“PROEVAL” is deeply committed to compliance with Spanish and European regulations for the protection of personal data, and guarantees full compliance with the obligations provided, as well as the implementation of security measures provided in the General Data Protection Regulation (GDPR) (EU) 2016/679 Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights (hereinafter OLDP).
In accordance with these regulations, we inform you that the use of our website may require that certain personal data be provided through contact forms, or by sending emails, and that these will be subject to treatment by “PROEVAL”, data protection controller , whose data are:
- Corporate Name: PROEVAL Consultores S.L.
- TAX ID: B93125250
- Office for notification purposes: C / San Ernesto, 18, 3A – 28002 Madrid
- Telephone: 915630799
- eMail: firstname.lastname@example.org
Collection and Processing of Personal Data
A personal data is any information related to a person: name, email, address, telephone, ID … Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by their internet access provider.
“PROEVAL”, as Data Controller, has the duty to inform the Users of its website about the collection of personal data that can be carried out, either by sending email or by filling in the forms included on the website.
Only the precise data will be obtained to be able to perform the contracted service, or to be able to respond adequately to the request for information made by the User. The data collected are identifying features and correspond to a reasonable minimum to carry out the activity. No specially protected data is collected at any time. No different use of the data than the purpose for which is has been collected, will be made.
Contact / email forms
Purpose: To respond to your request for information made through our contact form.
Legitimation: The legal basis that legitimizes this treatment is the consent of the User, which may be revoked at any time.
Data transfer: Personal data will be processed through servers managed by 1 & 1, which will be considered as the Data Controller.
Only people over 14 years old can use this website. As required by the OLDP, in the case of children under 14, the consent of their parents or guardians will be mandatory so that we can process their personal data.
Users of “PROEVAL” website are informed that technical and organizational security measures at our disposal have been adopted to prevent the loss, misuse, alteration, unauthorized access and theft of data, and which guarantee the confidentiality, integrity and quality of the information contained therein, in accordance with the provisions of current regulations on data protection. The personal data that are collected in the forms are subject to treatment, only, by “PROEVAL” staff or designated Treatment Managers.
The User declares that all the information provided by him/her is true and correct and undertakes to keep them updated. The User will be responsible for the accuracy of their data and will be solely responsible for any conflicts or disputes that may result from their falsity. It is important that the User informs “PROEVAL” whenever there has been any modification in personal data, so that we can keep them updated.
“PROEVAL” will not transfer or communicate your data to any third party, except in the cases provided by law or when the provision of a service implies the need for a contractual relationship with a Treatment Manager. Thus, the User accepts that some of the personal data collected will be provided to these Processors (payment platforms, agency, intermediaries, etc.), when necessary for the effective performance of a contracted service or product purchased. The User also accepts that, in case of provision of services, these may be, totally or partially, subcontracted to other persons or companies, which will be considered as Treatment Managers, with whom the corresponding confidentiality contract has been agreed, or adhered to its privacy policies, established in their respective web pages. The User may refuse to transfer their data to the Processors, by written request, by any of the means previously referenced.
In addition, in those cases where necessary, the data of Clients may be transferred to certain organizations, in compliance with a legal obligation: Spanish Tax Agency, banking entities, Labor Inspection, etc.
User Rights Exercise
The OLDP and the GDPR grant the interested parties the possibility of exercising a series of rights related to the processing of their personal data. For this, the User shall write by email to email@example.com or by written communication to the address that appears in our Legal Notice, providing documentation that proves their identity (ID or passport). Said communication must reflect the following information: name and surname of the User, request, address and supporting information.
The exercise of rights must be performed by the User himself. However, it may be performed by a person authorized as legal representative of the User, providing documentation proving said representation.
The User may request the exercise of the following rights:
- Right to request access to personal data.
- Right to request rectification (if they are incorrect) or deletion.
- Right to request the limitation of their treatment, in which case they will only be kept by “PROEVAL” for the exercise or defense of claims.
- Right to object to the processing: “PROEVAL” will stop processing your data, unless for legitimate reasons or the exercise or defense of possible claims must continue to be processed.
- Right to data portability: in case you want your data to be processed by another company, “PROEVAL” will facilitate the portability of your data in exportable format.
In the event that consent has been granted for any specific purpose, the User has the right to withdraw consent at any time, without affecting the legality of the treatment based on the consent prior to its withdrawal.
If a User considers that there is a problem with the way in which “PROEVAL” is handling their data, they can direct their claims to the Head of Security or to the corresponding data protection authority, the Spanish Agency for Data Protection being the one indicated in the case of Spain.
Users´ personal data using the contact form or sending emails requesting information will be processed for the time strictly necessary to respond to the request for information, or until the consent granted is revoked.
Clients´ personal data will be processed until the end of the contractual relationship. The period of conservation of personal data will be the minimum necessary, and can be maintained until:
- 4 years: Law on Infractions and Sanctions in the Social Order (obligations regarding membership, registration, cancellation, contributions, payment of salaries …); Arts. 66 et seq. General Tax Law (accounting books …)
- 5 years: Art. 1964 Civil Code (personal actions without special term)
- 6 years: Art. 30 Commercial Code (accounting books, invoices …)
- 10 years: Art. 25 Law on the Prevention of Money Laundering and Financing of Terrorism.
- Without deadline: disaggregated and anonymized data.
In the case of candidate data processing, “PROEVAL” may keep their curriculum stored for a maximum of two years to include them into future calls, unless the candidate states otherwise.
“PROEVAL” has a profile in some of the main social networks on the Internet (LinkedIn), recognizing itself in all cases Responsible for data processing of its followers, subscribers, commentators and other User profiles (hereinafter, followers) published by “PROEVAL”.
The purpose of data processing by “PROEVAL”, when the law does not prohibit it, is to inform its followers about its activities and offers, by any means that the social network allows, as well as to provide personalized service to the client. The legal basis that legitimizes this treatment will be the consent of the interested party, which may be revoked at any time.
In no case “PROEVAL” will extract data from social networks, unless the User has provided his/her prompt and express consent to do so.
The applicant who sends electronic communications to “PROEVAL”, in order to access personnel selection processes, authorizes us to analyse: the documents submitted (for example, the CV), all the content that is directly accessible to through Internet search engines (for example, Google), the profiles maintained in professional social networks (for example, LinkedIn), the data obtained in the access tests, and the information revealed in job interviews; with the aim of assessing his/her candidacy and being able, where appropriate, to offer him/her a job. In case the candidate is not selected, “PROEVAL” may keep his/her C.V. for a maximum of two years, to include it in future calls, unless the candidate states otherwise. The legal basis that legitimizes this treatment will be the consent of the interested party, which may be revoked at any time.
The information provided by the client is considered confidential and will not be used for any purposes other than those described here. “PROEVAL” undertakes not to disclose information about the User’s claims, the reasons for the requested advice, or the duration of its relationship with it.
This privacy and data protection policy has been drafted by EXPERTOS OLDP®, a data protection company, as of November 5, 2019, and may vary depending on the changes in regulations and jurisprudence that may occur, being the responsibility the owner of the data reading the updated document, in order to know their rights and obligations in this regard at all times.