Privacy
Personal Data Protection Policy
MANUFACTURA DE MAQUINARIA QUESERA, S.L. is an organisation that collects personal data through the various means available to it. This entails a significant responsibility in the design and organisation of procedures so that they comply with applicable data protection legislation. Therefore, MANUFACTURA DE MAQUINARIA QUESERA, S.L. will adopt all necessary security measures to ensure the protection of the data collected.
In the exercise of these responsibilities, and in order to establish the general principles governing the processing of personal data within the Organisation, MANUFACTURA DE MAQUINARIA QUESERA, S.L. approves this Personal Data Protection Policy, which it makes available to all its stakeholders, while also complying with the following legislation:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, GDPR).
- Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).
- Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).
I. Scope
This Personal Data Protection Policy applies to MANUFACTURA DE MAQUINARIA QUESERA, S.L., its governing and management bodies, its workforce and all persons who have a relationship with the Organisation, expressly including service providers with access to personal data (“Data Processors”).
The controller responsible for the personal data collected by the Organisation is MANUFACTURA DE MAQUINARIA QUESERA, S.L., with Tax Identification Number B13623004, represented by JUAN JOSÉ CASTELLANOS HERGUETA (hereinafter, the Data Controller). Its contact details are as follows:
- Address: C/ HERNÁN CORTÉS, 67, TOMELLOSO, CIUDAD REAL, 13700, SPAIN.
- Telephone: +34 619 406 170.
- Email: This email address is being protected from spambots. You need JavaScript enabled to view it..
II. Information about the Data Controller and the processing of personal data by MANUFACTURA DE MAQUINARIA QUESERA, S.L.
Additional information on data processing consists of the more specific and detailed information that organisations must provide to data subjects regarding how their personal data is managed. This requirement arises from the transparency principle established by the General Data Protection Regulation (GDPR) and supplements the basic information initially provided by offering a greater level of detail about the processing activities.
Below, MANUFACTURA DE MAQUINARIA QUESERA, S.L. provides additional information about the personal data processing activities it carries out:
| Identity | MANUFACTURA DE MAQUINARIA QUESERA, S.L. |
|---|---|
| Address | C/ HERNÁN CORTÉS, 67, TOMELLOSO, CIUDAD REAL, 13700, SPAIN |
| Telephone | +34 619 406 170 |
| This email address is being protected from spambots. You need JavaScript enabled to view it. |
| Data processing activity | Purpose of processing | Retention period |
|---|---|---|
| CUSTOMERS | CUSTOMER, ACCOUNTING, TAX AND ADMINISTRATIVE MANAGEMENT |
CUSTOMER MANAGEMENT: for the duration of the relationship and, once it has ended, the data will remain blocked for the applicable limitation periods relating to possible liabilities. ACCOUNTING: 6 years. TAX: 4 years. ADMINISTRATIVE: for the duration of the relationship and, once it has ended, the data will remain blocked for the applicable limitation periods relating to possible liabilities. |
| SUPPLIERS | CUSTOMER, ACCOUNTING, TAX AND ADMINISTRATIVE MANAGEMENT |
CUSTOMER MANAGEMENT: for the duration of the contractual relationship and subsequently for the applicable limitation periods for legal claims. ACCOUNTING: 6 years. TAX: 4 years. ADMINISTRATIVE: for the limitation periods applicable to the associated obligations or liabilities. |
| HUMAN RESOURCES | PAYROLL MANAGEMENT, OCCUPATIONAL RISK PREVENTION AND HUMAN RESOURCES |
PAYROLL MANAGEMENT: 4 years. OCCUPATIONAL RISK PREVENTION: 5 years. HUMAN RESOURCES: 4 years. |
| CVs | HUMAN RESOURCES | HUMAN RESOURCES: 4 years. |
| WEBSITE FORM | PROFESSIONAL CONTACT | PROFESSIONAL CONTACT: the data will be retained for as long as is strictly necessary to maintain the professional relationship and, in all cases, no longer than required for that purpose. |
| VIDEO SURVEILLANCE | BUILDING SECURITY AND ACCESS CONTROL, VIDEO SURVEILLANCE |
