At ISINAC Acoustic World S.L.U. we understand that it is essential to maintain a transparent relationship with you, therefore, we present our Privacy Policy below, so that you are duly informed at all times about how we collect and securely handle any data that you provide us with.
Your data will be processed in accordance with current legislation and, in particular, in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. Also with regard to Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights.
A careful reading of our Privacy Policy will provide you with the information you need to understand how we will use the data you provide to us.
Who is responsible for the processing of your data?
If you, or an authorised person, have provided us with your data, we inform you that ISINAC Acoustic World S.L.U., with Tax Identification Number: ESB27853381 is responsible for the processing of this data. This data will be processed in accordance with the provisions of current legislation on personal data protection.
It is possible that there are other persons responsible for the processing that we carry out, in which case we will always inform you who is responsible for the processing of the data, as well as their identification details.
The Website may include hyperlinks or links that allow access to third party websites other than http://www.isinac.comThe owners of these websites will have their own data protection policies, being themselves, in each case, responsible for their own processing and their own privacy practices.
ISINAC Acoustic World S.L.U. is committed to complying with its obligation to maintain the secrecy of personal data and its duty to protect it. To this end, we adopt the necessary measures to prevent their alteration, loss, processing or unauthorised access in accordance with the provisions of the Regulation.
Where do we report?
From ISINAC Acoustic World S.L.U. we inform through the website http://www.isinac.com in the section on privacy policy. More information at "Legal Notice".
What personal data do we process?
The personal data we process are:
- Those that you choose to provide us with voluntarily
- Data derived from your communications with us.
- The information corresponding to your own navigation in the case of Online Services, (IP address or information derived from cookies or similar devices (you can see our Cookie Policy on the web).
- Information that is available in publicly accessible sources, to which we can legitimately have access.
- The data arising from the contractual or pre-contractual relationship you have with us, including your image, always informing you in this case of the possibility of capturing your image.
- Those provided to us by third parties about you, where there is a legitimate basis for doing so or where we have obtained your consent to do so.
- The data of third parties that you provide to us, subject to the consent of the third party in question.
You can find more information in the activity log section of this privacy policy.
How do we process the data?
At ISINAC Acoustic World S.L.U. we always process your personal data in strict compliance with current legislation. Furthermore, we inform you that we have the appropriate technical and organisational measures in place to guarantee an optimum level of security, thereby ensuring that only authorised persons have access, that we will keep them intact, preventing any intentional or accidental loss and that we have reinforced our data processing systems and services.
However, because ISINAC Acoustic World S.L.U. cannot guarantee the impregnability of the Internet or the total absence of hackers or others who fraudulently access personal data, it undertakes to notify you without undue delay when a breach of security of personal data occurs that is likely to entail a high risk to the rights and freedoms of natural persons. In accordance with Article 4 of the GDPR, a breach of security of personal data means any breach of security leading to the accidental or unlawful destruction, loss or alteration of, or unauthorised disclosure of or access to, personal data transmitted, stored or otherwise processed.
The operations, management and technical procedures that we carry out in an automated or non-automated way and that make possible the collection, storage, modification, transfer and other actions on personal data, are considered to be the processing of personal data.
What is the legitimacy of the processing?
The basis for the legitimisation of the processing of Personal Data shall be that resulting from the contractual or pre-contractual relationship, the employment relationship or any other relationship required for the processing of data, such as express consent.
How do we manage electronic communications?
In accordance with the provisions of Law 34/2002 of 11 July, on Information Society Services and Electronic Commerce, and Directive 2002/58/EC, we inform you that you may receive communications and information of a commercial nature through this electronic communication system (e-mails, automated response messages from forms and other communication systems) when you have given us your consent or when these are commercial communications referring to products or services similar to those previously provided by the party responsible for the processing of your data.
In the event that you do not wish to receive communications and information of this nature, you can notify us by this same means indicating in the subject "UNSUBSCRIBE FROM COMMERCIAL COMMUNICATIONS" so that your personal data can be removed from our database. Your request will be acted upon within 1 month of being sent. In the event that we do not receive an express reply from you, we will understand that you accept and authorise our company to continue sending the aforementioned communications.
