Privacy Policy

Data processor

This Privacy Policy sets out the rules based on which SERESCO, S.A., with registered office at Calle Matemático Pedrayes, 23, Oviedo, Spain, Postal Code 33005 and Tax ID Code no. A-33011826, as “Data Processor,” manages its users’ and clients’ personal data that are collected through the website www.seresco.es, without prejudice to other information on the company’s policy in compliance with the General Data Protection Regulation, which is made available to you in various media and which you can consult at Seresco’s Data Protection Office at the email: dpo@seresco.es.

Likewise, we remind you that when you use the Web, this Privacy Policy, Legal Notice and Cookies Policy will apply to you, and we recommend that you review these texts to ensure that you are familiar with the terms, uses and restrictions so that you can verify that you agree with them. If you have any questions, we will address them through the aforementioned communication channels.

Moreover, we inform you that, as long as the web page remains active, if any change occurs in the regulations in force or the company’s policies, these terms and conditions can be modified. Hence you must read them regularly to verify that you are sufficiently familiar with them.

The purpose of the web page is to provide information on the activities, products and services that SERESCO offers, both for users in general and for its clients and employees. Although using the website www.seresco.es only activates cookies if you so desire, personal data can be collected on the contact form or the other forms that may be made available on occasion for some activities in the Portal. If you contact us through the different e-mail addresses provided by SERESCO, your personal data will be processed to resolve the doubts or address the questions that you raise. The personal information that you send us will be processed in a confidential manner, using adequate security measures.

The personal data that might be requested from you on this web page will not be used for purposes other than those related with the forms. If SERESCO requires your data for a different purpose, your consent will be requested before processing your personal data, unless they must be processed due to a legal obligation.

SERESCO is committed to implement new requirements on the subject of personal data protection; the most noteworthy of these are transparency and information for users. Hence to find out how we process your personal data, what your rights are and how you can exercise these rights, we recommend that you keep reading this PRIVACY POLICY, without prejudice to the more detailed information provided on each specific instance of processing personal data.

Moreover, in compliance with the obligations derived from data protection regulations, we inform you that you can contact the DATA PROTECTION OFFICE, which will address your questions, requests and complaints regarding personal data, by sending an email to: dpo@seresco.es.

Legitimation

The personal data collected on the web page will be, by preference, for identification (your first name, family names and/or, when relevant, national identification document-DNI/NIF) and for contact (email / individual mailing addresses / mobile telephone). On occasion we can also process other data, such as the signature, and include unique numerical identifiers, such as the IP address of your computer, the identifier of your mobile device or the information that we obtain using cookies.

The data collected will be processed subject to your consent, which you may revoke at any time. Your informed consent will be requested expressly on each of the forms or sections of the web, and simple, accessible systems with no charges will be put in place for opposing the processing of your data when you see fit.

On occasion, SERESCO may process your personal data based on a legitimate interest, in specific, in two special cases:

• To respond to your requests for information, your complaints or your suggestions.

• To send information related with products or services that you have already contracted previously with SERESCO.

Collection of personal data and purpose of processing

In addition to this PRIVACY POLICY, when you take part or collaborate by filling your data in on the forms provided for the different activities, you will receive the appropriate information prior to consent. On occasion we will require some data of a mandatory nature, for example, in order to be able to verify your identity or whether you are of legal age. In these special cases, we will indicate this to you on each one of the forms.

If you send your personal data, this implies that they are correct, precise and that you must keep them updated.

The User will be liable for any loss or damage caused to the web page, to SERESCO, or to third parties by communicating personal data in a tortious or incorrect, imprecise or incomplete manner on the registration forms.

In its relationship with the clients and users, SERESCO may process the data obtained from this Portal in the PROCESSING ACTIVITIES RECORDS about which more information is provided below, without prejudice to the ability to enter them in the company’s other records when processing the queries or requests submitted:

CLIENT / USER MANAGEMENT

Purpose of processing

Legitimation for processing

Categories of personal data

Rights of the data subjects

Access to personal data on behalf of third parties

Management of clients’ contact data

Contract/Legitimate interest

Identification data: First name and family names; national ID document; image; voice; email

Professional data

Access, rectification, cancellation, opposition, limitation and revocation of consent
Providers of IT services with access to data

MARKETING

Purpose of processing

Legitimation for processing

Categories of personal data

Rights of the data subjects

Access to personal data on behalf of third parties

SERESCO’s advertising and marketing activities

Consent/Legitimate interest

Identification data: First name and family names; national ID document; telephone

Access, rectification, cancellation, opposition, limitation and revocation of consent

Providers of IT services with access to data. Companies commissioned to perform advertising and marketing tasks

EXERCISE OF RIGHTS/ NOTIFICATION OF SECURITY BREACHES

Purpose of processing

Legitimation for processing

Categories of personal data

Rights of the data subjects

Access to personal data on behalf of third parties
Exercise of rights included in the European General Data Protection Regulation (GDPR), as well as possible notification to data subject of security breaches.

