PRIVACY POLICY
- Introduction.
We have a high level of commitment to people’s privacy, which is why the protection of personal data is important to us.
We process data in accordance with the provisions of EU Regulation 2016/679 on General Data Protection, Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights and other regulations in force in this regard.
This Privacy Policy has been revised at febrero de 2024 To comply with the duties of information and transparency of the website itself and in general of the Data Controller, to provide any type of interested party and not only the users of the Website with the general terms of the Data Controller in this matter. Variations may exist until your next review.
- Who is responsible for processing your data?
Responsible: ANDRÉS MOLINA Y ASOCIADOS S.L.
NIF/CIF: B30256424
Address: POL.IND. SAPRELORCA. AV. RÍO SEGURA P. 9-10 I. BZ. 33. 30817 LORCA (MURCIA)
Email: info@molinaprotein.com
- What is the origin and type of data we process?
The source of the information we process can be any of the following categories:
- Paper, electronic or digital forms.
- Communication and messaging systems: email and messaging apps, telephone, etc.
- Other Lawful Sources and Origins of Information.
The different categories of data that we may process depending on the type of data subject (user, customer, supplier, employee, etc.) and the nature of the activity of the controller and the different data processing are:
- Identification data, e.g. name and surname, image.
- Identification codes or keys, e.g. username, employee code.
- Postal or e-mail contact addresses, e.g. telephone, email, social media profile.
- Personal and professional characteristics, e.g. age, date of birth, qualifications, professional experience, CV.
- Economic, financial and insurance data; For example: bank details, credit card, etc.
- Economic and non-economic payroll data and other information of a labor nature; For example: job title, payroll document, etc.
- Transaction data, e.g. goods and services supplied and received.
- Special category data, e.g. health, union membership, racial origin.
- Other data and information necessary or implicit in the development of our activities, services and purpose.
MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE INTERESTED PARTY.
The interested party, by ticking the corresponding boxes and entering data in the fields, marked as mandatory (e.g. with an asterisk) in the contact form or presented in download forms, expressly and freely and unequivocally accepts that their data are necessary to attend to their request, by the controller, the inclusion of data in the remaining fields is voluntary.
The data subject guarantees that the personal data provided to the controller is truthful and undertakes to communicate any modification thereof. The data requested through the website, which is mandatory, is necessary for the provision of an optimal service to the interested party. In the event that not all data is provided, there is no guarantee that the information and services provided will be completely tailored to your needs.
- For what purpose do we process your personal data?
In general, the data is processed in order to successfully carry out the actions implicit in the normal development and management of the activity of the controller. However, we can specify different processing purposes depending on the possible categories of interested parties:
- Clients and prospects: management and maintenance of commercial, pre-contractual and contractual relationships; internal administration; economic management; advertising and marketing, customer service.
- Collaborators, creditors and suppliers: management and maintenance of commercial relationships, internal administration and economic management.
- Workers: management, development and maintenance of the employment relationship, human resources management, communications, training activities, prevention of occupational risks, recording of working hours and other purposes derived from legal obligations and development of labour relations.
- Candidates: management of CVs received, management of job offers and personnel selection.
- Web and social media users: customer service and management of communications between the parties.
- Visitors: visitor service and access control to the facilities.
- The existing information of any other category of interested parties processed by the responsible party will be done within the framework of its activity, in strict compliance with the applicable regulations and under the general criteria of this Privacy Policy.
Other general purposes that the controller may implement are:
- Creation of a commercial profile, with the aim of improving your experience by personalizing offers and communications. No individualized decisions will be made based on this profile and action will be taken on the basis of legitimate interest.
- Video surveillance, for the security of goods and people, as well as the corresponding labor control based on legitimate interest.
- Telephone switchboard, in order to record communications for security, guarantee and quality of service, based on legitimate interest.
- Analysis of financial risks and control of monetary obligations. In the case of debtors with certain, overdue and due outstanding payments, the responsible party may communicate this circumstance to credit solvency files, debtor files, and debt management or collection services, among others, based on legitimate interest.
- Communications: development and execution of communications through the data and means of contact available (e-mail, instant messaging, etc.) with categories of internal (employees) and external (customers, potentials, collaborators, suppliers, etc.) stakeholders. The purposes of such communications may be informative, organizational, commercial and advertising, as appropriate based on the informed consent and legitimate interest of the controller.
- Other purposes derived from the nature of the controller, motivated by the normal development and exercise of their activity, from a valid legitimate basis.
- How long will we keep your data?
In general, personal data will be kept at least as long as there is a relationship with the interested party, as long as there is no request for their deletion, as long as liabilities may arise or as long as there is any legal provision for storage.
The data of candidates and job seekers will be deleted immediately if they are not of interest to the controller.
In its data protection plan, the data controller has an inventory of retention periods that it observes in order to manage the different applicable retention periods.
The deletion of the data will be carried out in any case, ensuring the confidentiality of the same.
- What is the legal basis for the processing of your data?
The Data Controller observes and applies the different existing legal bases that are applicable to each processing purpose. These are:
- Informed consent of the interested party.
- Pre-contractual or contractual commitments.
- Legitimate interest of the controller.
- Applicable Legal Obligations.
- Other legally prescribed legitimizing bases.
- To which recipients will your data be disclosed?
