[Privacy] policy

Introduction

This privacy policy is developed in accordance with the organic Law on the protection of personal information in force, as well as with Regulation 2016/679 of the European Parliament and with the Council of 27th April 2016 pursuant to the protection of physical persons with regards to the treatment of personal information and to the circulation of such information, henceforth RGPD (General Regulations for the Protection of Personal Information).

The purpose of this privacy policy is to inform the owners of the personal information —from whom information is being collected— about the specific aspects regarding the treatment of their data, and among other things, about the purpose of such treatment, the contact information for exercising their rights, the periods of preservation of their data and any security measures, among other matters.


Person responsible for the treatment

In terms of data protection, Instra Ingenieros, S.L. must be considered as the entity responsible for the Treatment regarding the files/treatments that are collected through this website or through any other means such as telephone, email, in-person communication, written communication using forms, legal documents, etc.

Below is the identification information of the owner of this website:


Data treatment

Any personal data that is eventually requested will only be the data that is strictly necessary for identifying and addressing the request made by the owner of such data, henceforth the interested party. This information will be treated in a true, lawful and transparent way regarding the interested party. Furthermore, personal information will be collected for purposes deemed explicit and legitimate, and shall not be treated later in a way that is incompatible with such purposes.

The data collected from each interested party must be adequate, pertinent and not be excessive in relation to the purposes pertaining to each case. They will be updated whenever necessary.

The owner of the personal information will be informed —prior to the collection of their information— of the general extreme cases regulated in this policy, to allow them to grant their express and unequivocal consent to the treatment of their data, in conformity with the following aspects.

Purpose of the treatment

The precise purposes for which each one of the treatments is carried out are included in the information clauses incorporated into each of the means of data collection (website forms, paper forms, locutions or signs and information notes).

However, the personal information of the interested party will be treated with the sole purpose of providing them with an effective reply and addressing the requests made by the user, as specified next to each option, service, form or data collection system that the user may use.

Legitimisation

As a general rule, prior to the treatment of personal information, Instra Ingenieros, S.L. obtains the express and unequivocal consent of the owner of such data by means of incorporating informed consent clauses into the different systems of data collection.

However, if the consent of the interested party is not required, the legitimising foundation of the treatment by which Instra Ingenieros, S.L. is supported consists in the existence of a specific law or regulation authorising or enforcing the treatment of the data of the interested party.

Recipients

As a general rule, Instra Ingenieros, S.L. does not engage in the cession or communication of data to third entities, save for cases of legal requirement. However, if it were necessary, the interested party would be notified of such cessions or communications of data through informed consent clauses that are contained in the different means of personal data collection.

Origin

As a general rule, personal data are always collected directly from the interested party. However, in certain exceptions, data may be collected through third parties, entities or services other than the interested party. In this sense, this exception will be notified to the interested party through the informed consent clauses contained in the different means of data collection and within a reasonable time frame once such data has been obtained, and within one month at the latest.

Preservation periods

The information collected from the interested party will be preserved in so far at it is needed for the purpose of complying with the ends to which such personal data were collected. Therefore, the data will be cancelled once such ends are met. Such cancellation will result in the blocking of the data, which will be kept available only for the Public Administration, judges and tribunals, for the purpose of addressing any eventual liabilities resulting from their treatment, during the prescription period thereof. Once the mentioned period is expired, the information will be destroyed.

For information purposes, below are the legal periods for preserving the information, in accordance to various subjects:

DOCUMENT DEADLINE LEGAL REF.
Work-related or social security-related documents 4 years Article 21 of Royal Legal Decree 5/2000 of 4th August approving the revised text of the Law on infractions and penalties in Social Order.
Accounting and fiscal documentation regarding commercial matters 6 years Art. 30 Code of Commerce
Accounting and fiscal documentation regarding fiscal matters 4 years Articles 66 to 70 General Law on Tax Collection
Access control to buildings 1 month Proceedings 1/1996 of the AEPD (Spanish Data Protection Agency)
Video surveillance 1 month Proceedings 1/2006 of the AEPD (Spanish Data Protection Agency)
Organic Law 4/1997

Browsing data

Regarding the browsing data that may be treated through the website, if any data subjected to regulations are collected, we recommend consulting the Cookie Policy published on our website.


Rights of the interested parties

The regulations pursuant to data protection grants a set of rights to the interested parties or to the owners of said data, to website users or users of the social network profiles of Instra Ingenieros, S.L..

The rights granted to the interested parties are the following:

  • Right to opposition: the right to oppose a certain treatment based on the consent of the interested party.
  • Right to limitation: the right to obtain the limitation of the treatment of data in the following cases:
  • The interested parties may exercise the indicated rights by contacting Instra Ingenieros, S.L., in written form at the following address: lopd@instra.es indicating in the subject matter the right that they wish to exercise.

    In this sense, Instra Ingenieros, S.L. will address your request as soon as possible while bearing in mind the deadlines indicated in the regulations pursuant to data protection.

    Furthermore, it must be taken into account that the interested party or owner of the data may at any time present a complaint before the competent control authority.


    Security

    The security measures adopted by Instra Ingenieros, S.L. are the measures required, as set forth in article 32 of the GDPR. In this sense, Instra Ingenieros, S.L., bearing in mind the state of technology, the costs of application and the nature, scope, context and purposes of the treatment, as well as the variable risks of probability and severity with regard to the rights and liberties of physical persons, has established the appropriate technical and organisational measures to guarantee the level of security that is required for the existing risk.

    In any case, Instra Ingenieros, S.L. has implemented sufficient mechanisms to comply with the following: