PRIVACY POLICY

INTRODUCTION

Your privacy is important to us, so through this document, we will explain what data we collect from our users, how we use it, and why, among other guidelines.

For your information, we will never ask for more details than we will actually need for the services required; we will never share it with third parties, except by legal obligation or with your previous authorization; and we will never use your data for any purpose not previously specified.

As users, you should read this Privacy Policy carefully, on a regular basis, and every time you enter your personal data because this document may have been modified. The provider can change any type of information that may appear on the website to comply with regulations or to update the policy without the obligation to give prior notice or inform users of said obligations, with publication on the website of the provider being sufficient.

DATA CONTROLLER

Identity: CONSTRUCTORA D’ARO, S.A.

Tax identification number (NIF): A08270993

Registered address: Ginjoler 6, entresol,08242, Manresa, Barcelona

Email: rgpd@constructoradaro.com

DPO: PymeLegal, S.L.

Email DPO: rgpd@constructoradaro.com

CONSTRUCTORA D’ARO, S.A., as the owner of the website, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of individuals with regard to the processing of personal data and on the free movement of such data and other existing regulations on the protection of personal data and by Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSICE), informs you that it has implemented the necessary security measures, both technical and organisational, to ensure and protect the confidentiality, integrity, and availability of the data entered.

THE DATA COLLECTION METHODS, THE DATA THAT WE COLLECT and PURPOSE OF DATA PROCESSING

Carrying out the contractual relationship and analogous administrative, tax, and accounting procedures as required by current legislation

Required data: full name, phone number, address, ID number, email, signature;
Purpose: to carry out internal commercial, tax, and administrative management;
Legal basis: consent of the data subject and contractual relationship.

Whistleblower Channel Form:

Required data: there is no requirement to provide personal data;
Purpose: to manage and/or process the submitted report and carry out all necessary actions for the proper investigation of the reported facts (this includes initiating any procedures related to the facts, such as disciplinary, judicial, or other proceedings);
Legal basis: the processing is implemented based on the legal obligation (Law 2/2023, of February 20, regulating the protection of persons who report regulatory infringements and fight against corruption), and the data provided by the User is processed based on their consent.

Video surveillance: Security of certain premises

Required data: image;
Purpose: security of individuals, property, and facilities (detailed information is available in the “video surveillance” section of this privacy policy);
Legal basis: legitimate interest of the service provider.

You can withdraw your consent at any time by sending a letter with the subject “Unsubscribe” to the aforementioned email.

According to the LSSICE, CONSTRUCTORA D’ARO, S.A. does not engage in spamming and, therefore, does not send commercial emails that have not been previously requested or authorised by the user. Accordingly, in all the communications you will receive from the provider, the user has the possibility to withdraw their express consent to receive our communications.

We will not process your personal data for any purpose other than those described except for legal obligation or judicial requirement.

You will not be the subject of decisions based on automated processing that will have an effect on your data.

DATA RETENTION PERIOD

Your data will be retained for the duration of your commercial relationship with us or until you exercise your right to the cancellation, withdrawal, or limitation of processing. However, we will retain your data for the time required by law in accordance with the applicable provisions.

RECIPIENTS OF DISCLOSURES AND TRANSFERS

CONSTRUCTORA D’ARO, S.A. will provide information to law enforcement authorities under a court order or when required by a legal regulation, without prejudice to its ability to block or cancel the user’s account if there are indications of a possible offense committed by the User. The information provided will be limited to what the provider has at that time.

CONSTRUCTORA D’ARO, S.A. will carry out international data transfers when using the following tools necessary for the development of its activity, which may store your data. These tools are:

Google Analytics: to analyze and measure how users interact with the website through cookies. The information generated and collected by these cookies about usage (including the IP address) will be directly transmitted to and stored by Google, Inc., located in Delaware, 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States (“Google”), on its servers in the United States. Google, Inc. adheres to the EU-U.S. Privacy Framework approved by the European Commission.

The information you provide us through this website will be hosted on the servers of INFO PC MANRESA, S.L., contracted by the company providing the website hosting service.

The data processing by the aforementioned entities, as well as by any other tool used by the provider, is regulated through a data processing agreement between the provider and said company.

THE RIGHTS OF THE INTERESTED PARTIES

As a user/interested party, you can request to exercise the following rights before CONSTRUCTORA D’ARO, S.A by sending a letter to the postal address in the header or by sending an email, with the subject, “DATA PROTECTION: RIGHTS OF THE AFFECTED”.

Rights

Right of access: allows the interested party to know and obtain information about their personal data subject to processing.
Right to rectification: allows the interested party to correct errors and modify data that is inaccurate or incomplete.
Right to erasure/to be forgotten: allows inadequate or excessive data to be deleted.
Right to object: the right of the interested party to not have their data processed or to stop the processing of the same.
Right to restrict processing: involves the flagging of stored personal data in order to limit any future processing, for the exercise or defence of claims.
Right to data portability: involves the disclosure of the data undergoing processing to the interested party, so that they can transfer it to another controller without any impediments.
Right not to be subject to a decision based solely on automated processing, including profiling: the right not to be subject to any decision that is solely based on automated processing that effects or will significantly affect the interested party.

