Privacy Policy

Privacy Policy

To ensure the information transparency and its comprehensible presentation to users, Aragón Exterior SAU presents its privacy policy in two phases (multilevel or double-layer presentation). Using this system, we offer our visitors and users to learn how their data will be processed in a concise summary of the first layer of information. For further details, the second layer of more extensive and elaborated information shall be provided through the link: “+ Information”;. In it, various aspects of data processing performed by Aragón Exterior SAU shall be provided.

 

Epígraph	First Layer	Link
Controller	The processed data are strictly necessary, appropriate and relevant for every purpose in question. Aragón Exterior SAU is a personal data controller.	+ Information
Purpose	The purpose of the data processing shall correspond to the activities directly related to the Aragón Exterior SAU Departments, namely: Support for the internationalization of the Aragonese economy and companies.	+ Information
Lawful Basis	Data processing is based on the provisions set out in article 6 of RGPD. In the case of Aragón Exterior SAU, such processing is usually performed once the data subject has given his or her consent to the processing of their personal data for one or more specific purposes.	+ Information
Data Retention	Personal data provided shall be retained during the period required for the purposes they were originally collected for and to determine the liabilities that might have derived from such purpose; as well as during the legally stipulated retention periods (i.e. tax obligations).	+ Information
Data Transfer	Generally, personal data shall not be transferred to the third parties, unless otherwise specified by law: Relevant Public Authorities Banks/Financial Institutions	+ Information
Rights of the Interested Parties	Our visitors and users are allowed to exercise the right of access, the right to rectification, erasure and portability of their data, as well as that of limitation and opposition to their data processing. They also have the right not to be subject to a decision based solely on automated data processing, if applicable, before the Spanish Data Protection Agency.	+ Information
Additional Info	This website uses its own cookies and those of the third parties to track and analyse the website traffic, to customise the information offered to its users or to promote its services. To learn about changing these settings and get further details on our cookie policy please press the button “Cookie Policy”. The website whose ownership is held by Aragón Exterior SAU contains hyperlinks to the web pages of the third parties whose privacy policy does not apply to ours. When accessing those websites you should decide whether to accept or not their privacy and cookie policy. Generally, when surfing the internet you can accept or reject third-party cookies by changing your browser settings.	+ Cookie Policy

 

Privacy Policy

Controller

• Controller: Aragón Exterior SAU
• Tax ID (CIF): A50467877
• Address: Parque Empresarial Zentro Expo Avda. de Ranillas, 3A Oficina 2A – 50018 Zaragoza
• Phone number: 976 221 571
• Email: patricia.gracia@aragonexterior.es

Purpose

1. Provide services to the current and / or potential clients

Support for the internationalization of the Aragonese economy and companies

Send commercial information about our products and / or services

2. Suppliers and third parties

Service outsourcing to the third parties (companies, freelance, foundations, associations, etc.)

3. Human Resources

Workforce management

Personnel file. Time and attendance. Incompatibility. Training. Pension schemes. Occupational health and safety.

Issue payslips for employees, as well as its other derivative products.

Management of the union activity (if applicable).

4. Video surveillance

Ensure the safety of people, goods and premises.

 

Lawfulness for processing

• RGPD: 6.1.a) el interesado dio su consentimiento para el tratamiento de sus datos personales para uno o varios fines específicos;

• RGPD: 6.1.a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes.
• RGPD: 6.1.b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
• RGPD: 6.1. c) processing is necessary for compliance with a legal obligation to which the controller is subject.
• General Data Protection Regulation.
• Organic Law 3/2018, of 5 December, on Data Protection and Guarantee of Digital Rights.
• Law 34/2002, of 11 July, on Information society Services and Electronic Commerce (applicable to courier services, social networks and online retail sales).

* “You have the right to withdraw your consent at any time”.

 

Groups

• Current and potential clients and users
• Employees and co-workers
• Workers and potential candidates
• Individuals on the company premises

 

Categories of Personal Data

• Personal Identifiers (name, surname(s), Tax Identification Number, mailing address, phone number, e-mail address, website)
• Other personal data
• Account details
• Commercial Information
• Sale and purchase of goods and services

 

Categories of recipients

Personal Data of the clients shall be transferred to the following recipients:

• Public Administration (i.e. Tax Office; Department of Social Security)
• Judicial Bodies “if applicable” (Courts)
• Financial Institutions (Banks)
• Collaborating entities

 

International data transfers

No provisions apply to international data transfers.

 

Data Retention Period

Data shall be retained for as long as the purpose for which they were initially collected is fulfilled as well as to establish possible liabilities that might have derived from such purposes and data processing.

 

Security measures

In compliance with the provisions of article 32 of the GDPR, Aragón Exterior SAU shall ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services. The level of security shall be appropriate to the risk of processing each type of personal data.

 

Rights to control your personal data

We recognise our visitors’ and users’ right of access, as well as their rights to rectification, erasure, data portability, restriction and object to its processing. They can exercise these rights following the legal procedures stipulated in the above-mentioned regulations.

For further information about the ways one can exercise his or her rights, the control authority in Spain, the Spanish Data Protection Agency, provides the following link with its detailed description and a form to fill out and send us: Exercise your rights.

For any information or doubts regarding your data processing by Aragón Exterior SAU you might need to clarify, write to us at the following email: patricia.gracia@aragonexterior.es.

 

Complaint to the Spanish Data Protection Agency (AEPD)

If upon contacting us you consider your rights regarding the personal data are not being respected, you can complain to the Spanish Data Protection Agency (AEPD).

Aragón Exterior SAU
Parque Empresarial Zentro Expo Avda. de Ranillas, 3A Oficina 2A – 50018
Tel.: 976 221 571
Email: patricia.gracia@aragonexterior.es