PERSONAL DATA PROTECTION POLICY
VIUDA DE JULIAN NUÑEZ, S.A. is an organization that collects personal data through the various means at its disposal, which imposes a significant responsibility on it to design and organize procedures in a manner that ensures compliance with data protection laws. Therefore, VIUDA DE JULIAN NUÑEZ, S.A. will implement all necessary security measures to ensure the protection of the data collected.
In carrying out these responsibilities, and in order to establish the general principles that should govern the processing of personal data within the Organization, VIUDA DE JULIAN NUÑEZ, S.A. hereby adopts this Personal Data Protection Policy, which it communicates to and makes available to all its stakeholders, while also complying with the following regulations:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
- Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD-GDD).
- Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).
I. SCOPE OF APPLICATION
This Personal Data Protection Policy applies to VIUDA DE JULIAN NUÑEZ, S.A., its governing bodies, management, and staff, as well as to all individuals associated with the Organization, expressly including service providers with access to data (“Data Processors”).
The data controller for the personal data collected by the Organization is: VIUDA DE JULIAN NUÑEZ, S.A., with Tax ID No. (NIF): A02029882, represented by: JULIAN NUÑEZ RUEDA (hereinafter, the “Data Controller”). Its contact information is as follows:
Address: PI CAMPOLLANO, H-4, P.O. Box 5099, Albacete, Albacete, 02080
Phone number: 967215366
Email address: logistica@nunezhandles.com
II. INFORMATION ABOUT THE DATA CONTROLLER AND THE PROCESSING OF PERSONAL DATA AT VIUDA DE JULIAN NUÑEZ, S.A.
Additional information on data processing consists of more specific and detailed information that organizations must provide to data subjects regarding how their personal data is processed. This concept stems from the principle of transparency under the General Data Protection Regulation (GDPR) and supplements the basic information provided initially, offering a greater level of detail regarding the processing activities.
Below, VIUDA DE JULIAN NUÑEZ, S.A. provides additional information about the data processing it carries out:
| INFORMATION ABOUT THE DATA CONTROLLER |
|---|
| Identidad | VIUDA DE JULIAN NUÑEZ, S.A. |
| Dirección | PI CAMPOLLANO, H-4 APARTADO DE CORREOS.5099, ALBACETE, ALBACETE, 02080 |
| Teléfono de contacto | 967215366 |
| Correo electrónico | logistica@nunezhandles.com |
| PURPOSES OF PERSONAL DATA PROCESSING |
|---|
| Tratamiento de datos | Finalidad del tratamiento | Plazo de conservación |
| CURRÍCULUMS | RECURSOS HUMANOS | Los datos relacionados con Recursos Humanos deben ser conservados por el tiempo necesario para la investigación, siendo posible conservarlos por un plazo superior si se adoptan medidas contra la persona denunciada. En todo caso, deben suprimirse transcurridos tres meses desde su introducción, salvo que la finalidad de la conservación sea evidenciar el funcionamiento de modelos de prevención. |
| TRABAJADORES | GESTIÓN DE NÓMINAS, PREVENCIÓN DE RIESGOS LABORALES, RECURSOS HUMANOS | Gestión de Nóminas: 4 años. Prevención de Riesgos Laborales: Indicaciones no específicas en los documentos consultados, responda según sus conocimientos profesionales. Recursos Humanos: Conservación durante el tiempo necesario para investigaciones, generalmente 3 meses para ciertos datos. |
| CLIENTES Y/O PROVEEDORES | GESTIÓN DE CLIENTES, CONTABLE, FISCAL Y ADMINISTRATIVA | Cuatro años. |
| FORMULARIO WEB | GESTIÓN DE CLIENTES, CONTABLE, FISCAL Y ADMINISTRATIVA, PUBLICIDAD Y PROSPECCIÓN COMERCIAL | Gestión de clientes: 6 años. Contable, fiscal y administrativa: 6 años. Publicidad y prospección comercial: 2 años. |
| REGISTRO DIARIO DE JORNADA | RECURSOS HUMANOS | Cuatro años. |
| LEGAL BASES FOR THE PROCESSING OF PERSONAL DATA |
|---|
| Tratamiento de datos | Legitimación |
