Privacy Policy

We provide you with this Privacy Policy in order to inform you in detail about how we process your personal data and protect your privacy and the information you provide to us.

Should we make any changes to this Privacy Policy in the future, we will notify you through this website or by other appropriate means, so that you may be informed of the new privacy terms and conditions adopted.

Below, we explain, in a question-and-answer format, the conditions under which our Company processes your personal data.

Who is the Data Controller of your personal data?

  • Identity: DINACELL ELECTRÓNICA, S.L. – Tax Identification Number (CIF): B80872823
  • Registered address: C/ Torno No. 8, Santa Ana Industrial Estate, 28522 Rivas-Vaciamadrid, Madrid, Spain
  • Telephone: +34 913 001 435
  • Email: gdpr@dinacell.com

For what purposes do we process your personal data?

We process the personal data you provide to us for the following purposes:

a) To manage customer relationships, including the invoicing and collection of payments for the services provided. The provision of personal data for this purpose is mandatory for our customers; otherwise, the contract cannot be performed.

b) To manage our relationships with suppliers, including the invoicing and payment for the services provided. For this purpose, suppliers are required to provide their personal data, as otherwise the contract cannot be performed.

c) To process requests for information, suggestions and complaints that you may submit to us, to contact the sender of such communications, to respond to your request or enquiry, and to carry out any necessary follow-up. The provision of personal data for this purpose is voluntary. However, if such data is not provided, we will be unable to respond to your request, enquiry or complaint. Therefore, the provision of your personal data for these purposes is necessary in order for us to deal with such requests.

d) To send you commercial communications relating to our products and services. If you are our customer, we will send you such communications unless you indicate your objection by selecting the relevant option when providing your personal data or, subsequently, by informing us through any available means.

If, however, you do not purchase our products or services, we will not send you commercial information unless you have expressly authorised us to do so. Such authorisation is voluntary, and if you choose not to grant it, the only consequence will be that you will not receive commercial offers relating to our products or services.

In connection with the sending of the aforementioned communications, and based on the information you have provided, we may create commercial profiles in order to offer you the products and services that best match your interests.

e) If you submit your CV to us, we will process your personal data in order to maintain information on individuals who wish to undertake internships and/or work with us, so that we can carry out the corresponding recruitment and selection processes.

f) If you become our friend or follower on social media, we will process your personal data in order to keep you informed about our activities and promotions through those channels. The provision of personal data for this purpose is voluntary. However, if you choose not to provide such data, you will not be able to become our friend or follower on the relevant social media platform. The categories of personal data processed for this purpose are identification data.

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to address any potential liabilities that may arise from the fulfilment of those purposes.

Personal data processed for the management of customer and supplier relationships, including the invoicing and collection of payments for services, will be retained for as long as the contractual relationship remains in force. Once the contractual relationship has ended, where applicable, the data may be retained for the period required under the applicable legislation and until any potential liabilities arising from the contract have become time-barred.

Personal data processed for the purpose of sending commercial communications relating to our products or services will be retained indefinitely until, where applicable, you notify us of your wish to have such data erased or of your decision to stop receiving such communications.

Personal data relating to prospective customers who do not ultimately purchase our products or services and who do not wish to receive commercial information will be erased once it has been confirmed that no contractual relationship will be established. Where the previous relationship between the parties, although not resulting in a contract, may give rise to potential liabilities, the data will be retained until such liabilities have become time-barred.

Personal data processed for the purpose of handling requests, enquiries, consultations or complaints will be retained for the time necessary to respond to them and to consider them definitively resolved. Thereafter, such data will be retained as part of our communication records for a period of one year, unless you request its erasure beforehand.

Personal data provided for participation in recruitment and selection processes will be included in our recruitment database and retained for the duration of the recruitment process and, thereafter, until the data subject exercises their right to erasure, and in any event for a maximum period of one year from the last update made by the data subject, so that it may be considered in future recruitment processes of a similar nature. For this purpose, the data subject must keep the personal data provided to us up to date, particularly with regard to education, qualifications and professional experience.

Personal data provided through social media platforms will be retained for as long as you remain our friend or follower on the relevant platform

What is the legal basis for processing your personal data?

The legal basis for processing your personal data is the performance of the contract for the provision of the products and services you have purchased, in accordance with the terms and conditions set out therein.

The legal basis for sending promotional offers relating to products and services to our customers is our legitimate business interest in offering them additional products or services and thereby fostering customer loyalty. This legitimate interest is recognised under the applicable legislation, namely the General Data Protection Regulation (GDPR), which expressly permits the processing of personal data on this legal basis for direct marketing purposes. Nevertheless, we remind you that you have the right to object to this processing of your personal data at any time by using any of the means provided for in this Privacy Policy.

The legal basis for sending promotional offers relating to products and services to individuals who have expressed an interest in them but are not, or have not become, our customers is the data subject’s consent. Such consent may be withdrawn at any time. The only consequence of withdrawing consent will be that you will no longer receive marketing communications. Withdrawal of consent shall not affect the lawfulness of any processing carried out prior to its withdrawal.

