PRIVACY POLICY

•1. Introduction

• 2. Who are we?

• 3. Companies and websites

• 4. Collection of personal data

• 5. Legal basis for the processing of personal data

• 6. Sharing your personal information

• 7. International Transfer

• 8. How long do we keep your personal information?

• 9. Security Measures

• 10. Your rights as a data subject

• 11. You have to provide us with your personal information

• 12. Automated decision making

• 13. Can we use your personal information for Marketing actions?

• 14. Cookies

• 15. Contact us

• 16. Complaints

• 17. Policy changes

1. Introduction

We appreciate the trust you place in us by sharing your personal data. The security of that data is very important to us.

This policy explains how we collect and use your personal information and with whom we share it, as well as what rights you have with respect to your personal data and how you can exercise those rights.

2. Who are we?

MARCA PROTECCIÓN LABORAL, S.L.

 For the purposes of the General Data Protection Regulation, MARCA P.L., SL, is the data controller. This means that MARCA PROTECCIÓN LABORAL, S.L determines what data is collected, how it will be used and how this data is protected.

 The address of our Headquarters is:

MARCA PROTECCIÓN LABORAL, S.L. (B30618193)

Pol. Ind. Cabezo Beaza, Avda. Bruselas - Esq. C/ Ámsterdam, Parcela R-100

30353 Cartagena – España

marca@marcapl.com

 If you have questions about how we process personal data, or if you wish to exercise your rights as a data subject, please email us at protecciondatos@marcapl.com or write to us at the above address. 

3. Companies and Websites

The following companies and websites are within the scope of this privacy policy:

MARCA PROTECCIÓN LABORAL, S.L. / www.marcapl.com

It also includes personal data that is collected through our websites, over the phone, through LiveChat and through any related social media applications.

4. Collection of personal data

We collect personal data from you for one or more of the following purposes:

• To perform a contract we have entered into with you or with the entity (or organization) you represent. In these circumstances it may be your entity (or organization), rather than you, that has provided us with your personal data
• To initiate and complete commercial transactions with you, or the entity (or organization) you represent, for the purchase of products and/or services.
• To deliver the product you have purchased directly or indirectly from us..
• To communicate with suppliers of goods and services.
• Keep accounts and other business records.
• To carry out marketing, electronic sale etc….
• Comply with legal or regulatory requirements.
• To manage current and past employees.
• To manage Job applicants.
• Dealing with questions from our current and former employees and job applicants.
• Deal with complaints or inquiries from our customers and suppliers
• Address questions from our shareholders and other stakeholders.
• Generating data analysis to monitor and improve the performance of our website
• To ensure the safety and secure operation of our websites and the underlying business infrastructure

• Technical information

In addition, to ensure that each visitor to any of our websites can use and navigate effectively, we collect the following:

• • Technical information, including the Internet Protocol (IP) address used to connect your device to the Internet.
• • Your login information, browser and version type, time zone setting, browser plug-in types and versions.
• • Operating system and platform.
• • Information about your visit, including the URL (Uniform Resource Locator) of clickstreams to, through and from our site.

In section 10 below, we identify your rights with respect to the personal data we collect and describe how you can exercise those rights.

5. Legal basis for the processing of personal data

We believe that it is in our legitimate interest, or necessary for the performance of a contract, to collect and use personal information to operate our business and provide a service that you have requested. In some cases, we may have a legal obligation to use or disclose personal information, for example, to comply with a request from an official body.

 When we process on the legal basis of a legitimate interest, we apply the following test to determine its appropriateness:
The purpose test - is there a legitimate interest behind the process?

The necessity test - is it necessary to process it for that purpose?

Balancing test: is the legitimate interest overridden or not by the interests, rights or freedoms of the individual?

6. Share your personal data

We may share your personal information, but this will be done on a "need to know" basis and only when it is necessary to do so or when we are required to share information. As our professional advisors and service providers, including:

• Accountants.

• Legal advice.

• Consultants.

• Payment providers.

• Payroll providers.

• Pension providers.

• Insurers.

• Information and communications technology service providers.

 • Suppliers.

• Logistics and transport services.

We may also share personal information:

• With any competent authority or regulator as required by law.

• When we buy or sell any business or asset.

Our goal is to implement the necessary safeguards to ensure that personal information for which the company is legally responsible remains properly protected and is used appropriately when in the hands of a third party.

7. International Transfer

We are a global organization and we use third parties located in other countries to help us perform our business. This includes countries outside of the European Union (EU) and countries that do not have laws that provide specific protection for personal data. We at the Group have taken steps to ensure that all personal data is properly protected and that all transfers of personal data outside the EU take place legally. Where we transfer personal data outside of the EU to a country that has not been determined by the European Commission to offer an adequate level of protection for personal data, the transfers will be made under an agreement covering the EU requirements for the transfer of personal data. personal data outside the EU.

8. ¿How long do we keep your personal information?

We will take steps to keep your information only for as long as it is necessary for our business needs and in compliance with any legal or regulatory obligation to retain personal information for a specified period. No matter how long we retain personal information, we will ensure that it is subject to appropriate security.

9. Security measures

We have what we believe to be appropriate security controls to protect personal data. Risk assessment, including assessment of risks to the rights and freedoms of data subjects, is at the core of our Information Security Management System. However, we have no control over what happens between your device and the edge of our information infrastructure. You should be aware of the many information security risks that exist and take appropriate steps to safeguard your own information. We do not accept any responsibility with respect to violations that occur beyond our sphere of control.

