Privacy and data protection policy

DATA CONTROLLER	COMART S.A – TAX VAT A08186074
CONTACT	Cr. Montmeló, 2-4 – MONTORNES DEL VALLES (Barcelona) rrhh@comartsa.com – Tel. 934741160 – http://www.comartsa.com/
PURPOSES	WEBSITE ENQUIRIES: WEBSITE ENQUIRIES CLIENT BILLING: CLIENT BILLING RECEIPT OF CURRICULUMS: RECEIPT OF CURRICULUMS BUDGET PROCESSING: BUDGET PROCESSING VISITOR REGISTRATION: RECORD OF VISITS
LEGITIMATION	WEBSITE ENQUIRIES: Legitimate interest of the Data Controller or third parties CLIENT BILLING: Existence of a contractual relationship with the data subject through a contract or pre-contract; Legitimate interest of the Data Controller or third parties. RECEIPT OF CURRICULUMS: Explicit consent of the data subject; Legitimate interest of the Data Controller or third parties. BUDGET PROCESSING: Legitimate interest of the Data Controller or third parties RECORD OF VISITS: Legitimate interest of the Data Controller or third parties
CONSERVATION	WEBSITE ENQUIRIES: As long as its deletion is not requested by the interested party CLIENT BILLING While the business relationship is maintained RECEIPT OF CURRICULUMS: As long as its deletion is not requested by the interested party BUDGET PROCESSING: As long as its deletion is not requested by the interested party RECORD OF VISITS: As long as its deletion is not requested by the interested party
RECIPIENTS	We do not share data with third parties.
INTERNATIONAL TRANSFERS	We do not make international transfers of your data.
ORIGIN	WEBSITE ENQUIRIES: POTENTIAL CLIENTS: The interested party or their legal representative CLIENT BILLING: CLIENTS: The interested party or their legal representative RECEIPT OF CURRICULUMS: POTENTIAL WORKERS: The interested party or their legal representative BUDGET PROCESSING: CLIENTS: The interested party or their legal representative POTENTIAL CLIENTS: The interested party or their legal representative RECORD OF VISITS: CLIENTS: The interested party or their legal representative SUPPLIERS: The interested party or their legal representative POTENTIAL EMPLOYEES: The interested party or their legal representative POTENTIAL CLIENTS: The interested party or their legal representative
RIGHTS	You have the right to access your data, rectify it, delete it, limit or oppose its processing, to its portability, to withdraw your consent, and to file complaints with the Supervisory Authority (Spanish Data Protection Agency). More information can be found in our Privacy and Data Protection Policy

PRIVACY POLICY DETAILS

1.- GENERAL INFORMATION

The purpose of this “Privacy and Data Protection Policy” is to inform you of the conditions governing the collection and processing of your personal data by our entity or corporate group in order to safeguard your fundamental rights, honour, and freedoms, all in compliance with current regulations governing the protection of personal data in the European Union and the Spanish Member State.

In accordance with these regulations, we require your authorisation and consent to collecting and processing your personal data. Below, we provide you with all the details you may need regarding how COMART SA carries out these processes, for what purposes, what other entities may have access to your data, and what your rights are.

For all the above reasons, once you have reviewed and read our Data Protection Policy, it is essential that you accept it as proof of your agreement and consent.

2.- DATA CONTROLLER

Who collects and processes your data?

The Data Controller is the natural or legal person, public or private, or administrative body, who alone or jointly with others determines the purposes and means of processing personal data; if the purposes and means of processing are determined by the law of the European Union or the law of the Spanish Member State.

In this case, our identifying data as Data Controller are as follows:

COMART S.A – CIF A08186074

How can you contact us?

Address of our offices:

Cr. Montmeló, 2-4 . 08170, MONTORNES DEL VALLES (Barcelona), España

Email: rrhh@comartsa.com – Teléfono: 934741160

Domicilio postal: Cr. Montmeló, 2-4 . 08170, MONTORNES DEL VALLES (Barcelona), España

3.- SECURITY MEASURES

What do we do to ensure the privacy of your data?

Our entity or corporate group adopts the necessary organisational and technical measures to guarantee the security and privacy of your data, preventing its alteration, loss, unauthorised processing, or access, depending on the state of the technology, the nature of the data stored, and the risks to which it is exposed.

Among others, the following measures stand out:

Ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems and services.
Restore availability and access to personal data quickly in the event of a physical or technical incident.
Regularly verify, evaluate, and assess the effectiveness of the technical and organisational measures implemented to ensure the security of the processing.

Pseudonymise and encrypt personal data, if it is sensitive data.

4.- PURPOSE OF THE PROCESSING

Why do we want to process your data?

We require your authorisation and consent to collect and process your personal data, for which we detail the intended uses and purposes below.

WEBSITE ENQUIRIES WEBSITE ENQUIRIES

CLIENT BILLING CLIENT BILLING

RECEIPT OF CURRICULUMS RECEIPT OF CURRICULUMS

BUDGET PROCESSING BUDGET PROCESSING

RECORD OF VISITS RECORD OF VISITS

How long will we keep your data for?

We use your data for the time strictly necessary to fulfil the purposes indicated above. Unless there is a legal obligation or requirement, the storage periods provided are:

WEBSITE ENQUIRIES: As long as its deletion is not requested by the interested party

CLIENT BILLING: While the business relationship is maintained

RECEIPT OF CURRICULUMS: As long as its deletion is not requested by the interested party

BUDGET PROCESSING: As long as its deletion is not requested by the interested party

RECORD OF VISITS: As long as its deletion is not requested by the interested party

5.- LEGITIMATION OF THE PROCESSING

Why do we process your data?

The collection and processing of your data is always legitimised by one or more legal bases, which are detailed below:

WEBSITE ENQUIRIES: Legitimate interest of the Data Controller or third parties

CLIENT BILLING: Existence of a contractual relationship with the data subject through a contract or pre-contract; Legitimate interest of the Data Controller or third parties.

RECEIPT OF CURRICULUMS: Explicit consent of the data subject; Legitimate interest of the Data Controller or third parties.

BUDGET PROCESSING: Legitimate interest of the Data Controller or third parties

RECORD OF VISITS: Legitimate interest of the Data Controller or third parties

6.- RECIPIENTS OF YOUR DATA

With whom do we share your data within the European Union?

We do not transfer your data to third parties or entities, except where legally required.

Do we make international transfers of your data outside the European Union?

We do not make international transfers of your data.