Privacy Policy

Stakeholders: Individual customers, employees, professionals and company representatives.

Treatments

How do we process your personal data?

In compliance with Regulation (EU) 2016/679 and the Organic Law on Personal Data Protection, we inform you that your personal data may be subject to some of the following processing:

• TR04 – Advertising campaigns (Legal basis: Law 34/1988, of November 11, 1988, General Advertising Law).
• TR08 – Obtain the opinion of data subjects (Legal basis: Data Protection Regulation (EU) 2016/679 and LOPD).
• TR03 – Selection of own personnel (Legal basis: Real Decreto Legislativo 3/2015, de 23 de octubre, por el que se aprueba el texto refundido de la ley de Empleo.)
• TG01 – Own accounting and bookkeeping management, as the person in charge (Legal basis: Royal Decree 1514/2007, of November 16, 2007, which regulates the General Accounting Plan).
• TG25 – Collection of data for own tax management (Legal basis: Law 58/2003, of December 17, 2003, General Tax Law).
• TG12 – Own labor management: data collection (Legal basis: Real Decreto Legislativo 1/1994, de 20 de junio, por el que se aprueba el Texto Refundido de la Ley General de la Seguridad Social.)
• TR09 – Assurances on technical and organizational measures in the applied software (Legal basis: Data Protection Regulation (EU) 2016/679 and LOPD).
• TE08 – Personal Data Protection (Legal basis: Regulation (EU) 2016/679 and Organic Law 3/2018).
• TE02 – Prevention of occupational hazards (Legal basis: Law 31/1995, of November 8, 1995, on prevention of occupational hazards).
• TE07 – Destruction of documents (Legal basis: Regulation (EU) 2016/679)
• TV01 – Sales / Provision of Services (Legal Basis: Commercial and Tax Legislation)
• TE03 – Transportation and/or parcel delivery service (Legal basis: Real Decreto de 22 de agosto de 1885 por el que se publica el Código de Comercio).
• TR05 – Electronic mail (Legal basis: Commercial Code and other applicable legislation).
• TR01 – Requests for information received (Legal basis: Commercial Code and other commercial provisions).
• TR07 – Management of incidents and/or security breaches (Legal basis: Data Protection Regulation (EU) 2016/679 and LOPD).
• TE04 – Management of own legal affairs (Legal basis: applicable commercial and labor legislation).
• TE01 – Maintenance of computer systems (Legal basis: Commercial Code).

Responsible

Who are we?

We are responsible for the processing of your data. Therefore, we expressly, precisely and unequivocally inform both the data subjects and the competent bodies of the following aspects concerning the data controller:

• DESTRO, GRAZIELLA
• Y3446514R
• Aragó Street, 23. IBIZA – 07800. ILLES BALEARS
• DPD: FORMACIÓN Y CERTIFICACIÓN DE DELEGADOS DE PROTECCIÓN DE DATOS, S.L., NIF: B73982266(dpd@gruposmz.es)

Purposes

What do we use your personal data for?

In this organization, we may process your personal data exclusively for the purposes indicated below:

• Check that all the technical measures necessary for the correct management of personal data are being carried out with the software applied.
• Sending commercial and/or advertising information by e-mail.
• Management of requests for information received by the interested party about our products or services.
• Exclusive management of internal incidents detected in compliance with the requirements of the RGPD.
• To carry out advertising campaigns to publicize our services and/or products.
• Gather stakeholder input.
• Selection of personnel to fill the required job vacancies.
• Comply with all the requirements set forth in the Occupational Risk Prevention Law.
• Mailing of parcels and correspondence.
• Manage any legal problem affecting the company.
• Manage, maintain and repair computer storage systems.
• Actions to carry out own labor management.
• Actions to carry out its own tax and accounting management.
• Comply with the principle of limiting the period of retention of personal data.
• Compliance with the requirements demanded by Regulation (EU) 2016/679 and Organic Law 3/2018.
• Administrative management of private clients.
• To carry out the sale or provision of the contracted service.

A commercial or user profile may be created based on the information provided or obtained. It is expressly informed that, in no case, profiles will be elaborated with the data of a minor.

The personal data provided by you will be retained for the duration of the contractual relationship or, where appropriate, until you exercise your right to object or withdraw your consent. To do this, you can go to the appropriate section on our website or send an e-mail to the address indicated in the section on the person responsible.