The data of the interested parties will not be communicated to any third party by default, except: a) auxiliary services, authorized data processors or other implicit third parties necessary for the correct provision of goods and services; (b) competent authorities and public administrations in the exercise of their functions; c) other legitimate data subjects and legally provided third parties.
- What are your rights when you provide us with and/or process your data?
As a data subject, you may at any time request us to exercise any of the following data protection rights:
- Access to the data subject’s personal data in order to confirm whether or not data concerning them is being processed and to obtain more information about this processing.
- Rectification or Deletion of personal data concerning the interested party when, among other reasons, they are inaccurate or no longer necessary for the purposes for which they were collected.
- Restrict the processing of the personal data of the data subject in certain circumstances, in which case they will only be kept for the purposes of exercising or defending claims, for the protection of the rights of another person or for reasons of public interest.
- Receive the personal data concerning you, which you have previously provided to us, and in a structured format where possible. (Portability of your data).
- Object to the processing of your data in certain circumstances and for reasons related to your particular situation. The company will cease to process your data, except for compelling legitimate reasons, or the exercise or defence of possible claims.
- Revoke consent, which may lead to the annulment or cancellation of the existing business or contractual relationship, if any. Without prejudice to the processing carried out prior to the withdrawal of consent.
To do this, you will only have to contact us through the email or postal address indicated at the beginning.
Optionally, you can also contact our designated data protection officer, or the Data Protection Agency to find out more about your rights or request that they be protected by the supervisory authority.
- Data security.
We adopt the necessary technical and organisational measures in our information system to ensure an adequate level of confidentiality, integrity, availability and resilience of data in order to protect the rights and freedoms of data subjects.
The controller complies with the provisions and principles described in the GDPR in order to process the data in a lawful, fair and transparent manner in relation to the data subject, and adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.
However, to the extent permitted by law, we do not assume any liability for damages caused by alterations that third parties may cause to our information system. Any breach of security will be duly and immediately reported to the competent authority and/or State security forces.
- Sending Communications or Information.
Our policy regarding the sending of information through telematic means (e-mail, instant messaging, etc.) is limited to sending only communications that we consider to be of interest to our users and interested parties, in relation to the functions and activity of the company, or that you have consented to receive.
If you prefer not to receive these messages, we will offer you the possibility of exercising your right to cancel and renounce the receipt of these messages, in accordance with the provisions of Title III, article 22 of Law 34/2002 on Services for the Information Society and Electronic Commerce.
- Social media.
The responsible party may have a presence on social networks through the corresponding profiles, and this section and any legal and privacy terms present on the website for the processing of data of users or interested parties who become followers or are in any way linked to such profiles are applicable.
The purposes of use of these profiles by the Data Controller are communication, commercial development, marketing and advertising, processing queries made to the Data Controller and customer service, informing about actions, activities and events organised by the Data Controller or in which the Data Controller participates, and interacting through the official profiles.
The legal bases set out in section 6 above are complemented in this case because the user or interested party may have a profile on the same social network as the controller and has decided to join or connect with the profile of the controller, thus showing interest in the information published by the controller. Therefore, when following the profiles of the data controller, you provide your consent for the processing of the data available in your profile.
The user can access the privacy policies and terms of the corresponding social network at any time, as well as configure the privacy features that may be carried out in their profile. The posts made by the user will be known by other users, so the user himself is primarily responsible for his or her privacy.
Users who follow and/or participate in our profiles will refrain:
- Publishing content or information that is contrary to the law, morality, and good faith. Any illicit, annoying, inappropriate use or behavior that may generate negative opinions on the profile or that violates the rights of individuals is not permitted.
- Behaving in a manner contrary to the principles of legality, honesty, responsibility, protection of human dignity, protection of minors, protection of public order, protection of private life, consumer protection and intellectual and industrial property rights.
The controller reserves the right to remove any content that is considered inappropriate without prior notice. Likewise, the user is released from any responsibility in relation to the security measures corresponding to each platform, and the user must be aware of them together with the legal terms and conditions of use of the platform itself.
The responsible party will be expressly exonerated from any liability that may arise from the use of social networks by minors or people with special abilities. The social networks of the responsible party do not knowingly collect any personal information from minors, therefore, if the user is a minor, they should not register, nor use the social networks of the controller, nor provide any personal information. Particularly in Spain, the processing of a minor’s personal data may only be based on children under the age of 14 or older. On the other hand, if any rule or regulation requires it, or the user has special abilities, the intervention of the holder of their parental authority or guardianship, or their legal representative by means of a valid document that accredits the representation, will be necessary.
- Employment & Applicant Management
Those interested in accessing job offers from the controller can provide their data and professional information to the controller through different channels, preferably through existing forms, email addresses, and existing means for this purpose, if applicable.
This data will be processed in accordance with these privacy terms present herein in order to manage applications for possible job offers, internships and training from the responsible entity and any subsidiary companies or companies belonging to the same business organization, when it exists and corresponds.
The processing will be carried out on the basis of the informed consent of the interested party or another valid legitimate basis.
The data provided, if they are not of professional interest to the entity or once they are no longer necessary for the purposes for which they were collected, will be deleted, ensuring their confidentiality and anonymization.
Any interested party may revoke their consent and exercise their privacy rights under the terms set out in this privacy policy.
