing activities carried out by the Company, the following information:
a. The purposes of processing your personal data, i.e., the reason why the Company processes your personal data.
b. The legal bases that allow the Company to process your data for each of the indicated purposes.
c. The possible communication of your data to third parties, as well as the reason for such communication. To this end, we inform you that we do not transfer your personal data to third parties unless there is a legal obligation. On the other hand, the Company’s data processors, in other words, service providers who need to access your personal data to perform their functions, may have access to your personal data. Service providers who access your personal data generally belong to the information systems and technology sectors. The table below will indicate, where applicable, other sectors to which other possible service providers of the Company that need to access your personal data belong. We inform you that you can request more detailed information regarding the recipients of your data by sending an email to Calle Dr. Carreño, 1- Bajo 33405 Salinas- Asturias, Spain, indicating the specific processing activity about which you would like information.
d. The existence of potential international data transfers. If you would like to request a copy of the contractual clauses referred to in the table below, please contact PASEK at the following email to submit your request: gdpr.pasek@pasek.es.
e. The retention period of the data you provide us. We also inform you that your data will remain blocked for the attention of judicial, administrative, or tax claims, during the periods resulting from the applicable legislation.
- DETAILED INFORMATION ON THE PROCESSING CARRIED OUT BY PASEK
In compliance with the provisions of the GDPR and the LOPD-GDD, we inform you that the personal data collected through the forms on the PASEK Website will be incorporated and processed in our files to facilitate, expedite, and fulfill the commitments established between PASEK and the User or the maintenance of the relationship established in the forms that the User fills out. Through these forms, the user has the possibility to contact PASEK. The collection and automated processing of personal data are intended for consultation and job application and other activities specific to PASEK. Furthermore, in accordance with the provisions of the GDPR and the LOPD-GDD, unless the exception provided for in Article 30.5 of the GDPR applies, a record of processing activities is maintained, specifying, according to their purposes, the processing activities carried out and the other circumstances established in the GDPR. These data will only be transferred to those entities that are necessary for the sole purpose of fulfilling the aforementioned purpose. PASEK adopts the necessary measures to ensure the security, integrity, and confidentiality of the data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
PURPOSE OF PROCESSING | LEGAL BASIS | RECIPIENTS | INTERNATIONAL TRANSFERS | RETENTION PERIOD |
Management of the company’s personnel selection process and the relationship with you as a job candidate. | Consent given by you for inclusion in the Group’s candidate database. | Service providers for personnel selection may access your personal data. | Your data will not be transferred to companies located outside the Economic Area. | Your data will remain active in PASEK‘s candidate database for 3 years from the date you provided your resume. Once this period is fulfilled, the blocking obligation imposed by the legislation may apply. |
- PERSONAL DATA OF MINORS
In compliance with the provisions of Articles 8 of the GDPR and 7 of Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights, only those over 14 years of age may give their consent for the lawful processing of their personal data by PASEK. If the individual is under 14 years of age, parental or guardian consent will be required for processing, and this will only be considered lawful to the extent that they have authorized it.
- RIGHTS DERIVED FROM THE PROCESSING OF PERSONAL DATA
Every interested party has the right to know the processing of their personal data and to obtain from the CONTROLLER information about the means available to exercise the rights that correspond to them.
The CONTROLLER must establish visible, accessible, and simple mechanisms, including electronic means, for the exercise of rights.
We inform you that you may exercise the following rights:
- Right of access to your personal data to know which data are being processed and the processing operations carried out with them;
- Right to rectify any inaccurate personal data;
- Right to delete your personal data, where possible;
- Right to request the limitation of the processing of your personal data when the accuracy, legality, or necessity of the data processing is doubtful, in which case we may retain them for the exercise or defense of claims;
- Right to data portability, when the legal basis that enables us to process your data as indicated in the table above is the contractual relationship or consent;
- Right to object to the processing of your personal data, when the legal basis that enables us to process your data as indicated in the table above is legitimate interest. In this case, we will stop processing your data unless we have a compelling legitimate interest or for the formulation, exercise, or defense of claims.
- Right to withdraw your consent at any time.
You may exercise your rights at any time and free of charge by sending an email to gdpr.pasek@pasek.es, through the web form or at the office at Calle Dr. Carreño, 1- Bajo 33405 Salinas- Asturias, Spain indicating the right you wish to exercise and your identifying data.
However, we inform you that you have the right to file a complaint with the Spanish Data Protection Agency if you believe that a violation of data protection legislation has been committed regarding the processing of your personal data.
- COOKIES
PASEK will only use data storage and retrieval devices (‘Cookies’) when the user has given their prior consent for this in accordance with what is indicated in the browser’s pop-up window when the user first accesses the Website and in the other terms and conditions indicated in PASEK‘s Cookie Policy, which every user must be aware of.
- DATA RETENTION IN COMPLIANCE WITH LSSI:
PASEK informs that, as a data hosting service provider and by virtue of the provisions of Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI), it retains for a maximum period of 12 months the essential information to identify the origin of the hosted data and the moment when the service provision began. The retention of these data does not affect the confidentiality of communications and can only be used within the framework of a criminal investigation or for the safeguarding of public security, being made available to judges and/or courts or the Ministry that requires them. The communication of data to the State Security Forces and Bodies will be done in accordance with the provisions of the personal data protection regulations.
- PROTECTION OF HOSTED INFORMATION:
PASEK commits to adopting the necessary technical and organizational measures, according to the appropriate level of security for the risk of the data collected, to ensure the security of personal data and to prevent the destruction, loss, or accidental or unlawful alteration of personal data transmitted, stored, or otherwise processed, or the unauthorized communication or access to such data.
The Website has an SSL (Secure Socket Layer) certificate, which ensures that personal data is transmitted securely and confidentially, as the transmission of data between the server and the User, and in feedback, is fully encrypted.
However, since PASEK cannot guarantee the invulnerability of the internet or the total absence of hackers or others who fraudulently access personal data, the Data Controller commits to promptly informing the User when a personal data security breach occurs that is likely to result in a high risk to the rights and freedoms of natural persons.
Personal data will be treated as confidential by the Data Controller, who commits to informing and ensuring through a legal or contractual obligation that such confidentiality is respected by its employees, associates, and any person to whom it makes the information accessible.
Technical security in a medium like the Internet is not impregnable and there may be malicious actions by third parties, although PASEK puts all means at its disposal to prevent such actions.
- COMMERCIAL COMMUNICATIONS:
In application of the LSSI, PASEK will not send advertising or promotional communications by email or other equivalent electronic means that have not been previously requested or expressly authorized by the recipients. In the case of users with whom there is a prior contractual relationship, PASEK is authorized to send commercial communications regarding products or services similar to those initially contracted with the client. In any case, the user, after proving their identity, may request not to receive further commercial information through the information channels.
- ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
It is necessary for the User to have read and agreed with the conditions on the protection of personal data contained in this Privacy Policy and Cookies, as well as to accept the processing of their personal data so that the Data Controller can proceed with it in the manner, during the periods, and for the purposes indicated. The use of the Website will imply acceptance of the Privacy Policy and Cookies.
PASEK reserves the right to modify its Privacy Policy and Cookies, according to its own criteria, or motivated by a legislative, jurisprudential, or doctrinal change of the Spanish Data Protection Agency. Changes or updates to this Privacy Policy and Cookies will not be explicitly notified to the User. It is recommended that the User periodically consult this page to be aware of the latest changes or updates.
This Privacy Policy and Cookies was updated to adapt to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights.