Confidentiality and privacy policy

APPLICABLE FROM MAY 2021

We value your privacy and the protection of your personal data.

This policy informs you about how your data are collected and used in connection with the site accessible at www.magnesitasnavarras.es (the “Site”) and/or in connection with any contact with our Company, in accordance with the “Information Technology and Freedoms” Act No. 78-17 of January 6, 1978 and the European regulation in force resulting from the General Data Protection Regulation 2016/679 of April 27, 2016 (“GDPR”).

on the protection of your personal data

Data controller and recipients of personal data

The personal data collected (“Data”) in connection with the use of our Site and more generally, in connection with contacts you may have with our Company, are processed by [name + address of the data controller], as the data controller (“Data Controller”).

Data means any information relating to an identifiable natural person, directly or indirectly, including by reference to an identifier such as a name, an identification number, location data or an online identifier.

Depending on the processing purpose, the Data collected and/or transferred are intended to be used by the Data Controller; the Data Controller’s support services (purchasing/sales administration, sales, logistics, credit management, HR, IT accounting and marketing) shall have access to them. They will also be made available to the following service providers (“data processors” or “third party recipients” as defined in the regulation) for the strict needs of their mission, in particular:

• technical service providers: communication agency, website hosting company of our Site (see ToU and legal notices available HERE);
• financial/accounting service providers: auditors, banks;
• logistics service providers: carriers;

Access is strictly governed by the existing security policies so that human intervention on the Data is very exceptional. The Data Controller may be required to disclose your Data to third parties in cases where such communication is permitted and required by law or a court decision, or if such communication is necessary to protect and defend its rights.

Otherwise, your Data shall not be transferred or made available to any third party without your prior consent.

The Data Controller does not transfer your Data to a third country outside the EEA. In the event of a transfer outside the EEA, such transfers shall be governed by appropriate guarantees, such as the standard clauses required by the European Commission.

Data collection purposes

The Data that is required to respond to your contact, to conduct commercial relationships with our Company, in  particular the contract of sale of the products and/or services presented on the Site, or to meet a regulatory obligation, shall be reported to you as such when collected.

The following Data are processed:

• Name and surname
• Email
• On EMPLOYMENT the CV (Curriculum Vitae)

The Data shall be used in different ways, depending on why you visited the Site:

• On the basis of your consent, which you may withdraw at any time without calling into question the initial legality of the use of your Data ( infra, Art. 3 “Your Rights”), for sending newsletters;
• For the purposes of the performance of the commercial relationship and in particular the sale or provision of services contract you have entered into or that of the supply contract (creation of customer or supplier accounts, fulfillment of orders, invoicing, monitoring of the performance of the contract, delivery, after-sales and complaints, organization of satisfaction surveys, customer or supplier file management, unpaid invoices and litigation management);
• To process and respond to requests that may give rise, where appropriate, to the conclusion of a contract (request for information);
• To meet legal, accounting and tax obligations (in particular the retention of accounting supporting documents; management of rights, rectification and objection requests; maintenance of a list of objections to canvassing), or to establish, exercise and defend legal rights.

Unless you object, and within the limits of your interests and rights, to meet the legitimate needs of the Data Controller, in particular:

• Canvassing, customer relationship monitoring and customer loyalty (which in particular involve sending commercial messages or news about products, services and offers presented on the Site or off the Site);
• Creation of customer/supplier accounts by performing all due diligence necessary to protect the Data Controller’s interests and to prevent conflicts of interest;
• Site optimization (analysis of the navigation route, identification of mass connections, determination of search trends so that the offers made can be adjusted to the demand)
• Carrying out reach-out operations to develop sales;
• Management of people’s opinions about products, services or content in the interest of improving the products and services offered on the Site or off the Site;
• Personalization of the customer experience on the Site;
• Preparation of statistics (sales in particular), in order to analyze the sales activity;
• Management of the prospects file in order to develop sales;
• Completion of satisfaction surveys;
• To combat payment fraud.

About cookies

Various cookies are used on the Site to improve interactivity between you, the Site and the services offered.

For more information, please see the cookie policy available HERE.

Your rights regarding the Data

The persons whose Data are processed by the Data Controller have a right of access, rectification of erroneous personal Data, and, in the cases and according to the limits laid down in the regulation, objection, erasure of some of their Data and a right to withdraw their consent, restrict use thereof, define their fate after their death, or request their portability for transmission to a third party.

To exercise your rights, simply write to one of the two addresses stated in Article 6 below and enclose, if necessary, any document which proves your identity and justifies your request.

Length of retention of the Data

Your Data shall be retained for a period not exceeding that required for the purposes for which they are collected, and in particular for the following periods:

• For a period of 3 years following the last contact, and then kept in intermediate archives for the duration of the applicable legal requirement (5 years) for all data except banking data and cookies;
• For a period of 13 months from their storage/creation for cookies.

At the end of these periods, the Data shall be erased from the active databases and, if necessary, archived for a period not exceeding the applicable statutory limitation periods or archiving obligations. Once these periods have expired, the Data will be destroyed.

Contact the data protection officer (DPO)

For any further information or difficulty relating to the use of your Data, you can contact the data protection officer by email at magna@magnesitasnavarras.es or by postal letter at the following address Avenida Roncesvalles s/n  31630 Zubiri – Navarra -Spain

We will be delighted to answer any query or claim you may have regarding data protection. Moreover, you can address your claim or exercise your rights through any of the contact channels indicated in the heading of this data protection policy.

You can also may contact the appropriate control authority you consider to lodge your claim (for example, in the country where you have your usual place of abode, place of work or where you consider the alleged infringement has taken place). For pertinent purposes, we inform you that in Spain the Control Authority is the Spanish Data Protection Agency. You can exercise your rights through the forms this entity has enabled for this purpose and which are available on its website.

V_2020.01