Miguel Carpintero

Privacy Policy

Through this website, no personal data is collected from users without their knowledge, nor is it transferred to third parties. To find out about our policy on cookies, used to collect information from users, please read the Cookies Policy section of our website. Basic information on data protection Below we inform you about the data protection policy of MIGUEL CARPINTERO SL

Who is the data controller?
The personal data that may be requested directly from the interested party will be treated confidentially and will be incorporated into the corresponding processing activity owned by MIGUEL CARPINTERO SL

How do we obtain your personal data?
We collect your personal data on different occasions: • Every time you contact us directly, for example through the contact section or any other section in which you fill out a questionnaire on the website. or through the customer service lines, to request information about our products and services. • When you purchase or contract directly with us a product or service. • When you participate in our direct marketing campaigns, for example by accepting the sending of our Newsletter or participating in a promotion through our websites that requires you to complete an online form with your personal data. The products and services of MIGUEL CARPINTERO SL as well as its promotional campaigns, are aimed and designed mainly for adults. In this sense, we will only collect and process your personal data if you are at least 16 years old. MIGUEL CARPINTERO S.L., reserves the right to verify the age of the people who provide it with personal data. Any data of a child under 16 years of age will be deleted. We would appreciate it if you could help us keep your personal details up to date by informing us of any changes to your contact details or preferences.

What information can we get about you?
Through the different services and contact channels described in this Privacy Policy, the following types of data about you may be requested depending on your relationship with the Data Controller: • Customers and users: Identification and contact details: name, address, telephone numbers, email. Financial details: bank account number / credit card number. • Employees: Identification and contact details: name, address, telephone numbers, email PROTECDATUS CONSULTORS, SL Telf: 872 20 21 31 GIRONA – Version: 1 Date: 28/01/2022 GDPR Privacy Policy – Pàg. 4 MIGUEL CARPINTERO SL electronic. Financial details: bank account number. Academic and professional data. Studies completed and qualifications. Employment and Social Security data. Personal characteristics: marital status, date and place of birth, age, sex, nationality and percentage of disability. • Applicants: Identification and contact details: name, address, telephone numbers, email. Academic and professional data. Studies completed and qualifications. Employment and Social Security data. Personal characteristics: marital status, date and place of birth, age, sex, nationality and percentage of disability.

For what purposes do we process your personal data?
As a user of the website, we will process the personal data you provide us in order to respond to the query you have made to us and provide you with commercial information on the company’s products and services. As a subscriber to our Newsletter, we will process the personal data you provide us with in order to send our commercial communications in a timely manner. Due to your status as a customer, we will process your data to provide you with the requested service and the administrative and commercial management of our customer portfolio. As an Employee, we will process your data to carry out all the necessary procedures arising from our employment relationship: Personnel management. Contracts. Tax documentation. Processing of dismissals, regulatory files and even the death of employees. Personal file. Time control. Training. Pension plans. Social action. Occupational risk prevention. Issuance of the staff payroll. Management of trade union activity, where appropriate. Due to their status as an Applicant, the data provided will be processed only for the current or future personnel selection processes carried out by the company.

What is the Legitimacy for the processing of your data?
Users and members: GDPR Article 6.1.a) consent of the data subject for the processing of their personal data for one or more specific purposes. Customers: GDPR Article 6.1. b) the processing is necessary for the performance of a contract to which the data subject is a party, or for the application at the request of the latter of pre-contractual measures. GDPR Article 6.1.a) consent of the data subject for the processing of their personal data for one or more specific purposes. Employees: GDPR Article 6.1.b) the processing is necessary for the performance of a contract to which the data subject is a party. GDPR Article 6.1.c) the processing is necessary for the fulfilment of a legal obligation applicable to the data controller. Applicants: GDPR Article 6.1.c) the processing is necessary for compliance with a legal obligation applicable to the data controller. For other processing activities that may not appear in this privacy policy, please contact the Data Controller for more information. PROTECDATUS CONSULTORS, SL Telf: 872 20 21 31 GIRONA – Version: 1 Date: 28/01/2022 GDPR Privacy Policy – Pàg. 5 MIGUEL CARPINTERO SL

How long will we keep your data?
The personal data provided will be kept for the time necessary to comply with the purpose for which they are collected and to determine the possible responsibilities that may arise from the purpose, in addition to the periods established in the regulations on archives and documentation.

To whom will we communicate your data?
In general, personal data will not be communicated to third parties, except for legal obligation, which may include communications to organisations directly related to the controller (Tax, labour and accounting advice. Financial institutions. State Tax Administration Agency. Training companies . Entity entrusted with the management of occupational risks. National Institute of Social Security. Social Security General Treasury. Trade union organisations. Companies in charge of marketing and advertising. Personnel Selection Companies). State security forces and bodies, judicial bodies, Public Prosecutor’s Office. Although it is not possible to guarantee absolute protection against intrusion in the case of data transmissions via the Internet or from a website, we make every effort to maintain the physical, electronic and procedural protection measures necessary to ensure the protection of your information in accordance with applicable data protection requirements. All of yours are stored in a secure location (or secure physical copies) owned by us or our processors, and our security criteria and policies (or other equivalents of our processors) apply to accessing and using them.

Do we do international data transfers ?
MIGUEL CARPINTERO SL does not plan for international data transfers. How do we keep your data protected? To ensure the protection and maintain the security, integrity and availability of data, we use various security measures. Although it is not possible to guarantee absolute protection against intrusion in the transmission of data via the Internet or from a website, both we and our data processors make every effort to maintain the physical, electronic and procedural protection measures with which to guarantee the protection of your data in accordance with the applicable legal requirements in this area. The measures we use include the following: • limiting access to your data to only those people who need to know them in order to carry out the tasks they perform; • as a general rule, transfer the collected data in encrypted format; • store the most sensitive data (such as bank details) only in encrypted format; • install perimeter protection systems for IT infrastructures (firewalls) to prevent unauthorized access, for example hackers, and PROTECDATUS CONSULTORS, SL Telf: 872 20 21 31 GIRONA – Version: 1 Date: 28/01/2022 GDPR Privacy Policy – Pàg. 6 MIGUEL CARPINTERO SL • regularly monitor access to computer systems to detect and stop any misuse of personal data. In cases where we have provided you (or you have chosen) a password that allows you to access certain parts of our websites or any other portal, application or service under our control, you are responsible for keeping it secret and complying with all other security procedures that we notify you. You will not be able to share your password with anyone.

What rights can the interested parties exercise?
Any person has the right to obtain confirmation of the processing of their data carried out by MIGUEL CARPINTERO SL who can exercise their rights of access, rectification, deletion and portability of their data, limitation and opposition to their processing, as well as not to be subject to decisions based solely on the automated processing of their data, and withdraw the consent given, before MIGUEL CARPINTERO SL. B17033598. C/ Viladesau, 7 – 17481 – Sant Julià de Ramis – GIRONA. Or send an e-mail to info@miguelcarpintero.com, indicating “Data protection” in the subject line. In addition, the interested party may contact the competent Data Protection Control Authority for additional information or to submit a complaint.