Privacy policy

1.- Data controller.

1.1.- Who is responsible for the processing of your data?

The party responsible for the processing of your data is the owner of this website, Amixalan S.L., with registered office at Calle Camino de Ardanaz, 2, 31620 – Gorráiz (Navarra) and tax identification number ESB71461495.

However, should you have any doubts or questions regarding our privacy policy, you can contact Amixalan S.L. either by visiting our facilities located at Calle Camino de Ardanaz, 2, 31620 – Gorráiz (Navarra) or by telephone at 848 451 888 or by e-mail at dpo@amixalan.com.

2.- Purpose.

2.1.- What will the Data Controller use my data for?

The data you provide may be used by the Data Controller for one or more of the purposes indicated below depending on the reason for collection. The purpose will be determined by factors such as your relationship with us (e.g. job applicant) or by the means used to submit the data (e.g. contact form). The processing operations referred to in this privacy policy are set out below, without prejudice to any other processing operations for which we may inform you or ask for your consent:

Requests for general information.

When you contact us, for example, through the contact form on the website, by telephone, e-mail, messaging services, social networks, or even in person, to ask us for information or consult us on any subject, make a suggestion, complaint or claim, we will process your data in order to deal with the request for information and/or consultation that you have made, with the management and scope that it requires. This operation may include the use of the data received for the preparation of proposals for services and/or collaboration, in the event that this is indeed the request.

Job offers and selection processes. HR

Amixalan S.L. maintains an employment exchange with all those candidates who wish to cover possible future incorporations and/or collaborations with any of the companies of the Amixalan Group. If you send us your CV as a self-candidature, through the web form or by e-mail, we will process your data for inclusion in the employment exchange managed by Amixalan S.L., which implies the evaluation of your application according to the characteristics of the profile or position that may be needed and contact you for the management and processing of the selection process. Eventually and in the event that a selection process is initiated as a result of the above, the data provided may be processed for the preparation of the employment contract.

Proposal of business opportunities. Representatives

– In the event that you represent a legal entity and contact us to propose a business opportunity (e.g. company acquisition, minority shareholding in a company or asset investment opportunity) we will process your data for the purpose of maintaining the relationship or fulfilling the request of the legal entity.

Sending of commercial communications.

In the event that you authorise us to send you commercial communications (Newsletter, promotional campaigns…), for example, by means of the contact form or requesting it by e-mail, we will process your data for the management and sending of commercial communications related to our activities, services and products, including by electronic means. You may withdraw your consent at any time and terminate the above processing.

Cookies

– If you have agreed to receive cookies when you visit this website, the website’s cookie policy will be applied to you. We recommend that you visit the aforementioned cookies policy where you can find out, among other things, about the cookies used, their purpose and the configuration options that you can adopt on your devices for viewing the page, for example to delete them.

2.2.- How long will you keep my data?

The data will be kept for the time necessary to fulfil the purpose for which they were collected and to determine any possible liabilities that may arise from this purpose and the processing of the data. With regard to the period of time determined by the purpose, the following periods are listed, depending on the processing:

-Processing relating to the provision of services and maintenance of the business relationship: As long as you have the status of client and in any case for as long as any legal relationship between the Parties is maintained.

-Processing relating to requests for information: We will process your data for the time necessary to deal with and manage your request for information.

– Processing relating to HR management, job vacancies and selection processes: We will keep your curriculum vitae for a period of two years, at which point we will delete it.

-Processing relating to commercial communications. As long as you are a customer and have not objected to the processing or, in the event that you have expressly requested to receive the communications, as long as you wish to continue receiving them and have not objected.

-Cookies: In accordance with the type of cookies, expressed in the corresponding policy.

3.- Legitimation of the processing.

3.1.- Why can the Data Controller process my data? What legitimises it?

Requests for information and/or contact from the web forms: In general, the Data Controller is entitled to process data for the purpose of managing the sending of the forms provided for this purpose on this website.

Administrative management and fulfilment of legal obligations: For accounting and administrative purposes, we need to process your data in order to comply with the obligations imposed by, among others, commercial and tax regulations, etc., and we are therefore legally entitled to do so.

HR: We will include your curriculum in our employment exchange and we will process your application based on the consent given at the time of delivery of such information. You may withdraw the consent given at any time, but withdrawal of consent will mean that we will no longer include you in the selection processes and we will remove your application from our employment exchange.

Representatives: In this case, taking into account the balance between our interests and your rights, we inform you that we have a legitimate interest in processing your personal data in order to provide the services and/or maintain the relationship between us and the legal entity you represent.

COOKIES: We are legitimized for this treatment by the consent you have given at the beginning of navigation on our website.

3.2.- Consequences of withdrawal of consent or opposition to the processing of your data. Compulsory and optional fields.

In the event that we ask you at any time for your authorisation for the processing of a purpose that requires consent, your failure to grant it (or its possible withdrawal at a later date) will not have any consequences for you in any case.