BUILDING SECURITY AND ACCESS CONTROL: for the period strictly necessary for control and security purposes; thereafter, the data will be erased or blocked in accordance with the applicable limitation periods for liabilities. VIDEO SURVEILLANCE: a maximum of 1 month from the date of recording, unless it must be retained to provide evidence of events affecting the integrity of persons, property or facilities. |
| Data processing activity | Lawful basis |
|---|---|
| CUSTOMERS | Performance of a commercial contract. |
| SUPPLIERS | Performance of a commercial contract or service agreement. |
| HUMAN RESOURCES | Performance of an employment contract. |
| CVs | Legitimate interest and the data subject’s consent. |
| WEBSITE FORM | Legitimate interest and the data subject’s consent. |
| VIDEO SURVEILLANCE | Public interest in relation to video surveillance. |
| Data processing activity | Expected disclosures | International transfers |
|---|---|---|
| CUSTOMERS | PUBLIC AUTHORITIES WITH JURISDICTION IN THE MATTER; BANKING OR FINANCIAL ENTITIES | No |
| SUPPLIERS | PUBLIC AUTHORITIES WITH JURISDICTION IN THE MATTER; BANKING OR FINANCIAL ENTITIES | No |
| HUMAN RESOURCES | PUBLIC AUTHORITIES WITH JURISDICTION IN THE MATTER; BANKING OR FINANCIAL ENTITIES | No |
| CVs | No disclosures are expected. | No |
| WEBSITE FORM | No disclosures are expected. | No |
| VIDEO SURVEILLANCE | PUBLIC AUTHORITIES WITH JURISDICTION IN THE MATTER | No |
Your Rights and How to Exercise Them
Any person has the right to obtain confirmation as to whether MANUFACTURA DE MAQUINARIA QUESERA, S.L. is processing personal data concerning them.
Data subjects have the right to access their personal data and to request the rectification of inaccurate data or, where appropriate, its erasure when, among other reasons, the data is no longer required for the purposes for which it was collected.
In certain circumstances, data subjects may request the restriction of the processing of their data. In such cases, the data will only be retained for the establishment, exercise or defence of legal claims and in order to comply with legally established retention periods.
Data subjects may also object to the processing of their personal data. In such cases, MANUFACTURA DE MAQUINARIA QUESERA, S.L. will cease processing the data unless there are compelling legitimate grounds for the processing or it is required for the establishment, exercise or defence of legal claims.
Likewise, where the applicable conditions are met and it is technically feasible, data subjects have the right to request that their personal data be transmitted directly to another data controller or processor.
To exercise any of the rights described above, please contact us in writing at:
- MANUFACTURA DE MAQUINARIA QUESERA, S.L., C/ HERNÁN CORTÉS, 67, TOMELLOSO, CIUDAD REAL, 13700, SPAIN, or by email at This email address is being protected from spambots. You need JavaScript enabled to view it.. We recommend attaching a copy of your national identity document or another valid identification document to your request.
III. Principles Applicable to Personal Data Processing
This Personal Data Protection Policy is an accountability measure intended to ensure compliance with the legislation applicable in this area and, in connection with it, respect for the rights to honour and privacy in the processing of the personal data of all persons who have a relationship with MANUFACTURA DE MAQUINARIA QUESERA, S.L.
In implementing this Policy, the principles governing data processing within the Organisation are established, together with the organisational and security procedures and measures that persons subject to this Policy undertake to implement within their areas of responsibility.
Accordingly, MANUFACTURA DE MAQUINARIA QUESERA, S.L. will ensure compliance with the following principles:
- Lawfulness, fairness, transparency and purpose limitation. Data subjects must always be informed of the processing through the established notices and procedures. Processing will only be considered lawful where the data subject has consented to it, with particular attention to consent given by minors, or where another valid lawful basis applies, and provided that the purpose complies with the applicable legislation.
