In ALFAMETAL INTERNATIONAL BCN, SL we care about privacy and transparency.

Effective date of this privacy policy: 03/26/2024

Who is responsible for the processing of your data?

ALFAMETAL INTERNATIONAL BCN, SL.
B66358318.
Avenida Antoni Gaudí 54, Rubí – 08191 – BARCELONA. 935 952 730
info@alfametal.es

Below you will find the details about the personal data processing that we carry out, as well as all the information related to it.

For which purposes do we process your personal data?

  • Customer data processing: we deal with the information given by interested individuals to conduct the administration management, accounting and taxation of the requested services and to manage the collection of the same, as well as to send commercial communications about our products and services. Given the case that you do not facilitate your personal data, we will not be able to fulfil the previously described functionalities.
  • Data processing of potential customers and web contacts: To manage potential customers who have expressed an interest in our products and/or services and to provide the requested quote, as well as other commercial contacts and, where appropriate, to send promotional communications, including by electronic means. If you do not provide your personal data, we will not be able to fulfil the purposes described. Likewise, whoever provides the data through the forms on this website declares that they are over 14 years of age, and access to and use of the portal by minors under that age is prohibited. If at any time, the Data Controller detects that a minor under 14 years of age has provided personal data, we will proceed to delete them.
  • Job candidates’ data processing: To manage the CVs received and to conduct personnel selection processes, interviews and other necessary procedures to pursuit the best possible candidate for a particular job. If you do not provide your data, we will not be able to fulfil the functions described above.
  • Data processing of the complaints channel: Respond to and study your request and the information provided and carry out, where appropriate, the necessary internal investigation. Likewise, take the appropriate measures resulting from the investigation carried out.
  • Processing of video surveillance data: To ensure the security of persons, property and facilities.

No automated decisions will be taken on the basis of the data provided in any of the processing operations.

How long will we retain the information provided?

  • Customer data processing: The data will be kept for as long as the data subject does not request their deletion and, where appropriate, for the years necessary to meet the legal obligations.
  • Data processing of potential customers and web contacts: The data will be kept for as long as the data subject does not request their deletion, provided that they are necessary for the purposes described. They will be deleted once they are no longer necessary for the purposes described.
  • Job candidates’ data processing: Two years since the last interaction.
  • Data processing of the complaints channel: The retention periods are as follows:
    • Investigation/communication instruction: Duration of the investigation and which, in general, may not exceed 3 months.Communication investigation/instruction completed:
    • Communications about unproven facts: 3 months + Maximum period of 2 months from the completion of the investigation.
    • Communications about proven facts (and a criminal, labor, etc. procedure is initiated): 3 months + Duration of the processing of the procedure.
    • Once the procedure is completed: 3 months + Period during which the procedure is processed + Maximum period of 2 months from the completion of the procedure.

    In the event that the facts investigated were allegedly constitutive of a crime, and for the purposes of providing maximum collaboration with the competent authorities that may be aware of the investigation thereof, the conservation period will be extended until the date of prescription of the alleged crimes. .
    In any case, the data will be kept in a blocked manner, that is, they will be identified and reserved in order to prevent their processing except for making them available to Public Administrations, Judges and Courts. After the deadlines identified in the previous table, the file and all documentation related to the facts investigated will be deleted.

  • Processing of video surveillance data: The data will be kept for a maximum of 30 days, except for communication to Security Forces, and/or Courts and Tribunals.

What is the legitimacy of your personal data processing?

We indicate to you the legal basis for the processing of your data:

  • Customer data processing:
  • The performance of a contract: clients tax management, administrative and accounting operations. (RGPD art. 6.1.b).
  • Legitimate interests of the Controller: the process of sending commercial communications (even in electronic form). (RGPD Considered 47, LSSICE art. 21.2).
  • Data processing of potential customers and web contacts:
    • The performance of a contract: Management of potential customers who have expressed an interest in our products and/or services and providing the requested quote (RGPD, art. 6.1.b).
    • Consent of the interested party: Sending promotional communications, including by electronic means (RGPD, art. 6.1.a, LSSICE art.21).
    • Legitimate interest of the Controller: Management of professional contact data (LOPDGDD art.19, RGPD art. 6.1.f).
  • Job candidates’ data processing:
    • The contract performance: Management of the Curriculum Vitae submitted by the candidate in order to conduct personnel selection processes in pursuit of the best possible candidate for a given job. (RGPD art. 6.1.b).
  • Data processing of the complaints channel:
    • Compliance with a legal obligation: Address and study information about actions or omissions that have occurred in the company that may constitute any type of infraction or crime through the creation of an internal information channel, as well as carry out all those actions aimed at verify the plausibility of the reported facts. (Law 2/2023, of February 20, regulating the protection of people who report regulatory infractions and the fight against corruption; RGPD arts. 6.1.c and 9.2.b).
  • Processing of video surveillance data:
    • Mission in the Public Interest: processing necessary for the performance of a mission carried out in the public interest or in the exercise of public powers vested in the controller (RGPD art. 6.1.e), as stated in the “Guide on the use of video cameras for security and other purposes”, published by the Spanish Data Protection Agency.

To which recipients will your data be communicated?

  • Customer data processing
  • Public administration with competence in the matter, in order to comply with legal obligations (legal requirement).
  • Tax Administration, in order to comply with legal obligations (legal requirement).
  • Financial institutions, in order to issue the corresponding invoices. (Contractual requirement).
  • Group companies, in order to collaborate in the management and provision of the service (contractual requirement).
  • Data processing of potential customers and web contacts: No data will be passed on to third parties, unless legally obliged to do so.
  • Job candidates’ data processing: No data will be passed on to third parties, unless legally obliged to do so.
  • Data processing of the complaints channel:
    • Specialized companies that are eventually designated to collaborate in the investigation/instruction to be carried out (contractual requirement).
    • If necessary, Public Administrations with jurisdiction in the matter and/or Judges and Courts in order to comply with legal obligations (legal requirement).
  • Processing of video surveillance data:
    • Where appropriate, State security forces and corps, as well as Courts and Tribunals, for the purpose of providing the images if a crime has been committed (legal requirement).

Data transfer to third countries.

There are no provisions for the transfer of your data to third countries.

What are your rights when you provide your data to us?

Any person has the right to obtain confirmation as to whether in ALFAMETAL INTERNATIONAL BCN, SL we are or are not processing personal data concerning them.

The interested individuals have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. You also have the right to the portability of your data.

In specific circumstances, the interested individuals may request the restriction the personal data processing, in which case we will only keep it to exercise or defence legal claims.

In certain circumstances and on grounds relating to their special circumstances, the interested individuals may object to their personal data treatment. In such case, ALFAMETAL INTERNATIONAL BCN, SL will cease to process the personal data, except for compelling legitimate reasons, or for the exercise or defense of possible claims.

You will be able to exercise your rights, by addressing the data processing controller in to Avenida Antoni Gaudí 54, Rubí – 08191 – BARCELONA or to info@alfametal.es.

When commercial communications are sent using as a legal basis the legitimate interest of the data controller, the interested party may object to the processing of his or her personal data for this purpose.

If you have given your consent for a specific purpose, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

In case you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can lodge a complaint with the competent Data Protection Supervisory Authority.

How have obtained your personal data?

The personal data we process at ALFAMETAL INTERNATIONAL BCN, SL comes from the interested individual himself/herself.

The categories of processed data are:

  • Customer data processing
    • Identification
    • Postal and email
    • Commercial information.
  • Data processing of potential customers and web contacts:
    • Identification data.
    • Email addresses.
  • Job candidates’ data processing:
    • Identification data.
    • Postal and email addresses.
    • Commercial information.
  • Data processing from the complaints channel: These data will come from the informant, received through the internal channel created, as well as from the investigation carried out. The data processed will be:
    • Identification data of the communicator and the communication (when possible and the communication is not anonymous).
    • Postal and electronic addresses of the communicating party (when possible and the communication is not anonymous).
    • Any other relevant matter to develop the investigation of the alleged act or omission constituting an infraction or crime.
  • Processing of video surveillance data:
    • Image