As a user, you have the right to withdraw the consent given at any time. The withdrawal of consent shall not affect the legality of the processing performed prior to your consent being revoked.

You also have the right to lodge a complaint with the supervisory authority if you believe that your rights in relation to the protection of your data may have been infringed (aepd.es).

ADDITIONAL INFORMATION

SECURITY MEASURES

The data you provide to us will be treated confidentially. The provider has adopted all the technical and organisational measures and all the levels of protection necessary to ensure the secure processing of data and to prevent its alteration, loss, theft, and unauthorised processing or access, in line with the current state of technology and the nature of the data stored. Likewise, it guarantees that the processing and registration in files, programs, systems, equipment, premises, and centres comply with the requirements and conditions of integrity and security established in the current regulations.

LANGUAGE

The applicable language for this Privacy Policy is Spanish. Consequently, in the event of any contradiction between the versions provided in other languages, the Spanish version will prevail.

SOCIAL NETWORKS

We inform you that CONSTRUCTORA D’ARO, S.A. may have a presence on social media platforms. The processing of data from individuals who follow the official social media pages of CONSTRUCTORA D’ARO, S.A. (and/or who create any kind of link or connection through social networks) will be governed by this section, as well as by the terms of use, privacy policies, and access regulations of the respective social media platform, previously accepted by the user.

CONSTRUCTORA D’ARO, S.A. will process your data for the purpose of properly managing its presence on social media, informing you about the provider’s activities, products, or services, as well as for any other purpose permitted by the rules of the respective social media platform.

The publication of content is prohibited if it:

Is allegedly unlawful under national, EU, or international regulations or involves activities that are allegedly illegal or contrary to good faith.
Infringes upon the fundamental rights of individuals, is disrespectful online, offends or may generate negative opinions among our users or third parties, or in general, includes any content that CONSTRUCTORA D’ARO, S.A. deems inappropriate.
In general, violates principles of legality, honesty, responsibility, respect for human dignity, protection of minors, public order, privacy, consumer rights, or intellectual and industrial property rights.

CONSTRUCTORA D’ARO, S.A. also reserves the right to remove, without prior notice, any content it deems inappropriate from its website or corporate social media accounts.

In any case, if you submit personal information through a social media platform, CONSTRUCTORA D’ARO, S.A. is exempt from liability regarding the security measures applicable to that platform. The User should consult the specific privacy and usage policies of the corresponding social media site to understand those measures.

SENDING YOUR CV

If the User sends us their CV, they are informed that the data provided will be processed in order to include them in any recruitment processes that may take place, by analyzing the applicant’s profile with the aim of selecting the most suitable candidate for the vacant position.

We inform you that the only official procedure for submitting your CV is via email or through job postings published by the provider on channels dedicated to this purpose. Therefore, CVs sent through other means will not be accepted.

If there is any change to your data, please notify us in writing as soon as possible in order to keep your information properly updated.

The data will be stored for the duration of the selection process or for a maximum period of one year, after which it will be deleted, ensuring complete confidentiality in both its processing and subsequent destruction. After this period, if you wish to continue participating in the selection processes of the Controller, we kindly ask that you submit your CV again.

VIDEO SURVEILLANCE

Images are captured with the aim of preserving the security of people and property, as well as of the installations.

The user is informed by means of a video surveillance sign located in a sufficiently visible place in front of the camera, which informs that the facilities are under video surveillance.

No transfers are foreseen, except to the security forces, nor will there be any international transfer of data.

The images will be kept for a maximum period of 30 days from their capture. Once this period has elapsed, the images must be cancelled, in accordance with current legislation. This stipulates: “the cancellation will lead to the blocking of the data, being kept only at the disposal of the Public Administrations, Judges and Courts, for the attention of possible liabilities arising from the processing, during the period of prescription of these. Once the aforementioned period has expired, the data must be deleted”.

CHANGES TO THIS PRIVACY POLICY

CONSTRUCTORA D’ARO, S.A. reserves the right to modify this policy to adapt it to new legislation or jurisprudence.

REVOCABILITY

The consent given, both for the processing and for the transfer of the data of the interested parties, can be withdrawn at any time by communicating with CONSTRUCTORA D’ARO, S.A. according to the terms established in this policy for the exercising of rights. This revocation shall in no case be retroactive.

LEGISLATION

In general, the relations between CONSTRUCTORA D’ARO, S.A. with the users of its telematic services, present on this website, are subject to the Spanish legislation and jurisdiction. The parties will expressly submit themselves to the Courts and Tribunals of Manresa, Barcelona for the resolution of all disputes arising out of or relating to its use.

In general, the relations between CONSTRUCTORA D’ARO, S.A with the users of its telematic services, present on this website, are subject to the Spanish legislation and jurisdiction. The parties will expressly submit themselves to the Courts and Tribunals of the provider’s registered office (if not considered a consumer for the purposes of the Consolidated Text of the General Law on the Defence of Consumers & Users (TRLGDCU)) or of the user (if considered a consumer for the purposes of the TRLGDCU).