Data Protection

Personal Data Protection Policy of the company MASCATO, S.A.

In compliance with current regulations on data protection, Spanish Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights, and Regulation (EU) 2016/679 on the protection of natural persons with regard to the treatment of personal data and the free circulation of these data, we inform you of the Personal Data Protection Policy, as regards the processing of personal data, it is the details below.

Responsible for the processing of personal data

The responsible for the treatment is the legal entity that determines the purposes and means of processing personal data. In other words, the person responsible decides how and for what purposes the personal data is processed.

For the purposes of this Data Protection Policy, the responsible for the processing of personal data is:

  • Corporate name: MASCATO, S.A.
  • VAT Number: A-36.777.555
  • Address: c/ Pontevedra 4, 7º. 36201 VIGO (PONTEVEDRA – ESPAÑA)
  • Contact Phone: +34 986 44 30 89
  • Contact e-mail: mascato@mascato.com

What personal information do we process and how do we protect it?

Personal data is all information about an identified or identifiable natural person.

For the purposes established in this Privacy Policy, the responsible party collects and treats the personal data that is explained in each type of treatment, and that will depend on the different services that you request or the contractual relationship that you maintain with our entity.

Our organization is committed to treat with total confidentiality and to apply the appropriate security measures, physical, technical and organizational, for the protection of your personal data.

You guarantee and respond, in any case, of the veracity, accuracy, validity and authenticity of the personal data provided and undertakes to keep them duly updated.

Processing of  «Customer» data

1. What kind of personal data do we deal with?

  • Identifying information: name, ID, address, telephone, email address.
  • Financial data: bank account.
  • Data related to transactions: products and services provided.

2. For what purpose do we treat your personal data?

We treat the personal data that you provide us for the management of the data of the clients of the company, to maintain the commercial relation, the accounting, administrative and billing management, as well as the fiscal obligations. The purpose of advertising and commercial prospection has also been foreseen, for which the express consent of the interested party is requested. The personal data provided will be kept as long as the business relationship is maintained. If you decide to cancel your personal data, these can be stored in our databases during the time periods provided by law to be able to comply with tax and accounting obligations, and will be eliminated once those legal terms or those that are applicable have been prescribed.

3. What is the legitimacy for the treatment of your data?

The legal basis for the treatment of your data is the execution of a contract, as well as the fulfillment of a legal obligation of the person responsible. The communication of offers and promotions that may be of interest to you is based on the express consent that is requested.

4. To which recipients will your data be communicated?

Your personal data will not be transferred to any entity, except those that are necessary to public bodies due to legal obligation. Neither do we foresee any international transfer of personal data.

Data processing of «Contacts and potential customers»

1. What kind of personal data do we deal with?

  • Identifying information: name, address, telephone, email address.

2. For what purpose do we treat your personal data?

We treat the personal data that you provide us in the contact form for the management of data of commercial contacts and potential clients. The purpose of advertising and commercial prospection has also been foreseen, for which the express consent of the interested party is requested. The personal data provided will be kept as long as the business relationship is maintained. If you decide to cancel your personal data, they will be removed from our contact database.

3. What is the legitimacy for the treatment of your data?

The legal basis for the processing of your data is the express consent that is requested.

4. To which recipients will your data be communicated?

Your personal data will not be transferred to any entity, except those that are necessary to public bodies due to legal obligation. Neither do we foresee any international transfer of personal data.

Treatment of «Suppliers» data

1. What kind of personal data do we deal with?

  • Identifying information: name, ID, address, telephone, email address.
  • Financial data: bank account.
  • Data related to transactions: products and services delivered.

2. For what purpose do we treat your personal data?

We treat the personal data that we provide management of the data of the suppliers of the company, to maintain the commercial relationship, the accounting, administrative and
payment management, as well as the fiscal obligations. The personal data provided will be kept as long as the business relationship is maintained. If you decide to cancel your personal data, these can be stored in our databases during the time periods provided by law to be able to comply with tax and accounting obligations, and will be eliminated once those legal terms or those that are applicable have been prescribed.

3. What is the legitimacy for the treatment of your data?

The legal basis for the treatment of your data is the execution of a contract, as well as the fulfillment of a legal obligation of the person responsible.

4. To which recipients will your data be communicated?

Your personal data will not be transferred to any entity, except those that are necessary to public bodies due to legal obligation. Neither do we foresee any international transfer of personal data.

Processing of «Employee» data

1. What kind of personal data do we deal with?

  • Identifying information: name, ID, date of birth, address, telephone number, email address, signature, image.
  • Personal characteristics data: Sex, marital status, nationality, age, date and place of birth, family data.
  • Social circumstances data: licenses and permits.
  • Economic-financial data: bank account, payroll data, tax deductions, other withholdings (if applicable).
  • Academic and professional data: profession, position, experience, degrees.

2. For what purpose do we treat your personal data?

We treat the personal data you provide us for the management of the employment relationship, payroll management, administrative and payment management, compliance with tax and labor obligations, management of training and professional development, and risk prevention labor. The personal data provided will be kept while the employment relationship is maintained. If once the employment relationship is over you decide to cancel your personal data, they will be kept until the legal deadlines defined by the accounting, tax and labor regulations have expired, and once these deadlines have elapsed your data will be removed from our system.

