Please take a few minutes to read our privacy policy, it won't take you long. With it, we want to explain to you Simple, clear and transparent form how we handle and protect your personal information and your rights. Your security and that of your personal data is fundamental to NORISPAN ENGINEERING and we take your proper protection very seriously.
WarningWhen using our Website, no personal data that could identify the visitor is collected (there is no blog or articles with comments enabled, nor is there a mailing list to subscribe to). Therefore, this privacy policy establishes how personal data that you provide to us via your email application or by telephone will be managed.
However, we invite you to continue reading about how we handle the data you provide, and you should do so every time you visit a website, to find out what they will do with your data.
- Who is this policy aimed at and who does it apply to?
This policy applies to all users of the Website, whether or not they are clients of NORISPAN INGENIERÍA (hereinafter, interchangeably, “the user” or “users”) who are considered to be individuals. This is because, by personal data, we mean any information about an identified or identifiable individual.
This Website is aimed at users over sixteen (16) years of age. For those under sixteen (16) years of age, parental or guardian consent is required for the processing of their personal data, and its use by those under this age is prohibited. Registration or the purchase of products or services, should they be offered, is prohibited for those under eighteen (18) years of age.
Treatment information
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter, GDPR), the user must be provided with timely and specific information from the controller and the uses and purposes thereof.
For this, the following information is provided:
- Who is responsible for the processing of your data?
Identity NORISPAN INGENIERÍA S.L. (hereinafter NORISPAN INGENIERÍA)
Cost, Insurance and Freight B-27.815.885
Address Avda. Ricardo Mella no. 123, Offices 7 & 8, 36330 Vigo (Pontevedra)
Contact telephone: 986 21 33 45
Contact email, Data Protection Officer: administracion@norispan.com
- What type of data do we process?
As we have already warned you, our Website does not collect personal data through which a visitor can be identified.
You will only be able to send us your personal data via the link in the email available from our Website, in which case it will be done from your email application, not from the NORISPAN INGENIERÍA website. In this case, the personal data you provide will be processed for the purpose specifically stipulated in this privacy policy. In such cases, the processing of your data is necessary to attend to your request.
In this regard, we maintain a firm commitment to process your personal data lawfully and consistently in accordance with the principles and legal obligations laid down by current personal data protection regulations.
What information can we get about you?
It will depend on the information you send us via your email application or by phone, which will generally be the following:
Contact and Identifying Details, first name, surname, address, telephone number, email address.
Preferences, information that you would provide us regarding your preferences, for example the type of service or professional activity you are interested in.
Navigation data, all websites, some more than others, collect navigation data from visitors through the famous cookies. In our case, we inform you that we do not collect cookies of our own volition, except for those necessary to offer you content or to display the notice on cookies, which we are obliged to provide. However, in no case can we identify you or associate navigation data with you.
Connection data, the IP address of the device or computer used, which is provided by the browser you use to connect to a Website. The purpose of an IP address is to enable network connection, to ensure that each device is uniquely identified and thus prevent errors, fraud, etc. NORISPAN INGENIERÍA will not use the IP address of your computer or device for any processing related to your personal data, nor to identify you, nor to associate browsing data with you.
How do we collect your data?
When you contact NORISPAN INGENIERÍA directly, for example via our email application or by telephone, to request information about our services.
- What happens if you provide us with third-party data?
If you provide us with Personal Data of third parties, you guarantee that you have informed them about the purposes and the way in which we need to process their personal data.
- For what purpose do we process your personal data?
- Customer Service, to handle requests for information, suggestions, requests or complaints.
- Compliance with legal and regulatory obligations,In the case of a business or contractual relationship, in order to fulfil our legal obligations (without limitation or exclusion) to judicial bodies, regulatory and supervisory bodies, and state security forces, with whom we are obliged to comply with the laws of the countries in which the activity is carried out.
- What is the lawful basis for processing your data?
The legal basis that allows us to process your personal data for the purposes described above is legitimised in accordance with the following legal bases:
Customer Service, to attend to your requests or queries, processing is necessary for the management of contractual measures (GDPR 6.1.b). Furthermore, to manage your request or query and respond to you, processing is based on a legitimate interest (GDPR 6.1.f).
When your query relates to the exercise of rights, for which you will find detailed information below, processing is necessary for compliance with legal obligations (GDPR 6.1(c)).
Compliance with legal and regulatory obligations; processing is necessary for compliance with legal obligations (GDPR 6.1(c)).
- How long do we keep your data?
Your personal data will be kept for as long as is necessary for the purpose for which it was collected, unless a longer retention period is legally permitted or required.
Our data retention periods are based on business needs. We will subsequently store them securely and protected for the period in which liabilities arising from the processing may arise, in compliance with the regulations in force at all times. Once any possible actions have expired in each case, we will proceed to delete the personal data.
