Privacy Policy
In compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and in the Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, as well as in its implementing regulations, we provide you with expanded information in this Privacy Policy.
Who is responsible for the processing of your data
- Identity: ONSELLA GLOBAL SERVICES S.L. (hereinafter OGX )
- Postal Address: C/TRAPANI Nº 25 – POLIGONO INDUSTRIAL PLAZA, 50197, ZARAGOZA.
- Phone: 976481503
- E-mail: comercial@onsella.com
- Internal Information Channel : https://onsella.canaldedenuncias.daxia.es
For what purpose we process your personal data
OGX processes the information provided by the interested parties in order to provide the services offered by our firm, as well as to send commercial communications.
We also process the information provided by candidates in order to include them in our personnel selection processes.
OGX may also process the data you provide to us through the Internal Information Channel.
No automated decisions will be made based on the data provided.
How long we will keep your data
The personal data provided will be kept for the time necessary for the provision of the requested service or marketing of the product, as long as the person concerned does not request its deletion and during the legally established deadlines.
The data entered in the Internal Reporting Channel will be deleted after three months, with the exception that it may be retained as evidence of the functioning of the model for the prevention of the commission of crimes by the legal person. After this period, the data may continue to be processed by the body responsible for the investigation of the reported facts, but may not be retained in the reporting system itself.
The personal data provided by the candidates through their CV will be kept as long as the personnel selection process remains open and for a maximum period of two years.
What is the legitimacy for the processing of your data?
The legal basis for the processing of your data will be, as the case may be, the data subject’s consent, the performance of a contract or legitimate interest.
The legal basis for the processing of candidate data is the consent of the data subject.
The basis of legitimacy for the data provided through the Internal Information Channel is based on Law 2/2023, of February 20, regulating the protection of persons who report regulatory violations and the fight against corruption.
The processing of data for sending commercial communications to our customers and business contacts who have registered on our website is based on the legitimate interest established in the European Data Protection Regulation and the Law of Services for the Information Society and Electronic Commerce. If you prefer not to receive these messages by e-mail, we will offer you the opportunity to exercise your right to object to such processing.
To which recipients your data will be communicated
The data will not be communicated to third parties unless required by law.
When the processing of legal proceedings is necessary to follow up on a complaint made through the Internal Information Channel, the data may be communicated to lawyers or law firms. It is essential that the company take the necessary measures to preserve the identity and guarantee the confidentiality of the data corresponding to the persons affected by the information provided, especially that of the person/s who would have brought the facts to the attention of the company through the Internal Information Channel, in the event that he/she has been identified.
Data transfers to third countries
Data transfers to third countries are not foreseen, however, in the event that they are strictly necessary because one of our suppliers may host data on servers outside the European Union, they will be carried out under the standard contractual clauses and the additional guarantees required.
What are your rights when you provide us with your data?
Any person has the right to obtain information about whether or not OGX is processing personal data concerning them.
Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. You also have the right to data portability.
In certain circumstances, the interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, OGX will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.
You may materially exercise your rights by sending an e-mail to comercial@onsella.com duly identifying yourself and expressly indicating the specific right you wish to exercise.
If you have given your consent for any specific purpose, you have the right to withdraw the consent given at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
In case you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can contact the Data Protection Officer, if appointed, or file a complaint with the competent Data Protection Supervisory Authority through its website: www.aepd.es.
More information about the processing of your data
When we need to obtain information from you, we will always ask you to provide it voluntarily by expressly giving your consent through the means provided for this purpose.
The processing of data collected through the data collection forms on the website or other ways, will be incorporated into the Register of Processing Activities for which OGX is responsible.
OGX treats the data confidentially and adopts the appropriate technical and organizational measures to ensure the appropriate level of security for the processing, in compliance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and other applicable Data Protection regulations.
However, OGX cannot guarantee the absolute invulnerability of the systems, therefore, it assumes no liability for damages resulting from alterations that third parties may cause in computer systems, electronic documents or user files.
If you choose to leave our website through links to websites that do not belong to our entity, OGX will not be responsible for the privacy policies of such websites or the cookies that they may store on the user’s computer.