Privacy Policy
Pursuant to the obligations set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and in compliance with Spain’s national data protection law, information is provided on the points below involving the processing of personal data collected through this Website:
Who is the data controller?
The personal data collected will be processed by AERTEC Solutions S.L. in its capacity as the Data Controller.
Tax ID number: B-29869856
Address: Avenida Juan López de Peñalver, 17. Parque Tecnológico de Andalucía, 29590 Málaga (Spain)
Telephone: (+34) 95 10 10 200
Email: privacidad@aertecsolutions.com
Contact details of the Data Protection Officer: Daniel Torres, dpd@aertecsolutions.com
Why do we process your data?
Depending on the different forms, services or content you access, your data may be processed for the following purposes:
Applicants:
The data you provide in order to take part in a specific selection process will be used to manage said process.
The information you provide to be considered for a job opening will be used to manage your participation in the various selection processes that fit your profile, training and experience.
Recipients of commercial communications:
In those cases in which you have given us your unequivocal consent via the forms provided for this purpose (“newsletter“, “subscribe to our blog” and “infographics” sections), we will use your contact details to send you news on our blog and information related to AERTEC services. Each message we send will give you the option to opt out of receiving future notifications.
Contact section:
Your data will be used to reply to any enquiries or requests for information that you may have sent us.
The fields marked as required in our forms are strictly necessary to properly manage the service. The inclusion of data in the remaining fields is voluntary.
What is the legal basis for the processing?
The legal basis for processing the personal data collected by AERTEC relies on various legal provisions, depending on the context of the data collection and processing:
Applicants:
As concerns the personal data collected through the form for registering for a job vacancy, the legal basis for the processing is the performance of the pre-contractual relationship between the parties under the terms set out in Article 6.1.b of the GDPR.
If the applicant authorises AERTEC to include their data into the latter’s applicant database, the legal basis for the processing is the consent given. The data subject may withdraw said consent at any time, without this affecting the legality of any processing done prior to said withdrawal.
Recipients of commercial communications:
The legal basis for the processing in relation to sending commercial communications is the User’s own unequivocal consent and acceptance. The user may withdraw said consent at any time, without this affecting the legality of any processing done on the basis of the User’s consent prior to said withdrawal. To opt out, every communication we send you provides the option to do so by way of a streamlined, simple and free process.
Contact section:
The legal basis for the processing is the legitimate interest of AERTEC to handle any requests and enquiries that may be received through the contact section.
To whom is your data disclosed?
We inform you that we do not expect to transfer data to third parties, unless legally required. Likewise, we do not expect to transfer data internationally.
How long is the information stored?
The period for storing information will vary depending on the type of processing:
Applicants:
The personal data of candidates for a specific job vacancy will be stored during the selection process, after which the information will be deleted.
With regard to candidates registered with AERTEC for multiple vacancies, in accordance with the principle of quality and accuracy of the information processed, the data will be stored for a period not to exceed two years from the time the candidate last updated his/her curriculum.
Recipients of commercial communications:
The information on the recipients of commercial communications will be stored indefinitely unless the User opts out of receiving new communications, in which case we will delete his/her data and include it in our Robinson List to ensure that no new commercial communications are sent.
Contact section:
Personal data will be stored only as long as strictly necessary to process the comment or question of the data subject.
How do we protect your data?
AERTEC uses technologies that reflect the current state of the art to protect your personal data and information, and our Website is hosted on secure servers protected against the most common types of attacks. AERTEC has adopted technical and organisational measures that take into account the state of technology, the nature of the stored data and the risks to which it is exposed in order to guarantee the security of personal data and prevent its alteration, loss, and unauthorised processing or access.
What are your rights with regard to data protection?
