Data Privacy Policy
DATA CONTROLLER’S INFORMATIONASOCIACIÓN SUN REPACK, also known as SUN REPACK, whose address is at C/ Escultor José Capuz 17 1º 1ª in Valencia, bearer of Tax ID G44722494, owner of the website www.sunrepack.eu.
Email for correspondence regarding Data Protection: [email protected]
Applicable law
Our Privacy Policy has been designed in accordance with the General Data Protection Regulation, EU Regulation 2016/679, of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). Likewise, the policy has been designed in accordance with the provisions of Spanish law on Personal Data Protection -- to the extent that this does not contradict the GDPR.
By providing us with your data, you state that you have read and understood this Privacy Policy, giving your unequivocal and express consent to the processing of your personal data in accordance with the purposes and terms expressed herein.
SUN REPACK may modify this Privacy Policy to adapt it to new laws, jurisprudence, and/or interpretations from the Spanish Data Protection Agency. These Privacy Terms and Conditions may be complemented by the Legal Notice, Cookies Policy, and the General Terms and Conditions, which are used as applicable for certain products or services if access thereto involves any particularities in terms of personal data protection.
Data protection officer
The company does not need a Data Protection Officer.
Data processing
SUN REPACK undertakes the following data processing. Information thereon can be consulted at the following link: www.sunrepack.eu/registro-actividades-tratamiento
CONSENT to process your data
Upon filling out any form and clicking on the “I accept the privacy policy” to subsequently send the personal data included on the form, and upon sending e-mail messages to SUN REPACK by means of the accounts set up for said purpose, the user recognises that they have read and expressly accepted this privacy policy and that they grants their unequivocal and express consent to having their personal data processed in accordance with the purposes set forth.
THIRD-PARTY DATA TRANSFERS
Your data may be transferred to the following platforms for sending marketing information:
- ACUMBAMAIL (acumbamail.com), operated by ACUMBAMAIL SL, whose GDPR compliance is described at https://acumbamail.com/public/privacy-policy/
- MAILRELAY (mailrelay.com), operated by CPC Servicios Informáticos Aplicados a Nuevas Tecnologías SL, whose GDPR compliance is described at https://mailrelay.com/es/politica-de-privacidad
As part of our commitment to guarantee the safety and confidentiality of your personal data, we hereby inform you that we have adopted measures of a technical and organisational nature that ensure personal data security and prevent their alteration, loss, unauthorised processing and/or unauthorised access, keeping mind the state of the technology, nature of the data stored, and the risks to which they are exposed, as stipulated by article 32 of GDPR (EU) 679/2016.
USER’S RIGHTS
Anyone has the right to obtain confirmation of whether or not we are processing personal data relating to them. Data owners have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, the data owners may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defence of claims. In certain circumstances and for reasons related to their particular situation, the data owners may object to the processing of their data. In this case, the data controller will stop processing the data, except for compelling legitimate reasons or for the exercise or defence of possible claims.
In accordance with current law, you have the following rights: right to request access to your personal data, right to request their rectification or deletion, right to request the limitation of your data’s processing, right to oppose your data’s processing, right to data portability, and right to revoke the consent granted.
How to exercise your rights
To exercise your rights, you should contact the data controller, requesting the corresponding form for the exercise of the chosen right. Optionally, you can turn to the competent Supervisory Authority for additional information about your rights. The channels for exercising your rights are via the telephone 963363487 and the email address [email protected]. Remember to attach a copy of a document that allows us to identify you.
CONSENT TO SEND ELECTRONIC CORRESPONDENCE
In accordance with the provisions of Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, by completing the data collection form and by ticking the box “I agree to the privacy policy”, you are giving express consent to send you information about the Company to your e-mail address, telephone, fax, or by other electronic means.
