Privacy Policy

In compliance with current data protection regulations, Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR) and Organic Law 3/2018 of December 5, on Data Protection and the Guarantee of Digital Rights (LOPDGDD), we provide the following additional information regarding the processing of personal data that we carry out.

Data Controller

The data controller is the legal entity that determines the purposes and means of personal data processing. In other words, the controller decides how and for what purposes personal data is processed.

For the purposes of this Data Protection Policy, the data controller of personal data is:

Corporate name: COMERCIAL VALQUÍN S.L.
Registered in the Pontevedra Mercantile Registry …..
NIF: B36614956.
Registered address: Pol. Ind. de A Facha, 8, 36118 Campo Lameiro, Pontevedra.
Contact email: info@norvi.com

What personal data do we process and how do we protect it?

Personal data is any information about an identified or identifiable natural person.

For the purposes set out in this Privacy Policy, the data controller collects and processes personal data as explained in each type of processing, which will depend on the different services requested or the contractual relationship maintained with our entity.

Our organization is committed to handling your personal data with full confidentiality and applying appropriate security measures, both physical, technical, and organizational, to protect your personal data.

You guarantee and are responsible, in any case, for the truthfulness, accuracy, validity, and authenticity of the personal data provided and commit to keeping it duly updated.

Processing of “Customer” Data

What types of personal data do we process?

Identifying data: name, ID number, address, phone number, email address.
Financial data: bank account.
Academic and professional data: profession, position, experience, qualifications.
Data related to transactions: products and services provided.

For what purpose do we process your personal data?

We process the personal data you provide to us for the management of the company’s customer data, to maintain the commercial relationship, as well as for accounting, administrative, and billing management, in addition to fulfilling tax obligations.

The purpose of advertising and commercial prospecting has also been considered, for which the express consent of the interested party is requested.

The personal data provided will be retained as long as the commercial relationship is maintained. If you decide to cancel your personal data, they may be kept in our databases for the periods stipulated by legislation to fulfill tax and accounting obligations, and will be deleted once those legal or applicable periods have expired.

What is the legal basis for processing your data?

The legal basis for processing your data is the execution of a contract, as well as compliance with a legal obligation by the data controller.

The communication of offers and promotions that may be of interest to you is based on the express consent that is requested from you.

To which recipients will your data be disclosed?

Your personal data will not be transferred to any entity, except to public organizations when required by legal obligation.

International transfers of personal data are also not anticipated.

Processing of “Contacts and Potential Customers” Data

What types of personal data do we process?

Identifying data: name, address, phone number, email address.

For what purpose do we process your personal data?

We process the personal data you provide in the contact form for the management of commercial contacts and potential customer data.

The purpose of advertising and commercial prospecting has also been considered, for which the express consent of the interested party is requested.

The personal data provided will be retained as long as the commercial relationship is maintained. If you decide to cancel your personal data, they will be deleted from our contacts database.

What is the legal basis for processing your data?

The legal basis for processing your data is the express consent that is requested from you.

To which recipients will your data be disclosed?

Your personal data will not be transferred to any entity.

International transfers of personal data are also not anticipated.

Processing of “Supplier” Data

What types of personal data do we process?

Identifying data: name, ID number, address, phone number, email address.
Financial data: bank account.
Academic and professional data: profession, position, qualifications.
Data related to transactions: products and services delivered.

For what purpose do we process your personal data?

We process the personal data you provide for managing the company’s supplier data, to maintain the business relationship, as well as for accounting, administrative, and payment management, and to fulfill tax obligations.

What is the legal basis for processing your data?

The legal basis for processing your data is the execution of a contract, as well as compliance with a legal obligation by the data controller.

To which recipients will your data be disclosed?

Your personal data will not be transferred to any entity, except to public organizations when required by legal obligation.

International transfers of personal data are also not anticipated.

Processing of “Employee” Data

What types of personal data do we process?

Identifying data: name, ID number, date of birth, address, phone number, email address, signature, image.
Personal characteristics data: gender, marital status, nationality, age, date and place of birth, and family data.
Social circumstances data: licenses and permits.
Economic-financial data: bank account, payroll data, tax deductions, other withholdings (if applicable).
Academic and professional data: profession, position, experience, qualifications.
Attendance control data.

For what purpose do we process your personal data?

We process the personal data you provide for managing the employment relationship, payroll management, administrative and payment management, compliance with the company’s tax and labor obligations, access control, training and professional development management, and occupational risk prevention.

The personal data provided will be kept as long as the employment relationship is maintained. If, after the end of the employment relationship, you decide to cancel your personal data, it will be kept until the legal periods defined by accounting, tax, and labor regulations have expired. Once these periods have passed, your data will be deleted from our system.

What is the legal basis for processing your data?

The legal basis for processing your data is the fulfillment of an employment contract, as well as the compliance with a legal obligation of the controller.

To which recipients will your data be disclosed?

Your personal data will not be transferred to any entity, except to public organizations when required by legal obligation.

International transfers of personal data are also not anticipated.

Processing of “Job Candidates” Data

What types of personal data do we process?

