Privacy Policy
ADDITIONAL INFORMATION ON DATA PROTECTION – PRIVACY POLICY:
CONTROLLER: Who is the Controller of your data processing?
Identity: Tacore, S.L., with registered office at Perrón, 12 – Rubianes 36619 Vilagarcía de Arousa – Pontevedra – Spain, Tax ID (CIF) B36019230.
Telephone: +34 986 56 51 39
Email: webinfo@tacore.es
| For what purpose do we process your personal data? | How long will we keep your data? | What is the legal basis for processing your data? | To which recipients will your data be disclosed? | How did we obtain your data? | What data is processed? |
|---|---|---|---|---|---|
| WORKING-TIME RECORD DATA PROCESSING Management of employee data for the control of the working hours of the workforce. | Your data will be kept for 4 years, as established by the Workers' Statute, Art. 34.9. | Legal obligation. Compliance with the Workers' Statute, Art. 34.9. | Trade union representation (if any). Labour Inspectorate. Social Security. | The data subject themselves, as an employee of the company. | Identification data (first name, surnames and ID number). Other: clock-in time and clock-out time. |
| EMPLOYEE DATA PROCESSING Management of employee data for the administration of the employment relationship. | The period established by labour regulations. | Performance of an employment contract. | Labour consultancy. Occupational/mutual insurance health funds. Insurance companies. Social Security bodies. Tax Authority. | The data subject themselves, as an employee of the company. | Identification data (first name, surnames, ID number, address, phone, email). Personal characteristics (marital status, date and place of birth, sex, nationality). Academic data. Professional data. Bank details. |
| PARTNER DATA PROCESSING Management of the contact details of partners for organisational, administrative and accounting purposes. | 5 years, as established by tax regulations. | Performance of a contract or pre-contract. | Tax Authority. Consultancies. | The data subject and/or their legal representative. | Identification data (ID number, first name, surnames). Professional data (phone, email, job position). |
| SUPPLIER DATA PROCESSING Management of the contact details of suppliers for organisational, administrative and accounting purposes. | 6 years, as established by commercial and tax regulations. | Performance of a contract or pre-contract. | Tax Authority. Consultancies. | The data subject and/or their legal representative. | Identification data (first name, surnames). Professional data (phone, email, job position). |
| POTENTIAL CUSTOMER DATA PROCESSING Management of the contact details of potential customers for organisational and administrative purposes, and to provide the information requested by the data subject (in person, by phone or through the web form). | The information will be kept until the potential customer becomes a customer or, otherwise, for one year. | Performance of a contract or pre-contract. | Will not be disclosed to third parties. | The data subject and/or their legal representative. | Identification data (first name, surnames, address, phone, email). |
| CUSTOMER DATA PROCESSING Management of the contact details of customers for organisational and administrative purposes and for issuing invoices. | 6 years, as established by commercial and tax regulations. | Performance of a contract or pre-contract. | Tax Authority. Consultancies. IT support companies. | The data subject and/or their legal representative. | Identification data (first name, surnames, ID number, address, phone, email). Bank details. |
| COMMERCIAL COMMUNICATIONS DATA PROCESSING Sending advertising related to our products and services by any means (post, email or phone) and inviting recipients to events organised by the company. | The data will be kept until the data subject requests cancellation or erasure. | Consent of the data subject. | Will not be disclosed to third parties. | The data subject and/or their legal representative. | Identification data (first name, surnames, phone, email). |
| CANDIDATE DATA PROCESSING Management of the résumés received by the company. | One year at most. | Consent of the data subject. | None envisaged. | Through the data subject themselves. | Identification data (first name, surnames, ID number, address, phone, email). Personal characteristics (marital status, date and place of birth, sex, nationality). Academic data. Professional data. |
| SECURITY VIDEO SURVEILLANCE DATA PROCESSING Management of the recordings made by the installed cameras, in order to maintain the security of the premises. | One month at most. | Public interest: GDPR 6.1.e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Spanish Act 5/2014 of 4 April on Private Security. | Law enforcement agencies. Courts, for the resolution of possible infringements and/or offences. Entity in charge of maintaining the video surveillance system. | The data are obtained from the data subject themselves when they access the company premises. | Images. |
| SOCIAL MEDIA DATA PROCESSING Management of the data of users registered as followers of the company's social media. | The data will be kept until the data subject requests cancellation or erasure and stops following the social network. | Consent of the data subject. | Will not be disclosed to third parties. | The data subject themselves. | Identification data (first name, surnames, image, phone, email, address). |
| WEB FORM ENQUIRY DATA PROCESSING Management of the data of users who contact the company through the web form. | The data will be kept for the time necessary to resolve the enquiry raised. | Consent of the data subject. | Will not be disclosed to third parties. | The data subject themselves. | Identification data (first name, surnames, phone and email). Professional data (company). |
| WEBSITE USER DATA PROCESSING Management of the data of registered users who access the private area of the website. | 6 years, as established by commercial and tax regulations. | Consent of the data subject. | Will not be disclosed to third parties. | The data subject themselves. | Identification data (first name, surnames, phone and email). Professional data (company). |
| DATA PROCESSING TO HANDLE THE EXERCISE OF RIGHTS Handling requests from individuals exercising the rights established by the General Data Protection Regulation. | They will be kept for the time necessary to resolve claims. | GDPR 6.1.c) Processing necessary for compliance with a legal obligation applicable to the controller. | Spanish Data Protection Agency. | The data subject themselves. The data subject and/or their legal representative. | Identification data (first name and surnames, address, signature and phone). |
USE BY MINORS.
The services and/or products provided through this website are not aimed at minors. Data will not be collected when we are aware that it concerns children under 14 years of age.
INTERNATIONAL DATA TRANSFERS: No international transfers of data are made to countries outside the European Economic Area.
PROFILING: No profiling is carried out.
SECURITY:
The website has implemented appropriate administrative, technical and physical security measures to prevent unauthorised access, use, modification, disclosure or destruction of the information provided by our users. Specifically:
Administrative:
- Both employees and service providers sign a confidentiality agreement.
Technical:
- Personal data collected electronically is stored encrypted and password-protected.
- All data transmission to the website services is encrypted.
- User data is backed up periodically on several servers, which helps protect the data in the event of a hardware failure or disaster.
Physical:
- Our computer systems are located in restricted areas. We only allow authorised personnel to access personal data.
RIGHTS: What are your rights when you provide us with your data?
The company hereby informs you that you have the right to:
- Access your personal data and obtain information on how it is being processed.
- Request the rectification of inaccurate data.
- Request the erasure of data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
- Object, at any time, to the processing of your data; the company will stop processing the data, except for compelling legitimate grounds or to ensure the defence of possible claims.
- Request data portability and obtain for yourself or for another service provider certain information about you.
- In certain circumstances, request the restriction of the processing of your data, in which case the company will only keep them for the exercise or defence of possible claims.
- Withdraw your consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal.
To exercise these rights, please write to the email address indicated above.
The identity of the person exercising their rights must be proven by sending a copy of their ID card, foreigner ID, passport or equivalent document, both sides.
The company will provide you with the information within a maximum of one month from receipt of the request. This period may be extended by two months where necessary, taking into account the complexity and number of requests.
You may lodge a complaint with the competent data protection Supervisory Authority.
For additional information about your rights, visit the website of the Spanish Data Protection Agency (https://www.aepd.es/).
