Privacy Policy

Data protection policy

This website collects no personal data from users without their knowledge, nor is it transferred to third parties.

ERGOMAQ-97, S.L. uses both temporary session cookies and permanent cookies. Session cookies store data purely for the technical purpose of interface customisation while the user is accessing the website, whereas permanent cookies store data in the terminal so that it can be accessed and used during more than one session. In any case, our informative notice allows you the choice to ACCEPT OR REJECT THE USE OF COOKIES by this website and to obtain more information and configure the browsing options according to your preferences.

The portal, which is owned by ERGOMAQ-97 contains links to third party websites, the privacy policies of which are outside the control of our organisation. When accessing such websites, you can decide whether to accept their third-party privacy and cookie policies. In general, if you browse the Internet you can accept or reject third-party cookies from the configuration options of your browser following the instructions published in our Cookies Policy.

Data processing controller

Any personal data that may be collected directly from an interested party through our contact form or via our email account will be treated in accordance with the criteria regulated by the General Data Protection Regulation and Spanish Organic Law 3/2018 dated December 5 regarding Personal Data Protection and the Guarantee of Digital Rights; and solely and exclusively to manage our relationship.

ERGOMAQ-97 undertakes to process your information in compliance with the principles relating to processing regulated in Article 5 of the GDPR, meaning that the data will be processed in a lawful, fair and transparent manner in relation to the data subject, collected for specified, explicit and legitimate purposes, and must be adequate, relevant and limited with regard to those purposes. In turn, they must be accurate, and if necessary updated; stored at all times in a manner that allows the identification of data subjects for no longer than is necessary for the purposes of the processing; and processed at all times in such a way as to ensure adequate security of personal data (integrity and confidentiality).

To that end, they will be incorporated into the corresponding PROCESSING ACTIVITY for which ERGOMAQ-97 is responsible.

The updated list of the processing activities carried out by ERGOMAQ-97 is available on this website in the section named: RECORD OF PROCESSING ACTIVITIES.

Purpose

The purpose of data processing corresponds to each of the processing activities carried out by ERGOMAQ-97 and which are accessible in the published Register of Processing Activities.

Legal basis

Your data is processed based on the following conditions:

– the data subject has consented (affirmative action) to the processing of his or her personal data for one or more specific purposes;
– the processing is necessary for the performance of a contract to which the data subject is a party or for the implementation at his / her request of pre-contractual measures;
– the processing is necessary for compliance with a legal obligation applicable to the controller;
– the processing is necessary for the satisfaction of legitimate interests pursued by the Data Controller or by a third party.
You can consult the legal basis for each of the processing activities carried out by ERGOMAQ-97 in the Register of Processing Activities published on this website.

Data retention

The personal data provided will be kept for the time necessary to comply with the purpose for which it is collected, addressing each processing activity, and to determine any possible responsibilities that may arise from the purpose, in addition to the periods established in the current applicable archiving and documentation regulations.

Data communication

In general, personal data will not be communicated to third parties unless there is a legal obligation to do so in order to comply with a regulation that has legal force or to ensure the correct development of our relationship.

You can consult the recipients for each of the processing activities carried out by ERGOMAQ-97 in the Register of Processing Activities published.

Rights of data subjects

Any person has the right to obtain confirmation of the processing of his/her data carried out by ERGOMAQ-97.

You may approach ERGOMAQ-97 to exercise your rights of access, rectification, deletion, portability, limitation and opposition to processing — subject to identity verification via a photocopy of your national ID — by sending your request via email to: compras@ergomaq.com or by writing to: Ctra. Huesca, Km 13,600, Polígono Sector 1, CP 50.830, Villanueva de Gállego, Zaragoza, Spain.

We remind you of your right to file a complaint with the Spanish Data Protection Agency if you are not satisfied after exercising the above rights.

Technical and organisational security measures

ERGOMAQ-97 shall implement security measures — technical and organisational — appropriate to the processing carried out by it, taking into account the state of the art, the costs of implementation, and the nature, scope, context and purposes of the processing, as well as risks of varying likelihood and severity for the rights and freedoms of natural persons; all to ensure a level of security appropriate to the risk.

Thus, in the event of a breach of security of the personal data we process, we undertake to notify both the Supervisory Authority, if applicable, and the data subjects in accordance with Articles 33 and 34 of the GDPR.

