PRIVACY POLICY

DATA CONTROLLER OR PROCESSING RESPONSIBILITY

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, dated April 27, 2016 (GDPR), we inform you that the personal data provided to MEVET SAU will be incorporated into a shared information database owned by the companies within GRUPO VALLCOMPANYS, as detailed below (hereinafter referred to as GRUPO VALLCOMPANYS):

• MEVET SAU Phone: +34 973 21 02 69, Fax: +34 973 21 05 03, email: mevet@mevet.es
• The list of companies along with their contact and identification details can be found at the following link:
  http://www.vallcompanys.es

CONTACT

For any matters related to the processing of personal data by the companies within GRUPO VALLCOMPANYS, you may contact us via email at protecciondedatos@vallcompanys.es.  Additionally, you may also reach our Data Protection Officer at dpd@vallcompanys.es.

DATA COLLECTED, PURPOSE, LEGITIMACY, AND RETENTION PERIOD

The companies within GRUPO VALLCOMPANYS will collect the following data provided by the data subject:

• COMMERCIAL CONTACTO: Handling inquiries and contact requests received through any means, as well as maintaining commercial relationships related to the services of GRUPO VALLCOMPANYS companies:

Data collected: Name, phone number, email, and inquiry.

Purpose: To respond to information requests made by the data subject through any means regarding the products and services of GRUPO VALLCOMPANYS companies, as well as to establish and maintain business relationships.

Legitimacy: Based on the data subject’s consent, GRUPO VALLCOMPANYS is authorized to process the data provided through the contact request, in accordance with the legitimate interest in developing and maintaining business relationships.

Retention period: Data will be stored until the data subject requests its deletion. Once deleted, it will be retained for a maximum period of 6 years to remain available to public authorities, judges, and courts for the purpose of addressing and defending potential legal liabilities arising from the processing.

• PROMOTIONAL OR NEWSLETTERS: Sending information, updates, notices, reminders, and promotions that may be of interest to you, related to the activities of GRUPO VALLCOMPANYS companies.

Data collected: Email address, first name, and last name.

Purpose: Registering interested parties to receive information, updates, and promotions, as well as to establish and maintain business relationships.

Legitimacy: The data subject’s consent for GRUPO VALLCOMPANYS companies to register them for promotional services, along with the legitimate interest in developing business relationships.

Retention period: Data will be stored until the data subject requests its deletion. Once deleted, it will be retained for a maximum period of 6 years to remain available to public authorities, judges, and courts for the purpose of addressing and defending potential legal liabilities arising from the processing.

• CURRICULUM OR EMPLOYMENT: Submission of a CV via the website or through any other means to GRUPO VALLCOMPANYS.

Data collected: Professional field, first name, last name, phone number, email, CV, cover letter, and any other personal data related to the CV or professional profile.

Purpose: Managing the candidate’s application for published selection processes or for future vacancies that match their professional profile within GRUPO VALLCOMPANYS companies.

Retention period: Data will be stored until the candidate is hired or requests its deletion. It will be retained for the time necessary to fulfill the purpose of processing and, once completed, may be stored for a maximum of six years to remain available to public authorities, judges, and courts for the purpose of addressing and defending potential legal liabilities arising from the processing.

Legitimacy: The data subject’s consent.

Recipients: The data provided and any information obtained during the selection process may be shared with:

• • • • Third-party companies identified by the candidate for reference checks that may be necessary for the candidate’s selection.

• SERVICES: Data provided for the provision of services by any of the companies within GRUPO VALLCOMPANYS. The specific services will be identified at the time of data collection and registration.

Data collected: First name, last name, NIF (tax identification number), contact address, home address, email, phone number, and any other necessary data depending on the requested service registration, which will be strictly required for the registration in GRUPO VALLCOMPANYS services.

Purpose: Registering interested parties for the provision of services by GRUPO VALLCOMPANYS, as well as establishing and maintaining business relationships.

Legitimacy: The legal relationship or execution of the service by GRUPO VALLCOMPANYS companies for the indicated services and the legitimate interest in developing business relationships.

Retention period: Data will be stored for as long as necessary to fulfill the purpose of processing or until the data subject requests its deletion. Once deleted, data may be retained for a maximum of six years to remain available to public authorities, judges, and courts for the purpose of addressing and defending potential legal liabilities arising from the processing.

• REGISTRATION AND MONITORING OF CORPORATE SOCIAL MEDIA ACCOUNTS: Personal data provided or enabled on social media platforms when becoming a follower of the corporate accounts of GRUPO VALLCOMPANYS companies. The corporate social media accounts are as follows:
  • • LINKEDIN: https://www.linkedin.com/company/9249853/
    • TWITTER: https://twitter.com/VallCompany
    • YOUTUBE. https://www.youtube.com/channel/UC2D0nCmDa04GsrenHvmFo2Q
    • FACEBOOK:https://www.facebook.com/pages/Vall-Companys/1110631872322602

Data collected: First name, last name, NIF (tax identification number), contact address, home address, email, phone number, and any other data provided by the respective social media platform.

