In accordance with current regulations on data protection, Regulation (EU) 2016/679 of the European Parliament and the Council of April 27th, 2016 (General Data Protection Regulation) and the Organic Law on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD, Law 3/2018 of December 5th), we inform you of the Personal Data Protection Policy, regarding the processing of personal data, which is detailed below.

RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA

The responsible for processing is the legal entity that determines the purposes and means of the processing of personal data. In other words, the responsible decides how and for what purposes personal data are processed.

For this Privacy Policy Protection Data, the responsible of the treatment of personal data is:

  • Company name: Fundación Cluster de Automoción y Movilidad de Galicia, CEAGA
  • NIF: G-36.983.575
  • Address: Avda. Citroën, 3 y 5 – Edificio Zona Franca 1ª Planta – 36210 Vigo
  • Email: ceaga@ceaga.com
  • Telephone: 986 213 790
  • Activity: Business association

WHAT PERSONAL INFORMATION DO WE GATHER ABOUT YOU AND HOW DO WE PROTECT IT?

Personal data is any information about an identified or identifiable natural person.

For the purposes established in this Privacy Policy, the person in charge collects and processes the personal data that are explained in each type of treatment, and which will depend on the different services that you request or the contractual relationship that you have with our entity.

This organisation commits to treat with total confidentiality and to apply appropriate security measures, physical, technical and organisational, for the protection of your personal data.

You guarantee and respond, in any case, the veracity, accuracy, validity and authenticity of the personal data provided and undertakes to keep them properly updated.

PROCESSING OF “THIRD PARTY CONTACT” DATA

  1. What kind of personal data do we process?
    • Identificative data: name, address, telephone, email.
  2. For what purpose do we process your personal data
    • We process the personal data you provide us in the contact form for the management of contact data with third parties.
    • The purpose of advertising and diffusion of our activities has also been foreseen, for which the express consent of the interested party is requested.
    • The personal data will be kept for as long as the business relationship is maintained. If you decide to cancel your personal data, it will be deleted from our contact database.
  3. What is the legitimacy of the processing of your data?
    • The legal bases for the treatment of your data is the express consent requested of you.
  4. To which destinations will your data be communicated?
    • Your personal data will not be transferred to any other entity.
    • No international transfers of personal data are envisaged either.

PROCESSING OF “SUPPLIERS” DATA

  1. What type of personal data do we process?
    • Identification data: name, ID, address, telephone, email.
    • Financial data: bank account.
    • Academic and professional data: profession, position, degrees.
    • Transaction data: products and services delivered.
  2. For what purpose do we treat your personal data?
    • We process personal data that facilitate the management of the data of the suppliers, to maintain the business relationship, accounting, administrative and payment management, as well as tax obligations.
    • The personal data will be kept as long as the business relationship is maintained. If you decide to cancel your personal data, these may be kept in our databases during the periods provided by law to comply with tax and accounting obligations and will be deleted when they have prescribed the legal deadlines or those that apply.
  3. What is the legitimacy for the processing of your data?
    • The legal bases for the processing of the data is the execution of a contract, as well as the fulfillment of a legal obligation of the person responsible.
  4. To which recipients will your data be communicated??
    • Your personal data will not be transferred to any entity, except those that are necessary to public institutions by legal obligation.
    • No international transfers of personal data are envisaged either.

PROCESSING OF “EMPLOYMENT CANDIDATES” DATA

  1. What type of personal data do we process?
    • Identification data: name, ID, birthdate, address, telephone, email, photo.
    • Personal characteristics data: sex, marital status, nationality, age, date and place of birth.
    • Academic and professional data: profession, position, experience, degrees.
  2. For what purpose do we treat your personal data?
    • We process the personal data you provide us for the management of the selection processes of CEAGA’s companies.
    • The personal data will be kept as long as the interested person has not withdrawn the consent to continue saving their curriculum vitae for future selection processes. If you decide to cancel your personal data, these will be deleted from our database of job candidates.
  3. What is the legitimacy for the processing of your data?
    • The legal bases for the treatment of your data is the express consent requested of you.
  4. To which recipients will your data be communicated?
    • Your data may be transferred to the member companies of the Cluster, to participate in personnel selection processes.
    • No international transfers of personal data are planned.