PROCESSING LOGS
| PROCESSING | CUSTOMERS |
|---|---|
| PURPOSE FOR PROCESSING | Management of relationship with customers. |
| LEGAL GROUNDS | The legal grounds for processing is the execution of a contract that has the data owner as one of the parties, as well as compliance with a legal obligation applicable to the data controller. |
| DATA STORAGE PERIOD | 6 years (or, where appropriate, the period necessary for the statute of limitations to run out for liabilities in accordance with current legal regulations), counted from the end of the legal relationship that provided legal grounds for processing. |
| CATEGORIES OF DATA OWNERS | Customers and users, contact people, legal representatives. |
| PERSONAL DATA CATEGORIES | Those necessary to maintain the commercial relationship. Billing, sending postal or email information, after-sales service, and loyalty: Email, address, manual signature, mobile, TIN, name and surname, telephone, bank details, goods and services received, goods and services provided, financial transactions. |
| DATA TRANSFER RECIPIENT CATEGORIES | TAX ADMINISTRATION, OTHER PUBLIC GOVERNMENTAL BODIES, BANKS, SAVINGS BANKS, AND RURAL SAVINGS BANKS |
| INTERNATIONAL DATA TRANSFERS | Use is made of the following platforms that may involve the international transfer of personal data:
|
| PROCESSING | POTENTIAL CUSTOMERS |
|---|---|
| PURPOSE FOR PROCESSING | To manage the relationship with potential customers (people with whom we seek to maintain a commercial relationship as customers). |
| LEGAL GROUNDS | The legal grounds for processing is the execution of a contract that has the data owner as one of the parties, as well as compliance with a legal obligation applicable to the data controller. |
| DATA STORAGE PERIOD | Until the data owner exercises their right to cancel data processing or delete their personal data. |
| CATEGORIES OF DATA OWNERS | People with whom we seek to maintain a business relationship as customers, or who request information about our products and services. Customers and users, contact people, legal representatives. |
| PERSONAL DATA CATEGORIES | Email, address, manual signature, mobile, TIN, name and surname, telephone, activities and business, commercial licenses, subscriptions to publications. |
| DATA TRANSFER RECIPIENT CATEGORIES | ORGANISATIONS OR PEOPLE DIRECTLY RELATED TO THE DATA CONTROLLER, COMPANIES DEDICATED TO ADVERTISING OR DIRECT MARKETING. |
| INTERNATIONAL DATA TRANSFERS | Use is made of the following platforms that may involve the international transfer of personal data:
|
| PROCESSING | CVs |
|---|---|
| PURPOSE FOR PROCESSING | The purpose of processing is to carry out personnel selection processes to fill the jobs required by the data controller. |
| LEGAL GROUNDS | The legal grounds for processing is the execution of a contract that has the data owner as one of the parties, as well as compliance with a legal obligation applicable to the data controller. |
| DATA STORAGE PERIOD | 1 year from receipt thereof. |
| CATEGORIES OF DATA OWNERS | Applicants |
| PERSONAL DATA CATEGORIES | Email, address, image, mobile, TIN, name and surname, telephone, age, marital status, date of birth, gender, place of birth, nationality, hobbies, education, student records, degrees, membership in professional associations, professional experience, profession, positions. Other data not considered above and voluntarily included by the applicant. |
| DATA TRANSFER RECIPIENT CATEGORIES | ORGANISATIONS OR PEOPLE DIRECTLY RELATED TO THE DATA CONTROLLER. |
| INTERNATIONAL DATA TRANSFERS | Use is made of the following platforms that may involve the international transfer of personal data:
|
| PROCESSING | SUPPLIERS |
|---|---|
| PURPOSE FOR PROCESSING | To manage the relationship with suppliers (people with whom a commercial relationship is maintained as suppliers of products and/or services). |
| LEGAL GROUNDS | The legal grounds for processing is the execution of a contract that has the data owner as one of the parties, as well as compliance with a legal obligation applicable to the data controller. |
| DATA STORAGE PERIOD | 6 years (or, where appropriate, the period necessary for the statute of limitations to run out for liabilities in accordance with current legal regulations). |