The data fields indicated in the contact forms as compulsory are the minimum required to comply with the purpose of the processing and we therefore inform you that the withdrawal of consent will make it impossible for the data controller to deal with your requests or queries. However, in the case of data not identified as obligatory, the withdrawal of consent will not condition the execution of the main purpose.

4.- Addressees.

4.1.- Will my data be transferred to third parties?

Apart from the collection and processing of data by the owner of the website, we inform you that your data will not be transferred to third parties. The aforementioned personal data will only be communicated to those entities and/or public bodies to which it is necessary to make such communication in compliance with the legal obligations that must be observed.

However, in order to fulfil the purposes indicated in this Privacy Policy, it may be necessary for us to give access to your personal data to entities of the corporate group and to third parties that support us in the services or products that we offer you. If the service providers are located in territories outside the European Economic Area that do not provide a level of data protection equivalent to that of the European Union, we inform you that we transfer your data with appropriate safeguards and always safeguard the security of your data

4.2.- Service providers related to the website.

Hosting: the website of the Responsible is hosted by the provider profesionalhosting.com.

5.- Rights.

5.1.- What rights do I have regarding data protection? General information.

If you wish, you can exercise your rights of access, rectification, erasure (‘right to be forgotten’), limitation of processing, portability and opposition, as well as your right not to be subject to automated individual decisions, including profiling.

You can also withdraw your consent at any time. To do so, please send a request to the following e-mail address: info.axl@amixalan.com. We will respond to all legitimate requests. If we consider it necessary to identify you, we may ask you for a copy of a document proving your identity.

You may also file a complaint with the Spanish Data Protection Agency, or with any other competent supervisory authority, especially when you have not obtained satisfaction in the exercise of your rights.

5.2.- What do these rights consist of?

Right of access: This right allows the data subject to obtain from the Controller confirmation as to whether or not personal data relating to him/her are being processed and, if so, the right of access to the personal data as well as to the following additional information: (a) the purposes of the processing; (b) the categories of personal data concerned; (c) the recipients or categories of recipients; (d) the intended period of retention or, the criteria used to determine this period; (e) the existence of the right to request from the controller the rectification or erasure of personal data or the restriction of the processing of personal data relating to the data subject, or to object to such processing; (f) the right to lodge a complaint with a supervisory authority; (g) available information on the origin of the data; (h) the existence of automated decisions.

Right of rectification: This right entitles the data subject to urge the Data Controller to rectify or complete inaccurate personal data without delay. It is important that the data contained in the databases are up to date and in this sense we are at your disposal to rectify any error or inaccuracy that may exist in them.

Right to erasure: At any time you have the right to ask us to delete your personal data, a request that will be dealt with without delay unless any of the circumstances provided for in the General Data Protection Regulation apply, including the fact that we must keep your data in order to comply with a legal obligation or to be able to defend ourselves against a claim.

Right of portability: In the case of automated data processing based on consent, you may ask us to transfer your personal data in a structured, commonly used and machine-readable format to another data controller.

Right of objection: Through this right, the data subject objects to the processing of his or her data by the data controller. This right is not absolute, which means that the data controller may continue to process the data provided that it can prove legitimate reasons that prevail over the interests, rights of the data subject or for the formulation, exercise and defence of claims.

Right to limit processing: This right confers on you, under certain circumstances indicated below, the right to request the controller to limit the processing of your personal data. In the event that this right is exercised, the data controller may only process the data with the consent of the data subject. The circumstances under which this right may be exercised are as follows:

1. The data subject contests the accuracy of the personal data, within a period of time that allows the controller to verify the accuracy of the personal data; the processing carried out by the controller is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of their use;

2. The controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the purposes of the formulation, exercise or defence of claims;

3. The data subject has objected to the processing, while it is being verified whether the legitimate grounds of the controller override those of the data subject.

5.3.- How and where can I exercise them?

We will be happy to deal with any queries or complaints you may have regarding data protection. Likewise, you may address your complaint or exercise your rights through any of the contact channels indicated in the heading of this data protection policy.

You may also contact the supervisory authority you consider appropriate to lodge your complaint (for example, in the country where you have your habitual residence, place of work or where you consider that the alleged infringement has occurred). For the appropriate purposes, we inform you that in Spain the Supervisory Authority is the Spanish Data Protection Agency, and you may exercise your rights through the forms that this entity has set up for this purpose and which are available at its electronic headquarters.

5.4.- How long will it take to process my request to exercise my rights?

The reference period is one month from receipt of your request. Notwithstanding the above, this period may be extended by a further two months if necessary, taking into account the complexity and number of requests. The Data Controller shall inform the interested party of any such extension within one month of receipt of the request, indicating the reasons for the delay.

5.5.- Will the exercise of these rights entail a cost for me?

Exercising your rights will not entail a cost, except in cases in which manifestly unfounded or excessive requests are made, especially if they are repetitive, the Data Controller may charge a fee to compensate for the administrative costs of complying with the request or refusing to act (the fee may not imply additional income for the data controller, but must effectively correspond to the real cost of processing the request).