In compliance with the provisions of Regulation (EU) 2016/679, General Data Protection, and the Organic Law 3/2018, on the Protection of Personal Data and guarantee of digital rights, GERFA S.A. informs users of the gorettisalou.com website about the processing of their personal data.
1. Data Controller
Owner / Responsible: GERFA S.A.
CIF: A-43072388
Address: Passeig Jaume I, 15, 43840 Salou (Tarragona), Spain
Website: gorettisalou.com
Contact e-mail: gerfasalou@gmail.com
2. Purpose of data processing
The personal data provided by the user through the website may be processed for the following purposes:
a) To deal with queries, requests for information or communications sent by the user.
b) To manage personnel selection processes when the user sends his/her application through the “Work with us” section or by other means enabled for this purpose.
c) To manage, where appropriate, the pre-contractual or contractual relationship arising from the services requested by the user.
d) To ensure the proper functioning, security and improvement of the website.
e) To comply with the legal obligations applicable to the person responsible.
3. Categories of data processed
Depending on the use made by the user of the website, GERFA S.A. may process the following categories of data:
- Identification data: name and surname.
- Contact information: e-mail address, telephone number.
- Professional and academic data contained in the curriculum vitae and attached documentation in selection processes.
- Data included voluntarily in the message or request sent by the user.
- Website navigation and usage data, as well as information associated with cookies, in accordance with the Cookies Policy.
4. Legal basis for processing
The legal basis for the processing of personal data shall be, as the case may be:
a) The consent of the data subject, when he/she voluntarily submits a query, application or request through the forms or channels provided.
b) The application of pre-contractual measures or the execution of a contractual relationship, when the processing is necessary to manage a user request or a requested service.
c) Compliance with legal obligations applicable to GERFA S.A.
d) The legitimate interest of the controller in guaranteeing the security of the website, preventing fraud, defending claims and improving its services, always within the limits established by the applicable regulations.
5. Data Retention
Personal data will be kept for the time necessary to fulfill the purpose for which they were collected and, thereafter, for the legally required periods.
As a guideline:
- Data derived from inquiries or contact requests will be kept for the time necessary to fulfill the request and, where appropriate, during the applicable legal statute of limitations.
- The data provided in selection processes will be kept for the time necessary to manage the application and, unless otherwise indicated by the interested party, for a reasonable maximum period of time for future selection processes related to the professional profile.
- The data processed for compliance with legal obligations will be retained for the periods required by the relevant regulations.
6. Data recipients
In general, personal data will not be transferred to third parties, except when required by law or when necessary for the provision of services related to the operation of the website or the activity of GERFA S.A.
As data processors, suppliers providing ancillary services to the data controller, such as web hosting services, technical maintenance, e-mail, forms management, personnel selection or web analytics, with whom the corresponding contracts required by the regulations have been formalized, may have access to the data.
In the event that the website includes links or external systems for the management of reservations or other third party services, the user will be informed or may identify that the treatment becomes governed by the privacy policies of the corresponding external provider.
7. International Transfers
In general, GERFA S.A. does not plan to carry out international data transfers.
However, if technology providers located outside the European Economic Area or involving access from third countries were to be used, such transfers would be made only with the appropriate safeguards required by data protection regulations.
8. Mandatory or optional nature of the data
The forms on the website will indicate, where applicable, what data is required to process the user’s request.
The refusal to provide the required data may prevent the consultation, application or service requested from being correctly attended.
9. Rights of users
The user may at any time exercise their rights regarding data protection, under the terms provided for in the regulations in force. In particular, he/she may request:
- Access to your personal data.
- Rectification of inaccurate data.
- Deletion of your data when, among other reasons, they are no longer necessary for the purposes for which they were collected.
- Opposition to treatment.
- Limitation of treatment.
- Data portability, when applicable.
- Withdrawal of consent at any time, without affecting the lawfulness of the processing prior to its withdrawal.
To exercise their rights, the user may send a written request to:
GERFA S.A.
Passeig Jaume I, 15, 43840 Salou (Tarragona), Spain
Email: gerfasalou@gmail.com
The request must identify the interested party and clearly indicate the right to be exercised. GERFA S.A. may request reasonable additional information to verify the identity of the applicant.
Likewise, if the interested party considers that his or her rights have not been adequately addressed, he or she may file a complaint with the Spanish Data Protection Agency (AEPD).
10. Third party data provided by the user
If the user provides data of third parties, he/she guarantees that he/she has informed such persons and, if applicable, that he/she has obtained their prior authorization to communicate them to GERFA S.A., exonerating the responsible party from any liability arising from failure to comply with this obligation.
11. Minors
This website is not specifically directed to minors. GERFA S.A. does not knowingly request personal information from minors without the intervention or authorization of their legal representatives when required.
12. Data security
GERFA S.A. adopts the appropriate technical and organizational measures to protect personal data against loss, alteration, unauthorized processing or improper access, taking into account the state of the art, the nature of the data processed and the risks to which they are exposed.
13. Links to third party websites
The website may contain links to third party sites or services. GERFA S.A. is not responsible for the privacy policies, content or practices of such external sites, so the user is advised to review their terms and conditions and policies before providing personal data.
14. Cookie Policy
The website uses its own cookies and, where appropriate, third-party cookies. The user can consult detailed information on their use, typology, purpose and configuration in the corresponding Cookies Policy.
15. Modifications to the privacy policy
GERFA S.A. reserves the right to modify this Privacy Policy to adapt it to new legislation, jurisprudence or changes in the operation of the website.
In case of modification, the updated version will be published on this page.