Privacy Policy
Personal data that may be collected directly from the interested party will be treated confidentially and will be incorporated into the corresponding processing activity..
The purpose of data processing corresponds to each of the processing activities carried out by SERNAL S.L.. and that you have the right to obtain confirmation as to whether we are processing your personal data., therefore you have the right to access your personal data, rectify inaccurate data or request its deletion when the data is no longer necessary, through written communication to: NORD, 9 OF.202 – APT. POST OFFICE 124 17700 LA JONQUERA or by e-mail: sernal@sernal.com
The user accepts the use of cookies “permanent cookies” from this website.
In application of the new regulations in force regarding the protection of personal data, We inform you that the personal data we collect from clients, users, suppliers and contacts, We do it through our commercial relationship that unites us and also from our website.
These data are included in databases or automated files specific to each case and are registered in our Activity Registry according to the type of users and the services that we provide or provide to us..
For what purpose do we collect your personal data?
The purpose of the automated or manual collection and processing of personal data is to maintain the commercial relationship and perform information tasks., and other activities typical of the commercial relationship that unites us.
For what purpose do we process your personal data?
The personal data that is part of our database is processed in order to manage the information provided to us by interested parties in order to provide the service for which they hire us or we contracted and manage the requests sent through any means., including commercial electronic communications, promotional, or advertise.
We adopt the necessary measures to guarantee safety, integrity and confidentiality of the data in accordance with the provisions of the Organic Law 3/2018, of 5 from December, of Data Protection and Guarantee of Digital Rights and in the Regulation (UE) 2016/679 of the European Parliament and the Council, of 27 April 2016, relating to the protection of natural persons with regard to the processing of personal data and the free circulation of such data.
To which recipients will your data be communicated?
Your personal data will not be transferred to third parties, except for legal imperatives.
As treatment managers, We have contracted different service providers, having committed to comply with the regulatory provisions, application regarding data protection, at the time of hiring.
How long will we keep your data?
The personal data provided will be kept as long as the commercial relationship is maintained or its deletion is not requested or the consent is not revoked and during the period for which legal responsibilities may arise for the services provided..
Personal data that is part of our database and has a contractual relationship will be kept for a maximum of five (5) years from the last invoice issued.
In some cases they can revoke consent at any time.
What is the legitimacy for the processing of your data??
In the current contractual relationship or that unites us, The legal basis for the processing of your data is that established and required by the Organic Law 3/2018, of 5 from December, of Data Protection and Guarantee of Digital Rights and in the Regulation (UE) 2016/679 of the European Parliament and the Council, of 27 April 2016, relating to the protection of natural persons with regard to the processing of personal data and the free circulation of such data.
Regarding free consent, specific, informed and unambiguous, while we inform you by making this privacy policy available to you., that after reading it, in case you are not satisfied, You can request access to your data in accordance with our Activity Register.
What are your rights when you provide us with your data??
Anyone has the right to obtain confirmation about whether and how their personal data is processed..
Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.
In addition, in certain circumstances and for reasons related to your particular situation, interested parties may object to the processing of their data.
We also inform you that we can stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.
And we inform you that you may exercise access rights, rectification, suppression, opposition and limitation of treatment according to the conditions and limits provided for in current legislation, addressing us in writing, or by email. In any case, You must provide a copy of your ID, passport or equivalent document. If you consider it appropriate, You can file a claim with the Spanish Data Protection Agency (agpd.es).
How have we obtained your data?
The personal data we process comes from the interested parties' own requests..
The categories of data that are processed, according to the category of users and contacts, in a general way and not in particular they can be:
▪ Typified Data: Personal characteristics, employment details, or commercial information / economic / financial
▪ Identification data: Name and surname, home, NIF / DNI, phone/email, Bank account, and image.
No specially protected data is processed.
Rights of interested parties
1. Right of access: Right to obtain from the person responsible for the treatment confirmation of whether or not personal data that concerns you are being processed and, in that case, right of access to your personal data. As well as:
a. The purposes of the treatment;
b. The categories of personal data in question;
c. The recipients or categories of recipients to whom the personal data were or will be communicated, in particular recipients in third parties or international organizations;
d. To be possible, the expected period of conservation of personal data or, If it is not possible, the criteria used to determine this term;
e. The existence of the right to request from the controller the rectification or deletion of personal data or the limitation of the processing of personal data relating to the interested party., or to oppose such treatment;
f. The right to file a complaint with a supervisory authority;
g. When the personal data has not been obtained from the interested party, any information available about its origin;
h. The existence of automated decisions, including profiling, applied logic, as well as the importance and anticipated consequences of such treatment.
2. Right to rectification: Right to obtain from the controller the rectification of inaccurate personal data concerning you. Taking into account the purposes of the treatment, The interested party will have the right to have incomplete personal data completed., including by means of an additional declaration.
3. Right to erasure: Right to obtain from the controller the deletion of personal data that concerns you, which will be obliged to delete personal data without undue delay when any of the following circumstances occur:
a. The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.;
b. The interested party withdraws the consent on which the treatment is based;
c. The interested party opposes the treatment
d. Personal data have been processed unlawfully;
e. The personal data must be erased for compliance with a legal obligation established in Union or Member State law applicable to the controller.;
f. The personal data have been obtained in relation to the offer of information society services aimed at minors..
Nevertheless, A series of exceptions are regulated in which this right will not apply.. For example, when the right to freedom of expression and information must prevail.
4. Right to object: Right to object at any time to personal data that concerns you being processed.
The data controller will no longer process the personal data, unless it proves compelling legitimate reasons for the processing that prevail over the interests, the rights and freedoms of the interested party, or for the formulation, the exercise or defense of claims.
5. Right to limitation of treatment: Right to obtain from the controller the limitation of data processing when any of the following conditions are met:
a. The interested party challenges the accuracy of the personal data, for a period that allows the person responsible to verify the accuracy of these;
b. The processing is unlawful and the interested party opposes the deletion of the personal data and requests instead the limitation of its use.;
c. The controller no longer needs the personal data for the purposes of the processing, but the interested party needs them for the formulation, the exercise or defense of claims; and
d. The interested party has opposed the processing while it is verified whether the legitimate reasons of the person responsible prevail over those of the interested party..
Commercial communications
In application of the LSSI-CE, No advertising or promotional communications will be sent by email or other equivalent means of electronic communication that have not previously been requested or expressly authorized by the recipients thereof..
In the case of users with whom there is a prior contractual relationship, yes this hiring, authorizes the sending of commercial communications referring to products or services that are the same or similar to those that were initially the subject of contracting or of professional or commercial interest with the user., contact, customer or provider.
In any case, the user, after proving your identity, You may request that no more information be sent to you through the corresponding channels for this purpose..