Identifying data: name, ID number, date of birth, address, phone number, email address, image.
Personal characteristics data: gender, marital status, nationality, age, date, and place of birth.
Academic and professional data: profession, position, experience, qualifications.

For what purpose do we process your personal data?

We process the personal data you provide for managing the company’s recruitment processes.

The personal data provided will be retained as long as the candidate has not withdrawn consent to keep their resume for future selection processes. If you decide to cancel your personal data, it will be deleted from our job candidate database.

What is the legal basis for processing your data?

The legal basis for processing your data is the express consent that is requested from you.

To which recipients will your data be disclosed?

Your personal data will not be transferred to any entity, except to public organizations when required by legal obligation.

International transfers of personal data are also not anticipated.

Processing of “Video Surveillance” Data

What types of personal data do we process?

Identifying data: image.

For what purpose do we process your personal data?

We process personal data to maintain security in our facilities and to control access.

The personal data collected will be retained for a maximum of 30 days.

What is the legal basis for processing your data?

The legal basis for processing your data is the public interest in security, as well as the legitimate interest of the company in maintaining the security of its facilities.

To which recipients will your data be disclosed?

Your personal data will not be transferred to any entity, except to public organizations when required by legal obligation.

International transfers of personal data are also not anticipated.

What are your rights when you provide us with your data?

In accordance with the applicable data protection regulations, you have a number of rights regarding the processing of your personal data. The exercise of these rights will be free of charge for you, except in cases where requests are manifestly unfounded or excessive, particularly if they are repetitive.

These rights are as follows:

Right to information: You have the right to be informed in a concise, transparent, intelligible, and easily accessible manner, using clear and simple language, about the use and processing of your personal data.
Right of access: You have the right to request at any time that we confirm whether we are processing your personal data, to provide you with access to it, and to provide information about its processing. You also have the right to obtain a copy of this data. The first copy of your personal data will be free of charge, but requests for additional copies may be subject to a reasonable fee based on administrative costs. We may ask you to verify your identity or request additional information necessary to process your request.
Right to rectification: You have the right to request the correction of inaccurate, outdated, or incomplete personal data concerning you. You may also request that incomplete personal data be completed, including through an additional statement.
Right to erasure: You have the right to request the deletion of your personal data when, among other reasons, the data is no longer necessary for the purposes for which it was collected. However, this right is not absolute, so our organization may continue to retain your data in a properly blocked state in cases provided for by applicable regulations.
Right to restrict processing: You have the right to request that we limit the processing of your personal data, which means we may continue to store it, but not process it further if any of the following conditions apply:
- You dispute the accuracy of the data, for a period that allows the controller to verify its accuracy;
- The processing is unlawful, and you oppose the deletion of the data and instead request the restriction of its use;
- Our entity no longer needs the data for processing purposes, but you need it for the formulation, exercise, or defense of claims;
- You have objected to the processing, while it is verified whether our entity’s legitimate reasons prevail over yours.
Right to data portability: You have the right to have your data transferred to another data controller in a structured, commonly used, and machine-readable format. This right applies when the processing of your personal data is based on consent or the execution of a contract, and such processing is carried out by automated means.
Right to object: This right allows you to object to the processing of your personal data, including profiling. We will not be able to comply with your right only when we process your data if we can demonstrate legitimate reasons for the processing or for the formulation, exercise, or defense of claims.
Right not to be subject to automated decisions, including profiling: This right allows you not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly affects you. Unless such a decision is necessary for the formation or performance of a contract, is authorized by law, or is based on consent.
Right to withdraw consent: In cases where we have obtained your consent for the processing of your personal data in relation to specific activities (for example, to send you commercial communications), you can withdraw it at any time. In this way, we will stop carrying out that specific activity for which you had previously consented, unless there is another reason that justifies the continuation of processing your data for these purposes, in which case, we will notify you of this situation.
Right to lodge a complaint with a supervisory authority: You have the right to file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos)., C/ Jorge Juan, 6, 28001 Madrid, 901 100 099 – 912 663 517 (www.agpd.es),or at the following electronic address: https://sedeagpd.gob.es/sede-electronica-web/vistas/formQuejasSugerencias/seleccionarQuejaSugerencia.jsf

You can exercise the aforementioned rights by sending us a communication to the physical or electronic address provided, along with a document verifying your identity, and supplying the necessary details to process your request.

Interested parties can obtain additional information about their rights on the website of the Spanish Data Protection Agency (Agencia Española de Protección de Datos), www.agpd.es.

Can I withdraw consent?

You have the possibility and the right to withdraw your consent for any specific purpose given at the time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

Security and update of your personal data.

In order to safeguard the security of your personal data, we inform you that all necessary technical and organizational measures have been adopted to ensure the security of the personal data provided. This is to prevent any alteration, loss, and/or unauthorized processing or access, as required by regulations, although absolute security does not exist.

It is important that, in order for us to keep your personal data updated, you inform us whenever any changes occur.

Confidentiality.

COMERCIAL VALQUÍN S.L. inform you that your data will be treated with the utmost care and confidentiality by all personnel involved in any phase of the processing. We will not transfer or disclose your data to any third party, except in cases legally provided for, or unless the individual has expressly authorized us to do so.