1. Identification.
NUNPECON OBRAS Y SERVICIOS SL; with registered office in Spain, Calle Tempul 14, Mairena del Alcor – 41510, Seville; telephone +34 665 82 94 26; and e-mail nunpecon@gmail.com, is the owner of the website located at the Internet address https://www.nunpecon/ and of its accounts on social networks (hereinafter, this Website).
1.2. The person accessing this Website (hereinafter, the User), assures that he/she is of the minimum legal age established by the General Data Protection Regulation (16 years) or by the national regulations applicable to grant consent in relation to the services of the information society.
1.3. By accessing this Website, the User expressly accepts all the clauses of its legal information, this privacy policy and its cookies policy, as well as all the specific conditions set out for the use of certain services. In the event of not accepting any of the aforementioned clauses, the User must refrain from accessing this Website.
2. Processing of personal data as a controller.
2.1. Below is further information on the different processing operations carried out by NUNPECON OBRAS Y SERVICIOS SL as the data controller.
Data provided through the “Contact” section
Who is responsible for the processing of your data?
NUNPECON OBRAS Y SERVICIOS SL (more information in point 1.1).
For what purpose do we process your personal data?
We will process the information you provide us with, or authorise access to, for the purpose of managing what is indicated in your communication.
How long will we keep your data?
The personal data you provide us with will be kept for as long as your communication is processed, for as long as the contractual relationship is maintained, or for as long as necessary to comply with legal obligations.
What is the legal basis for processing your data?
The legal basis for processing your data is your freely given consent.
To which recipients will your data be disclosed?
Your data will not be passed on to third parties, unless required by law or with your prior consent.
What are your rights when you provide us with your data?
You have the right to request access to your personal data, and their rectification or erasure, or the restriction of their processing, or to object to their processing, as well as the right to data portability, the right to withdraw consent at any time, or the right to lodge a complaint with a supervisory authority (more information in point 5).
What data do you have to provide?
You are obliged to provide the data marked with an asterisk (*). Failure to provide such data will prevent us from contacting NUNPECON OBRAS Y SERVICIOS SL.
Data provided through the “Work with us” section or through the e-mail address nunpecon@gmail.com.
Who is responsible for the processing of your data?
NUNPECON OBRAS Y SERVICIOS SL (more information in point 1.1).
For what purpose do we process your personal data?
We will process the information you provide us with, or authorise access to, for the purpose of managing candidates for our job offers.
How long will we keep your data?
The personal data you provide will be kept for the duration of the application process, for the duration of the contractual or pre-contractual relationship, or for the time necessary to comply with legal obligations.
What is the legal basis for processing your data?
The legal basis for processing your data is your freely given consent.
To which recipients will your data be disclosed?
Your data will not be passed on to third parties, unless required by law or with your prior consent.
What are your rights when you provide us with your data?
You have the right to request access to your personal data, and their rectification or erasure, or the restriction of their processing, or to object to their processing, as well as the right to data portability, the right to withdraw consent at any time, or the right to lodge a complaint with a supervisory authority (more information in point 5).
What data do you have to provide?
You are obliged to provide the data marked with an asterisk (*). Failure to provide such data will prevent you from being included in the list of contacts for application management.
Contact via social networks
Who is responsible for processing your data?
NUNPECON OBRAS Y SERVICIOS SL (more information in point 1.1).
For what purpose do we process your personal data?
We will process the information you provide us with, or authorise access to, for the purpose of managing contacts on social networks.
How long will we keep your data?
The personal data you provide us with will be kept for as long as your communication is managed, for as long as the business relationship is maintained or for the years necessary to comply with legal obligations.
What is the legal basis for processing your data?
The legal basis for processing your data is your freely given consent.
To which recipients will your data be passed on?
Your data will not be passed on to third parties, unless required by law or with your prior consent.
What are your rights when you provide us with your data?
You have the right to ask the data controller for access to the personal data concerning the User, and to have them rectified or erased, or to limit their processing, or to object to their processing, as well as the right to data portability, the right to withdraw consent at any time, or the right to lodge a complaint with a supervisory authority (more information in point 5).