Customer Service: we will process your data for as long as is necessary to deal with your enquiry or request.
Compliance with legal and regulatory obligations; in some cases, we must retain your data for the periods required by the specific regulations applicable, (without limitation or exclusion) such as tax, commercial, money laundering...
- TO WHOM DO WE DISCLOSE YOUR DATA?
To fulfil the purposes indicated in this Privacy Policy, it is necessary for us to grant access to your personal data to third parties who provide us with support in the services we offer you, for example:
- Fraud detection and prevention entities.
- Technology service providers (storage, security and maintenance)
For compliance with legal and regulatory obligations, your data will be communicated to (non-exhaustive and non-exclusive):
- Public authorities.
- Judges, courts and security bodies, for the attention of possible liabilities arising from the processing, within their respective competences, at their request.
To ensure the efficiency of our service, some service providers may be located in territories outside the European Economic Area which do not provide a level of data protection comparable to that of the European Union, such as the United States. In such cases, we would like to inform you that we transfer your data with appropriate safeguards and always ensure the security of your data; these service providers are certified under the Privacy Shield.
If you wish to consult the certification of US suppliers, you can consult them at the following link: https://www.privacyshield.gov/welcome
- DO YOU MAKE INTERNATIONAL TRANSFERS WITH YOUR DETAILS?
We inform you that your data will not be communicated to entities outside the European Economic Area without your express consent, except in cases where mandatory legislation permits such communication; in such cases, we will always inform you of the purposes of said communication, where possible.
- What are your rights when you provide us with your data?
We are committed to respecting the confidentiality of your personal data and to ensuring that you can exercise your rights. You may exercise these rights free of charge by sending an email to administracion@norispan.com, simply stating the reason for your request and the right you wish to exercise, indicating “Request for exercise of rights” in the subject line of the email.
You can also send the request to a postal address, Avda. Ricardo Mella nº 123, Offices 7 and 8, 36.330 Vigo (Pontevedra), indicating the reference “Request for exercise of rights” and similarly, the reason for your request and the right you wish to exercise.
To correctly identify you and ensure the security of your data (for example, to prevent identity theft), we ask that you send us a copy of a document proving your identity: national ID card, NIE, or passport.
In particular, regardless of the purpose or legal basis on which we process your data, you have the right to:
- You have the right to access your personal data, as well as to request the rectification of inaccurate data or, where applicable, to request its deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
- In certain circumstances, you may request the restriction of processing of your data, in which case we will only retain it for the establishment, exercise or defence of legal claims.
- In certain circumstances, and for reasons related to your particular situation, you may object to the processing of your data. We will cease processing the data, except for compelling legitimate grounds, or the exercise or defence of potential claims.
- Right to the portability of your personal data.
- Right to lodge a complaint with the supervisory authority (Spanish Data Protection Agency), if you consider that the processing does not comply with the GDPR or for eventual non-compliance with data protection regulations, information on which can be found at this link: http://www.agpd.es.
The exercise of these rights, on the other hand, is subject to certain exceptions for reasons of general interest, such as the prevention or detection of crimes, or for our own interests, such as maintaining the confidentiality of legal advice. If you were to exercise any of these rights, we will verify that you are indeed authorised to do so, and we will respond within one month (according to the GDPR), with the possibility of extending this period by a further two months if necessary, taking into account the complexity and number of requests.
- What security measures do we provide for your personal data?
NORISPAN INGENIERÍA undertakes to comply with its obligation of confidentiality, to safeguard personal data and to adopt the necessary technical and organisational measures to ensure the security of personal data and prevent its alteration, loss, unauthorised processing or access.
Although absolute protection against intrusions cannot be guaranteed during data transmissions over the internet or from a website, both we and our subcontractors and business partners make every effort to maintain the physical, electronic, and procedural protection measures to ensure the protection of your data in accordance with the applicable legal requirements in this matter.
The measures we use include the following:
- Limit access to your data solely to those individuals who need to know it, in accordance with the tasks they perform.
- As a general rule, transfer the collected data in encrypted format.
- Store the most sensitive data (such as credit card details) only in encrypted form.
- Install perimeter protection systems for IT infrastructure (“firewalls”) to prevent unauthorised access, for example by “hackers”.
- Regularly monitor access to computer systems to detect and stop any misuse of personal data.
- Commercial transactions are carried out in a secure server environment under SSL protocol.
In cases where we have provided you with (or you have chosen) a password that grants you access to certain parts of our websites or any other portal, application, or service under our control, you are responsible for keeping it confidential and for complying with all other security procedures that we notify you of.
We recommend some of the precautions we advise you to take to ensure the security of your personal data:
- Do not give your username or password to anyone.
- Don't write it down in easily accessible places: computer, diary.
- Always use our SSL security system.
- Always log out of your browser session after accessing a secure area or entering your username or password into the system.