PRIVACY POLICY

Biofabri Personal Data Protection Policy

In compliance with the regulations in force on data protection, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 (GDPR), Spanish Organic Law 15/99 on the Protection of Personal Data (LOPDCP), the Regulation implementing the LOPDCP (Royal Decree, 1720/2007, of 21st December), we inform you of the Personal Data Protection Policy, regarding the processing of the personal data of Clients, Suppliers, Contacts and Prospective Clients, Employment Candidates, Visitor Control and Video Surveillance, as detailed below.

Responsibility for the processing of personal data

The entity responsible for personal data processing is the legal person who determines the purposes and means of processing personal data. In other words, the responsible entity decides how and for what purposes personal data is processed.

For the purposes of this Data Protection Policy, the entity or legal person responsible for the processing of personal data is:

Company name: Biofabri, S.L.

NIF: B-27.712.561
Registered address: A Relva s/n 36410 O Porriño (Pontevedra).
E-mail: biofabri@biofabri.es
Phone: +34 986 34 52 00

What personal data do we handle and how do we protect it?

Personal data is any information about an identified or identifiable natural person.

For the purposes established in this Privacy Policy, the entity responsible collects and handles the personal data that is explained in each type of handling, and that will depend on the different services that the person requests or the contractual relationship that they maintain with our company.

Our organization undertakes to treat with complete confidentiality and to apply appropriate physical, technical and organizational security measures for the protection of your personal data.

Nevertheless, you guarantee and are responsible for the truthfulness, accuracy, validity and authenticity of the personal data provided by you and agree to keep them properly updated.

Handling of “Clients” Data

What kind of personal data do we handle?

Identifying information: Name, ID (DNI, NIE, etc.), address, telephone, e-mail address.
Academic and professional data: profession, position.
Transaction data: goods and services supplied.

For what purpose do we use your personal data?

We use the personal data that you provide to us for the management of the company’s customer data, to maintain the commercial relationship, accounting, administrative and billing management, as well as tax obligations.

It is also proposed that it may be used for advertising and commercial prospecting, for which the express consent of the interested party is requested.

Personal data provided will be retained for as long as the business relationship is maintained. If you choose to cancel your personal data, it may be retained in our databases within the time limits provided by law to meet tax and accounting obligations and will be deleted after such legal time limits or applicable deadlines have been prescribed.

What is the justification for our use of your data?

The legal basis for the processing of your data is the execution of a contract, as well as the fulfilment of a legal obligation of the responsible person.

The communication of offers and promotions that may be of interest to you is based on the express consent that you have requested it.

To whom will your data be provided?

Your personal data will not be transferred to any entity, except as necessary to public bodies by legal obligation. There is no provision for international transfers of personal data.

Handling of “Contacts and Prospective Clients” Data

What kind of personal data do we handle?

Identifying information: Name, address, telephone, e-mail address.
Academic and professional data: profession, position.

For what purpose do we use your personal data?

We treat the personal data that you provide in the contact form for the management of data of commercial contacts and potential clients.

It is also proposed that it may be used for advertising and commercial prospecting, for which the express consent of the interested party is requested.

Personal data provided will be retained for as long as the business relationship is maintained. If you choose to cancel your personal data, it will be deleted from our contact database.

What is the justification for our use of your data?

The legal basis for the processing of your data is the express consent requested.

To whom will your data be provided?

Your personal data will not be transferred to any entity.

There is no provision for international transfers of personal data.

Handling of “Suppliers’” Data

What kind of personal data do we handle?

Identifying information: Name, ID (NIF / CIF, etc.), address, telephone, e-mail address.
Financial data: Bank account.
Academic and professional data: Profession, position, qualifications.
Transaction data: Products and services delivered.

For what purpose do we use your personal data?

We use the personal data provided to allow us to manage the data of the suppliers of the company, to maintain the commercial relationship, the management of accounting, administrative and payments, as well as tax obligations.

What is the justification for our use of your data?

The legal basis for the processing of your data is the execution of a contract, as well as the fulfilment of a legal obligation of the responsible person.

To whom will your data be provided?

Your personal data will not be transferred to any entity, except as necessary to public bodies by legal obligation.

There is no provision for international transfers of personal data.

Handling of “Employment Candidates’” Data

What kind of personal data do we handle?

Identifying information: Name, ID (DNI, NIE, etc.) , date of birth, address, telephone, e-mail address, image.
Personal characteristics data: Gender, marital status, nationality, age, date and place of birth.
Academic and professional data: Profession, position, experience, qualifications.

For what purpose do we use your personal data?

We use the personal data that you provide for the management of the company’s selection processes.

The personal data provided will be retained as long as the interested party has not withdrawn consent to continue to keep their CV and/or resume for future selection processes. If you choose to cancel your personal data, it will be deleted from our database of job candidates.

What is the justification for our use of your data?