Legal obligation, pursuant to the General Data Protection Regulation.

Identification data: First name and family names; national ID document; email.

Access, rectification and cancellation.

IT service providers with access to data (designers and web platform operators, storage services, maintenance and support in our databases, as well as in our software and web applications).

Categories of persons affected by the processing of their personal data

Below we provide you with more detailed information on each of the categories of persons affected by processing of their personal data on the entity’s web forms. The purpose of the processing of your personal data is to respond to requests or queries made on the forms on our web page.

SERESCO provides all users of its web page with a contact form to address the questions that are submitted about the services that the company provides.

The personal data are managed directly by SERESCO in order to respond to the requests or questions. It is possible that in a contact form SERESCO may request your consent to send commercial information about other services, which is granted by marking a specific, independent section. We remind you that you will be able to revoke this express consent at any time.

We will preserve your data until the question raised has been resolved, unless there is a legal observation that extends this period.

Your personal data are processed with your consent, which is the basis for legitimation. In those cases where we process your data for the purpose of addressing complaints or suggestions, the legality is based on the legitimate interest in providing an adequate response. On the contact forms, it is mandatory to fill out the information requested. If you do not provide all personal data (for identification and contact), this means that we cannot communicate with you to give you a response to your request.

The use of the contact form does not entail transfer of data to third parties outside the company.

SERESCO has in place various communication channels so that you can send your CV; in all of these, you will be informed about the company’s data protection policy. If you forward your personal data in the forms available on the company’s web page, you must read the following information on personal data protection.

The personal data are managed directly by SERESCO for assessing your professional profile in our future job offers or for internships.

It is possible that one of the companies that works with SERESCO request certain professional profiles from us. Whenever you have provided your consent, we will forward your data.

In the same manner, as long as you have given your consent, we will be able to send you information on SERESCO’s training activities that could suit your professional profile.

The personal data of your self-proposal will be stored for a 12-month period calculated from their receipt, for the purpose of keeping them up-to-date, without prejudice of your exercising your right to opposition before this time or revoking your consent. If you are hired, the data will be stored during the term of the contract, excepting the storage periods set out in the regulations of the sector (regarding employment, social security or taxes).

Your personal data are processed with your consent, which is the basis that legitimizes this. On the contact forms, it is mandatory to fill out the information requested. If you do not provide all personal data, this means that we cannot communicate with you.

SERESCO has in place various communication channels so that you can consult or enroll in our training offerings. In all of these you will be informed about the company’s data protection policy. If you forward your personal data in the forms available on the company’s web page, you must read the following information on personal data protection.

The data processor of your personal data is SERESCO, S.A., with registered office at Calle Matemático Pedrayes, 23, Oviedo, Spain, Postal Code 33005 and Tax ID no. A-33011826.

The personal data are managed directly by SERESCO for addressing your query or carrying out pre-registration in our training courses.

It is possible that one of the companies that works with SERESCO request certain professional profiles from us. Whenever you have provided your consent, we will forward your data.

In the same manner, as long as you have given your consent, we will be able to send you information on SERESCO’s other training activities that could suit your professional profile.

The personal data from your request will be stored as long as the training activity lasts, including internships, without prejudice to the other legally established periods that exist, such as those for management of the training activity subsidy or for storage of the degrees issued.

Your personal data are processed with your consent. On the contact forms, it is mandatory to fill out the information requested. If you do not provide all personal data, this means that we cannot enroll you correctly in the activity requested.

SERESCO, S.A., as personal data processor in accordance with the contract signed between the parties, maintains a Personal Data Protection Office for addressing the questions that could arise or requesting any type of information related with personal data protection.

You may contact the Personal Data Protection Office by the following channels:

  • Post: C/Matemático Pedrayes23 de Oviedo, Asturias, Spain, Postal Code 33005
  • Email: dpo@seresco.es

SERESCO, as data processor, will process its clients’ contact data for the correct performance of the contract between the parties.

On occasion, SERESCO will send advertising information on services related with the services already contracted; the basis for legality of processing your personal data is the legitimate interest between the parties in finding out about the improvement in services provided. 

The personal contact data are managed directly by SERESCO, and the storage period is the period of continuance of the contractual relationship and the legal periods, derived from carrying out this relationship, for the lodging of claims - pursuant to the Civil Code and other related regulations -, storage of accounting, commercial or tax documents -invoices- or employment documents - provision of services associated with our clients’ human resources.

SERESCO S.A, is the data processor for the personal data of potential clients, and you can send your questions or requests regarding protection of personal data to the email address of the Data Protection Office, dpo@seresco.es.

The personal data that we have collected to offer you our services are for contact (name, address, telephone, position that you hold in the company) and only serve the purpose of maintaining a precontractual relationship.

If you wish to receive new offerings or our newsletter, you must expressly grant your consent, on the forms or email that will be made available.

The origin of the data may be the data subject himself or sources with public access. When your data have their origin in other sources, we will indicate this expressly, and we will proceed to notify you in the first communication that we maintain.

