PRIVACY POLICY – EXTENDED INFORMATION

 

LAST MODIFICATION: 20/09/2022

 

The Privacy Policy forms part of the General Conditions governing the website of www.vermell.com together with the Cookies Policy and the Legal Notice. Jaume Vermell Nautica S.L., reserves the right to modify or adapt this Privacy Policy at any time. Therefore, we recommend that you review it every time you access the website. In the event that you have registered on the website and access your account or profile, when you access it, you will be informed in the event that there have been substantial changes in relation to the processing of your personal data.

 

Who is responsible for processing your data?

The data that is collected or that you voluntarily provide us with through the website, whether by browsing it, as well as any data that you may provide us with in the contact forms, via email or by telephone, will be collected and processed by the Data Controller, whose details are given below:

 

JAUME VERMELL NAUTICA S.L. VAT: B07645534

Address: C/Port 126, 07680, Porto Cristo, Illes Balears.

Registered in the Commercial Register of Palma de Mallorca, Volume 1121, Page PM-14945, insc.5

 

Contact in JAUME VERMELL NAUTICA S.L., for your personal data protection

C/Port 126, 07680, Porto Cristo (Illes Balears)

Telephone number: 971 82 20 22

Email: vermell@vermell.com

If, for any reason, you wish to contact us with any question related to the processing of your personal data or privacy (with our Data Protection Officer), you can do so by any of the means indicated above.

 

What data do we collect through the website?

By simply browsing the website, JAUME VERMELL NAUTICA S.L., will collect information relating to:

 

– IP address.

– Browser version.

– Operating system.

– Duration of the visit or browsing the website.

 

This information is stored by Google Analytics, so we refer to Google’s Privacy Policy, as it collects and processes such information. http://www.google.com/intl/en/policies/privacy/

Similarly, the website provides the utility of Google Maps, which may have access to your location, if you allow it to do so, in order to provide you with greater specificity about the distance and/or paths to our headquarters. In this regard, we refer to the Privacy Policy used by Google Maps, in order to know the use and processing of such data http://www.google.com/intl/en/policies/privacy7

 

The information that we handle will not be related to a specific user and will be stored in our databases for the purpose of statistical analysis, improvements to the website our products and/or services and will help us to improve our commercial strategy. The data will not be communicated to third parties.

 

 

+ WEBSITE OR EMAIL CONTACTS

For what purpose will we use your personal data?

• Answer your questions, requests or demands.
• Manage the requested service, answer or process your request.
• Information by electronic means, covering your request.
• Commercial or event information by electronic means, provided there is express authorization.

 

What is the legitimacy for the processing of your data?

The acceptance and consent of the interested party: in those cases where it is necessary to complete a form and click on the send button, the performance of the same necessarily implies that is has been informed and has expressly given its consent to the content of the clause appended to said form or acceptance of the privacy policy.

All our forms have a checkbox with the following formula, in order to send the information: “□ I have read and accept the Privacy Policy.”

 

+ CLIENTS

For what purposes will we process your personal data?

• Preparation and follow-up of the budget through communications between the two parties.
• Information by electronic means, covering your request.
• Commercial or event information by electronic means, provided there is express authorization.
• Manage administrative, communications and logistics services performed by the Responsible.
• Perform the corresponding transactions.
• Invoicing and timely tax return.
• Control and recovery procedures.

What is the legitimacy for the processing of your data?

The legal basis is your consent and the execution of a contract.

+ SUPPLIERS.

For what purposes will we process your personal data?

• Information by electronic means, covering your request.
• Commercial or event information by electronic means, provided there is express authorization.
• Manage administrative, communications and logistic services performed by the Responsible.
• Perform the corresponding transactions.
• Invoicing and timely tax returns.
• Control and recovery procedures.

What is the legitimacy for the processing of your data?

The legal basis is the acceptance of a contractual relationship or failing your consent to contact us or offer us your products by any means.

+ SOCIAL MEDIA CONTACTS

For what purposes will we process your personal data?

• Answer your queries, requests or petitions.
• Manage the requested service, answer or process your request.
• To interact with you and create a community of followers.

What is the legitimacy for the processing of your data?

The acceptance of a contractual relationship in the appropriate social network environment, and in accordance with its Privacy Policy:

Facebook http://www.facebook.com/policy.php?ref=pf

Instagram https://help.instagram.com/155833707900388

YouTube http://www.youtube.com/yt/policyandsafety/es/policy.html

 

How long will we keep your personal data?