In the event of receiving such communications by these means, we inform you that the messages are addressed exclusively to the addressee and may contain privileged or confidential information. If you are not the intended recipient, we notify you that unauthorised use, disclosure and/or copying is prohibited under current legislation.
How long do we keep your data?
The personal data relating to natural persons that ISINAC Acoustic World S.L.U. collects by any means will be kept for as long as the interested party does not request its deletion. Likewise, they will be kept for as long as the relationship that gave rise to the processing of the data is maintained, respecting in any case the legal retention periods. At the end of this period, the personal data will be deleted from all ISINAC Acoustic World S.L.U. systems.
Will your data be communicated to third parties?
There will be no assignment, transmission or transfer of personal data, except those already reported, which are not the result of a legal obligation. If your data is requested from us by the Public Administration or Autonomous Institutions within the scope of the functions expressly attributed to them by law, your data will be transmitted.
If there is an assignment, transmission or transfer of personal data outside of the aforementioned cases, you will be previously informed so that, if necessary, you can give us your consent.
However, in order to be able to organise ourselves correctly, have good operations and procedures that guarantee good management, ISINAC Acoustic World S.L.U. may need to hire the services of consultants, professionals or other service companies to process data under our instructions.
This processing on behalf of third parties is regulated by a contract in writing or in some other legally admissible form that allows proof of its conclusion and content, expressly specifying that the processor will process the data in accordance with our instructions and will not apply or use them for a purpose other than that stated in the contract, nor will it communicate them, not even for storage, to other persons.
What are your rights?
Data protection regulations give you the following rights:
- Right of accessThis is the User's right to obtain confirmation as to whether or not ISINAC Acoustic World S.L.U. is processing their personal data and, if so, to obtain information about their specific personal data and about the processing that ISINAC Acoustic World S.L.U. has carried out or is carrying out, as well as, among other things, the information available about the origin of said data and the recipients of the communications made or planned for said data.
- Right of rectificationThe right of the User to have his or her personal data amended if it proves to be inaccurate or, having regard to the purposes of the processing, incomplete.
- Right of suppression ("the right to be forgotten"): This is the right of the User, unless otherwise provided by law, to obtain the erasure of his or her personal data when the personal data are no longer necessary for the purposes for which they were collected or processed; the User has withdrawn his or her consent to the processing and the processing has no other lawful basis; the User objects to the processing and there is no other legitimate reason to continue the processing; the personal data have been processed unlawfully; the personal data must be erased in compliance with a legal obligation; or the personal data have been obtained as a result of a direct offer of information society services to a child under the age of 14. In addition to erasure, the Controller shall, taking into account available technology and the cost of its implementation, take reasonable steps to inform controllers who are processing the personal data of the data subject's request for erasure of any link to those personal data.
- Right to restriction of processingThis is the User's right to restrict the processing of his or her personal data. The User has the right to obtain the restriction of processing when he/she contests the accuracy of his/her personal data; the processing is unlawful; the Controller no longer needs the personal data, but the User needs it to make claims; and when the User has objected to the processing.
- Right to data portabilityIf the processing is carried out by automated means, the User shall have the right to receive from the Controller his or her personal data in a structured, commonly used and machine-readable format and to transmit them to another controller. Where technically feasible, the Controller shall transmit the data directly to such other controller.
- Right to objectThis is the User's right not to have his/her personal data processed or to have the processing of such data by ISINAC Acoustic World S.L.U. cease.
- Right not to be subject to a decision based solely on automated processing, including profiling: This is the User's right not to be subject to an individualised decision based solely on automated processing of his or her personal data, including profiling, unless otherwise provided for by law.
If you would like more information regarding the processing of your data, rectify any data that is inaccurate, oppose and/or limit any processing that you consider unnecessary, or request cancellation of the processing when the data is no longer necessary, please write to ISINAC Acoustic World S.L.U. at Av. de Ramón Nieto, 125-bajo, 36205 Vigo or send an e-mail to info@isinac.com.
