PRIVACY AND DATA PROTECTION POLICY
We appreciate that you have decided to visit us, and we hope that your experience on this website will be very satisfactory.
Last update on 28/11/2022
1.- RESPONSIBLE FOR THE TREATMENT OF PERSONAL DATA
PANEL SISTEMAS INFORMÁTICOS SL (hereinafter PANEL, or the Data Controller), with registered office at Calle Josefa Valcárcel, number 9, 28027 (Madrid) and CIF number B-83766485, is responsible for the treatment of the data provided by users (“ Users ”) through the Web, Social Networks, Email, or based on the commercial and / or employment relationship with PANEL.
You can contact PANEL through postal mail at the address indicated above, by email to the address email@example.com, or by phone by calling 91 405 78 88.
Data of the Data Protection Officer:
- DPO: PRODAT MADRID, SL
- Contact: firstname.lastname@example.org
2.- OBJECTIVE DATA OF THE TREATMENT
WEB CONTACTS AND EMAIL
The Treatment Manager will process the identification and contact data that the user provides through the contact forms, download center form, or by contacting the Manager by email, as well as other data that the user includes. In addition, PANEL may treat the IP, operating system or browser used by the user, and even the duration of the visit, anonymously.
Thus, the data will be processed for the following purposes:
- Answer questions, requests or requests.
- Manage the requested service or process requests.
- Information by electronic means, related to an application.
- Carry out analysis and improvements on the Web, on the products and services of PANEL.
- Improve business strategy.
- Send commercial communications related to the activity of PANEL and the products and/or services marketed by PANEL.
SOCIAL NETWORKS CONTACTS
The personal data available in the profiles of Social Networks (RRSS), as well as those that the user provides to the Treatment Manager when contacting him through this means, will be treated with the purpose of:
- Respond to inquiries, requests or requests.
- Manage the requested service, or process a request.
- Establish a user-responsible relationship, and create a community of followers.
- Send commercial communications related to the activity of PANEL and the products and/or services marketed by PANEL.
In this case, the treatment is based on the acceptance of a contractual relationship in the environment of the corresponding social network, and in accordance with its Privacy policies, so it is recommended that the user consult them.
PANEL will only be able to consult or cancel the data in a restricted way by having a specific profile. These will be processed for as long as the user allows it through the different interactions that each RRSS allows. Any rectification of the data or restriction of information or publications, the user must do it through the configuration of his profile in the social network itself.
JOB APPLICANTS / INTERNSHIPS
PANEL will process the data it receives via email and / or the Curriculum Vitae (CV) submission form on the web, both identification and contact data, as well as those contained in the CV that the candidate attaches, with the following purposes :
- Organization of selection processes for hiring employees.
- Summons for job interviews and evaluation of candidacies.
By virtue of PANEL's conservation policy, personal data will be kept for a maximum period of one year from the receipt of your Curriculum Vitae; after the same, you can renew your express consent and, in case of not renewing it, your data will be deleted.
Likewise, PANEL SISTEMAS INFORMÁTICOS will be able to communicate the Curriculum Vitae data to the clients to whom it would be destined for the same purpose, in order for the client to evaluate the adequacy of their profile as a candidate for the project offered.
CUSTOMERS, EMPLOYEES AND SUPPLIERS
The Treatment Manager will process the identification and contact data that our clients, employees and suppliers provide us with the purpose of:
- Manage the employment relationship with our employees
- Manage the commercial relationship with our clients
- Manage the commercial relationship with our suppliers
- Execution of service provision contracts
- Management of administrative services such as: billing, budgets, contracts, payroll, etc.
- Compliance with the legal obligations derived from the contractual relationship.
The legal basis for the described treatment is the legitimate interest of the relationship maintained as well as the express consent duly signed. By virtue of PANEL's conservation policy, personal data will be kept for the established and legally required periods, as detailed in the section “Conservation of Personal Data”. After it, you can renew your express consent and, if you do not renew it, your data will be deleted.
Likewise, PANEL SISTEMAS INFORMÁTICOS may communicate the data:
- To the entities necessary for compliance with Labor regulations derived from the employment relationship itself according to Royal Legislative Decree 2/2015, of October 23, which approves the revised text of the Workers' Statute Law.
- To the Mutual Societies or entities that manage the economic benefits of the Social Security collaborating with the same purposes in accordance with the General Law of Social Security.
- To entities that make it necessary to comply with Occupational Risk Prevention by virtue of Law 31/1995, of November 8, on Occupational Risk Prevention.
- To the Tax Agency to comply with the tax obligations of the entity in accordance with the General Tax Law.
- To the Labor Inspection when requested according to Law 42/1997, of November 14, regulating the Labor Inspection.
- To other entities or companies that participate in the collaboration with PANEL in the management of legal procedures necessary for the management of their labor / commercial relationship, such as travel management, private medical insurance, platforms in the field of prevention of occupational risks according to article 24 of Coordination of business activities according to Law 31/1995, of November 8, etc.
3.- TREATMENT OF THIRD PARTY DATA
As a general rule, the Data Controller will only process the data provided by the owners. In the event of receiving data from third parties, such persons must be informed and requested their consent, or else PANEL will be exempt from any responsibility for the breach of this requirement.
4.- DATA OF MINORS
5.- COMMERCIAL COMMUNICATIONS BY ELECTRONIC MEANS
PANEL will send commercial communications to the email address provided by any of the aforementioned means, as long as the user has given their express consent by checking the corresponding checkbox.
