Data protection - GDPR legal notices socotec.es
BAC ENGINEERING CONSULTANCY GROUP S.L.U., a company belonging to the SOCOTEC group, undertakes to ensure that personal data processing carried out for the purpose of its business activities complies with European regulation no. 2016/679, known as the General Data Protection Regulation (GDPR), and Spanish data protection law: the Organic Law 3/2018 of 5 December on Personal Data Protection and guarantee of digital rights
The term, personal data (hereafter ‘Personal Data’) means any information relating to an identified or identifiable natural person. A person is ‘identifiable’ when he or she can be identified, whether directly or indirectly, in particular by reference to an identification number or one or more factors that are specific to him or her.
The Personal Data that is collected may include, in particular but not limited to, surnames and first names, national identification numbers, postal address, E-mail address, telephone numbers, work-related data, a copy of the employment contract, pay slips, healthcare card (‘carte vitale’) or a certificate from the Local sickness insurance fund (‘CPAM’), financial data (bank account identification document, tax assessment, etc.), IP address and any other Personal Data that could prove to be relevant for the purposes described hereafter. However, only Personal Data that is strictly necessary for the purposes of the processing operation in question is collected.
Who collects personal data?
The Controller is BAC ENGINEERING CONSULTANCY GROUP S.L.U., a company with registered address located at C/ d'Àvila, 138, 3a planta, 08018 Barcelona, Spain.
Who is this Policy for?
The purpose of this ‘Personal Data Protection Policy’ is to inform all natural persons concerned (‘You, Your’) of how the Socotec Group collects and uses Your Personal Data and of the means at Your disposal to control such use. This policy does not apply to the third-party websites that may be mentioned on the Socotec Group's website.
This Policy is intended for:
- applicants who submit an unsolicited application or respond to a published advert;
- individuals who wish to contact BAC ENGINEERING CONSULTANCY GROUP S.L.U. through the dedicated contact form;
- all Users of the website (www.socotec.es) who log on to and browse the said website.
Which are the data collection methods involved?
BAC ENGINEERING CONSULTANCY GROUP S.L.U. collects Personal Data online (including via E-mail), through paper-based sources and orally (during an interview or a telephone call) and this Policy applies regardless of the collection or processing method.
The Personal Data that You agree to communicate to us, regardless of the collection method (online, through paper-based sources or orally during an interview or a telephone call), is subject to the provisions of this Policy.
Why is your data collected?
BAC ENGINEERING CONSULTANCY GROUP S.L.U. uses Your Personal Data to undertake its assignments and to run its business. You will find a list of the reasons for which your Personal Data is collected and the corresponding legal grounds below.
To whom is your data sent?
Your Personal Data may be sent to, depending on its purpose, to the business unit concerned, where it may be stored. IT data is stored remotely by the hosting service provider OVH.
Data used to connect to the Website and the messages sent through the ‘Contact’ form are sent to our web agency, which manages our website facilities. It does not receive clear data or have access to the content of the said messages, which ensures that their content remains confidential.
The website may contain hypertext links to other websites, which provide additional qualified information. BAC ENGINEERING CONSULTANCY GROUP S.L.U. cannot be held liable for content that it does not publish; the User acknowledges that this website and third-party or partner services are entirely independent from one another. Any redirection offered to a third-party site is not tantamount to a recommendation and the BAC ENGINEERING CONSULTANCY GROUP S.L.U. is in no way liable for the editorial content offered on the sites in question.
As all Personal Data is confidential, access to this data is restricted to BAC ENGINEERING CONSULTANCY GROUP S.L.U. employees for the fulfilment of their work and to any authorised third party in compliance with the applicable regulation.
Is your data sent outside of the European Union?
No data is sent outside of the European Union.
What are your rights?
Under articles 14 to 22 of regulation 2016/679 of 27 April 2016, any natural person using the service may exercise the following rights:
- right of access: you may request a copy of the data that personally pertains to you;
- right to rectification: you may modify any inaccurate data that pertains to you;
- right to object: you may object to our processing of your data under the terms and conditions of article 21 of the GDPR;
- right to erasure: you may ask us to erase data that pertains to you under the terms and conditions of article 17 of the GDPR;
- right to object to profiling;
- right to restriction of processing.
We do not carry out any profiling for our activities.
Furthermore, when you consent to the processing of your personal data, you have the right to withdraw your consent at any time.
Finally, when a personal data breach that could pose a high risk to your rights and freedoms is detected, you will be informed of the breach as quickly as possible.
How to exercise your rights?
These rights may be exercised either directly by contacting the BAC ENGINEERING CONSULTANCY GROUP S.L.U., which collected the data, or by sending an E-mail. The form to be used to exercise your rights can be accessed through the following link: https://www.socotec.es/en
BAC ENGINEERING CONSULTANCY GROUP S.L.U. 's contact details can be found in the legal notices section on the socotec.es website.
Proof of identity must be sent with the request.
BAC ENGINEERING CONSULTANCY GROUP S.L.U. shall respond to the request within one (1) month of receipt of the request. In certain cases, due to the complexity of the request or the number of requests, this period of time may be extended to two months.
To contact Socotec’s Data Protection Officer:
- by E-mail: dataprotection@socotec.com
- by post: dataprotection@socotec.com at C/ d'Àvila, 138, 3a planta, 08018 Barcelona, Spain
If you do not receive an answer or if you receive an unsatisfactory answer, you may contact the Data Protection Authority, namely, the ‘Agencia España de Protección de Datos (AEPD): https://www.aepd.es/es [aepd.es]
What happens to your data in the event of your death?
- You may provide instructions on the storage, erasure and communication of your personal data following your death, in accordance with. Article 3. Data on deceased persons of the Organic Law 3/2018 of 5 December on Personal Data Protection and guarantee of digital rights.
1. Persons related to the deceased for family or de facto reasons, as well as his heirs, may contact the data controller or data processor for the purpose of requesting access to the personal data of the deceased and, if appropriate, their rectification or erasure.
As an exception, the persons referred to in the preceding paragraph may not access the data of the deceased, nor request their rectification or erasure, when the deceased person has expressly prohibited it or when so provided by law. Such prohibition shall not affect the right of the heirs to access the data of the deceased's estate.
2. The persons or institutions that the deceased had expressly designated for this purpose may also request, in accordance with the instructions received, access to the deceased's personal data and, where appropriate, their rectification or erasure.
A Royal Decree shall establish the requirements and conditions for accrediting the validity and validity of these mandates and instructions and, where appropriate, the registration thereof.
3. In the event of the death of minors, these powers may also be exercised by their legal representatives or, within the framework of their powers, by the Public Prosecutor's Office, which may act ex officio or at the request of any interested natural or legal person.
In the event of the death of persons with disabilities, these powers may also be exercised, in addition to those mentioned in the previous paragraph, by those who have been designated to exercise support functions, if such powers are understood to be included in the support measures provided by the designated person.
Does the website use cookies?
Cookies are text files that are stored and used to record personal and non-personal data regarding Your browsing of the Socotec Group’s website.
We may use them or other forms of technology that can collect or store Personal Data in order to improve the services provided to You.
You will be notified of this the first time that You receive a cookie by a banner that appears at the bottom of the page and You will be able to decide whether to accept or reject it. If you carry on using the website in knowledge of the aforementioned information, You expressly accept that the Socotec Group may use browsing cookies.
Review of the Personal Data Protection Policy
This Personal Data Protection Policy applies as from 22 February 2023 and is regularly updated in accordance with the needs of the company and legal requirements.