Privacy Politics

At GES 40 S.A., hereinafter referred to as GES 40, we are committed to protecting privacy and the proper use of personal data.

This Privacy Policy aims to inform about the processing of personal data that GES 40 carries out on this website and any of its subdomains.

Who is responsible for processing your personal data?

GES 40 is the entity that holds the status of Data Controller.

You can contact us at:

Address: Calàbria 267, 3º1ª | 08029 Barcelona
Email: info@ges40.com
Phone: 932 176 414
Data Protection Officer: lopd@gescom

What do we use your contact personal data for?

We may process your personal data for different purposes:

Web forms:

The personal data collected through the contact form, or if you send us an email, will be processed by GES 40, as the data controller, to manage and respond to your request for information, questions, complaints, etc., or for the specific purpose indicated in the web form.

Email:

The personal data that we process as a result of receiving and/or exchanging emails will be handled to respond to your information request or inquiry, to maintain commercial or professional contacts and relationships resulting from it, or for maintaining a contractual relationship if applicable.

Curriculum management:

We may also process your data to consider your application for potential vacancies or job positions that may arise in any of the group companies that match your profile and experience if you send it to rrhh@ges40.com or fill out the “Join Us” form.

Newsletter:

Additionally, if you expressly authorize it by checking the corresponding box or through your explicit request or subscription from our website, we will keep you informed about GES 40 activities through our electronic newsletter. For registration to be effective, we need a valid email address. To verify that the request comes from the actual owner of the email address, we use a confirmation method. For this, we register the newsletter order and send you a confirmation email.

Consent to process your personal data and its subsequent use for sending newsletters can be revoked at any time. You will find a link for this purpose at the footer of each newsletter. You can also unsubscribe at any time or communicate your request through the contact options specified at the end of this document.

Social media management:

We inform you that if you decide to follow us on our social media (Twitter, LinkedIn), we will process your data to manage our followers and keep them informed about relevant news in the legal sector and activities and services related to GES 40 (commercial communications) and/or by third parties.

What is the legal basis that legitimizes the processing of your personal data?

The legal basis that legitimizes us to process your data may vary:

• In some cases, it may be the consent of the interested parties (subscription to our electronic newsletter, becoming a follower on our social media, filling out a web form, sending a curriculum, etc.). When the processing is based on your consent, it will be understood as granted unequivocally, considering this contribution a clear affirmative act on your part that manifests this consent.
• In other cases, it may be compliance with a legal obligation on our part.
• The execution of a contract or
• the legitimate interest of the Controller (for example, in managing contact data and, where applicable, those related to the function or position held by individuals providing services in a legal entity).

Providing the requested data is mandatory as it is essential to address your request and/or provide our services; if you do not provide it, we will not be able to carry it out or provide them.

How long do we retain your personal data?

Personal data will be retained for as long as necessary to address the purpose of the communication and, in cases based on consent, as long as it has not been revoked.

In the case of CVs, after two years without notifying updates, we will proceed to their destruction.

Additionally, in order to ensure that the data in our files, whether electronic and/or paper, always correspond to reality, we will strive to keep it updated. For this purpose, the User may communicate this to us via email at lopd@ges40.com.

Who may be recipients of your personal data?

Personal data will not be transferred or communicated to third parties, except in cases necessary to address the inquiry made and in cases provided for by law.

In the case of subscribing to our newsletter, we inform you that we use the Mailchimp application for its management, which implies an international transfer of data to Mailchimp (The Rocket Science Group LLC) for service provision, based on an adequacy decision by the European Commission (Commission Implementing Decision (EU) 2016/1250 of July 12, 2016, under Directive 95/46/EC of the European Parliament and Council regarding the adequacy of the protection afforded by the EU-U.S. Privacy Shield). We also inform you that this company uses tracking devices to monitor recipient activity, in order to control email openings and clicks on links contained in emails, and to collect information such as IP address, browser, email client type, and similar details, to generate reports on campaign tracking and improve the effectiveness of Mailchimp services. For more information, please consult Mailchimp’s policy: https://mailchimp.com/legal/privacy/

What are your rights regarding data protection, and how can you exercise them?

The interested party may exercise the following rights regarding data protection:

• Right to request access to personal data relating to the interested party.
• Right to request rectification or erasure.
• Right to request the restriction of processing.
• Right to object to processing.
• Right to data portability.

The interested party may exercise these rights by submitting a request, accompanied by a photocopy of their ID or equivalent identification document, addressed to C/ Calàbria 267, 3º1ª | 08029 Barcelona or by sending an email to lopd@ges40.com. If acting through a legal or voluntary representative, they must also provide a document that proves the representation and the representative’s identification document.

If you believe your personal data protection rights have been violated, you may contact our Data Protection Officer at lopd@ges40.com or file a complaint with the Spanish Data Protection Agency (www.aepd.es).