What data do you have to provide?
You are not obliged to provide any data to contact NUNPECON OBRAS Y SERVICIOS SL through its social media accounts.
Data provided through the section “We collaborate”.
Who is responsible for processing your data?
NUNPECON OBRAS Y SERVICIOS SL (more information in point 1.1).
For what purpose do we process your personal data?
We will process the information you provide us with, or authorise access to, for the purpose of collaboration management.
How long will we keep your data?
The personal data you provide will be kept for the duration of the processing of your request, for the duration of the contractual or pre-contractual relationship, or for the time necessary to comply with legal obligations.
What is the legal basis for processing your data?
The legal basis for processing your data is your freely given consent.
To which recipients will your data be disclosed?
Your data will not be passed on to third parties, unless required by law or with your prior consent.
What are your rights when you provide us with your data?
You have the right to request access to your personal data, and their rectification or erasure, or the restriction of their processing, or to object to their processing, as well as the right to data portability, the right to withdraw consent at any time, or the right to lodge a complaint with a supervisory authority (more information in point 5).
3. Processing of personal data as processor.
3.1. The User who signs a contract for the provision of services with NUNPECON OBRAS Y SERVICIOS SL as data processor authorises it to process the personal data necessary to provide the requested service.
3.2. For the execution of the services derived from the fulfilment of the object of this order, the data controllers will make available to NUNPECON OBRAS Y SERVICIOS SL, the personal data necessary to provide the requested service.
3.3. This agreement will last as long as the contractual relationship is maintained. Once the contractual relationship has ended, NUNPECON OBRAS Y SERVICIOS SL must return the personal data to the person in charge or transfer it to another person designated by the person in charge, and delete any copies in its possession. However, it may keep the data blocked in order to attend to possible administrative or jurisdictional responsibilities.
3.4. The data processor and all its staff undertake to:
Use the personal data that are the object of processing, or those that it collects for their inclusion, only for the purpose that is the object of this assignment. Under no circumstances may it use the data for its own purposes.
Process the data in accordance with the instructions of the data controller.
Keep a written record of all categories of processing activities carried out on behalf of the controller, containing:
The name and contact details of the processor(s) and of each controller on whose behalf the processor is acting.
The categories of processing operations carried out on behalf of each controller.
A general description of the appropriate technical and organisational security measures in place.
Not to communicate the data to third parties, except with the express authorisation of the data controller, in the legally admissible cases. If the data processor wishes to subcontract, he/she must inform the data controller and request prior authorisation.
Maintain the duty of secrecy with regard to the personal data to which he/she has had access by virtue of this assignment, even after the end of the contract.
Ensure that the persons authorised to process personal data undertake, expressly and in writing, to respect confidentiality and to comply with the corresponding security measures, of which they must be duly informed.
Keep at the disposal of the data controller the documentation accrediting compliance with the obligation established in the previous section.
Guarantee the necessary training in personal data protection for the persons authorised to process personal data.
When the data subjects exercise their rights of access, rectification, erasure and objection, restriction of processing and data portability before the data controller, the data controller must communicate this by e-mail to the address of the data controller. The communication must be made immediately and in no case later than the working day following receipt of the request, together, where appropriate, with other information that may be relevant for resolving the request.
Notification of data security breaches: NUNPECON OBRAS Y SERVICIOS SL will notify the data controller, without undue delay and via its e-mail address, of any personal data security breaches of which it becomes aware, together with all relevant information for the documentation and communication of the incident. As a minimum, the following information shall be provided:
Description of the nature of the personal data security breach, including, where possible, the categories and approximate number of data subjects affected, and the categories and approximate number of personal data records affected.
Contact details of the contact person for further information.
Description of the possible consequences of the personal data breach.
Description of the measures taken or proposed to be taken to remedy the personal data breach, including, where appropriate, measures taken to mitigate the possible negative effects. If and to the extent that it is not possible to provide the information simultaneously, the information shall be provided in a phased manner without undue delay.
