Español Privacy Statement
Data Protection Notice
GENERAL
GESTORA CATALANA DE RESIDUOS, S.L.U. (hereinafter referred to as “GCR”), with registered address at calle Mayor 32, 2-1, despacho Unión, 08221 Terrassa, Spain, is the controller of the processing of all personal data collected through the website (the “Website”). GCR respects your privacy and is committed to keeping your Personal Data secure and managing it in accordance with its legal responsibilities under applicable data protection laws, in particular under the Regulation (EU) 2016/679 of the European Parliament and the Council of 27th April 2016 on the protection of natural persons with regard to the processing of Personal data and on the free movement of such data (hereinafter referred to as “GDPR”).
Please read this Data Protection Notice carefully as it contains important information to help you understand our practices regarding any personal information that you give to us or that we collect otherwise in the context of the Website (“Personal Data”).
1. What personal data we collect and how we use it
You can use the majority of the Website without being required to provide any Personal Data to us. In order to contact us, however, to obtain further information on our products and services or to apply for a vacancy on the career site, you will need to provide Personal Data in our contact forms. We will only use this data to provide you the requested information or to consider your application for a vacant post. We refer to the data that you provide us as Contact Data.
The Contact Data that we collect is the following:
- Name and surname
- Company name
- Phone number
- Country
In case you apply for a vacancy at the career site, we will also ask you to provide us with your CV.
Moreover, in case you have provided your consent to receive promotional information by e-mail on our products and services, we will process your following personal data:
- Name and surname
- E-mail address
- Areas of interest
We refer to this data as Promotion Data.
In addition to the Contact and Promotion Data, we collect certain data when you visit our Website, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device.
Additionally, as you browse the Website, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Website. We refer to this automatically collected information as Device Information.
We collect Device Information using the following technologies:
- Cookies are data files that are placed on your device or computer and often include an anonymous unique identifier.
- Log files track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
We use the Device Information for operation, analysis and improvement of our website.
2. What are the legal bases that allow us to process your personal data?
We process the Contact Data in order to reply to your requests of information as well as to assess your application in the framework of any open selection procedure advertised in the Website. We consider that we have a legitimate interest in using your personal data to provide you with the required information about our products and services (pursuant to Art. 6 (1) (f) GDPR). In case that the request of information derives in a purchase, then the data will be processed based on the need to perform a contract to which the data subject is party (pursuant to Art. 6 (1) (b) GDPR).
We also consider that we have a legitimate interest in using your personal data to assess that the competencies required for the recruitment of new employees are met and to assess the suitability of the candidate (pursuant to Art. 6 (1) (f) GDPR) as well as to have a list of potentially suitable candidates in case similar vacancies open up in the company. In case your application is retained then the data will be processed based on the need to perform an employment contract with you (pursuant to Art. 6 (1) (b) GDPR).
We process the Promotion Data for marketing purposes based on the consent that you give us when you accept receiving promotional information by email of our products and services (pursuant to Art. 6 (1) (a) GDPR).
We process the Device Information for the operation, analysis and improvement of our website. We consider that we have a legitimate interest in using your personal data to provide a higher quality service (pursuant to Art. 6 (1) (f) GDPR).
3. How long will we keep your data?
We will process your Contact Data during the time necessary to meet your request or application in any open selection procedure advertised on our website, including any follow-up action that might derive, such as a purchase and an employment contract. In the case of a purchase, we should keep the contact data during the term of our business relationship and, once this is terminated, for an additional period of 3 years, unless a longer storage period is required by law, is necessary in connection with legal processes, or is otherwise required for a particular purpose under the applicable legislation.
In case that there are no follow-up actions deriving from your request of information, the data will be kept for a maximum period of 6 months.
In the case of a selection procedure, we will keep your data for a period of 1 year. If the selection procedure terminates with an employment contract, then your personal data will be processed according to the employee’s privacy policy.
We will process the Promotion Data for a maximum period of 6 months.
