CONTACT
CONTACT

Privacy Policy

This Privacy Policy has been developed taking into account the provisions of Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, hereinafter the GDPR, as well as Organic Law 3/2018, of December 5, on Data Protection and digital rights (hereinafter, LOPDGDD) and other applicable regulations. The purpose of this Privacy Policy is to inform natural persons who provide their personal data, and/or those of the person they represent, about which information is being collected, the specific aspects related to the processing of their data, the purposes of the processing, the contact details to exercise their rights, the data retention periods and security measures, among other things.

Who is the data controller?

In terms of data protection, Yegané S.L. must be considered the Data Controller, in relation to the processing of personal data carried out by this entity.
Controller's identity: Yegané S.L. (B98601636)
Physical address: Calle dels Sequiers, 2, Polígono Industrial El Cap de L'Horta,, 46185, POBLA DE VALLBONA, LA, VALENCIA
Email: info@ensem.es
Phone: 960 42 01 55

What personal data do we process?

All information collected by Yegané S.L. will be processed fairly, lawfully and transparently. Likewise, the data requested in each of the processing activities carried out will consist only of those strictly essential to carry out the intended and informed purpose in each case.
In this way, your collected data will be adequate, relevant and not excessive in relation to the purposes for which they are processed in each case. Therefore, your personal data will be collected for specific, explicit and legitimate purposes, not being subsequently processed in a way that is incompatible with said purposes. In addition, they will be updated whenever necessary.

In general terms, within the framework of the different processing activities carried out in the organization, the following types are collected:

  • Identifying data.
  • Commercial information.
  • Transactions of goods and services.

Where do personal data come from?

As a general rule, personal data is always collected directly from the owner, however, in certain exceptions, the data can be collected through third parties, entities or services other than the interested party.
In this sense, this will be transferred to the interested party through the informative clauses contained in the different ways of collecting information and within a reasonable period or in the first communication made to the interested party.

For what purpose and specific cases do we process personal data?

In general terms, personal data is processed for the following purposes:

  • Newsletters: when previously authorized, by email, fax, SMS, MMS, social communities or any other electronic or physical means, present or future, that allows commercial communications to be made, as well as sending the website newsletter. These communications will be made by the Controller, related to their products and services, or those of their collaborators or suppliers with whom an agreement has been reached. In this case, third parties will never have access to personal data.

No profiles will be created or automated decisions made with the personal data collected.
However, all the explicit purposes for which each of the processing activities is carried out are included in the informative clauses incorporated in each of the data collection channels (web forms, paper forms, voiceovers or posters and informative notes, invoices, contracts and other documents that contain personal data).

What is the legal basis for data processing?

As a general rule, prior to the processing of personal data, Yegané S.L. informs of the legal basis by which it establishes the legitimacy of the processing in question.
However, in the organization, personal information can be processed for:

  • Consent: there are processing activities based on obtaining the express and unequivocal consent of the data owner, by incorporating informed consent clauses in the different information collection systems, providing consent through a statement or a clear affirmative action such as checking a box provided for this purpose or subscribing to the appropriate document or by sending data through the indicated contact methods. Additionally, we inform you that we will only use personal information by virtue of this Privacy Policy and, in general, we will request your consent for uses for purposes other than those for which you initially granted them.
  • Legitimate interest: data processing based on the legitimate interest of the controller will be established, mainly, for the sending of commercial communications or events about products or services similar to those contracted. According to article 21.2 of the Law on Services of the Information Society, this processing will only be valid when, being a client, they have not expressly refused at the time of data collection or in any of the communications that we make.

For how long do we process personal data?

At www.ensem.es, personal data is processed for the time necessary to fulfill the purpose for which it was collected, while the provision of the service or the employment or contractual relationship is maintained, there is a mutual interest and/or for the time provided for in the corresponding regulations.
Once the established deadlines have been met, the data will be canceled. Said cancellation will lead to the blocking of the data, which will be kept only at the disposal of Public Administrations, Judges and Courts, to attend to any possible responsibilities arising from the processing, during the prescription period thereof. Once said period has been met, the information will be destroyed.

With whom do we share personal data?

As a general rule, Yegané S.L. does not transfer or communicate your data to third parties, except for those required by law.
However, if necessary, said transfers or communications of data are informed to the interested party through the informative clauses contained in the different ways of collecting personal data.

What rights can you exercise?

According to European regulations, the rights you have are the following:

  • Right of Access, right to request information from the controller of a file about whether your personal data is being processed.
  • Right of Rectification, right that allows the affected person to request the modification of data that is inaccurate or incomplete.
  • Right of Opposition, right of a person to oppose the processing of their personal data or the cessation of these.
  • Right of automated individual decisions, right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on them or similarly significantly affects them.
  • Right of Limitation, right to suspend the processing of the user's personal data in certain cases.
  • Right of Erasure or Oblivion, right to erasure of the interested party's personal data.
  • Right of Portability, right to request the data controller to provide personal data in a structured and clear format to another controller.
  • Right to file a claim with the competent supervisory authority if you consider that the processing does not comply with current regulations.

How to exercise your rights?

The applicant can exercise their rights through the following means:

  • Email to info@ensem.es providing documentation that proves the identity of the applicant (copy of the front of the National Identity Document, or equivalent).
  • Postal mail to Calle dels Sequiers, 2, Polígono Industrial El Cap de L'Horta, 46185, POBLA DE VALLBONA, LA, VALENCIA providing documentation that proves the identity of the applicant (copy of the front of the National Identity Document, or equivalent).

In any case, you can request the protection of the Spanish Data Protection Agency through its website.
In this sense, Yegané S.L. will attend to your request as soon as possible and taking into account the deadlines provided for in the data protection regulations.

What could be the consequences of not providing the information?

The data requested in the established fields marked with an asterisk (*) or those provided in the documents or means where the information is provided, are those strictly necessary in relation to the purpose for which they are collected, either for the provision of an optimal service to the interested party or through a legal obligation imposed on the data controller themselves or a necessary requirement to sign a contract, with the inclusion of data in the remaining fields being voluntary.
In the event that not all the data is provided, it is not guaranteed that the information and services provided will be completely adjusted to your needs.
Therefore, in the event that the required data is not provided or is provided in an erroneous or incomplete manner, your request cannot be attended to, making it completely impossible to provide you with the requested information or carry out the contracting of the services.
Likewise, the user guarantees that the information transmitted in any of the forms is true, accurate and corresponds to their own data of which they are the owner.

What security measures do we have implemented?

The security measures adopted by Yegané S.L. are those required, in accordance with the provisions of article 32 of the GDPR.
In this sense, Yegané S.L., taking into account the state of the art, the costs of application and the nature, scope, context and purposes of the processing, as well as the risks of varying probability and severity for the rights and freedoms of natural persons, has established the appropriate technical and organizational measures to ensure a level of security appropriate to the existing risk.

In any case, Yegané S.L. has implemented sufficient mechanisms to:

  • Ensure the permanent confidentiality, integrity, availability and resilience of the processing systems and services.
  • Restore the availability and access to personal data quickly, in the event of a physical or technical incident.
  • Regularly verify, evaluate and assess the effectiveness of the technical and organizational measures implemented to ensure the security of the processing.

Changes to this privacy policy

Eventually, this Privacy Policy may be revised in order to update changes in current legislation, update the procedures for collecting and using personal information, the appearance of new services or the exclusion of others. These changes will be effective from their publication on the website, so it is important that you regularly review this Privacy Policy in order to stay informed about the changes that have occurred.