PROCESSING OF “COURSE ATTENDEES” DATA

  1. What type of personal data do we process?
    • Identification data: name, ID, address, telephone, email.
    • Academic and professional data: profession, position, degrees.
  2. For what purpose do we treat your personal data?
    • We process the personal data you provide us for the registration of attendees to courses organized by CEAGA.
    • The personal data will be kept as long as the business relationship is maintained. If you decide to cancel your personal data, these will be removed from our database of course attendees
  3. What is the legitimacy for the processing of your data?
    • The legal bases for the processing of your data is the execution of a contract, as well as the fulfillment of a legal obligation of the person responsible.
  4. To which recipients will your data be communicated?
    • The necessary data transfers (contact, employment and training) will be made to comply with legal obligations with public entities such as the State Foundation for Training and Employment or the Government of Galicia.
    • As those in charge of the treatment, data will be provided to: the persons / entities that provide training (company, name and position) and, if necessary, to the companies where the training takes place (company, CIF, name and NIF) and / or the entities that issue certificates or titles related to the training activity (name and NIF).
    • In the training that requires it, the necessary data transfers are made to ensure accident insurance coverage.
    • In the case that all or part of the training takes place in facilities other than those of CEAGA, it may be necessary to transfer data to third parties for identification and access purposes.
    • It could also publish the photograph of the attendees of the courses (students and teachers) on the website or internal media of CEAGA in order to disseminate certain training events, for which the express consent of the interested is requested.
    • When training is carried out in virtual mode, the data is hosted on the ZOOM videoconferencing platform server (GDPR Compliance zoom.us).
    • No international transfers of personal data are planned.

PROCESSING OF “TEACHERS” DATA

  1. What type of personal data do we process?
    • Identification data: name, ID, address, telephone, email.
    • Financial data: bank account.
    • Academic and professional data: profession, position, degrees.
  2. For what purpose do we treat your personal data?
    • We process the personal data you provide us for the registration of attendees to courses organized by CEAGA.
    • The personal data will be kept as long as the business relationship is maintained. If you decide to cancel your personal data, these will be removed from our database of course attendees.
  3. What is the legitimacy for the processing of your data?
    • The legal bases for the processing of your data is the execution of a contract, as well as the fulfillment of a legal obligation of the person responsible.
  4. To which recipients will your data be communicated?
    • The necessary assignments are made to comply with legal obligations to public entities such as the Xunta de Galicia or the State Foundation for Training and Employment, as well as to the Tax Agency or Social Security.
    • Data transfers are also made for legitimate purposes related to the activity of the Cluster: It will be necessary to communicate the bank data (NIF, name and surname and account number) to the financial entities responsible for intervening in the operation of the payment of the teaching fees.
    • In the case that all or part of the training takes place in facilities other than those of CEAGA, it may be necessary to transfer data to third parties for identification and access purposes.
    • It could also publish the photograph of the attendees of the courses (students and teachers) on the website or internal media of CEAGA in order to disseminate certain training events, for which the express consent of the interested is requested.
    • No international transfers of personal data are planned.

