Common Issues for All Processing Activities: Who is responsible for processing your data? • Data Controller: COGER Y LLEVAR, S.L. • Document Number: B84868629 • Fiscal Address: Calle PLATAFORMA BAJA; PARCELA B3.1, CALLE 7-9, CP 28053 MERCAMADRID, Madrid • Phone: +34 915 079 401 • Email: eva.alvarez@trans-salsa.es What are your rights when you provide us with your data? Any individual has the right to obtain confirmation as to whether we are processing personal data concerning them or not. In this regard, you have the right to request:
- Access: The person providing their data has the right to obtain confirmation from the data controller whether their data is being processed and detailed information regarding specific aspects of the processing being carried out.
- Rectification: The person providing their data has the right to obtain the rectification of inaccurate personal data concerning them or to have incomplete data completed.
- Erasure: The person providing their data has the right to request the erasure of their personal data; in any case, erasure will be subject to the limits established in the applicable regulations.
- Restriction of Processing: The person providing their data has the right to request the restriction of the processing of their personal data.
- Objection to Processing: Under certain circumstances and for reasons related to their particular situation, individuals may object to the processing of their data. The entity will cease processing them unless there are compelling legitimate grounds or for the exercise or defense of potential claims.
- Right to Data Portability: The person providing their data has the right to receive the personal data concerning them, provided to the data controller, in a structured, commonly used, and machine-readable format, as well as to transmit them to another data controller.
You can exercise these rights by contacting the data controller using the contact details provided at the beginning of this document. If you require additional information regarding the exercise of your rights, you may also contact the Spanish Data Protection Agency (AEPD). Additionally, we inform you that you have the right to withdraw consent for any specific purpose at any time without affecting the lawfulness of the processing based on consent before its withdrawal. If you believe your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency (C/ Jorge Juan, 6 – 28001 Madrid or at www.agpd.es).
Specific Issues for Each Processing Activity:
SECURITY BREACH PROCESSING
- Purpose: Management and notification of security breaches.
- Retention Period: Data will be retained as long as necessary to fulfill the purpose for which they were collected and to determine possible liabilities arising from this purpose and data processing. Once this period has elapsed, they will be automatically deleted.
- Legal Basis: Legal obligation.
- Data Recipients: Other public administration bodies.
CONTACT PROCESSING
- Purpose: Managing and responding to information and quotation requests, as well as maintaining professional or business contact with individuals, including those representing legal entities with whom the entity has a relationship.
- Retention Period: Data will be retained as long as necessary to fulfill the purpose for which they were collected and to determine possible liabilities arising from this purpose and data processing. Once this period has elapsed, they will be automatically deleted.
- Legal Basis: Legitimate interest.
- Data Recipients: No data is shared with third parties except for legal obligations.
ACCESS CONTROL PROCESSING
- Purpose: Managing the entry and exit of individuals to the entity’s facilities.
- Retention Period: Data will be retained as long as necessary to fulfill the purpose for which they were collected and to determine possible liabilities arising from this purpose and data processing. Once this period has elapsed, they will be automatically deleted.
- Legal Basis: Consent and signature of the individual, Contract execution, Legitimate interest, Legal obligation.
- Data Recipients: No data is shared with third parties except for legal obligations.
EXERCISE OF RIGHTS PROCESSING
- Purpose: Managing the exercise of rights under data protection legislation and complaint forms.
- Retention Period: Data will be retained as long as necessary to resolve complaints.
- Legal Basis: Legal obligation.
- Data Recipients: Other public administration bodies.
SERVICE PROVISION PROCESSING
- Purpose: Providing our services derived from business activity, tax and accounting management to comply with legal obligations.
- Retention Period: Data will be retained as long as necessary to fulfill the purpose for which they were collected and to determine possible liabilities arising from this purpose and data processing. Once this period has elapsed, they will be automatically deleted.
- Legal Basis: Contract execution.
- Data Recipients: Tax administration, Organizations or individuals directly related to the data controller.
ENTITY PROMOTION PROCESSING (IMAGE PUBLICATION)
- Purpose: Use of personal data (image) through photographs and audiovisual material provided within the relationship with the entity for publication on the entity’s website, social media profiles, commercial dissemination videos, magazines, or publications related to our sector.
- Retention Period: Data will be retained as long as necessary to fulfill the purpose for which they were collected and to determine possible liabilities arising from this purpose and data processing. Once this period has elapsed, they will be automatically deleted.
- Legal Basis: Consent and signature of the individual.
- Data Recipients: No data is shared with third parties except for legal obligations.
SUPPLIER PROCESSING
- Purpose: Managing the commercial relationship with suppliers.
- Retention Period: Data will be retained as long as necessary to fulfill the purpose for which they were collected and to determine possible liabilities arising from this purpose and data processing. Once this period has elapsed, they will be automatically deleted.
- Legal Basis: Contract execution.
- Data Recipients: Tax administration, Banks, savings banks, and credit unions.
HUMAN RESOURCES PROCESSING
- Purpose: Managing the entity’s employees, including occupational risk prevention and attendance control.
- Retention Period: Data will be retained as long as necessary to fulfill the purpose for which they were collected and to determine possible liabilities arising from this purpose and data processing. Once this period has elapsed, they will be automatically deleted.
- Legal Basis: Contract execution, Legitimate interest, Legal obligation.
- Data Recipients: Tax administration, Banks, savings banks, credit unions, Social Security organizations, Organizations or individuals directly related to the data controller, Other public administration bodies.
RECRUITMENT PROCESSING
- Purpose: Managing the relationship with job applicants.
- Retention Period: Data will be retained as long as necessary to fulfill the purpose for which they were collected and to determine possible liabilities arising from this purpose and data processing. Once this period has elapsed, they will be automatically deleted.
- Legal Basis: Consent and signature of the individual.
- Data Recipients: No data is shared with third parties except for legal obligations.
VIDEO SURVEILLANCE PROCESSING
- Purpose: Ensuring the security of people, assets, and facilities.
- Retention Period: Data will be retained as long as necessary to fulfill the purpose for which they were collected and to determine possible liabilities arising from this purpose and data processing. Once this period has elapsed, they will be automatically deleted.
- Legal Basis: Legitimate interest.
- Data Recipients: Law enforcement agencies, Organizations or individuals directly related to the data controller.