Insertec » Privacy Policy

Privacy Policy \

This privacy policy aims to provide information regarding the processing of personal data by INSERTEC and to describe the rights of data subjects, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, GDPR), and Organic Law 3/2018 of December 5, on the Protection of Personal Data and guarantee of digital rights (hereinafter, LOPDGDD).

1. Identity and contact details of the Controller

INSERTEC is responsible for the processing of data listed below. To contact them, the following channels can be used:

  • By postal mail addressed to Etxerre kaminoa 21, 48970 Basauri, Vizcaya, Spain
  • Through the email address: insertec@insertec.biz

2. Data processing: description of purposes, legal bases, and recipients

INSERTEC has a Register of Processing Activities for which it is responsible, detailing the purposes of the processing, the legal bases legitimizing them, and other elements provided for in art. 30 of the GDPR. The following are the treatments carried out through this website and others related to the services it provides to companies and individuals:

Treatments Treatment Objectives │ Legitimization │ Recipients
Applications Objectives Management of personnel selection processes and self-applications.
Legitimization Consent of the interested party
Recipients
  • Personnel selection companies
  • Temporary work companies
Interns Objectives Management of individuals undertaking academic internships in the company, including their tutoring, supervision, and evaluation.
Legitimization Execution of the contractual relationship
Recipients University or originating training center
Subcontractors Objectives Management of subcontractors and their human resources in compliance with obligations regarding the coordination of business activities.
Legitimization Compliance with legal obligations
Recipients Data will not be disclosed to third parties, except legal obligation
Contact Persons Objectives Management of contact persons regularly associated with current and potential clients and suppliers of the company, for the purpose of maintaining and developing business, contractual, accounting, and administrative relationships.
Legitimization
  • Compliance with legal obligations
  • Execution of contractual relationship
  • Legitimate interest of INSERTEC regarding the processing of contact data of natural persons providing services in legal entities and individual entrepreneurs and liberal professionals
Recipients
  • Tax administration
  • Banks
  • Certified accountants
  • Tax advisory
  • IT service providers
Communication and Marketing Objectives Management of communication and marketing activities of the company, including handling inquiries and information requests and publishing images and audiovisual materials on the Internet.
Legitimization Consent of the interested party
Recipients
  • Website users
  • Website hosting provider
  • Corporate video production company
  • Provider of the YouTube platform (USA)
Video Surveillance Objectives Capture, recording, and viewing of images through cameras for facility security.
Legitimization Performance of a task carried out in the public interest
Recipients
  • Competent authorities when applicable
  • Security company

3. Data retention

In each treatment, the data will be retained for the duration of the established relationships and, subsequently, for the applicable legal deadlines and the time necessary to fulfill the purpose for which they were collected and to determine any liabilities arising from said purpose and data processing. When the processing is based on consent, the data will be retained until such consent is revoked or a request for data deletion is made. Only the necessary data for each treatment are requested, so failure to provide them will imply the inability to provide the requested services or maintain the established relationships.

1. International data transfers

In data processing involving the publication of images and/or videos on the YouTube portal, there will be an international transfer of data to Google LLC, a company based in the USA and adherent to the EU-US Privacy Shield Agreement, therefore, the transfer is covered by a decision on adequacy by the EU Commission.

2. Exercise of rights

By written request addressed to our postal address or through email: insertec@insertec.biz, the data subject may exercise the following rights, under the circumstances and conditions provided for in the regulations:

  • Right of access: to know if their data is being processed or not.
  • Right of rectification: to rectify inaccurate data.
  • Right of erasure: to request cessation of their processing when, among other reasons, they are no longer necessary for the purposes for which they were collected.
  • Right to object: to stop processing under certain circumstances.
  • Right to restriction of processing: to limit the scope of processing in certain cases, while ensuring their preservation.
  • Right to data portability: to receive previously provided data or request its transmission to a third party.
  • Right to revoke consent previously given at any time.
  • Right to lodge a complaint with the supervisory authority to enforce their rights.

To exercise their rights, the data subject must provide a copy of an official document proving their identity.

3. Privacy policy update

The content of the data protection policy may be modified to adapt it to legislative changes that may occur, as well as to criteria and positions issued by the supervisory authorities.