The legal basis for processing personal data in order to respond to your requests for information, enquiries, consultations and complaints is the data subject’s consent. You may withdraw such consent at any time; however, this will not affect the lawfulness of any processing carried out prior to its withdrawal.

The legal basis for processing personal data used in recruitment and selection processes is the data subject’s consent, which is deemed to be given by submitting a CV or participating in the recruitment process. Such consent may be withdrawn at any time. However, the withdrawal of consent shall not affect the lawfulness of any processing carried out prior to its withdrawal. In addition, further personal data may be collected during interviews or other stages of the recruitment process, and such processing will likewise be based on the data subject’s consent.

Personal data provided through social media platforms will be processed on the basis of your consent, which may be withdrawn at any time. Such withdrawal shall not affect the lawfulness of any processing carried out prior to its withdrawal.

The categories of personal data processed are those requested, as applicable, in the relevant form or contract through which you provide your personal data.

To whom will your personal data be disclosed? [1]

The personal data will be disclosed to the following recipients:

  1. The competent Public Authorities, including courts and tribunals, in the cases provided for by law and for the purposes established therein.
  2. Financial institutions through which payment collection and payment processing are carried out.

Although this does not constitute a disclosure of personal data, third-party companies acting as our service providers may have access to your personal data in order to provide the requested services. Such data processors access your personal data solely in accordance with our instructions, may not use it for any purpose other than that for which it was provided, and are bound by strict confidentiality obligations under a contract requiring them to comply with the applicable data protection legislation.

[1] Where a data processor carries out processing activities that are particularly significant in relation to the processing of personal data, or where such processing takes place outside the European Economic Area (EEA) and this may be relevant for compliance with the principle of transparency, the Spanish Data Protection Agency (AEPD) considers it good practice to inform data subjects accordingly. For this purpose, a clause such as the following may be included:

“This Company contracts its virtual infrastructure under a cloud computing model through ____ (insert the name of the provider) and on the basis of _______ (insert the legal basis for the international data transfer).”

What are your rights when you provide us with your personal data?

Any individual has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Data subjects have the right to access their personal data, to request the rectification of inaccurate personal data and, where applicable, to request its erasure where, among other reasons, the data is no longer necessary for the purposes for which it was collected.

Under the conditions established by the General Data Protection Regulation (GDPR), data subjects may request the restriction of the processing of their personal data or the portability of such data, in which case we will retain it only for the establishment, exercise or defence of legal claims.

In certain circumstances and on grounds relating to their particular situation, data subjects may object to the processing of their personal data. If you have given your consent for a specific purpose, you have the right to withdraw that consent at any time, without affecting the lawfulness of any processing based on your consent prior to its withdrawal. In such cases, we will cease processing your personal data or, where applicable, cease processing it for that specific purpose, unless there are compelling legitimate grounds for the processing or it is necessary for the establishment, exercise or defence of legal claims.

In addition, data protection legislation entitles you, where applicable, not to be subject to a decision based solely on the automated processing of your personal data.

These rights are characterised by the following:

  • The exercise of these rights is free of charge, unless the request is manifestly unfounded or excessive (for example, because of its repetitive nature), in which case we may charge a reasonable fee reflecting the administrative costs incurred or refuse to act on the request.
  • You may exercise these rights directly or through your legal or authorised representative.
  • We will respond to your request within one month. However, taking into account the complexity and number of requests received, this period may be extended by a further two months.
  • We are required to inform you of the means available for exercising these rights. Such means must be accessible, and we may not refuse to process your request solely because you have chosen a particular method. Where the request is submitted electronically, the information will, where possible, be provided by electronic means unless you request otherwise.
  • If, for any reason, we do not act upon your request, we will inform you, no later than one month after receiving it, of the reasons for our decision and of your right to lodge a complaint with a Supervisory Authority.

In order to facilitate the exercise of these rights, we provide below links to the application forms for each of them:

All the rights referred to above may be exercised using the contact details provided at the beginning of this Privacy Policy.

All the rights referred to above may be exercised by contacting the Company using the contact details provided at the beginning of this Privacy Policy.

If you believe that any of your rights have been infringed, particularly if you have not obtained satisfaction in exercising them, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) (contact details available at www.aepd.es) or with any other competent Supervisory Authority. You may also obtain further information about your rights by contacting those authorities.

How do we protect your personal data?

We are firmly committed to protecting the personal data we process. We implement physical, organisational and technical measures, controls and procedures that are reasonably reliable and effective, designed to preserve the integrity and security of your personal data and to safeguard your privacy.

What are your responsibilities as a data subject?

By providing us with your personal data, you confirm that you are over 14 years of age and that the personal data you provide is true, accurate, complete and up to date.

For these purposes, the data subject is responsible for the accuracy of the personal data provided and must ensure that it is kept properly updated so that it reflects their actual circumstances. The data subject shall be liable for any false or inaccurate information provided, as well as for any direct or indirect damage that may arise as a result.

If you provide personal data relating to third parties, you are responsible for informing them in advance of all the information required under Article 14 of the General Data Protection Regulation (GDPR), under the conditions set out therein.

 

This English version is provided for convenience only and is a translation of the original Spanish version. In the event of any discrepancy, inconsistency or ambiguity between the English and Spanish versions, the Spanish version shall prevail.