Pursuant to the provisions of arts. 13 and 14 of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, “GDPR”), and Articles 6 and 11 of the Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (hereinafter, “LOPDGDD”), regulating the right to information in the collection of data, we inform you of the following.
- Who is responsible for the processing of your personal data?
The personal data that you have provided us through the website and in any other communications with you will be subject to the Register of Processing Activities owned by THE COMPANY with registered office in AV MOLINS 12, MOLINS, S.A., Barcelona, Spain.
46530 – PUZOL (VALENCIA), with CIF B96188164.
- What is your presence in social networks?
THE COMPANY has the following profiles in the main Internet social networks (Facebook, Linkedin, Youtube, Blog and Newsletter).
It is recognized as responsible for the processing of data of its users, followers, or people who make comments through the same. Also in accordance with the Law of services of the information society and electronic commerce THE COMPANY disclaims any liability for comments from users and followers in their social networks.
THE COMPANY may use the profiles described above to inform its users of topics it considers of interest to them.
- What personal data do we collect?
The personal data that the user may provide:
- Identification data: name, surname, position, role, e-mail and/or telephone number.
- Accounting data: account number, bank card, etc.
- Why and for what purpose do we process your data?
Depending on the purposes we will need to treat some data or others, which in general will be, depending on the case, the following:
- The website is fully informative about the educational platform services offered by THE COMPANY. Data may be processed to respond to requests for information about these services.
- The collection and automated processing of data that is carried out through the form on the website to request information is collected in order to study the possibility of contacting us.
- The website provides information through identifying videos.
- The website has a blog to upload and share stories of interest to users.
- To manage and maintain your candidacy to occupy a job position in THE COMPANY, when you send us your application to participate in a selection process. This processing is based on the consent of the User and on the legitimate and mutual interest of THE COMPANY and the User, as indicated in the privacy information that the User must accept prior to sending his/her application.
Personal data obtained through any of the channels of the website will be part of the Register of Activities and Processing Operations (RAT) owned by THE COMPANY. This will be updated periodically in accordance with the provisions of the RGPD and the LOPDGDD, which is why THE COMPANY has taken all appropriate security measures in this regard.
The user is informed of the possibility of withdrawing his consent in the event that it has been given for a specific purpose, without affecting the lawfulness of the preceding processing based on the consent prior to its withdrawal.
- What is the legitimacy for the processing of your data?
The processing of your data may be based on the following legal bases:
- Express consent by users in the completion of the forms to receive commercial communications from THE COMPANY.
- Legitimate interest: to ensure that our website remains secure, as well as to help us understand users’ needs, expectations and level of satisfaction and therefore improve our services. All actions are carried out in order to improve the level of user satisfaction and ensure a unique browsing and eventual contracting experience.
- Fulfillment of legal obligations for fraud prevention, collaboration with Public Authorities and/or eventual claims from third parties.
- How long do we keep your data?
The processing of data for the purposes described will be maintained for the time necessary to fulfill the purpose of collection, as well as to comply with legal obligations arising from the processing of data. Notwithstanding that the conservation is necessary for the formulation, exercise or defense of potential claims, provided that it is permitted by applicable law.
THE COMPANY undertakes to cease the processing of personal data when the retention period has expired, as well as to duly block them in our databases.
To which recipients is your data communicated?
In general, THE COMPANY will not transfer personal data to third parties, except in those situations in which such data may be transferred to collaborators who provide services to THE COMPANY, in order to manage the provision of services, the contractual and/or pre-contractual relationship with the interested parties or to process requests made by them.
In these cases, we ensure that the recipients respect confidentiality and have appropriate measures in place to protect personal data. THE COMPANY endeavors to ensure the security of personal data when it is sent outside the company. The third parties with whom THE COMPANY contracts have the obligation to ensure that the information is treated in accordance with the data protection regulations in force.
In those cases where the law may require disclosure of personal data to public bodies or other parties, only that which is strictly necessary for the fulfillment of such legal obligations will be disclosed.
THE COMPANY communicates data to external suppliers, as processors, to carry out certain services:
What rights do you have and how can you exercise them?
You may address your communications and exercise your rights by sending a written communication to the following e-mail address: p.nadal@sesderma.com.
Pursuant to the provisions of the regulations on data protection you can request:
- Right of access: you may request information about the personal data we have about you.
- Right of rectification: you can communicate any change in your personal data.
- Right of deletion and right to be forgotten: you can request the deletion of your personal data after it has been blocked.
- Right of limitation to the treatment: it supposes the restriction of the treatment of personal data.
- Right to object: you can withdraw your consent to the processing of your data by objecting to their further processing.
- Right to portability: in some cases, you may request a copy of personal data in a structured, commonly used, machine-readable format for transmission to another data controller.
- Right not to be subject to individualized decisions: you may request not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect the data subject.
In some cases, your request may be denied if you request deletion of data necessary to comply with legal obligations. In addition, if you have a complaint about the processing of your data, you can file a complaint with the competent data protection authority.
Who is responsible for the accuracy and veracity of the data provided?
The user is solely responsible for the veracity and accuracy of the data provided through any of the forms incorporated in the web, exonerating THE COMPANY from any liability in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated. The user agrees to provide complete and correct information in the forms he/she fills out.
THE COMPANY is not responsible for the veracity of the information that is not of its own elaboration and of which another source is indicated, so it does not assume any responsibility for hypothetical damages that may arise from the use of such information.
THE COMPANY is exonerated from liability for any damage that the user may suffer as a result of errors, defects or omissions in the information provided by THE COMPANY, provided that it comes from outside sources.
What security measures do we apply to protect your personal data?
THE COMPANY has adopted the legally required levels of security for the protection of personal data, and endeavors to install those additional technical means and measures within its power to prevent the loss, misuse, alteration, unauthorized access and theft of personal data provided to THE COMPANY. However, the user should be aware that security measures on the Internet are not impregnable.
Therefore, THE COMPANY is not responsible for hypothetical damages that may arise from interferences, omissions, interruptions, computer viruses, telephone breakdowns or disconnections in the operational functioning of this electronic system, caused by causes beyond THE COMPANY’s control, delays or blockages in the use of this electronic system caused by deficiencies or overloads of telephone lines or overloads in the Data Processing Center, in the Internet system or in other electronic systems, as well as damages that may be caused by third parties through illegitimate intromissions beyond THE COMPANY’s control.
How do we handle the data of minors?
As a general rule, THE COMPANY will process data of minors for the storage and maintenance of such data in the educational platform of which it is the Data Controller. Signing with the educational centers the necessary data processor contracts to guarantee the protection and security of this data.
How do we use cookies?
THE COMPANY’s website and social networks use cookies to optimize and personalize your browsing experience. Cookies are physical information files that are stored in the user’s own terminal, the information collected through cookies is used to facilitate the user’s navigation through the portal and optimize the browsing experience. The data collected through cookies may be shared with the creators of the same, but in no case the information obtained by the same will be associated with personal data or data that can identify the user. However, if you do not want cookies to be installed on your hard drive, you can configure your browser to prevent the installation of these files. For more information see our Cookie Policy.
Internal security policy
Security breaches can be caused by employees, third parties or computer errors. We are therefore legally obliged to notify data subjects if their personal data has been seriously affected within 72 hours. In addition, users will be notified as soon as the security breach is resolved.
Modification of the privacy policy
This privacy policy is subject to change. We recommend that you review the privacy policy on a regular basis.