Privacy Policy

1. Data Controller

Identity: IBERCISA DECK MACHINERY, S.A.
Tax ID (NIF): A-36606507
Address: Estrada Muíños, 25 – 36213 Vigo, Pontevedra, Spain
Telephone: +34 986 213 900
Email: ibercisa@ibercisa.es
(hereinafter, “IBERCISA”).

2. For what purpose do we process your personal data?

IBERCISA processes the personal data provided by the user through the website for the following purposes:

  • To attend to queries, applications, or requests for information made through web forms or by sending emails.
  • To manage staff selection processes, through participation in published job offers or by submission of curriculum vitae or contact details.
  • To maintain professional or commercial communications, when the user has granted their consent or a prior relationship exists.
  • To comply with applicable legal obligations.

3. What data do we process?

Depending on the user’s interaction with the website, the following data, among others, may be processed:

  • Identification data: name, surname.
  • Contact details: email address, telephone number.
  • Professional data: company, position.
  • Information included in the curriculum vitae: (in recruitment processes).

IBERCISA does not collect specially protected data (sensitive data) through the website.

4. What is the legal basis for the processing?

The legal bases that legitimize the processing of data are:

  • The consent of the data subject (Art. 6.1.a GDPR) in relation to the purposes of point 2.
  • The legitimate interest of IBERCISA to attend to requests and maintain professional relationships (Art. 6.1.f GDPR).
  • Compliance with legal obligations applicable to IBERCISA (Art. 6.1.c GDPR).

5. How long will we keep the data?

Personal data will be kept:

  • As long as they are necessary for the purpose for which they were collected. In the case of recruitment processes, for a period of 4 years from the last update of the CV, if the candidacy was not selected for participation in the recruitment process or if the application was rejected.
  • As long as a professional or commercial relationship exists.
  • During the legally required periods for compliance with legal obligations or for the management of potential liabilities.

6. To which recipients will the data be communicated?

In general, data will not be communicated to third parties, except for:

  • Legal obligation.
  • Providers that render services to IBERCISA (web hosting, IT maintenance, consultancy), acting as data processors under the corresponding contracts in accordance with the GDPR.

No international transfers of data are carried out.

7. Rights of the user

The user may exercise the following rights:

  • Access
  • Rectification
  • Erasure (Right to be forgotten)
  • Objection
  • Restriction of processing
  • Data portability

By written request addressed to: ibercisa@ibercisa.es, indicating the right they wish to exercise and proving their identity.

Likewise, the user has the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Data security

IBERCISA applies the necessary technical and organizational measures to guarantee the security, integrity, and confidentiality of personal data.

9. Updates

IBERCISA reserves the right to modify this Privacy Policy to adapt it to new legislation or case law.