The General Data Protection Regulation provides various rights to data subjects in relation to the processing of their personal data. Information on each of these rights, as well as on the channels to which you can address the corresponding request, if necessary, is provided below:
Right to erasure:
You will have the right to have your personal data deleted when any of the following circumstances occur:
- it is not needed for the purposes for which it was initially collected or processed;
- you withdraw your consent, provided that the processing of your data is not based on another legal basis that justifies its continued processing;
- you object to the processing and there are no other legitimate reasons for continuing to process your data;
- the data you request to have deleted was processed illegally.
Right of access:
You have the right to obtain confirmation of whether your personal data is being processed, and to have access to the following information: the purpose of the data processing; the categories of the data being processed; the recipients or the categories of recipients to which it has been provided or will be provided; if possible, the expected time limit for the personal data to be stored or, if not possible, the criteria used to determine this period.
Right to rectification:
You have the right to correct any inaccurate personal data concerning you. Furthermore, taking into account the purposes of the processing, you will have the right to complete any personal data that is incomplete, including by providing an additional statement. To do so, you must specify in your request the data in question and the required correction; you will also have to provide, when necessary, the documentation justifying the inaccurate or incomplete nature of the data subject to processing.
Right of limitation:
You have the right to limit the processing of your data when any of the following conditions are met:
- when you challenge the accuracy of your personal data, during the period the Company needs to verify the accuracy of the data;
- if you believe that the processing is unlawful, you objected to the deletion of personal data and instead request that its use be limited;
- the Company no longer needs the personal data for the purposes for which it was processed, but the User needs it for the establishment, exercise or defence of legal claims;
- if you have objected to the processing, while the Company determines whether its legal bases prevail over yours.
Right to data portability:
You have the right to receive the personal data that concerns you, which you have provided to the Company, in a structured, commonly used, machine-readable and interoperable format, and to transmit it to another controller without being prevented from doing so by the Company, when the processing is based on consent and is carried out by automated means. When you exercise your right to data portability, you will have the right to have your personal data transferred directly from one controller to another when technically possible. This right to portability shall not apply to processing that is necessary to fulfil a mission carried out in the public interest or in the exercise of public powers. The right to portability shall not extend to data that the Company has inferred from data that is derived directly from the use of the services provided.
Right to object:
You have the right to object to the processing of your data at any time, including profiling. If you exercise this right, the Company will stop processing your personal data unless we demonstrate compelling legitimate reasons for processing that prevail over your interests, rights and freedoms, or for the establishment, exercise or defence of claims.
Rights involving automated decisions:
The data subject will have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
Channels for exercising these rights:
To exercise any of the rights described in the previous sections, the User may send an email to privacidad@aertecsolutions.com or a postal letter to the following address: Avenida Juan López de Peñalver, 17. Parque Tecnológico de Andalucía, 29590 Málaga (Spain)
If you believe that your data protection rights have been violated, especially when you have not obtained a satisfactory outcome in the exercise of your rights, you can file a complaint with the competent Supervisory Authority, which in the case of Spain is the Spanish Data Protection Agency. (www.aepd.es; address: Calle Jorge Juan nº 6, CP 28001, Madrid; telephone numbers: 901 100 099/ 91 266 3517).
The data subject can also contact our Data Protection Officer at the email address dpd@aertecsolutions.com
Accuracy and update of the information provided
All information provided by the User must be truthful and accurate. To this end, the User must ensure the authenticity of all the data he/she provides while completing the corresponding forms. To register and/or fill in any form, the User must provide all the data that is indicated on said forms as required, and guarantee that the data provided is accurate and true. Any changes to the User’s information must be reported to AERTEC as soon as possible. In any case, the User shall be solely responsible for any false or inaccurate statements he/she makes and for any damages caused to AERTEC or third parties by the information provided.
Changes to this Privacy Policy
AERTEC reserves the right to amend this Privacy Policy to adapt it to new laws or regulations, as well as to industry practices. In these cases, AERTEC will publish the changes made on this page sufficiently far in advance of their implementation.
Last update: 23/Aug/2022