We can only consult or unsubscribe your data in a restricted way by having a specific profile. We will treat them as long as you let us follow you, be friends or give “like”, “follow” or similar buttons.

Any rectification of your data or restriction of information or publications must be made through the configuration of your profile or user on the social network itself.

 

+ VIDEO SURVEILLANCE

For what purposes will we process your personal data??

• Videovigilancia of our facilities.
• Control of our employees.
• Sometimes they may be assigned to courts and tribunals for the exercise of legitimate actions.

What is the legitimacy for the processing of your data?

The unambiguous consent of the interested party when accessing our facilities after viewing the information poster of the video-monitored area.

 

+ JOB SEEKER

For what purpose will we process your personal data?

• Organization of selection processes for hiring employees.
• Ask for job interviews and evaluate your application.
• If you have given us your consent, we may assign it to collaborating or related entities with the sole purpose of helping you find employment.

What is legitimacy for the processing of your data?

The legal basis is your unequivocal consent, when you give us your CV and receive and sign information regarding the treatments we will perform.

How long will we keep the personal data?

The resume will be stored for one year, after which, if we have not contacted you, it will be deleted.

 

+ Human Resources

For what your purpose will we keep your personal data?

• Management of the employment relationship and the employee’s file.
• Perform all the administrative, tax and accounting procedures necessary to comply with our contractual commitments, obligations in labor regulations, National Insurance Agency, Labour Risk Prevention and Tax and Accounting.
• Management of payroll payments by financial institution.
• Time shifts control fingerprint / card control system (if applicable).
• Management of collective insurance / pension plan of the entity.
• Carry out training actions both subsidized and non-subsidized training.

What is the legitimacy for the processing of your personal data?

The legal basis for the processing of your data is the execution of your employment contract. Compliance with the relevant legal obligations. The consent of the data subject.

 

– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –

 

Do we include personal data of third parties?

No, as a general rule we only process the data provided by the owners. If you provide us with data from third parties, you must previously inform and request their consent to such persons or otherwise we are exempt from any liability for failure to comply with this requirement.

 

And juvenile data?

We do not process data from children under 14, so refrain from providing them if you are not that age.

 

Will we make electronic communications?

• They will only be made to manage your request, if it is one of the means of contact you have provided us.
• If we make commercial communications will have been previously and expressly authorized by you.

 

What security measures do we apply?

You can relax, we have adopted an optimal level of protection of the personal data we handle, and we have installed all the means and technical measures at our disposal, depending on the state of the technology, to avoid loss, misuse, alteration unauthorized access and theft of personal data.

To what extent will decision making be automated?

JAUME VERMELL NAUTICA S.L., does not use fully automated decision-making processes to establish, develop or terminate a contractual relationship with the user. In the event that we use these processes in a particular case, we will keep you informed and we will inform you of your rights in this regard if required by law.

Will profiling take place?

In order to be able to offer products and/or services according to your interests and improve your user experience, we may develop a “business profile” based on the information provided. However, no automated decisions will be made based on this profile.

 

To which recipients will your data be communicated?

Your data will not be transferred to third parties, unless legally required. In particular, they will be communicated to the HM Revenue & Customs Agency and to banks and financial institutions for the collection of the service provided or product purchased, as well as to those in charge of the processing necessary for the execution of the agreement.

In case of purchase or payment, if you choose any application, website, platform, bank card, or other online service, your data will be transferred to that platform or treated in its environment, always with maximum security.

In the event that you have given us your consent for the treatment of your name and images and other information, related to the activity of JAUME VERMELL NAUTICA S.L., will be disclosed on the different social networks and website of JAUME VERMELL NAUTICA S.L.

 

International transfers.

In case it is necessary for JAUME VERMELL NAUTICA S.L. to carry out international data transfers, it will ensure that such transfers are possible in accordance with the General Data Protection Regulation or any other requirement established by the applicable regulations. To this end, the company will adopt the necessary agreements to guarantee a level of data protection equivalent to that provided in European regulation.

In case of working in a system of shared folders in applications such as Dropbox, Google Drive, Microsoft OneDrive, Amazon, Apple, HubSpot etc., an international transfer to the United States will be carried out under the authorization of article 49.c) of the General Data Protection Regulation or any other mechanism that guarantees a level of data protection equivalent to that provided for in European regulations.