| CATEGORIES OF DATA OWNERS | Providers, contact people, legal representatives. |
| PERSONAL DATA CATEGORIES | Those necessary to maintain the commercial relationship. Email, address, manual signature, mobile, TIN, name and surname, telephone, membership in professional associations, positions, activities and business, bank details, goods and services received, goods and services provided, financial transactions. |
| DATA TRANSFER RECIPIENT CATEGORIES | TAX ADMINISTRATION, OTHER PUBLIC GOVERNMENTAL BODIES, BANKS, SAVINGS BANKS, AND RURAL SAVINGS BANKS. |
| INTERNATIONAL DATA TRANSFERS | Use is made of the following platforms that may involve the international transfer of personal data:
|
| PROCESSING | EMPLOYEES |
|---|---|
| PURPOSE FOR PROCESSING | The legal grounds for processing is the execution of a contract that has the data owner as one of the parties, as well as compliance with a legal obligation applicable to the data controller. |
| LEGAL GROUNDS | The legal grounds for processing is the execution of a contract that has the data owner as one of the parties, as well as compliance with a legal obligation applicable to the data controller. |
| DATA STORAGE PERIOD | 6 years from the most recent termination of the employment contract (or, where appropriate, the period necessary for the statute of limitations to run out for liabilities in accordance with current legal regulations). |
| CATEGORIES OF DATA OWNERS | Employees |
| PERSONAL DATA CATEGORIES | Email, address, manual signature, image, mobile, TIN, social security or mutual insurance company number, name and surname, telephone, marital status, gender, place of birth, nationality, training, qualifications, membership in professional associations, non-financial payroll data, professional experience, positions, bank details, tax deduction data, financial payroll data, income, compensation. |
| DATA TRANSFER RECIPIENT CATEGORIES | SOCIAL SECURITY AGENCIES, TAX ADMINISTRATION, BANKS, SAVINGS BANKS AND RURAL BANKS, INSURANCE COMPANIES. |
| INTERNATIONAL DATA TRANSFERS | Use is made of the following platforms that may involve the international transfer of personal data:
|
| PROCESSING | INVOICING/ACCOUNTING |
|---|---|
| PURPOSE FOR PROCESSING | Management of the administrative activities needed to comply with tax obligations in terms of the Tax Authorities. |
| LEGAL GROUNDS | The legal grounds for processing is the execution of a contract that has the data owner as one of the parties, as well as compliance with a legal obligation applicable to the data controller. |
| DATA STORAGE PERIOD | 6 years (or, where appropriate, the period necessary for the statute of limitations to run out for liabilities in accordance with current legal regulations). |
| CATEGORIES OF DATA OWNERS | Employees, customers and users, providers, contact people, legal representatives. |
| PERSONAL DATA CATEGORIES | Address, TIN, name and surname, bank details, financial payroll data, insurance data, goods and services received, goods and services provided, financial transactions. |
| DATA TRANSFER RECIPIENT CATEGORIES | TAX ADMINISTRATION, OTHER PUBLIC GOVERNMENTAL BODIES. |
| INTERNATIONAL DATA TRANSFERS | Use is made of the following platforms that may involve the international transfer of personal data:
|
| PROCESSING | VIDEO SURVEILLANCE |
|---|---|
| PURPOSE FOR PROCESSING | Ensure the safety and security of the people who access or undertake their professional activity in the facilities. Surveillance of the property and facilities belonging to the data controller. |
| LEGAL GROUNDS | The legal grounds for processing is to satisfy the legitimate interests pursued by the data controller; in particular, to guarantee the security of the people and property in the facilities subject to video surveillance. |
| DATA STORAGE PERIOD | 30 days, which may be extended in the event that law enforcement or a court use their powers to request an extension of said period. |
| CATEGORIES OF DATA OWNERS | Employees, customers, users, suppliers, associates or members, and visitors. |
| PERSONAL DATA CATEGORIES | Image |
| DATA TRANSFER RECIPIENT CATEGORIES | ORGANISATIONS OR PEOPLE DIRECTLY RELATED TO THE DATA CONTROLLER, OTHER PUBLIC GOVERNMENTAL AGENCIES, LAW ENFORCEMENT. |
| INTERNATIONAL DATA TRANSFERS | The international transfer of personal data is not foreseen. |
