Privacy policy
This Privacy Policy follows the principles of legality, loyalty and transparency.
Who is the data controller of your data?
| Data controller | Tax nº (NIF) | Registered address | Contact |
|---|---|---|---|
| IRUNDIN S.L. | B75142760 | C/ EZURRIKI KALEA, N.º 12, 20305 IRUN, GIPUZKOA | Email: administracion@irundin.com |
What do we process your data for?
IRUNDIN S.L. processes the information you provide for the following purposes, according to the category of the data subject:
| Data subjects | Purpose of the processing |
|---|---|
| POTENTIAL CUSTOMERS / CONTACT | To manage the potential commercial/professional relationship requested by the data subject, manage the sending of requested information and/or resolve queries, provide offers of our services and/or products of interest. |
| CUSTOMERS | To manage the commercial and/or professional relationship, provide offers of our services and/or products of interest. |
| SUPPLIERS | To manage the commercial and/or professional relationship. |
| CANDIDATES | To manage the staff recruitment process. |
| COMMERCIAL COMMUNICATIONS | To provide information of interest regarding our activities, services and relevant news through any means. |
What is the legitimation for processing your data?
| Data subjects | Legal basis |
|---|---|
| POTENTIAL CUSTOMERS / CONTACT | Art. 6.1 (a) GDPR: Consent of the data subject. Art. 6.1 (f) GDPR: Legitimate interest of the company to attend to your requests (send requested information, respond to enquiries, etc.). |
| CUSTOMERS | Art. 6.1.(b) GDPR: Performance of a contract to which the data subject is party. |
| SUPPLIERS | Art. 6.1.(b) GDPR: Performance of a contract to which the data subject is party. |
| CANDIDATES | Art. 6.1 (a) GDPR: Consent of the data subject. |
| COMMERCIAL COMMUNICATIONS | 1. Electronic means: Information Society Services Regulation (21 Information Services Act): - Existing contractual relationship: Commercial communications related to the initially contracted product may be sent. - Potential customers: Can be made effective when expressly requested or expressly accepted. 2. Non-electronic means: - Existing contractual relationship: Art. 6.1 (f) GDPR: Legitimate interest. - Potential customers: Art. 6.1 (a) GDPR: Consent of the data subject. You may decline any communication at any time. |
How long will we retain your personal data?
| Data subjects | Retention period criteria |
|---|---|
| POTENTIAL CUSTOMERS / CONTACT | Your data will be retained for the minimum time necessary in order to provide the service offered and to meet any deriving liabilities or legal requirements. As a general rule, query data will be retained until your information request is resolved. |
| CUSTOMERS / SUPPLIERS | Your data will be retained for the minimum time necessary in order to provide the service offered and to meet any deriving liabilities or legal requirements. All applicable contractual and fiscal regulations will be taken into account. |
| CANDIDATES | Your data will remain active in the candidate database for one year. |
| COMMERCIAL COMMUNICATIONS | Until you express your wish to unsubscribe. |
We will only request data that are appropriate, relevant and strictly necessary; while you are under no obligation to provide them, any failure to do so may affect the service or prevent it from being carried out.
Who will your information be shared with?
IRUNDIN S.L. will not share your data with any third party unless you have been explicitly informed.
You are also informed that, in accordance with current legislation or the contractual relationship with IRUNDIN S.L., certain data may be shared with:
- Banks and financial institutions in order to charge for the contracted services and/or purchased products.
- Public administrations competent in IRUNDIN S.L.´s activity sectors, in accordance with legislation.
You are also informed that, in accordance with current legislation or the contractual relationship with IRUNDIN S.L., certain data may be shared with:
- Banks and financial institutions in order to charge for the contracted services and/or purchased products.
- Public administrations competent in IRUNDIN S.L.´s activity sectors, in accordance with legislation.
What are your rights when you provide us with your information?
Data subjects are entitled to the following data protection rights:
- Right to request access to personal data about the data subject
- Right of rectification or erasure
- Right to object
- Right to request restriction of processing
- Right to data portability
The holders of the obtained personal data may exercise their data protection rights by sending a written communication to IRUNDIN S.L.´s registered office or to the designated email address at administracion@irundin.com, including a photocopy of their ID or an equivalent identification document in both cases.
Forms, applications and further information about your rights can be found at the website of the national regulatory authority (Agencia Española de Protección de Datos, hereinafter AEPD) at www.aepd.es.
Can I withdraw my consent?
You are entitled to withdraw the consent you have given for any specific purpose, without this in any case affecting the lawfulness of any processing based on consent prior to withdrawal.
Who can I lodge a complaint with if I believe my data are not being processed correctly?
Any data subject who believes that their data are not being processed correctly by IRUNDIN S.L. can send a complaint to administracion@irundin.com or to the data protection authority, which in Spain is the AEPD, www.agpd.es.
Security and updating your personal data
You are hereby informed that IRUNDIN S.L. has implemented all the technical and organisational measures necessary to safeguard the security of your personal data. Such measures aim to prevent any alteration, loss, and/or unauthorised processing or access, as required by law, although absolute security cannot be guaranteed.
It is important that you inform us of any changes, in order to keep your personal data updated.
Confidentiality
IRUNDIN S.L. hereby states that your data will be processed with utmost care and confidentiality by all persons involved in any stage of the processing.