10. Your rights as a data subject

As a data subject whose personal information we hold, you have certain rights. If you wish to exercise any of these rights, please send an email to protecciondatos@marcapl.com or use the information provided in the "Contact Us" section below. In order to process the request, we will ask you to provide a valid form of identification for verification purposes. Your rights are as follows:

• The right to be informed
  As data controllers, we are obliged to provide clear and transparent information about our data processing activities. This is set out in this privacy policy and in any related communications we may send you.
• Access right
  
  You can request a copy of the personal data we hold about you free of charge. Once we have verified your identity and, if relevant, the authority of any requesting third party, we will provide you with access to the personal data we hold about you, as well as the following information:
• a) Know if as data controller we have any personal data about you.
• b) Receive a description of the personal data held and, if permissible and practical, a copy of the personal data.
• c) To be informed of the purposes for which these personal data are processed and from where they have been received.
• d) Be informed of whether the personal data is being disclosed to someone other than the original recipient of the personal data and, if so, the identity of those recipients.
• e) Request that your personal data be transferred to you or a third party in a machine-readable format (Word, PDF, etc.) (although these requests can only be fulfilled if the personal data in question is: -

-1. provided by the data subject to the company.

-2. is processed automatically.

f) If the personal data is used to make automated decisions about you as a data subject (for example, profiling), that you be told what logic the system uses to make those decisions and that you can request human intervention to override those automated decisions.

g) When your personal data is transferred to a third country or to an international organization, you have the right to be informed of the appropriate guarantees in accordance with article 46 of the Data Protection Law regarding the transfer.

If there are exceptional circumstances that allow us to refuse to provide the information, we will explain them. If requests are frivolous or vexatious, we reserve the right to reject them. If responding to requests is likely to require additional time or result in unreasonable expense (which you may have to pay), we will inform you.

• The right to rectificacn
  When you believe that we have inaccurate or incomplete personal information about you, you can exercise your right to correct or complete this data. This can be used with the right to restrict processing to ensure that incorrect/incomplete information is not processed until it is corrected.
• The right to supression (the “Right to be forgotten")
  Where there is no overriding legal basis or legitimate reason for the processing of personal data, you can request that we delete it. This includes personal data that may have been processed unlawfully. We will take all reasonable steps to ensure deletion.
• The right to restrict processing
  You can ask us to stop processing your personal data. We will continue to retain the data, but will no longer process it. This right is an alternative to the right to erasure. If one of the following conditions applies, you can exercise the right to restrict processing:

a) The accuracy of the personal data is contested.

b) The processing of personal data is illegal.

c) We no longer need the personal data for the processing, but the personal data is necessary for part of a legal process.

d) The right to object has been exercised and the processing has been restricted pending a decision on the status of the processing.

• The right to data portability

You may request your personal data set to be transferred to another controller or processor, as long as it is provided in a commonly used and machine-readable format. This right is only possible if the original treatment has been carried out on the basis of consent, if the treatment has been carried out by automated means and if the treatment is based on the fulfillment of a contractual obligation.

• The right to object
  You have the right to object to our processing of your data when:

a) Processing is based on a legitimate interest.

b) The production is intended for direct marketing.

c) The processing is carried out for scientific or historical research purposes.

d) Processing involves automated decision-making and profiling.

11. You have to provide us your personal information

You are never required to provide us with personal information, but you may be required to do so when you enter into a contract for the provision of our services or products. We will not be able to provide our services or products unless you provide us with the personal information we have to. In addition, you will be asked to provide certain personal information if you contact us to exercise your rights under the GDPR law, as set out in section 10.

12. Automated decisión making

We carry out automated decision making when you use our website. This involves providing you with content based on your online behaviour. This allows us to display content that is relevant to you.

13. Can we use your personal information for Marketing actions?

Yes, we may use your personal information to carry out marketing, but our goal is only to contact people who want to receive such marketing information. If you object, electronically or otherwise, please let us know and we will stop contacting you.

14. Cookies

We use cookies, which are small text files placed on your computer by websites you visit, to make our website work properly, to monitor your use, and to display content that we think will be relevant to you. If you register with us or continue to use our site, you will be asked to agree to our use of cookies. For more details about the cookies used and your rights, see our Cookies Policy https://www.marcapl.com/marca/esp/index.php?seccion=uso_cookies

15. Contact us

Any comments, questions or suggestions about this privacy policy or our handling of your personal data should be sent by email to protecciondatos@marcapl.com

Alternatively, you can contact us at the following postal address:

MARCA PROTECCIÓN LABORAL, S.L. (B30618193)

Pol. Ind. Cabezo Beaza, Avda. Bruselas - Esq. C/ Amsterdam, Parcela R-100

30353 Cartagena – España

16. Complaints

If you wish to discuss a complaint, please do not hesitate to contact us using the details provided above. All complaints will be treated confidentially.

If you feel dissatisfied with the handling of your data, or with any complaint you have made to us about the handling of your data, you have the right to raise your complaint with a supervisory authority within the European Union. For Spain, this is the [Spanish Data Protection Agency (AEPD)], which is also our main supervisory authority. Their contact information can be found:

Agencia Española de Protección de Datos (AEPD)
C/Jorge Juan, 6
28001 Madrid
Tel. +34 900 293 183
Email: internacional@aepd.es
Website: https://www.aepd.es/

17. Policy Changes

This policy was updated for the last time on 31st of August 2022