- Data minimisation. The personal data processed must be adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.
- Accuracy. Personal data must be accurate and, where necessary, kept up to date. Appropriate measures will be adopted to ensure that inaccurate personal data is erased or rectified without delay, having regard to the purposes of the processing.
- Storage limitation. Personal data will be kept in a form that permits the identification of data subjects for no longer than is necessary for the relevant processing purpose.
- Integrity and confidentiality. Personal data will be processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
- Data disclosures. The purchase or acquisition of personal data originating from unlawful sources is prohibited, as is the acquisition of data that has been collected or disclosed in breach of the law or whose lawful origin is not sufficiently guaranteed.
- Engagement of service providers with access to personal data. Only service providers offering sufficient guarantees to implement appropriate technical and security measures will be selected. The corresponding data processing agreement will be formally documented with such providers.
- International data transfers. Any processing of personal data subject to European Union law that involves a transfer of data outside the European Economic Area must be carried out in strict compliance with the requirements laid down by the applicable legislation.
- Rights of data subjects. The Organisation will facilitate the exercise of the rights of access, rectification, erasure, restriction of processing, objection and data portability. To this end, it will establish the necessary internal procedures and, in particular, the appropriate forms for exercising those rights, which must in all cases meet the applicable legal requirements.
MANUFACTURA DE MAQUINARIA QUESERA, S.L. will ensure that the principles set out in this Personal Data Protection Policy are taken into account:
- In the design and implementation of all working procedures.
- In the products and services offered.
- In all contracts and obligations entered into or assumed.
- In the implementation of all systems and platforms that allow access by employees, workers or third parties and/or the collection or processing of personal data.
IV. Personal Data of Minors
In accordance with Article 8 of the GDPR and Article 7 of Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights, only persons over the age of 14 may lawfully consent to the processing of their personal data by MANUFACTURA DE MAQUINARIA QUESERA, S.L. Where the person is under the age of 14, consent from their parents or legal guardians will be required, and the processing will only be considered lawful to the extent that it has been authorised by them.
V. Confidentiality and Security of Personal Data
MANUFACTURA DE MAQUINARIA QUESERA, S.L. undertakes to inform the user without undue delay where a personal data breach is likely to result in a high risk to their rights and freedoms. In accordance with Article 4 of the GDPR, a personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
Personal data will be treated as confidential by the Data Controller, which undertakes to inform and ensure, through a legal or contractual obligation, that this confidentiality is respected by its employees, associates and any other person to whom the information is made accessible.
VI. Commitment of the Personnel of MANUFACTURA DE MAQUINARIA QUESERA, S.L.
The employees of MANUFACTURA DE MAQUINARIA QUESERA, S.L. have been informed of this Policy and acknowledge that personal data is an asset of MANUFACTURA DE MAQUINARIA QUESERA, S.L.. They therefore adhere to this Policy and undertake to:
- Complete the data protection awareness training made available by MANUFACTURA DE MAQUINARIA QUESERA, S.L..
- Apply the user-level security measures relevant to their role, without prejudice to any responsibilities for their design and implementation that may be assigned to them according to their position within MANUFACTURA DE MAQUINARIA QUESERA, S.L..
- Use the established procedures and forms for the exercise of rights by affected users and immediately inform MANUFACTURA DE MAQUINARIA QUESERA, S.L. so that the request can be handled effectively.
- Inform MANUFACTURA DE MAQUINARIA QUESERA, S.L., as soon as they become aware of it, of any deviation from this Policy, particularly any “personal data breach”, using the form established for that purpose.
VII. Monitoring and Evaluation
MANUFACTURA DE MAQUINARIA QUESERA, S.L. will carry out an annual review, assessment and evaluation, as well as a review whenever significant changes occur in its data processing activities, of the effectiveness of the technical and organisational measures implemented to ensure the security of processing.