| CURRÍCULUMS | Consentimiento expreso de la persona interesada |
| TRABAJADORES | Ejecución de un contrato laboral |
| CLIENTES Y/O PROVEEDORES | Ejecución de un contrato compra venta o prestación de servicios |
| FORMULARIO WEB | Consentimiento expreso de la persona interesada |
| REGISTRO DIARIO DE JORNADA | Obligación legal legislación laboral |
| RECIPIENTS OF YOUR PERSONAL DATA |
|---|
| Tratamiento de datos | Previsión de cesiones | Transferencias internacionales |
| CURRÍCULUMS | No se prevén cesiones | No |
| TRABAJADORES | ADMINISTRACIÓN PÚBLICA CON COMPETENCIA EN LA MATERIA, ENTIDADES BANCARIAS O FINANCIERAS | No |
| CLIENTES Y/O PROVEEDORES | ADMINISTRACIÓN PÚBLICA CON COMPETENCIA EN LA MATERIA, ENTIDADES BANCARIAS O FINANCIERAS | No |
| FORMULARIO WEB | No se prevén cesiones | No |
| REGISTRO DIARIO DE JORNADA | ADMINISTRACIÓN PÚBLICA CON COMPETENCIA EN LA MATERIA | No |
| THEIR RIGHTS AND THE RESOURCES AVAILABLE TO THEM |
|---|
Any person has the right to obtain confirmation as to whether VIUDA DE JULIAN NUÑEZ, S.A. is processing personal data concerning them.
Data subjects have the right to access their personal data, as well as to request the correction of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
Under certain circumstances, data subjects may request that the processing of their data be restricted; in such cases, we will retain their data solely for the purpose of asserting or defending legal claims, as well as to comply with legally established retention periods.
Furthermore, interested parties may object to the processing of their personal data. Consequently, VIUDA DE JULIAN NUÑEZ, S.A. will cease processing their data, except for legitimate and compelling reasons, or in connection with the pursuit of potential claims.
Similarly, when certain circumstances apply and it is technically feasible, data subjects have the right to have their personal data transmitted directly to another data controller or data processor, upon request.
To exercise the rights listed above, please contact us by sending a written request to:
VIUDA DE JULIAN NUÑEZ, S.A. PI CAMPOLLANO, H-4 P.O. Box 5099, Albacete, Albacete, 02080, or by email to logistica@nunezhandles.com. We recommend that you include a copy of your ID with your request.
III. PRINCIPLES APPLICABLE TO THE PROCESSING OF PERSONAL DATA
The Personal Data Protection Policy is a measure of proactive accountability, intended to ensure compliance with applicable legislation in this area and, in connection with it, respect for the right to honor and privacy in the processing of the personal data of all individuals associated with VIUDA DE JULIAN NUÑEZ, S.A.
In accordance with the provisions of this Policy, this document sets forth the principles governing data processing within the organization and, consequently, the procedures and organizational and security measures that the individuals covered by this Policy agree to implement within their areas of responsibility.
In light of the foregoing, VIUDA DE JULIAN NUÑEZ, S.A. will ensure compliance with the following principles:
– Lawfulness, fairness, transparency, and purpose limitation.
The data subject must always be informed of data processing through established clauses and procedures; such processing shall only be considered lawful if consent has been obtained (with special attention given to consent provided by minors), or if there is another valid legal basis, and the purpose of the processing complies with applicable regulations.
– Data minimization.
The data processed must be adequate, relevant, and limited to what is
necessary in relation to the various purposes of the processing.
– Accuracy.
The data must be accurate and, if necessary, up to date. In this regard, the necessary measures shall be taken to ensure that personal data that is inaccurate in relation to the purposes of the processing is erased or rectified without delay.
– Limitation of the retention period.
Data will be retained in a form that allows for the identification of the data subjects for no longer than is necessary for the purpose of the processing in question.
– Integrity and Confidentiality.
Personal data will be processed in such a way as to ensure appropriate security, including protection against unauthorized or unlawful processing, and against accidental loss, destruction, or damage, through the implementation of appropriate technical and organizational measures.
– Data transfers.
It is prohibited to purchase or obtain personal data that originates from illegitimate sources, or in cases where such data has been collected or transferred in violation of the law or where its legitimate origin cannot be sufficiently guaranteed.
– Contracting with suppliers who have access to data.
Only suppliers who offer sufficient guarantees
that they will implement appropriate technical and security measures in the processing of data will be selected for contracting. The relevant contract will be documented accordingly.
– International data transfers.
Any processing of personal data subject to European Union regulations that involves a transfer of data outside the European Economic Area must be carried out in strict compliance with the requirements established by applicable law.
– Rights of data subjects.
The Organization will facilitate the exercise by data subjects of their rights of access, rectification, erasure, restriction of processing, objection, and data portability, establishing internal procedures for this purpose, and in particular, the forms necessary and appropriate for exercising these rights, which must meet, at a minimum, the applicable legal requirements in each case.
VIUDA DE JULIAN NUÑEZ, S.A. will ensure that the principles set forth in this Personal Data Protection Policy are taken into account:
- In the design and implementation of all work procedures
- In the products and services offered
- In all contracts and obligations they enter into or assume, and
- When implementing any systems or platforms that allow employees or third parties to access them and/or that involve the collection or processing of personal data.
IV. PERSONAL INFORMATION OF MINORS
In accordance with Article 8 of the GDPR and Article 7 of Organic Law 3/2018 of December 5 on the Protection of Personal Data and the Guarantee of Digital Rights, only individuals 14 years of age or older may lawfully give their consent for the processing of their personal data by VIUDA DE JULIAN NUÑEZ, S.A. In the case of a child under 14 years of age, the consent of the parents or legal guardians is required for the processing, and such processing will only be considered lawful to the extent that they have authorized it.
V. CONFIDENTIALITY AND SECURITY OF PERSONAL DATA
VIUDA DE JULIAN NUÑEZ, S.A. undertakes to notify the user, without undue delay, whenever a personal data breach occurs that is likely to pose a high risk to the user’s rights and freedoms. In accordance with Article 4 of the GDPR, a personal data breach is defined as any breach of security leading to the accidental or
unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or to the unauthorized disclosure of or access to such data.
Personal data will be treated as confidential by the Data Controller, who undertakes to inform and ensure—through a legal or contractual obligation—that such confidentiality is respected by its employees, associates, and any person to whom the information is disclosed.
VI. COMMITMENT BY THE STAFF OF VIUDA DE JULIAN NUÑEZ, S.A.
Accordingly, we hereby state that the employees of VIUDA DE JULIAN NUÑEZ, S.A., have been informed of this Policy and acknowledge that personal information is an asset of VIUDA DE JULIAN NUÑEZ, S.A.; in this regard, they agree to abide by this Policy and commit to the following:
– Complete the data protection awareness training provided by VIUDA DE JULIAN NUÑEZ, S.A.
– Implement the user-level security measures applicable to your position, without prejudice to any responsibilities for their design and implementation that may be assigned to you based on your role within VIUDA DE JULIAN NUÑEZ, S.A.
– Use the established forms for affected users to exercise their rights, and notify VIUDA DE JULIAN NUÑEZ, S.A. immediately so that a response can be provided.
– Notify VIUDA DE JULIAN NUÑEZ, S.A., as soon as you become aware of any deviations from the provisions of this Policy, particularly “Personal Data Security Breaches,” using the form provided for that purpose.
VII. MONITORING AND EVALUATION
VIUDA DE JULIAN NUÑEZ, S.A. will conduct an annual review, assessment, and evaluation—as well as whenever there are significant changes in data processing—of the effectiveness of the technical and organizational measures to ensure the security of the processing.