- This communication shall contain the following information: the name and surname of the user, the request, the address and supporting data.
- The exercise of rights must be carried out by the user himself. However, they may be exercised by a person authorised as the authorised person's legal representative. In this case, the documentation accrediting this representation of the interested party must be provided.
Likewise, we would like to inform you that you can withdraw the consent given without affecting the lawfulness of the processing already carried out, by sending your request to the same address indicated in the previous paragraph. In this case, you must accompany your request with a copy of your ID card or document proving your identity.
If you believe that there is a problem or a breach of the law in the way your personal data is being processed, you have the right to effective judicial protection and the right to lodge a complaint with a supervisory authority, in particular in the State where you have your habitual residence, place of work or place of the alleged breach. In the case of Spain, the supervisory authority is the Agencia Española de Protección de Datos (Spanish Data Protection Agency) (https://www.aepd.es/) - C/ Jorge Juan, 6 28001-Madrid - FAX: 914483680- TELF: 901 100 099- E-mail: ciudadano@agpd.es
What is the purpose and basis of legitimacy for the data processing and how long will the data be kept?
The purposes of the data processing carried out by any or all of the Controllers listed above are set out below.
| TREATMENT ACTIVITY | PURPOSE OF PROCESSING | BASIS OF LEGITIMACY | CONSERVATION PERIOD |
|---|---|---|---|
| Labour management | Personnel management for the formalisation of an employment contract, file control, payroll management. | Contractual relationship | 5 years from the end of the contract |
| Tax and accounting management | Processing necessary for the fulfilment of tax and accounting obligations | Contractual relationshipLegal obligation for the controllerPrevailing legitimate interests of the controller or of third parties | 5 years from the end of the contractThe time required to fulfil legal obligations |
| Contact management | Processing of data in order to be able to communicate with data subjects | Contractual relationshipPrevailing legitimate interests of the controller or third partiesExpress consent of the data subject | 5 years from the end of the contractUntil cancellation and/or objection by the contract holderUntil relevant loss of use |
| Prevention of occupational hazards | Compliance with current legislation on occupational risk prevention and health surveillance. | Contractual relationshipLegal obligation for the person responsible | Until the end of the contractual relationshipThe period of time legally established by specific legislation |
| Job applicant management | Recruitment and filling of jobs through CV management, personal interviews and assessment tests. | Vital interests of the data subject or of other personsExpress consent of the data subject | After the deadline for which an appointment is requested has passed |
| Information communication and notifications | Dissemination of activities and notifications of relevant information related to the entity's activity. | Overriding legitimate interests of the controller or of third partiesExpress consent of the data subject | Until cancellation and/or objection by the holder |
| Customer management | Processing of the data necessary for the maintenance of the commercial/contractual relationship with customers, invoicing, after-sales service, sending promotions and advertising and customer loyalty. | Contractual relationshipCommercial relationship | 5 years from the end of the contractThe period legally established by the specific regulations. |
| Labour control | Monitoring of employee attendance at the workplace (holidays, absences, time recording). | Contractual relationshipLegal obligation for the controllerPrevailing legitimate interests of the controller or of third parties | Until the end of the contractual relationship |
| Supplier management | Analysis, appraisal, contracting, order management and supplier payment management | Contractual relationship | 5 years from the end of the contractThe period legally established by the specific regulations. |
Acceptance and changes to this privacy policy
It is necessary that the User has read and agrees with the conditions on the protection of personal data contained in this Privacy Policy, as well as that he/she accepts the processing of his/her personal data so that the Data Controller can proceed in the manner, during the periods and for the purposes indicated. The use of the Website implies acceptance of the Privacy Policy of the same.
ISINAC Acoustic World S.L.U. reserves the right to modify its Privacy Policy, according to its own criteria, or motivated by a legislative, jurisprudential or doctrinal change of the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User. The User is recommended to consult this page periodically to keep abreast of the latest changes or updates.
This Privacy Policy was updated to adapt to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and to Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights.
This Privacy Policy document has been revised as of : 20/04/23