The personal data processed can be stored for as long as our precontractual or contractual relationship lasts, while respecting, when relevant, the legal periods derived from compliance with different legal obligations, such as tax or commercial obligations.

In SERSECO’s relationships with new or potential clients, as a rule, data is not transferred to third parties. In the event that it becomes necessary to transfer your data to third parties in order to serve you, we will notify you of this.

Recipients

SERESCO does not send its data to third parties, except to comply with a legal obligation or at the request of a public authority or of the courts or tribunals.

Third-party access to personal data

In general, the Personal Data collected on the web page are not transferred outside of the countries of the European Union. Only the personal data that may be stored in the social networks for which SERESCO is responsible are transferred. In specific terms, the following can be used:

  • Facebook, which subscribes to the Privacy Shield agreement, which provides a degree of data protection similar to that of the European Union. In spite of this, we recommend that you find out more about the terms and conditions for privacy of that social network.
  • LinkedIn, which subscribes to the Privacy Shield agreement, which provides a degree of data protection similar to that of the European Union. Although it may process personal data in the EU (Linkedin Ireland), you will need to find out about the terms of its privacy policy where it indicates the recipients and transfers of personal data.
  • Twitter, which subscribes to the Privacy Shield agreement, which provides a degree of data protection similar to that of the European Union. In spite of this, we recommend that you find out more about the terms and conditions for privacy of that social network.
  • YouTube, which subscribes to the Privacy Shield agreement, which provides a degree of data protection similar to that of the European Union. In spite of this, we recommend that you find out more about the terms and conditions for privacy of that social network.


Storage period

SERESCO only stores your personal data during the time indispensable and necessary for each purpose of processing, without prejudice to your right to revoke consent at any time. The storage period, as a rule, will be prescribed by compliance with a legal obligation that may arise each time the data is processed or for the exercise of possible complaints from the users.

Users’ Rights

The approval of the Personal Data Protection Regulation bestows new rights on citizens. Merely for purposes of illustration, we remind you of some of these:

  • The right to obtain clear and transparent information on how your personal data are processed, the purpose of processing, the storage periods, the transfers of data to third parties or international processing of data and the possibility to lodge claims with the Spanish Data Protection Agency.
  • The right to access and to find out which personal data we are processing.
  • The right to request:
    • The suspension of processing while you proceed to rectify your data
    • That we store your personal data for taking actions or lodging claims in defense of your interests
  • The rectification of any personal data that are imprecise or incomplete.
  • The right to cancel your personal data when the purpose for processing no longer exists or when you revoke your consent, in which case your personal data will be deleted, unless there is a legal obligation to store them.
  • The right to oppose the processing of your personal data.
  • The right to limit processing of your personal data for certain activities.
  • The right to portability of your personal data, which is effective under certain circumstances in which data are processed in an automated manner and whenever possible.

Remember that when the basis for legitimation for processing is your consent, you can revoke it at any time.

In order to process your request to exercise your rights, which will be free of charge, you can contact SERESCO’s PERSONAL DATA PROTECTION OFFICE at the following address: dpo@seresco.es. You must prove your identity or your authorization to represent.

If your rights are not attended, you can lodge a claim with the Spanish Personal Data Protection Agency at its electronic headquarters on the web page www.agpd.es.

Data Protection Office

Seresco’s Data Protection Office will provide you the information that you need regarding processing of your personal data. In addition, as a data subject, if you wish you can contact this Office to request the resolution of a complaint before lodging it with the Spanish Data Protection Agency. You can contact this Office at dpo@seresco.es.

Security measures

SERESCO has adopted technical and organizational measures necessary to guarantee the security of personal data and prevent their modification, loss, unauthorized processing or access, in compliance with the regulations in force on personal data protection.

SERESCO’s security policy, which was drawn up in accordance with risk analyses in compliance with the General Data Protection Regulation, is mandatory for all personnel with access to personnel data, as well as for third-party contractors.

Nevertheless, the User must be aware that the Internet security measures are not impenetrable.

 

Act on Services of the Information Society and Electronic Commerce

Pursuant to Art. 10 of Act 34/2002 of 11 July, regarding Services of the Information Society and Electronic Commerce, we inform you that the Web Page accessible from the domain www.seresco.es is property of SERESCO, S.A., with registered office at Calle Matemático Pedrayes, 23 in Oviedo, Spain, Postal Code 33005 and Tax ID Code no. A-33011826. Email: soluciones@seresco.es and telephone for contact: +34 902 013 464.

SERESCO, as owner of the Portal, in order to guarantee compliance with the Act on the Information Society and Electronic Commerce (LSSICE in Spanish), will set up a free tool (email) in all communications associated with the present domain, for the purpose of guaranteeing the exercise of the right to oppose receiving electronic communications on informative and/or business topics. You can exercise your rights before dpo@seresco.es.

 

CONTACT

SERESCO uses the email of the PERSONAL DATA PROTECTION OFFFICE: dpo@seresco.es as a communication channel that is free of charge and accessible to the public where you can communicate incidents or requests.