The legal basis for the processing of your data is the express consent requested.

To whom will your data be provided?

Your data will not be shared.

There are no plans for international transfers of personal data.

Handling of “Video Surveillance” Data

What kind of personal data do we handle?

Identification information: Image.

For what purpose do we use your personal data?

We use personal data for the recording of video surveillance images at the company’s premises for security purposes.

Personal data shall be retained for the prescribed legal periods (one month).

What is the justification for our use of your data?

The legal basis for the processing of your data is the fulfilment of legitimate interests undertaken by the person responsible for the processing.

To whom will your data be provided?

Your personal data will not be transferred to any entity, except those necessary to the Law Enforcement bodies by legal obligation.

There is no provision for international transfers of personal data.

Handling of “Visitor Control Data”

What kind of personal data do we handle?

Identifying information: Name, ID (DNI, NIE, etc.).
Academic and professional data: Company, job title.

For what purpose do we use your personal data?

We use personal data for the control of visitors and access to the company’s premises for security reasons.

The personal data will be kept until the interested party requests the cancellation. If you choose to cancel your personal data, it will be deleted from our database.

What is the justification for our use of your data?

The legal basis for the processing of your data is the fulfilment of legitimate interests undertaken by the person responsible for the processing.

To whom will your data be provided?

Your personal data will not be transferred to any entity, except those necessary to the Law Enforcement bodies by legal obligation.

There is no provision for international transfers of personal data.

What are your rights when you provide us with your data?

In accordance with the applicable data protection regulations, you have a number of rights in relation to the processing of your personal data. The exercise of these rights will be free of charge to you, except in cases where manifestly unfounded or excessive requests are made, especially repetitive ones.

These rights are as follows:

Right of information: You have the right to be informed in a concise, transparent, intelligible and easily accessible manner, in clear and simple language, about the use and processing of your personal data.

Right of access: You have the right to ask us at any time to confirm whether we are processing your personal data, to have us provide you with access to it and information about its processing, and to obtain a copy of such data. The copy of your personal data that we provide to you will be free of charge, although the request for additional copies may be subject to a reasonable charge based on administrative costs. We may ask you to prove your identity or require more information when necessary to handle your request.

Right of rectification: You have the right to request the rectification of inaccurate, outdated or incomplete personal data concerning you. You may also request that incomplete personal data be completed, including an additional statement.

Right of Deletion: You have the right to request the deletion of your personal data when, among other reasons, the data is no longer necessary for the purposes for which it was collected. However, this right is not absolute, so our organization may continue to store them, duly secured, in the circumstances provided by applicable law.

Right to limit processing: You have the right to request that we limit the processing of your personal data which means that we may continue to store it, but not continue to process it if any of the following conditions are met:

Where the accuracy of the personal data is challenged, during a period of time which allows the person responsible to verify the accuracy of the data.

The processing is unlawful and you object to the deletion of data and request instead the limitation of its use.

Our company no longer needs your data for the purposes it was provided, but needs it for the formulation, implementation or defence of claims.

You have opposed the use, whilst it is verified whether the legitimate reasons of our company prevail over your opposition.

Right to data portability: You have the right to have your data transmitted to another person responsible for processing in a structured, commonly used, mechanically readable format. This right applies when the treatment of your personal data is based on consent or performance of a contract and such processing is done by automated means.

Right of opposition: This right allows you to oppose the processing of your personal data, including profiling. We will not be able to attend to your right only when we process your data if we provide legitimate grounds for the processing or for the formulation, implementation or defence of claims.

Right not to submit to automated decisions, including profiling: This right allows you to not be subject to a decision based solely on automated handling or use, including profiling, that would have legal effects on you or your personal data, or that would affect you in a similar manner. Unless such a decision is necessary for the conclusion or execution of a contract, is authorized by law or is based on consent.

Right to withdraw consent: In cases where we have obtained your consent to the processing of your personal data in connection with certain activities (for example, to send you business communications), you may withdraw it at any time. In this way, we will cease to carry out that particular activity to which you had previously agreed, unless there is any other reason to justify the continued processing of your data for these purposes, in which case we will notify you of this situation.

Right to file a complaint with a supervisory authority: You have the right to file a complaint with the Spanish Data Protection Agency, C/ Jorge Juan, 6, 28001 Madrid, +34 901 100 099 – +34 912 663 517 (www.agpd.es),or at the e-mail address: : https://sedeagpd.gob.es/sede-electronica-web/vistas/formQuejasSugerencias/seleccionarQuejaSugerencia.jsf

You will be able to exercise the rights indicated above by sending us a communication to our Customer Service Department, or by means of an e-mail to biofabri@biofabri.es, accompanying your request with a document proving your identity and providing the necessary details to process your request.

Additional information about your rights can be obtained from the Spanish Data Protection Agency website, www.agpd.es.