RECORD OF PROCESSING ACTIVITIES

 

DATA CONTROLLER: : Ergomaq-97, S.L.

Tax ID: B-50728989
PROCESSING: Customers and Suppliers
REGISTERED OFFICE: Ctra. Huesca, Km. 13,600, Polígono Sector 1, Villanueva de Gállego, CP 50.830, Zaragoza
CONTACT TELEPHONE NUMBER: 976 150 601
E-MAIL: compras@ergomaq.com
PURPOSE: Management of the commercial relationship: to provide the services and products contracted by customers and requests to suppliers. Accounting and administrative management: invoicing. Contact form management.
LEGAL BASIS: Satisfaction of legitimate interests of both parties. Performance of a contract to which the data subject is a party. Consent of the person concerned.
PERIOD OF CONSERVATION: As long as our relationship is maintained: supply and sale of products. For as many years as necessary to comply with current legislation unless you exercise your right of deletion, or for the time required to respond to your request for information.
POTENTIAL RECIPIENTS: Organisations or persons directly related to the responsible party. Banks, savings banks and rural banks.
RIGHTS: Rights of access, rectification, erasure and portability, and the limitation of or opposition to processing.
EXERCISE: Vis-à-vis ERGOMAQ-97, S.L., subject to prior verification of your identity by means of a photocopy of your national ID card, sending your request to the email address compras@ergomaq.com or by post.
ADDITIONAL INFORMATION: We remind you of your right to file a complaint with the Spanish Data Protection Agency if you are not satisfied after exercising your rights. una vez ejercitados sus derechos.

+INFO in www.ergomaq.com

Processing: CUSTOMERS AND SUPPLIERS
Purpose of processing:

Management of the commercial relationship with the company’s customers and suppliers.
Management of the contact form on the website. 
Intended uses:

Customer, accounting, tax and administrative management.
Advertising and commercial prospecting.
Response to requests for information received through the contact form on the website./span>
Description of the categories of data subjects and categories of personal data:

– Stakeholders:

Clients and users; suppliers, contact persons and parties requesting information.

– Personal data categories:

Personal data: Tax ID / national ID card, name and surname, address, telephone, email, signature.
Social circumstances data.
Commercial data.
Economic, financial and insurance data.
Data on transactions for goods and services.
Job details.
Contact information: mail and telephone for contact between companies.
The categories of recipients to whom the personal data were or will be communicated:

Organisations or persons directly related to the responsible party.
Tax Administration.
Banks, savings banks and rural banks.
Public administrative bodies with competence in the matter.
Transfers of data to a third country or an international organisation:

No.
Expected deadlines for the deletion of the different categories of data (if possible):

As long as they remain with the company or for the period required to comply with current legislation. For the period required to respond to requests for information.
Overview of the technical and organisational security measures (if possible):

Those contained in the Technical and Organisational Measures Manual delivered to the qualified users of the Controller (administration)
Processing: HUMAN RESOURCES
Purpose of processing:

Social and labour management of the staff — including internships for students or interns — as well as selection processes that may occur in our company.

Intended uses:

Customer, accounting, tax and administrative management.
Human resources.
Payroll management.
Occupational risk prevention.

Description of the categories of data subjects and categories of personal data:

– Stakeholders:
Employees, trainees or interns and candidates to work in the Company.
– Personal data categories:
Health-related data (if available, they will be processed in accordance with Article 9 of the GDPR).
Personal data: Tax ID / national ID card, social security / mutual scheme number; name and surname; address; telephone, email, signature; image/voice.
Social circumstances data.
Academic and professional data.
Employment details.
Economic, financial and insurance data.

The categories of recipients to whom the personal data were or will be communicated:

Organisations or persons directly related to the person responsible
Tax administration
Social security agencies
Other public administration bodies (INAEM)
Banks, savings banks and rural banks
Insurance entities

Expected deadlines for the deletion of the different categories of data (if possible):

Those provided for by tax and labour legislation with respect to the prescription of liabilities with respect to employees once they have left their position; and from the time they exercise their right of cancellation for candidates or once the selection processes have been completed.

Expected deadlines for the deletion of the different categories of data (if possible):

Those contained in the Technical and Organisational Measures Manual delivered to the qualified users of the Controller (administration).