NUNPECON OBRAS Y SERVICIOS SL shall, at the request of the data controller, communicate such data security breaches to data subjects as soon as possible, when the breach is likely to pose a high risk to the rights and freedoms of natural persons. The communication shall be made in clear and simple language and shall include the elements indicated in each case by the data controller, as a minimum:
The nature of the data breach.
Details of the contact point of the data controller or data processor where further information can be obtained.
Describe the possible consequences of the personal data breach.
Describe the measures taken or proposed by the controller to remedy the personal data breach, including, where appropriate, measures taken to mitigate the possible negative effects.
Make available to the controller all information necessary to demonstrate compliance with its obligations, as well as for audits or inspections carried out by the controller or another auditor authorised by the controller.
Implement the necessary technical and organisational security measures to ensure the continued confidentiality, integrity, availability and resilience of the processing systems and services.
Return to the controller the personal data and, where appropriate, the media on which they are stored, once the performance has been completed.
The return must involve the total deletion of the data existing in the computer equipment used by NUNPECON OBRAS Y SERVICIOS SL. However, NUNPECON OBRAS Y SERVICIOS SL may keep a copy, with the data duly blocked, for as long as responsibilities may arise from the execution of the service.
3.5. It is the responsibility of the controller:
To provide the data processor with the necessary data to be able to provide the service.
To ensure, prior to and throughout the processing, that NUNPECON OBRAS Y SERVICIOS SL complies with the General Data Protection Regulation.
To supervise the processing.
4. Guarantee.
4.1. The User guarantees that the data provided is true, exact, complete and up to date, and is responsible for any direct or indirect damage or harm that may be caused as a consequence of non-compliance with this obligation.
4.2. In the event that the data provided belong to a third party, the User guarantees that he/she has informed said third party and obtained their authorisation to provide their personal data to NUNPECON OBRAS Y SERVICIOS SL.
5. Rights.
5.1. Right of access: The User will have the right to obtain confirmation from NUNPECON OBRAS Y SERVICIOS SL as to whether or not personal data concerning him/her are being processed and, if so, the right of access to the personal data.
5.2. Right of rectification: The User will have the right to obtain without undue delay from NUNPECON OBRAS Y SERVICIOS SL the rectification of inaccurate personal data concerning him/her. Taking into account the purposes of the processing, the User shall have the right to have incomplete personal data completed, including by means of an additional declaration.
5.3. Right to erasure: The User has the right to obtain without undue delay from NUNPECON OBRAS Y SERVICIOS SL the erasure of personal data concerning him/her, which shall be obliged to erase the personal data without undue delay.
5.4. Right to limitation of processing: The User will have the right to obtain from NUNPECON OBRAS Y SERVICIOS SL the limitation of data processing.
5.5. Right to data portability: The User will have the right to receive the personal data concerning him/her, which he/she has provided to NUNPECON OBRAS Y SERVICIOS SL, in a structured, commonly used and machine-readable format, and to transmit them to another data controller without being prevented from doing so by the controller to whom he/she had provided them.
5.6. Right to object: The User shall have the right to object at any time, on grounds relating to his or her particular situation, to personal data concerning him or her being processed. NUNPECON OBRAS Y SERVICIOS SL will cease to process the personal data, unless it can demonstrate compelling legitimate reasons for the processing that prevail over the interests, rights and freedoms of the User, or for the formulation, exercise or defence of claims.
5.7. Automated individual decisions, including profiling: The User shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on him or her or similarly significantly affects him or her.
5.8. Right to withdraw consent: The User shall have the right to withdraw consent at any time. Withdrawal of consent will not affect the lawfulness of the processing based on the consent prior to its withdrawal. It shall be as easy to withdraw consent as it is to give it.
5.9. Users may exercise their rights before NUNPECON OBRAS Y SERVICIOS SL by writing to NUNPECON OBRAS Y SERVICIOS SL, Calle Tempul 14, Mairena del Alcor – 41510, Sevilla;, Spain, or by e-mail to nunpecon@gmail.com.
5.10. More information about these rights can be found here (LINK https://commission.europa.eu/law/law-topic/data-protection/reform/rights-citizens_es).