Hebron S.A. states its commitment to the General Data Protection Regulation, 2016/679 (hereinafter, GDPR) and the principle of proactive responsibility.
When the user provides his data on the website, he must first accept our Data Protection Policy. As Hebron S.A. we are committed to using the data only to answer the user questions and provide and / or give access to the information requested.
1.1. Who is responsible for the processing of your data?
Identity Hebron S.A.
VAT number ES-08129579
Mailing address Calle Girona, 20 08120 – La Llagosta (Barcelona)
DPO or contact firstname.lastname@example.org
1.2. For what purpose do we treat your data?
In Hebron S.A. we treat the data you have provided us with in order to respond to the query made through our website www.hebronsa.es in the section "Contact".
1.3. How long will we keep your data?
Your data will be kept as long as they are necessary to respond to the request and / or consultation and will be kept the minimum time legally required (in cases of offers). For questions, they will be destroyed after three months.
1.4. What is the legitimacy for the treatment of your data?
The legal basis for the processing of your data is your consent, given the time you voluntarily write your information on the form and accept it in the corresponding box.
1.5. To which recipients will your data be communicated?
The data in the consultation forms will not be given to anyone, they are treated internally in Hebron S.A.
No data transfers are made with third countries.
1.6. What are your rights when you provide us with your data?
Anyone has the right to know if Hebron S.A. treats your data.
Those interested have the right to access their personal data, as well as to request the rectification of their inaccurate data or, request their suspension when, among other reasons, the data are no longer necessary for the purpose for which they were delivered.
The opposition exercise is equal to the suspension exercise.
The exercises of portability, limitation of treatment and automation of decisions do not apply to the type of data and their treatment.
The exercise of the aforementioned rights can be carried out through two channels:
- By postal mail, attaching a copy of the ID or passport, to Hebron S.A., with address at C / Girona, 20. 08120 La Llagosta (Barcelona).
- By email, to the address email@example.com, with the same documentation attached as by postal mail.
Hebron S.A. ensures the absolute confidentiality and privacy of the personal data collected and therefore have taken technical and organizational security measures to prevent alteration, loss, or unauthorized access and ensure its integrity and security, especially as provided in the GDPR 2016/679.
1.8. Veracity of the data
The users are responsible for the veracity of their data, committing themselves not to introduce false data and to proceed to modify them if necessary.
Data retention periods
Web form to contact: Three months
Data captured video surveillance: One month
Visits, access point: One month
Contracts with employees: Four years
Curriculums: Twelve months
Customers: 6 years, 10 with invoices
Right of access
When a natural person exercises his right of access, he will proceed as indicated in the following points, taking into account that if the communication is made by postal mail, it will always be sent by certified mail with acknowledgment of receipt, since the burden of proof falls on the company.
If you do not receive an identification document, you will be answered as soon as possible, stating that without these documents, unfortunately you can not verify the identity of the person and for your safety no data will be provided until you receive the document.
The time account begins when the correct documentation is received. All cases must be documented in a control sheet.
Right of Rectification
In the unlikely event that someone exercises the Right of Rectification, after finding the error, reviewing the client's file (where he gave his consent at the time) and his identification document, the wrong information will be modified and a response will be sent on the received channel.
Right of Cancellation and Opposition
In case of receiving a request for the Right of Suppression or Opposition, the answer will depend on the type of data available, according to the table indicated in the introduction, anticipating the erasure of data of the types that allow it, having to keep blocked the data of the typologies that do not allow it for legal purposes (former employees and customer invoices).