PROCESSING OF “CONFERENCES AND SURVEYS” DATA

  1. What type of personal data do we process?
    • Identification data: name, ID, address, telephone, email.
    • Academic and professional data: profession, position, etc.
  2. For what purpose do we treat your personal data?
    • We process the personal data that you provide us for the registration of attendees to conferences organized by CEAGA, as well as of respondents who complete the different surveys sent.
    • The personal data will be kept as long as the interested person has not withdrawn the consent to continue saving their curriculum vitae for future selection processes. If you decide to cancel your personal data, these will be deleted from our database of job candidates.
  3. What is the legitimacy for the processing of your data?
    • The legal bases for the processing of your data is the execution of a contract, as well as the fulfillment of a legal obligation of the person responsible.
  4. To which recipients will your data be communicated?
    • Data about the position and the company of the conference attendees and / or respondents could be transferred, but in no case will their personal and contact data be transferred to any entity.
    • Photographs of those attending the conference could be published on the website or in other CEAGA media in order to publicize certain events.
    • External platforms are used to carry out some surveys, which also collect data on the respondents. The platforms used are: SurveyMonkey (SurveyMonkey Privacy Policy); Google Forms (Google Privacy Policy); Microsoft Forms (Microsoft Privacy Policy).
    • No international transfers of personal data are planned.

WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US YOUR DATA?

Following the rules of the Data Protection, you have rights related with the treatment of your personal data. The exercise of these rights will be free of charge to you, except in cases where manifestly unfounded or excessive requests are made, especially for repetitive requests. These rights are:

  1. Right to information: You have the right to be informed in a concise, transparent, intelligible and easily accessible manner, with clear and simple language, about the use and processing of your personal data.
  2. Right to access: You have the right to ask us at any time to confirm whether we are processing your personal data, to provide you with access to your personal data and information about their processing and to obtain a copy of such data. The copy of your personal data that we provide will be free of charge but the request for additional copies may be subject to a reasonable charge based on administrative costs. For our part, we may ask you to prove your identity or require further information necessary to process your request.
  3. Right to rectification: You have the right to request rectification of inaccurate, out-of-date or incomplete personal data concerning you. You may also request that incomplete personal data be supplemented, including by means of an additional declaration.
  4. Right of deletion: You have the right to request the deletion of your personal data when, among other reasons, the data are no longer necessary for the purposes for which they were collected. However, this right is not absolute, so our organisation may continue to keep them properly blocked in the cases provided for by applicable law.
  5. Right to limit processing: You have the right to request that we limit the processing of your personal data which means that we may continue to store it, but not continue to process it if any of the following conditions are met:
  6. that you challenge the accuracy of the data, for a period of time that allows the person responsible to verify the accuracy of the data;
  7. the processing is unlawful, and you oppose the deletion of the data and request instead the limitation of its use;
  8. our entity no longer needs the data for the purposes of processing, but you need them for the formulation, exercise or defense of claims;
  9. you have objected to the treatment, while verifying whether the legitimate motives of our entity prevail over yours.
  10. Right to data portability: You have the right to have your data transmitted to another data controller in a structured, commonly used and machine-readable format. This right applies when the processing of your personal data is based on the consent or performance of a contract and such processing is carried out by automated means.
  11. Right of opposition: This right allows you to object to the processing of your personal data, including profiling. We will not be able to comply with your right only when we process your data if we can demonstrate legitimate reasons for processing or for formulating, exercising or defending claims.
  12. Right not to be subject to automated decisions, including profiles: This right allows you not to be the subject of a decision based solely on automated processing, including profiling, which produces – such decisions – legal effects or affects you in a similar way. Unless such a decision is necessary for the conclusion or performance of a contract, is authorised by law or is based on consent.
  13. Right to lodge a complaint with a supervisory authority: In cases where we have obtained your consent for the processing of your personal data in relation to certain activities (for example, in order to send you commercial communications), you may withdraw it at any time. In this way, we will stop performing that specific activity for which you had previously consented, unless there is another reason that justifies the continuity of the processing of your data for these purposes, in which case, we will notify you of this situation.
  14. Right to file a claim with a supervisory authority: You have the right to file a claim with the Spanish Agency for Data Protection, C / Jorge Juan, 6, 28001 Madrid, 901 100 099 – 912 663 517 (www.agpd.es ), or in this electronic address. You can exercise the above rights by sending a communication to our Customer Service Department, or by email to ceaga@ceaga.com, attaching a document proving your identity and providing the necessary details to process your request. Those interested can obtain additional information about their rights on the website of the Spanish Agency for Data Protection, www.agpd.es.