Privacy Policy
PERSONAL DATA PROTECTION POLICY
Smart Power Instruments S.L. is an Organization in which personal data is collected through the different means available to it, which gives it an important responsibility in the design and organization of procedures, so that they are aligned with legal compliance in Data protection.
Therefore, Smart Power Instruments S.L. will adopt all necessary security measures to ensure the protection of the collected data.
In the exercise of these responsibilities, and in order to establish the general principles that must govern the processing of personal data in the Organization, Smart Power Instruments S.L. approves this Personal data protection policy, which it notifies and makes available to all its Stakeholders, also respecting the following standards:
- Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data (GDPR).
- Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights (LOPD-GDD).
- Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).
I. SCOPE OF APPLICATION
This Personal data protection policy will be applicable to Smart Power Instruments S.L., its administration and management bodies, and staff, as well as to all persons interacting with the Organization, with the express inclusion of service providers with access to data (“Data Processors”).
The data controller for the personal data collected in the Organization is: Smart Power Instruments S.L., provided with NIF: B67388819, whose representative is: Alberto Goiri (hereinafter, Data Controller).
Its contact details are as follows:
Address: Pol. Ind. Riu Clar, Carrer Plom nº 11, nave 1A, TARRAGONA, TARRAGOΝΑ, 43006
Contact telephone: 657580337
Contact email: info@smartpx.com
II. INFORMATION ABOUT THE DATA CONTROLLER AND PROCESSING OF PERSONAL DATA IN Smart Power Instruments S.L.
Additional information regarding data processing is a set of more specific and expanded details that entities must provide to interested parties about how their personal data is managed. This concept derives from the principle of transparency of the General Data Protection Regulation (GDPR) and complements the basic information initially provided, offering a greater level of detail about the processing.
Below, Smart Power Instruments S.L. provides additional information about the data processing it carries out:
DATA ABOUT THE DATA CONTROLLER
| Identity | Smart Power Instruments S.L. |
| Address | Pol. Ind. Riu Clar, Carrer Plom nº 11, nave 1A, TARRAGONA, TARRAGOΝΑ, 43006 |
| Contact telephone | 657580337 |
| Contact email | info@smartpx.com |
PURPOSES OF PERSONAL DATA PROCESSING
| Processing | Purpose of processing | Data retention period |
|---|---|---|
| HR | PAYROLL MANAGEMENT, OCCUPATIONAL RISK PREVENTION, HUMAN RESOURCES | PAYROLL MANAGEMENT: 4 years. OCCUPATIONAL RISK PREVENTION: minimum 5 years. HUMAN RESOURCES: 4 years. |
| VIDEO SURVEILLANCE | PRIVATE SECURITY, SECURITY AND ACCESS CONTROL TO BUILDINGS, VIDEO SURVEILLANCE | PRIVATE SECURITY: 1 month from capture. SECURITY AND ACCESS CONTROL TO BUILDINGS: 1 month from capture. VIDEO SURVEILLANCE: 1 month from capture. |
| IMAGE CAPTURE | PROFESSIONAL CONTACT, HUMAN RESOURCES | PROFESSIONAL CONTACT: as long as the professional relationship is maintained; subsequently, during the limitation periods for possible liabilities arising from the processing (blocked retention). HUMAN RESOURCES: 4 years. |
| CLIENTS / WEBSITE CLIENT REGISTRATION / SUPPLIERS / BILLING AND ACCOUNTING | OTHER PURPOSES | |
| WEB FORM / REQUEST A QUOTE | PROFESSIONAL CONTACT, OTHER PURPOSES | Keep as long as the professional relationship is maintained and subsequently, during the limitation period for possible legal liabilities (generally, 5 years). |
LEGITIMATIONS OF PERSONAL DATA PROCESSING
| Data processing | Legitimation |
|---|---|
| HR | Execution of an employment contract |
| VIDEO SURVEILLANCE | Public interest video surveillance |
| IMAGE CAPTURE | Express consent of the interested party |
| CLIENTS / WEBSITE CLIENT REGISTRATION / SUPPLIERS / BILLING AND ACCOUNTING | Execution of a commercial contract |
| WEB FORM / REQUEST A QUOTE | Express consent of the interested party |
RECIPIENTS OF YOUR PERSONAL DATA
| Data processing | Provision of assignments | International transfers |
|---|---|---|
| HR | PUBLIC ADMINISTRATION WITH JURISDICTION IN THE MATTER, BANKING AND FINANCIAL ENTITIES, ORGANIZATIONS OR PERSONS DIRECTLY RELATED TO THE DATA CONTROLLER | No |
| VIDEO SURVEILLANCE | ORGANIZATIONS OR PERSONS DIRECTLY RELATED TO THE DATA CONTROLLER | No |
| IMAGE CAPTURE | MEDIA AND BROADCASTING, ORGANIZATIONS OR PERSONS DIRECTLY RELATED TO THE DATA CONTROLLER | No |
| CLIENTS / WEBSITE CLIENT REGISTRATION / SUPPLIERS / BILLING AND ACCOUNTING | PUBLIC ADMINISTRATION WITH JURISDICTION IN THE MATTER, ORGANIZATIONS OR PERSONS DIRECTLY RELATED TO THE DATA CONTROLLER | No |
| WEB FORM / REQUEST A QUOTE | ORGANIZATIONS OR PERSONS DIRECTLY RELATED TO THE DATA CONTROLLER | No |
RIGHTS GRANTED TO YOU AND MEANS AT YOUR DISPOSAL
Any person has the right to obtain confirmation as to whether at Smart Power Instruments S.L. we are processing personal data concerning them.
Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data, or where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep it for the exercise or defense of legal claims, as well as to meet legally established retention periods.
Likewise, interested parties may object to the processing of their personal data. Therefore, Smart Power Instruments S.L. will stop processing your data, except for compelling legitimate grounds, or in the exercise of possible legal claims.
In the same vein, when certain circumstances concur and it is technically possible, interested parties will have the right to have their personal data transmitted directly to another data controller or processor, upon request.
To exercise the aforementioned rights, you must contact us by sending a letter to:
- Smart Power Instruments S.L. Pol. Ind. Riu Clar, Carrer Plom nº 11, nave 1A, TARRAGONA, TARRAGONA, 43006, or by email to info@smartpx.com. We recommend attaching a copy of your ID with your request.
III. PRINCIPLES APPLICABLE TO PERSONAL DATA PROCESSING
The Personal data protection policy is a measure of proactive Responsibility, aimed at ensuring compliance with applicable legislation in this matter and, in connection with this, respect for the right to honor and privacy in the processing of personal data of all persons interacting with Smart Power Instruments S.L..
In developing the provisions of this Policy, it establishes the Principles governing data processing within the organization and, consequently, the procedures and organizational and security measures that the individuals affected by this Policy commit to implementing within their scope of responsibility.
Regarding the above, Smart Power Instruments S.L. will ensure compliance with the following principles:
Lawfulness, fairness, transparency and purpose limitation.
The processing of data must always be informed to the affected person through established clauses and procedures; and it will only be considered legitimate if there is consent for data processing (with special attention to that provided by minors), or it has another valid legal basis, and its purpose is in accordance with the applicable Regulations.
Data minimization.
The data processed must be adequate, relevant, and limited to what is necessary in relation to the various purposes of the processing.
Accuracy.
The data must be accurate and, where necessary, kept up to date. In this regard, necessary measures will be adopted to ensure that personal data which are inaccurate with respect to the purposes of processing are deleted or rectified without delay.
Storage limitation.
The data will be kept in a form which permits identification of data subjects for no longer than is necessary for the purpose of the relevant processing.
Integrity and Confidentiality.
Personal data will be processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing, and against accidental loss, destruction or damage, using appropriate technical or organizational measures.
Data assignments.
The purchase or obtaining of personal data whose origin comes from illegitimate sources, or in those cases in which said data has been collected or assigned in contravention of the law or its legitimate origin is not sufficiently guaranteed, is prohibited.
Hiring of providers with access to data.
Only providers that offer sufficient guarantees to implement appropriate technical and security measures in data processing will be chosen for hiring. A proper contract in this regard will be documented with them.
International data transfers.
Any processing of personal data subject to European Union regulations that involves a transfer of data outside the European Economic Area must be carried out in strict compliance with the requirements established in the applicable law.
Rights of affected persons.
The Organization will facilitate for affected persons the exercise of the rights of access, rectification, erasure, restriction of processing, objection, and portability, establishing for this purpose internal procedures, and in particular, the templates that are necessary and appropriate for their exercise, which must satisfy, at least, the legal requirements applicable in each case.
Smart Power Instruments S.L. will promote that the principles set out in this Personal data protection policy are taken into account:
- In the design and implementation of all work procedures
- In the products and services offered
- In all contracts and obligations formalized or assumed and
- In the implementation of all systems and platforms that allow access to its staff or third parties and/or the collection or processing of personal data.
IV. PERSONAL DATA OF MINORS
Respecting the provisions of articles 8 of the GDPR and 7 of the Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights, only those over 14 years of age may grant their consent for the lawful processing of their personal data by Smart Power Instruments S.L.. If it concerns a minor under 14 years of age, the consent of the parents or guardians will be necessary for processing, and this will only be considered lawful to the extent that they have authorized it.
V. SECRECY AND SECURITY OF PERSONAL DATA
Smart Power Instruments S.L. commits to notifying the user, without undue delay, when a personal data security breach occurs that is likely to entail a high risk to their rights and freedoms. Following the provisions of article 4 of the GDPR, a personal data security breach is understood to be any breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed.
Personal data will be treated as confidential by the Data Controller, who commits to informing and ensuring by means of a legal or contractual obligation that such confidentiality is respected by its employees, associates, and any person to whom the information is made accessible.
VI. COMMITMENT OF THE STAFF OF Smart Power Instruments S.L.
By virtue of the foregoing, we state that the employees of Smart Power Instruments S.L. are informed of this Policy, and declare themselves aware that personal information is an asset of Smart Power Instruments S.L., and in this regard, they adhere to it, committing to the following:
- Complete the Data Protection awareness training that Smart Power Instruments S.L. makes available to them.
- Apply the user-level security measures applicable to their job position, without prejudice to the responsibilities in their design and implementation that may be attributed to them depending on their role within Smart Power Instruments S.L.
- Use the established formats for the exercise of Rights by the affected users, and inform Smart Power Instruments S.L. immediately, so that the response can be made effective.
- Inform Smart Power Instruments S.L., as soon as they become aware, of deviations from what is established in this Policy, in particular of “Personal data security breaches”, using the format established for this purpose.
VII. CONTROL AND EVALUATION
Smart Power Instruments S.L. will carry out an annual verification, evaluation, and assessment, as well as every time there are significant changes in data processing, of the effectiveness of the technical and organizational measures to ensure the security of the processing.