Privacy policy

DATA CONTROLLER

  • Data Controller: Tubasys, S.L.U.
  • Tax ID: B15874019
  • Address: Polígono Industrial de Carballo, Rúa do Bronce, parcelas G4-G5, 15100, Carballo, A Coruña
  • E-mail for exercising rights: lopd@tubasys.com

PURPOSES AND LEGAL BASIS

  • Curricula vitae: They will be analysed to assess their suitability for our positions.
    • Lawfulness: Art. 6.1.a GDPR (data subject's consent).
  • Users of the website: Collection of personal data to manage the contact section and navigation analysis (see Cookies Policy).
    • Lawfulness: Art. 6.1.a. GDPR (consent).
  • Ethical Channel: Data used to manage information received..
    • Lawfulness: Art. 6.1.c. GDPR (legal obligation) and Law 2/2023.

TRANSFER OR COMMUNICATION OF DATA

The data provided will not be transferred to third parties, except in the cases provided for by law.


DATA RETENTION PERIOD

  • Customers: Until the end of the contractual relationship and blocked according to the statute of limitations for legal actions.
  • Potential customers: 1 year.
  • Marketing: For as long as they are necessary or until the person withdraws their consent, objects or requests their removal.
  • Curricula vitae: 1 year. In the case of hiring, they will be kept during the employment relationship.
  • Staff: According to what is established by labour regulations.
  • Occupational Risk Prevention and Coordination of Business Activities: According to Occupational Risk Prevention regulations.
  • Web users: While their request is being processed and during the periods established in the Cookies Policy unless they previously withdraw their consent.
  • Internal Information System: According to the terms of Law 2/2023.

PROFILING AND INTERNATIONAL DATA TRANSFERS

We do not carry out automated profiling.
International data transfers may occur through the use of cookies, only with explicit consent. By accepting their use, you may authorise their transfer to countries outside the EEA, which may not have the same level of protection. Adequate measures will be guaranteed in accordance with current legislation.

WITHDRAWAL OF CONSENT

You have the right to withdraw your consent at any time, simply and free of charge, by writing to the address of the data controller or via lopd@tubasys.com. The withdrawal of consent will not affect the legality of the processing based on the consent given prior to its withdrawal.


RIGHTS OF THE DATA SUBJECTS

The data protection regulations grant the following rights to the data subjects:

  • Right of access: the right to obtain information about whether their own data is being processed, the purpose of the processing that is being carried out, the categories of data concerned, the recipients or categories of recipients, the retention period and the origin of said data.
  • Right of rectification: the right to obtain the rectification of inaccurate or incomplete personal data.
  • Right of opposition: the right to oppose a specific processing based on the consent given.
  • Right of deletion: the right to obtain the deletion of the data:
    • When the data is no longer necessary for the initial purpose
    • When the owner of the data withdraws their consent
    • When the data subject opposes the processing
    • When they must be deleted in compliance with a legal obligation
    • When the data has been obtained by virtue of an information society service based on the provisions of art. 8.1 of the European Data Protection Regulation.
  • Right to restriction: the right to obtain the restriction of data processing in any of the following cases:
    • When the accuracy of the personal data is contested, for a period enabling the company to verify the accuracy of the data.
    • When the processing is unlawful and the data subject opposes the erasure of the data.
    • When the company no longer needs the data for the purposes for which it was collected, but the owner needs it for the formulation, exercise or defence of claims.
    • When the interested party has opposed the processing while it is being verified whether the legitimate motives of the company prevail over those of the data owner.
  • Right to portability: the right that when the processing is carried out by automated means, the interested party receives their personal data in a structured, commonly used, machine-readable and interoperable format, and can transmit them to another data controller, provided that the processing is legitimised based on consent or within the framework of the execution of a contract.
    • This right cannot be applied when the processing is necessary for the fulfilment of a mission in the public interest or in the exercise of public powers conferred on the person responsible.
  • The right not to be the subject of automated individual decision-making: the right not to be the subject of a decision based solely on the processing of personal data, including profiling, in a way that produces legal effects concerning the data subject or similarly significantly affects him or her.
    This right shall not apply where:
    • It is necessary for the conclusion or performance of a contract
    • The processing of your data is based on your express consent

  • * In these first two cases, the data controller must guarantee the right to obtain human intervention, express one's point of view and challenge the decision.
    • It is authorised by Union or Member State law and appropriate measures are in place to safeguard the rights and freedoms and legitimate interests of the data subject.
  • * In turn, these exceptions will not apply to special categories of data (art. 9.1), unless article 9.2. letter a) or g) applies and the appropriate measures mentioned in the previous paragraph have been taken. You can exercise the aforementioned rights by writing to lopd@tubasys.com or to the postal address Polígono Industrial de Carballo, Rúa do Bronce, parcelas G4-G5, 15100, Carballo, A Coruña.
    The organisation will deal with your request as soon as possible and taking into account the deadlines established in the regulations on data protection. You may at any time lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) www.aepd.es.