Legitimacy

Why do we use them? We are entitled to process your personal data for the following reasons:

• Your unequivocal, informed and express consent, in those cases in which it is legally required, without, in any case, the withdrawal of the same conditions the execution of other treatments whose legitimacy is different, and without such withdrawal affecting the lawfulness of the treatment prior to the withdrawal of the same.
• A legal obligation of the data controller.
• The execution of the contract for the provision of services and/or the purchase and sale of the corresponding products, signed by you.
• The legal basis for the processing of your data is a legitimate interest of the controller. This interest is based on the prior performance of a proportionality or weighting judgment between the legitimate interest of the controller and the interests or rights and freedoms of data subjects. This weighing has involved the evaluation of the interest, the evaluation of the impact of the processing on the data subjects, the balance between the two previous concepts and the implementation of additional guarantees. The final balancing being favorable to the controller, the processing can be carried out in accordance with the applicable regulations on personal data protection.

For any questions or clarification, you can contact us through the e-mail address provided in the section corresponding to the data controller.

Addressees

With whom may we share your personal information?

Your personal data will be communicated to the following companies and organizations:

• Tax Agency
• State Public Employment Service (Servicio Público de Empleo Estatal)
• General Treasury of the Social Security
• National Data Protection Agency
• Banks and savings banks

Your personal data will not be transferred to any third country or international organization.

Sources

What data do we process and how did we obtain it?

Your personal data will be incorporated into the following files, owned by the organization:

• FG01 Own accounting management
• FG02 Own labor management
• FG15 Own tax management. Data collection
• FE01 Computer maintenance
• FE02 Prevention of occupational hazards
• FE03 Transportation and shipping
• FE04 Own legal affairs
• FR01 Requests for information received
• FR03 Selection of own personnel
• FR04 Advertising campaigns
• FR05 E-mails
• FR07 Incident and/or security violation management
• FR08 Collect stakeholder feedback
• FR09 Software and hardware securities
• FE07 Destruction of documents
• FE08 Personal Data Protection
• FP01 Customers

The personal data we process in our organization comes from the following sources:

• The interested party himself

Rights

What rights can you exercise?

We guarantee you the exercise of your rights in relation to the processing of your personal data.

In particular, we inform you that you have the right to:

• Obtain confirmation as to whether your data is being processed.
• Exercise the right of access to the personal data we hold, obtaining information on the purposes of the processing, the category of data processed, the possible recipients, the storage period, the origin of the data and, where appropriate, profiling or automated decision making.
• Exercise the right of rectification. For these purposes, we remind you that the personal data we have at our disposal must always be a true reflection of reality, so do not hesitate to make use of your right in case any data undergoes modification, change or cancellation. You guarantee that the personal data you have provided us by any means are true and accurate, and you agree to notify any change or modification thereof, being your sole responsibility for any loss or damage caused to the responsible or any third party by reason of a communication of erroneous, inaccurate or incomplete information.
• For reasons related to your particular situation, you may object to the processing of your data, in which case our organization will stop processing the data, unless there are legitimate reasons to prevent it.
• Request the deletion of your personal data when, among other reasons, they are no longer necessary for the purposes described above or we no longer have the legitimacy to process them.
• Request the portability of your data, when the processing is carried out by automated means and provided that you are bound to our entity on the basis of a contract signed or you have given your consent to the processing carried out. In these cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format, or to have it transmitted directly to another controller, where technically possible.
• In certain circumstances, you may request the limitation of the processing of your data, in which case we will only keep them for the exercise or defense of claims.
• Oppose automated decision making, including profiling.

These rights may be exercised free of charge, except in the cases provided for by law, by written request signed by you or, where appropriate, by your representative, addressed to the person responsible, at the addresses provided for this purpose in the first paragraph, or physically at any of our establishments.

You also have the right to file complaints, either with the Spanish Data Protection Agency (on the website https://www.agpd.es/) or with the corresponding supervisory authority.

You may also go to the Courts of Justice to claim compensation.

Finally, you have the right to withdraw your consent, with the same ease with which you gave it. To do so, you can go to our website, where you will find the necessary information to cancel in a quick and easy way the authorization granted to us to carry out these communications. You can also send an e-mail to the address indicated in the section on the person responsible.

We also inform you that in each processing of your personal data we determine the possible threats and impacts that may occur as a result of the same, mitigating or eliminating if possible, the potential damage, through the implementation of appropriate security measures that are periodically reviewed to determine their effectiveness.

Our control system also allows us to comply with the principles of data processing, being able to prove to the data subject, the principle of limitation to the purpose of processing, the principle of limitation to the storage period, the principle of data minimization, as well as the principle of integrity and confidentiality.

Finally, we also inform you that you will periodically receive surveys that will allow us to know your opinion on any suggestions regarding the processing of your personal data, as well as to comply with the principle of transparency and accuracy of the data processed.

For any doubt or clarification, you can contact us through the e-mail address provided in the first paragraph. Yours faithfully,

The Responsible.