The Treatment Manager will store the email address in their databases, and will send commercial information periodically, until the user requests to unsubscribe or update their subscription preferences to our lists, an option that will be available from any communication.
The purposes of this specific treatment consist of:
- Manage the requested service.
- Information by electronic means, regarding the application.
- Commercial information or events by electronic means, as long as there is express authorization.
- Maintain the commercial relationship with the user.
- Carry out analysis and improvements in the sending of mailings, to improve the commercial strategy.
6.- SECURITY MEASURES THAT WE APPLY
PANEL has adopted an optimal level of information security, putting the means and adopting the appropriate technical and organizational measures according to the state of technology, to avoid the loss, misuse, alteration, unauthorized access or theft of Personal Data.
PANEL is a company certified in the ISO 27001 Information Security standard since 2016. You can check the certification this link.
7.- COMMUNICATION TO THIRD PARTIES
The personal data of the users may be transferred to:
- State Tax Administration Agency and banks and financial entities for the collection of the service provided or product purchased; by virtue of legal obligation.
- To the user community of the PANEL website, as long as the user interacts by posting comments.
- Those in charge of the necessary treatment for the provision of the service, who will have signed a service provision contract that requires them to maintain the same level of privacy as that of the Treatment Manager.
Likewise, PANEL will in no case transfer your personal data to third parties so that they can directly send you advertising or commercial information.
In the event that any of the assignments involves an international transfer of data when using American applications, it will adhere to the Privacy Shield agreement, which guarantees that American software companies comply with European data protection policies in terms of privacy.
8.- USER RIGHTS
The regulations on data protection, recognizes the user a series of rights, which PANEL as responsible, has the obligation to satisfy:
- To know if your data is being processed or not.
- To access the personal data that is the object of the treatment.
- To request the rectification of the data if they are inaccurate.
- To request the deletion of the data if they are no longer necessary for the purposes for which they were collected or if you withdraw the consent granted.
- To request the limitation of the processing of the data, in some cases, in which case they will only be kept in accordance with current regulations.
- To the portability of the data, which will be provided in a structured, commonly used or machine-readable format; or they may be sent to the new designated manager. It is only valid in certain cases.
- To file a claim with the Spanish Data Protection Agency or competent control authority.
- To revoke consent for any treatment for which you have consented, at any time.
To facilitate the process, and comply with the principle of data accuracy, if any data is modified, the Treatment Manager appreciates the communication of said modification to the email account email@example.com.
For the exercise of the aforementioned rights, the user can request PANEL by mail to firstname.lastname@example.org a form, or use those prepared by the Spanish Agency for Data Protection or third parties. These forms must be electronically signed or accompanied by a photocopy of the DNI; If there is representation, a copy of the user's ID must be attached, or that they sign it with their electronic signature. The forms can be presented in person, sent by letter or by mail to email@example.com.
Depending on the right exercised, PANEL will take a maximum of one month to respond from the receipt of the request, and two months if the issue is very complex, in which case the user will be notified.
10.- CONSERVATION OF PERSONAL DATA
Personal data will be kept as long as the user remains linked to the Treatment Manager.
Once you dissociate yourself, the data processed for each purpose will be kept for the legally stipulated periods, including the period in which a judge or court may require them, taking into account the statute of limitations for legal actions.
The data processed will be maintained as long as the aforementioned legal deadlines do not expire, if there is a legal maintenance obligation, or if the legal term does not exist, until the interested party requests their suppression or revocation of the consent granted.
PANEL will keep all the information and communications related to the provision of the service, while the guarantees of the products or services last, to attend to possible claims.
For more information on the conservation periods, you can consult the following table:
|Clients||Invoices||Among 6 and 10 years|
|Budgets and commercial offers||5 years|
|Human Resources||Payroll, TC1, TC2, etc.||Among 4 and 6 years|
|Curriculum Vitae||Until the end of the selection process, and 1 more year with your consent|
Docs of severance pay.
Temporary worker data.
|Worker file.||Up to 4 years after withdrawal.|
|Marketing||Databases or website visitors.||While the treatment lasts.|
|Suppliers||Invoices||Among 6 and 10 years|
|Access control and video surveillance||Visitors list||30 days|
30 days lock
3 years destruction
Accounting books and documents.
Partner agreements and boards of directors, company statutes, minutes, board of directors regulations and delegated committees.
Financial statements, audit reports
Grant-related records and documents
Keeping of the company's administration, rights and obligations related to the payment of taxes.
Administration of dividend payments and tax withholdings.
|Security and health||Workers' Medical Records||5 years|
|Environment||Information on chemical or substantially hazardous substances||10 years|
|Documents related to environmental permits (While the activity is carried out).||
3 years after the closing of the activity
10 years (statute of limitations)
|Records on recycling or waste disposal||3 years|
|Grants for cleaning operations must retain documents of rights and obligations, receipts and payments.||4 years|
6 years (general rule)
2 years (damage)
5 years (personal)
10 years (life)
|Shopping||Register all deliveries of goods or provision of services, intra-community acquisitions, imports and exports for VAT purposes.||5 years|
Intellectual and Industrial Property Documents.
Contracts and agreements.
|Permits, licenses, certificates||
6 years from the expiration date of the permit, license or certificate.
10 years (criminal statute of limitations)
|Confidentiality and non-competition agreements||Always the term of the obligation or confidentiality|
|LOPD||Processing of personal data, if it is different from the treatment notified to the AEPD||3 years|
|Personal data of employees stored in the networks, computers and communications equipment used by them, access controls and internal management / administration systems||5 years|