Privacy policy
DATA PROCESSING MANAGER
INDEN PHARMA PACKAGING SL, Avila 6, 03440, Ibi (ALICANTE) is the Data Processing Manager.
PRIVACY PRINCIPLES
At INDEN PHARMA PACKAGING SL, we undertake to work alongside our users on an ongoing basis in order to ensure their privacy during the processing of their personal details, as well as to provide them with the most comprehensive and clear information possible. We therefore encourage all our users to read this section thoroughly prior to providing us with their personal details. If you are under 14 years old, please do not provide us with your details unless by prior parental consent. In this section, we inform users regarding how we process the personal details of all individuals who are related to our organisation. Firstly, our principles are as follows: – We do not request personal information except when required to provide the services requested by users. – We do not share any personal details with any third parties, except in compliance with legislation or by express authorisation. – We shall not use your personal details for any purposes other than those expressed in this privacy policy. – Your details will be processed with the adequate protection levels pursuant to current Data Protection legislation and shall not be subject to automated decisions. This privacy policy has been drafted in accordance with the current Data protection legislation requirements, which are as follows: – EU Regulation 2016/679 of the European Parliament and of the Council passed on 27th April 2016 on General Data Protection Regulation (GPDR). – Personal Data Protection Act 15/1999 passed on 13th December (LOPD as per its Spanish acronym). – Royal Decree 1720/2007 passed on 21st December (RLOPD as per its Spanish acronym). This privacy policy has been drafted on 25th May 2018. Due to the modification to the data processing criteria, and with the purpose of facilitating your understanding, as well as adapting it to current legislation, this privacy policy may be modified. In that event, we shall modify the date shown in order to allow users to check its.
PROCESSING
CONTACTS PROCESSING Purpose: Dealing with requests or enquiries received from our website via either email or telephone. Responding to your request and carrying out the subsequent follow up. Legitimation: User consent. End users: Personal data will not be shared with any third parties. Retention period: We shall retain your details for the period required in order to comply with the purposes that it was collected for, and in order to determine any possible liabilities that may arise from that purpose and from the processing of your details.
CUSTOMER PROCESSING Purpose: Managing our relationships with customers, invoicing and collections. Sending offers regarding similar or supplementary products/ services to those previously purchased from us. Legitimation: Contractual obligation and legitimate interest. End users: Your personal details will be provided to the relevant Public Authorities in all cases foreseen by current legislation and for the purposes established therein. We shall only share your details with those third parties that are essential to provide our services. Retention period: We shall retain your details for an indefinite period once the legal period has expired, or until you have requested us to remove these.
MARKETING COMMUNICATIONS PPROCESSING Purpose: Providing information regarding products and services that we consider may be of your interest. Each marketing communication shall include the option to oppose to this processing by unsubscribing. Legitimation: User consent. End users: Personal data will not be shared with any third parties. Retention period: We shall retain your details for an indefinite period. We will remove these upon request or in the event that no action is undertaken following a specific number of emails sent.
HR DATA PROCESSING Purpose: Assessing CVs received from candidates applying to be part of any staff recruitment processes that we may be undertaking. Legitimation: User consent. End users: Personal data will not be shared with any third parties. Retention period: We shall retain your details for a maximum 5 year period.
YOUR RIGHTS
Users are entitled to request a copy of their personal details, to rectify any inaccurate details, to complete these if incomplete or, where applicable, to remove them when no longer required for the purposes that they were collected for. Users are also entitled to restrict the processing of their personal data and to obtain them in a structured, readable format. They may also oppose the processing of their personal details under specific circumstances (particularly, when these are not required to be processed for any contractual or other legal requirements, or when these are intended to be processed for direct marketing purposes only). In addition to this, Users are entitled to withdraw any previously provided consent. At this point, we shall avoid processing your details or, where applicable, we shall avoid processing them for that purpose in particular. In the event of the withdrawal of user’s consent, this shall not affect any prior processing undertaken while their consent was still valid. These rights may be limited, for example, if we were required to reveal personal details belonging to other individuals in order to comply with your request, or if we were requested to remove any records that we are under obligation to maintain for legal or legitimate interest reasons, such as responding to complaints. This shall also include cases where the freedom of expression and information rights will prevail. You may contact us by any of the means provided in the Data Processing Manager section of this privacy policy by providing a copy of any ID document (usually your National ID). Users are also entitled to the right not to be subject to a decision based solely on automated means, including the preparation of profiles that may result in legal effects or affect users. In the event of any violation of the above rights such as, for example, failing to acknowledge your request, Users are entitled to raise a complaint with the relevant Personal Data supervisory authorities. These may be your own country’s Data Protection Agency (for those residing abroad) or the Spanish Data protection agency (for those residing in Spain). Wednesday, 27th June 2018
ADDITIONAL INFORMATION
Personal data processing outside the European Economic Area. For the purposes of the above processing, we may use the services provided by the following suppliers who, despite being based outside of the European Economic Area, are compliant with the Privacy Shield agreement approved by the European Union’s data protection authorities. GOOGLE: Cloud based services and email. For further information visit: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI MICROSOFT: Cloud based services, communications via Skype and email. For further information visit: https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK AMAZON: Cloud based services. For further information visit: https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4 DROPBOX: Cloud storage, syncing and file sharing services. For further information visit: https://www.privacyshield.gov/participant?id=a2zt0000000GnCLAA0 MAILCHIMP: Management of outgoing emails. For further information visit: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG WHATSAPP: Instant messaging and file sharing services.
For further information visit: https://www.privacyshield.gov/participant?id=a2zt0000000TSnwAAG Third party website links. In some occasions, our website may contain links to other sites. However, Users shall remain liable to read the data protection policies and legal terms and conditions applicable to each website. Third party details. Users who provide us with any third party details shall remain responsible to notify them with prior notice pursuant to article 14 of the GPDR.