We will process the Device Information occasionally for the time during which we proceed to carry out a specific quality action or until we anonymise your browsing data. In any case, the data will be kept for a maximum period of 6 months.
4. Who has access to your personal data?
We might need to give access to your data to other companies, which are part of our Group, but in those cases we will provide you with the necessary information in advance and ask for your consent.
Finally, we might also need to give access to third parties that can provide us with support in the services that we offer you. These parties may be located in the European Union or other countries in the European Economic Area or elsewhere in the world. When Personal Data is stored by us outside the EEA, or uses sub-processors from outside the EEA, such as suppliers of cloud solutions, we will ensure an adequate level of protection of the transferred Data. We require service providers to use appropriate measures to protect the confidentiality and security of Personal Data. In any case, we will provide you with the necessary information in advance and ask for your consent.
We may also need to provide Personal Data to law enforcement bodies to comply with any legal obligation or court order.
Finally, your data will also be accessible to our personnel who are authorized to access and process your data; the authorization will be granted only on a need-to-know basis.
5. Security of personal data
We will take appropriate technical, physical and organizational measures to protect the Personal Data collected through the Website from misuse or accidental, unlawful or unauthorized destruction, loss, alteration, disclosure, acquisition or access, that are consistent with applicable privacy and data security laws and regulations. However, no internet-based site can be 100% secure and we cannot be held responsible for unauthorized or unintended access that is beyond our control.
Our Website may contain links to other websites. We are not responsible for the privacy practices, content or security used by such other websites, which shall not be governed by this Data Protection Notice. We advise you to always carefully read the privacy policies on these other websites.
6. Your rights
We fully comply with the obligations laid down in the GDPR, with the principle of transparency as paramount. To this end, we have implemented means to ensure that you can exercise any rights in connection with the processing of your personal data.
In particular, you have the following rights:
- To request information as to which personal data we process and to get access to that personal data.
- To request us the rectification of inaccurate personal data or completion of incomplete personal data concerning you.
- To request us the erasure of your personal data, when certain conditions apply such as, for example, that they are no longer necessary for the purpose for which we need to keep processing them or in case that you withdraw your consent.
- To request us to restrict the processing of your personal data, which entails that when certain conditions apply, you have the right to request that we restrict the processing activities relating to your personal data.
- To request data portability, which consists of the right to receive your personal data, which we have collected from you based on your consent, from us and to transfer or have it transferred (where it is technically feasible) to another controller.
- To object to the processing of your data.
- If you have given us your consent to process your data for any purpose, you also have the right to withdraw such consent at any time.
If you would like to exercise any of these rights, please send us your request at the email address [email protected] We will provide information on action taken on your request without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, considering the complexity and number of the requests. We shall inform you of any such extension within one month of receipt of the request, together with the reasons for the delay.
7. Cookies
A major part of the information referred to in this Data protection Notice is collected via our use of cookies and similar techniques. Cookies are small text files containing small amounts of information which are downloaded and may be stored on your user device, e.g. your computer, smartphone or table.
Techniques we use that may be similar to cookies are tracking pixels, Java scripts, tags and web beacons. These cookies and similar techniques are sometimes necessary to remember your account settings, language and country, but also enable us to measure and analyze your behavior on our Website and
for showing you personalized advertisements on our Website. Where required, you will be asked for consent to our use of cookies. To view more information on what cookies we use and how we use them please review our separate https://gcrplasticsolutions.com/cookies/
8. Changes in this notice
We may amend the information contained in this Data Protection Notice when we consider this appropriate. Any changes to this Notice will be posted on our Website and to the extent reasonably possible, will be communicated to you.
9. Contact
Should you have any queries in relation to the processing of your personal data, please contact us via the following email address [email protected].
Finally, we inform you that you have the right to file a claim before the responsible data protection regulatory authority, in particular, before the Spanish Data Protection Agency (https://www.agpd.es/portalwebAGPD/index-ides-idphp.php).
October 2024