Purpose: Social media engagement, as well as the maintenance and development of business relationships.

Legitimacy: The data subject’s consent granted to GRUPO VALLCOMPANYS companies, along with the legitimate interest in developing business relationships.

Retention period: Data will be stored for as long as necessary to fulfill the purpose of processing. Once completed, data may be retained for a maximum of six years to remain available to public authorities, judges, and courts for the purpose of addressing and defending potential legal liabilities arising from the processing.

• CLIENTS/SUPPLIERS: Professional personal data provided by Clients/Suppliers for the provision of services and the management of the legal or contractual relationship by GRUPO VALLCOMPANYS companies.

Data collected: First name, last name, DNI (national ID number), professional contact address, email, and professional phone number.

Purpose: Management of the contractual relationship related to the service.

Legitimacy: The existing legal or contractual relationship necessary for the provision of the service.

Retention period: Data will be stored for as long as necessary to fulfill the purpose of processing or until deletion is requested. Once completed or deleted, data may be retained for a maximum of six years to remain available to public authorities, judges, and courts for the purpose of addressing and defending potential legal liabilities arising from the processing.

• ACCESS CONTROL AND SECURITY: Data collected through video surveillance cameras or provided for building access control by GRUPO VALLCOMPANYS companies that have such security systems:

Data collected: First name, last name, DNI (national ID number), and images.

Purpose: To control access and manage internal security at the facilities of GRUPO VALLCOMPANYS and its companies.

Legitimacy: The legitimate interest in ensuring security at the facilities, which justifies the registration of access control data and the recording of images when entering these premises.

Retention period: Data will be stored for a maximum period of one month, unless it is necessary to retain them for a longer period to clarify any detected infraction or illegal activity.

The data subject acknowledges and expressly accepts that agreeing to any of the above purposes entails the inclusion of their data in the shared database of GRUPO VALLCOMPANYS companies. Additionally, their personal data may be transferred to the companies listed at any given time on the website www.vallcompanys.es, where they may be used for the same purposes, with the same categories of data, retention periods, and rights. The data subject may object to this transfer at any time by sending a postal letter to the indicated address of GRUPO VALLCOMPANYS or by emailing protecciondedatos@vallcompanys.es.

Except for the aforementioned transfers, no further data sharing or communication to third parties is foreseen, except in cases where third-party data processors provide services. In such cases, GRUPO VALLCOMPANYS has signed the corresponding Data Processing Agreements, ensuring that these third parties meet sufficient guarantees to apply appropriate technical and organizational measures to comply with GDPR requirements and guarantee the protection of the data subject’s rights.

EXERCISING RIGHTS

The data subject has the right to access, rectify, erase, restrict, object to, and transfer their data, which is managed by the companies within GRUPO VALLCOMPANYS. As long as the processing purpose remains valid or unless the data subject explicitly requests the deletion of their personal data from our shared database, their data will continue to be processed since it is necessary for ongoing processing and the data subject remains interested in being part of it.

At any time, the data subject may exercise their rights by sending a written request via postal mail to GRUPO VALLCOMPANYS at the address indicated above or via email to protecciondedatos@vallcompanys.es. The request must include proof of identity and clearly state the specific right they wish to exercise.

The data subject also has the right to withdraw their consent for data processing by GRUPO VALLCOMPANYS companies. Additionally, they have the right to file complaints regarding the processing of their personal data with the Spanish Data Protection Agency (AEPD) at www.agpd.es.

TECHNICAL AND ORGANIZATIONAL SECURITY MEASURES

GRUPO VALLCOMPANYS has implemented the necessary technical and organizational measures to ensure the security and integrity of data, as well as to prevent its alteration, loss, unauthorized processing, or access.

PROVIDED DATA

The data requested in the various forms on the Website or provided by the data subject through other means are strictly necessary to process their request and are provided voluntarily. Refusal to provide data classified as mandatory will result in the inability to access or receive the requested service.

To ensure that personal data remains up to date, the data subject must notify us of any changes. Otherwise, we cannot be held responsible for its accuracy. Likewise, if third-party data is provided, the data subject agrees to inform them of the contents of this Privacy Policy.

The data subject also commits to promptly notifying GRUPO VALLCOMPANYS of any modifications or corrections to their personal data to ensure that the information recorded in the Activity Logs of GRUPO VALLCOMPANYS companies remains updated at all times.

Based on the legitimate interest of GRUPO VALLCOMPANYS, the data subject’s personal data may be used to establish or maintain commercial relationships by any means, including electronic communication, to provide information about products and services offered by the companies within the group. The data subject may object to this commercial processing at any time by sending a postal communication to the address indicated above or via email to protecciondedatos@vallcompanys.es.