What rights do you have?

• To know if we are processing your data or not.
• To access your personal data.
• To request the rectification of your data if it is inaccurate.
• To request the elimination of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw your consent.
• To request the limitation of the processing of your data, in certain cases, in which case we will only keep them in accordance with the regulations in force.
• To submit your data, which will be provided to you in a structured, commonly used or machine-readable format. If you prefer, we can send it to the new data controller you designate. This is only valid in certain cases.
• To file a complaint with the Spanish Data Protection Agency if you believe that we have not attended to you correctly.
• To revoke consent for any processing for which you have consented, at any time.

 

If you modify any data, please let us know so we can keep them updated.

 

Would you like a form sheet for exercising your rights?

• We have forms for exercising your rights, ask us for them by email or if you prefer, you can use the forms prepared by the Spanish Data Protection Agency or third parties.
• These forms must be signed electronically or be accompanied by a photocopy of your ID card.
• If someone is representing you, you must attach a copy of their ID or have them sign it electronically.
• The forms can be submitted in person, sent by letter or by mail to the address of the person responsible at the beginning of this text.

You have right to file a complaint with the Spanish Data Protection Agency in the event that you consider that your rights have not been properly addressed.

 

The maximum period for JAUME VERMELL NAUTICA S.L. to resolve your complaint is one month, counting from the effective reception of your request by us.

 

You have the right to revoke your consent at any time for any of the treatments for which you have given it.

 

Do we use cookies?

If we use other types of cookies are not necessary, you can consult the cookie policy in the corresponding link at the top of our website.

How long will we keep your personal data?

• Personal data will be kept for as long as you can remained linked to us.
• Once you disengage, the personal data processed for each purpose will be kept for the legally stipulated periods, including the period in which a judge or court may require them in accordance with the statute of limitations for legal action.
• The data processed will be kept until the aforementioned legal periods expire, if there is a legal obligation to keep them or, if there is no such legal period, until the interested party requests their elimination or revokes the consent granted.
• We will keep all information and communications relating to your purchase or the provision of our service, for the duration of the guarantees of the products or services, in order to attend to possible claims.
• For each treatment or type of data, we provide you with a specific period, which you can consult in the following table:

 

File	Document	Conservation
Clients	Invoices.	10 years
	Forms and coupons.	15 years
	Contracts.	5 years
Human Resources	Payrolls, TC1, TC2, etc.	10 years
	Curriculum.	Until the end of the selection process, and 1 year more with your consent.
	Severance pay documents. Contracts. Data on temporary workers.	4 years
	Worker record.	Up to 5 years after the worker’s leave.
Marketing	Data bases or web visitors	For the duration of the treatment
Suppliers	Invoices	10 years
	Contracts	5 years
Access control and video surveillance	Visitor list	30 days
	Videos	30 días lock 3 años elimination
Accounting	Books and Accounting documents. Shareholders and board of directors’ agreement’s articles of association, minutes, regulations of the board and delegated committees. Financial statements, Audit reports. Records and documents related to subsidies.	6 years
Fiscal	Management of the entity’s administration, right and obligations to the payment of taxes. Administration of dividend payments and withholding taxes.	10 years
	Information on intra-group pricing establishments	18 years 8 years for intra-group transactions for price agreements
Safety and Health	Medical records	5 years
Environment	Information on chemical or substantially hazardous substances	10 years
	Documents relating to environmental permits as long as the activity is carried out.	3 years after closure of the activity
	Records on recycling or waste disposal	3 years
	Subsidies for clean-up operations must keep records of entitlements and obligations, receipts and payments	4 years
	Accident reports	5 years
Insurance	Insurance policy	6 years (general rule) 2 years (damages) 5 years (personal) 10 years (life)
Purchases	Register all supplies of good or services, intra-community acquisitions, imports and exports for VAT purposes.	5 years
Legal	Intellectual and Industrial property documents. Contract and agreements.	5 years
	Permits, licences and certificates	6 years from the date of expiry of the permit, licence or certificate. 10 years (criminal prescription)
	Confidentiality and non-competition agreements	Always the duration of the obligation or confidentiality
Protection of personal data	Processing of personal data, if different from the processing notified to the Spanish Agent of Data Protection	3 years
	Personal data of employees stored on networks, computers and communications equipment used by employees, access controls and internal management/administration systems.	5 years
Academics	Academic history	Indefinite