PRIVACY POLICY
1.Who processes the data?
- Identity: ANDORGEST, S.L. – hereinafter, the entity -.
- NRT: L-703366-Y
- Address: CARRER DE LES ESCOLES, 25
- Town: SANT JULIÀ DE LÒRIA
- Postcode and parish: AD600 SANT JULIÀ DE LÒRIA
- Email: jviana@andorgest.com
- Registered with the Companies Register of the Principality of Andorra under tax registration number L-703366-Y
The Data Controller undertakes to protect users’ privacy and to develop the technology that provides you with the safest experience on the website. This privacy statement is valid for the website www.andorgest.com and governs the collection and use of data.
2.Which legislation applies?
Our Privacy Policy has been designed in accordance with the legal framework established by the Llei 29/2021, del 28 d’octubre, Qualificada de Protecció de Dades Personals (Qualified Law 29/2021 of 28 October on the protection of personal data), as well as with the provisions of EU General Data Protection Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
By providing us with their data, the user declares that they have read and are aware of this Privacy Policy, giving their unequivocal and express consent to the processing of their personal data in accordance with the purposes and terms set out herein.
ANDORGEST, S.L. may amend this Privacy Policy in order to adapt it to legislative, case-law or interpretative developments of the Agència Andorrana de Protecció de Dades (APDA). These privacy conditions may be supplemented by the Legal Notice, the Cookie Policy and the General Conditions which, where applicable, are set out for certain products or services, if such access entails any particularity as regards the protection of personal data.
3.What data do we process, for what purpose and for how long?
| DATA PROCESSING OPERATIONS | PURPOSE AND LAWFUL BASIS | RETENTION PERIOD |
|---|---|---|
| Contact form | To respond to requests and/or enquiries made by the user, the lawful basis for the processing being express consent in accordance with article 6.1.a) of the LQPD. | The data will be retained until the request has been resolved. In any event, it may be retained in order to determine any liabilities that may arise from this purpose |
| CV management | The data will be processed for the purpose of dealing with your application and analysing your profile in order to take part in staff selection processes, the basis legitimising the processing of personal data being lawful where it is necessary for the application, at the worker’s request, of pre-contractual measures or the intention to enter into a contract, in accordance with the provisions of art. 6.1.b) of the LQPD. | The data collected will be retained for the time strictly necessary to fulfil the purpose for which it was collected and, in any event, in order to determine any liabilities that may arise from this purpose, taking into account the periods established in the relevant legislation. |
| Sending of informational communications | Subscription to the entity’s news, promotions and offers, the lawful basis for the processing being express consent in accordance with art. 6.1.a) of the LQPD. | The data will be retained for as long as the subscription to the sending of communications lasts or until the data subject exercises the right to object to or erase the data. In any event, it may be retained in order to determine any liabilities that may arise from this purpose |
| Email management | The purposes of the data processing are to respond to enquiries received, as well as to manage the commercial and/or professional relationship, the legal basis being the contractual relationship between the Data Controller and the data subject, in accordance with article 6.1.b) of the LQPD. | The data collected will be retained for the time strictly necessary to fulfil the purpose for which it was collected and, in any event, in order to determine any liabilities that may arise from this purpose, taking into account the periods established in the relevant legislation |
4.Security measures
As part of our commitment to guaranteeing the security and confidentiality of the data subject’s personal data, we inform you that the necessary technical and organisational measures have been adopted to guarantee the security of personal data and to prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the data stored and the risks to which it is exposed, pursuant to article 32 of EU GDPR 679/2016 and article 35 of the Llei 29/2021, del 28 d’octubre, Qualificada de Protecció de Dades Personals.
5. Disclosure of data
No disclosures of your data are envisaged, except for those authorised by tax, commercial and telecommunications legislation, as well as in those cases where a judicial authority so requires.
6.International transfers
No International Transfers are made to a recipient located in a country or in an international organisation that does not meet the conditions established by current data protection legislation.
7. Cookies
ANDORGEST, S.L. , uses cookies for website users mainly for the following purposes:
- To ensure the correct functioning of the website of www.andorgest.com
- To analyse traffic in an anonymised manner.
- To collect statistical information in order to improve the experience on the website.
8.What rights do you have as a user and how can you exercise them?
Any data subject has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where applicable, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain it for the exercise or defence of claims. On grounds relating to their particular situation, data subjects may object to the processing of their data. The file controller will cease processing the data, except on compelling legitimate grounds, or for the exercise or defence of possible claims.
In accordance with the legislation in force, the user may exercise their rights before the data controller as regards:
8.1 Right of access
As a user, you may ask the controller of the personal data to confirm whether your personal data is being processed by them.