3. What is the legitimacy for the treatment of your data?

The legal basis for the treatment of your data is the fulfillment of an employment contract, as well as the fulfillment of a legal obligation of the person in charge.

4. To which recipients will your data be communicated?

The necessary cessions are made to public bodies by legal obligation: Tax Agency, Social Security, Mutual, etc. There are also transfers of bank data (NIF, name and surname and account number) to the financial entities in charge of intervening in the payment of payroll. Neither do we foresee any international transfer of personal data.

Data processing of «Job candidates»

1. What kind of personal data do we deal with?

  • Identifying information: name, ID, date of birth, address, telephone number, email address, signature, image.
  • Personal characteristics data: Sex, marital status, nationality, age, date and place of birth.
  • Academic and professional data: profession, position, experience, degrees.

2. For what purpose do we treat your personal data?

We treat the personal data you provide us for the management of the company's selection processes. The personal data provided will be kept as long as the interested party has not withdrawn the consent in order to continue saving his curriculum vitae for future selection processes. If you decide to cancel your personal data, they will be removed from our database of job candidates.

3. What is the legitimacy for the treatment of your data?

The legal basis for the processing of your data is the express consent that is requested.

4. To which recipients will your data be communicated?

Cessions will not be made. Neither do we foresee any international transfer of personal data.

Data processing of «Video surveillance»

1. What kind of personal data do we deal with?

  • Identifying data: image.

2. For what purpose do we treat your personal data?

We treat personal data for the recording of video surveillance images in the company premises for security reasons. The personal data will be kept during the anticipated legal terms (one month).

3. What is the legitimacy for the treatment of your data?

The legal basis for the treatment of your data is the satisfaction of legitimate interests pursued by the controller.

4. To which recipients will your data be communicated?

Your personal data will not be transferred to any entity, except those that are necessary to the Security Forces and Corps due to legal obligation. Neither do we foresee any international transfer of personal data.

What are your rights when you provide us with your data?

In accordance with the applicable regulations on data protection, you have a series of rights in relation to the processing of your personal data. The exercise of these rights will be free for you, except in cases where manifestly unfounded or excessive requests are made, especially for repetitive ones.

These rights are the following:

1. Right to information: You have the right to be informed in a concise, transparent, intelligible and easily accessible way, with a clear and simple language, about the use and treatment of your personal data.

2. Right of access: You have the right to ask us at any time to confirm if we are treating your personal data, to provide you with access to them and to information about your treatment and to obtain a copy of said data. The copy of your personal data that we provide will be free but the request for additional copies may be subject to the collection of a reasonable amount based on administrative costs. For our part, we can ask you to prove your identity or require more information that is necessary to manage your request.

3. Right of rectification: You have the right to request the correction of inaccurate, non-updated or incomplete personal data concerning you. You may also request that incomplete personal information be completed, including through an additional declaration.

4. Right of withdrawal: You have the right to request the deletion of your personal data when, among other reasons, the data are no longer necessary for the purposes for which they were collected. However, this right is not absolute, so that our organization can continue to keep them duly blocked in the cases provided for by the applicable regulations.

5. Right to limit the treatment: You have the right to request that we limit the processing of your personal data which means that we can continue to store them, but not continue treating them if any of the following conditions are met:

  • You dispute the accuracy of the data, for a period that allows the responsible to verify the accuracy of the same;
  • the treatment is unlawful and you object to the deletion of the data and request instead the limitation of its use;
  • our entity no longer needs the data for the purposes of the treatment, but you need it for the formulation, exercise or defense of claims;
  • You have opposed the treatment, while verifying if the legitimate reasons of our entity prevail over yours.

6. Right to data portability: You have the right to have your data transmitted to another data controller in a structured, commonly used and machine-readable format. This right applies when the processing of your personal data is based on the consent or execution of a contract and such treatment is carried out by automated means.

7. Right of opposition: This right allows you to oppose the processing of your personal data, including the preparation of profiles. We will not be able to attend to your right only when we treat your data in the event that we accredit legitimate reasons for the treatment or for the formulation, exercise or defense of claims.

8. Right not to submit to automated decisions, including profiles: This right allows you not to be the subject of a decision based solely on automated processing, including the preparation of profiles, which produce – said decisions – legal effects or affect you in a similar way. Unless such decision is necessary for the execution or execution of a contract, is authorized by law or is based on consent.

9. Right to withdraw consent: In cases where we have obtained your consent for the processing of your personal data in relation to certain activities (for example, in order to send you commercial communications), you can withdraw it at any time. In this way, we will stop performing that specific activity for which you had previously consented, unless there is another reason that justifies the continuity of the processing of your data for these purposes, in which case, we will notify you of this situation.

10. Right to file a claim with a control authority: You have the right to file a claim with the Spanish Agency for Data Protection, c/Jorge Juan, 6, 28001 Madrid, 901 100 099 – 912 663 517 (www.agpd.es), or in the electronic address: https://sedeagpd.gob.es/sede-electronica-web/vistas/formQuejasSugerencias/seleccionarQuejaSugerencia.jsf

You can exercise the aforementioned rights by sending a communication to the Customer Service Department, or by sending an email to mascato@mascato.com, attaching a document proving your identity and providing the necessary details to process your request.

Those interested can obtain additional information about their rights on the website of the Spanish Agency for Data Protection, www.agpd.es.