Introduction

This Privacy Policy has been developed in accordance with the provisions of the current Organic Law on Personal Data Protection and of Regulation 2016/679 of the European Parliament and of the Council of April 27th 2016 on the protection of natural persons relative to the processing and sharing of personal data (hereafter the ‘GDPR’ (General Data Protection Regulation)).

The purpose of this Privacy Policy is to inform the data subjects about whom data is being gathered of specific aspects relative to the processing of their data, including the purposes of the processing, contact details for exercising their rights, periods for holding the information and security measures, among others.

Data controller

RECICLADOS Y DESCONTAMINACION NAVAL BUQUES SL is the data controller for data protection purposes relative to the files and means of processing mentioned in this policy and specifically in the section on data processing.

The identifying details of the owner of this website are as follows:

  • Data controller: RECICLADOS Y DESCONTAMINACION NAVAL BUQUES SL
  • Postal address: Calle VEGA DE TAPIA S/N, 48903, BARAKALDO, (Biscay)
  • Email address: redena@redena.es

Data processing

The personal data which may be requested shall consist solely of information which is strictly necessary for identifying and dealing with the request made by the data subject. Said information shall be processed in a way which is loyal, legal and transparent relative to the data subject. The personal data shall be collected for specific explicit and legal purposes and shall not subsequently be used in any way which is incompatible with said purposes.

The data collected from each data subject shall be appropriate, relevant and reasonable relative to the corresponding purposes in each case, and shall be updated whenever necessary.

Prior to their data being collected, the data subject shall be informed of the general categories regulated in this policy so that they may provide their express, specific and unequivocal consent for the processing of their data, in accordance with the following.

Purposes of the processing

The explicit purposes for each data processing category are set out in the information clauses included in each data collection channel (online forms, paper forms, verbal statements or informative signs and notices).

However, the personal data pertaining to the data subject shall be processed solely for the purpose of dealing with and providing an effective response to user requests which are specified together with the option, service, form or data collection system used by them.

Legal basis

Prior to processing any personal data, RECICLADOS Y DESCONTAMINACION NAVAL BUQUES SL shall obtain the data subject’s express and unequivocal consent via the inclusion of informed consent clauses in its various information collection systems.

However, in the event that consent from the data subject is not required, RECICLADOS Y DESCONTAMINACION NAVAL BUQUES SL may process the data in accordance with any specific law or regulation which authorises or requires that the data subject’s personal data be processed.

Recipients

RECICLADOS Y DESCONTAMINACION NAVAL BUQUES SL shall not share or communicate data to third parties, except those data which must legally be processed in that manner. Where this is necessary, the data subject shall be notified—via the informed consent clauses included in the various channels for collecting personal data—that their data are to be shared or communicated.

Origin

As a rule, personal data shall always be gathered directly from the data subject. However, under exceptional circumstances said data may be gathered via third parties, entities or services. This method of data collection shall be communicated to the data subject via the informed consent clauses included in the various data collection channels and within a reasonable time scale of the data being collected (within a maximum period of one month).

Periods for holding data

Any information collected from the data subject shall be held for as long as is necessary to comply with the purpose of the processing. The data shall be restricted once said purpose has been fulfilled. Said restriction shall result in the data being available solely to public authorities, judges and courts, during the period stipulated by them, for the purposes of meeting any responsibilities which may arise from the data having been processed. After said period has elapsed the information shall be destroyed.

The following table outlines the legal periods for holding various types of information:

 

DOCUMENTTIME SCALELEGAL REF.
Employment or social security information4 yearArticle 21 of Legislative Royal Decree 5/2000 of August 4th, which approves the consolidated text of the Law on Employment Infractions and Penalties
Accounting and taxation documentation for trade purposes6 yearArt. 30 of the Commercial Code
Accounting and taxation documentation for tax purposes4 yearArticles 66 to 70 of the General Taxation Law.
Building access control1 monthInstruction 1/1996 of the Spanish Data Protection Agency
Video surveillance1 monthInstruction 1/2006 of the Spanish Data Protection Agency.

Organic Law 4/1997

 

Browsing data

In terms of browsing data which may be processed via the website, we recommend consulting our Cookies Policy (available on our website) in the event of data being collected which are subject to regulation.

Rights of the data subjects

Data protection legislation grants a series of rights to data subjects and owners and to users of the website or of social media profiles pertaining to RECICLADOS Y DESCONTAMINACION NAVAL BUQUES SL.

These rights are as follows:

  • Right to access: the right to obtain information as to whether or not their personal data are being processed, the purpose of the processing, the categories of personal data concerned, the recipients or categories of recipient, the period for which the personal data will be stored and the origin of the data.
  • Right to rectification: the right to have inaccurate or incomplete personal data rectified.
  • Right to erasure: the right to have data erased under the following circumstances:
    • The data are no longer necessary for the purposes for which they were collected.
    • The data subject withdraws their consent.
    • The data subject objects to their data being processed.
    • The data must be restricted on legal grounds.
    • The data have been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.
  • Right to object: the right to object to any processing of data which is carried out based on the consent of the data subject.
  • Right to restriction: the right to obtain restriction of data processing under any of the following circumstances:
    • The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
    • The processing is unlawful and the data subject opposes the erasure of the personal data.
    • The company no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims.
    • The data subject has objected to processing pending verification of whether the legitimate grounds of the company override those of the data subject.
  • Right to data portability: the right to receive their personal data in a structured, commonly used and machine-readable format and to transmit those data to another controller, where:
    • the processing is based on consent.
    • the processing is carried out by automated means.
  • The right to submit a complaint to the competent control authority.

Data subjects may exercise their rights by writing to RECICLADOS Y DESCONTAMINACION NAVAL BUQUES SL at the following address: Calle VEGA DE TAPIA S/N 48903 BARAKALDO (Biscay). The specific right that the data subject wishes to exercise should be indicated in the subject line.

RECICLADOS Y DESCONTAMINACION NAVAL BUQUES SL shall deal with the data subject’s request as soon as possible and in accordance with the periods established in data protection legislation.

Security

The data security measures adopted by RECICLADOS Y DESCONTAMINACION NAVAL BUQUES SL are in accordance with those set out in Article 32 of the GDPR. RECICLADOS Y DESCONTAMINACION NAVAL BUQUES SL, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, has therefore implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk.

  1. ensure the ongoing confidentiality, integrity, availability and resilience of data processing systems and services.
  2. enable rapid restoration of the availability of and access to personal data in the event of a physical or technical incident.
  3. regularly verify, evaluate and assess the effectiveness of the technical and organisational measures implemented to guarantee data security.
  4. pseudonymise and encrypt personal data, where appropriate.