In addition, the user may request from ANDORGEST, S.L. information on the purpose of the processing of your personal data, how long your data will be retained, what rights you have as a user, whether your data has been transferred to a third country or to an international organisation, the existence of automated decisions, whether there is profiling on the website, among others.
8.2. Right to rectification
If the personal data you have made available to ANDORGEST, S.L. is inaccurate or incomplete, you have the right to rectify or complete it before the data controller.
8.3. Right to restriction of processing
The User may request the restriction of the processing of your personal data when:
- You contest the accuracy of your personal data, for a period enabling us to verify its accuracy.
- If the processing is unlawful and you oppose the erasure of your personal data and, instead of erasing it, you request that its use be restricted.
- If we no longer need your data for the purposes of the processing, but you need it to formulate, exercise or defend claims.
8.4. Right to erasure
You may request the data controller to erase your personal data without delay, and the controller shall be obliged to erase such data immediately where the data is no longer necessary for the purposes for which it was collected. In addition, you may request that your data be erased when you change your mind about consent, you object and there are no justified grounds for the processing, your data is processed incorrectly, it must be erased in order to comply with a legal obligation, or your data is obtained in connection with a legal offer.
8.5. Right to information
If you have exercised your right to rectification, erasure or restriction of processing before the controller, the controller is obliged to inform all recipients to whom your personal data has been disclosed of such rectification, erasure or restriction of processing, unless this proves impossible or involves disproportionate effort.
As a User you have the right to be informed by the controller as to who those recipients are.
8.6. Safeguards for digital rights
The user’s right to net neutrality, being able to access the internet regardless of their personal, social, economic or geographical circumstances. Users are guaranteed universal, affordable, quality and non-discriminatory access.
8.7. Right to data portability
You have the right to receive the personal data made available to the company in a structured, commonly used and machine-readable format. In addition, you have the right to transmit this data to another controller without the controller preventing it.
8.8. Right to object
As a user you have the right to object at any time, on grounds relating to your particular situation, to the personal data made available to ANDORGEST, S.L. being processed.
The data controller shall cease processing your personal data unless it can demonstrate compelling legitimate grounds for such processing which override your interests, rights and freedoms, or unless the processing is for the formulation, exercise or defence of claims.
8.9. Right to withdraw the data protection consent declaration
As a User you have the right to change your data protection consent declaration at any time. This change of decision regarding consent will not affect the lawfulness of the processing that took place on the basis of the consent given prior to its withdrawal.
8.10. Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the User or similarly significantly affects them.
8.11. Rights to lodge a complaint with the supervisory authority
As a User you will have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, place of work or place of the infringement, if you consider that the processing of personal data constitutes a breach of the LQPD.
8.12. How can I exercise my rights?
Likewise, the user may exercise their rights by written communication addressed specifically to the person in charge and request the form for the exercise of the right to be exercised. In order to submit this form, the following information must be provided:
- The user’s name and surnames and a photocopy of their identity document. Where representation is relied upon, identification by the same means of the person representing the user will also be required, as well as documentary evidence of the representation. The photocopy of the identity document may be replaced by any other legally valid means proving their identity.
- To state the specific reasons for the request or the information to be accessed.
- Address for notification purposes.
- Date and signature of the applicant.
- Any document evidencing their request.
This request and all other attached files may be sent to the following postal address and/or email address: dpd.andorra@tarinas.com
Alternatively, you may contact the competent Supervisory Authority, in this case the Agència Andorrana de Protecció de Dades (APDA), to obtain additional information about your rights.
9.Updating of data
All the information provided by the user through registration or by completing the forms on this website must be true. Likewise, it shall be the user’s responsibility to keep all the information provided to ANDORGEST, S.L. permanently updated so that it reflects, at all times, the user’s actual situation.
10.Withdrawal of consent
The consent given for a specific purpose may be withdrawn at any time, without this affecting the lawfulness of the processing based on the consent given prior to its withdrawal. In such cases, ANDORGEST, S.L. will cease processing the personal data or, where applicable, will cease doing so for that specific purpose, except on compelling legitimate grounds, or for the exercise or defence of possible claims.
11.Changes to the privacy policy
This Privacy Policy is a document that is subject to possible changes in accordance with the legislation applicable at any given time. For this reason, amendments to this Privacy Policy will be duly notified to you so that you are informed of the changes made and can give your express consent to those changes.
12.Confidentiality
ANDORGEST, S.L. guarantees the confidentiality and security of your personal data when it is processed, insofar as it has implemented the processing policies and security measures referred to in privacy legislation. The processing policies and security measures implemented at ANDORGEST, S.L. prevent the alteration, loss, unauthorised processing or use of your personal data.