Privacy policy
Our goal is to be as transparent as possible with our users and customers regarding the personal data we collect. Your privacy is important to us.
By reading this Privacy Policy, the user is informed about the way in which CLAITEC SOLUTIONS, S.L. collects, treats and protects the personal data that is provided through the website – https://claitec.com (hereinafter, the website) and any other information that may be provided in the future to CLAITEC SOLUTIONS, S.L. by other means.
The User must carefully read this Privacy Policy, which has been written in a clear and simple way to facilitate its understanding, and to determine freely and voluntarily if you wish to provide your personal data to CLAITEC SOLUTIONS, S.L.
By filling out any form on the corporate website and clicking on the “I have read the privacy policy” or similar check box, the user expressly states that he or she has read this Privacy Policy indicating how data is processed and for what purposes, among other information, thus fulfilling the duty to inform imposed by the Data Protection regulation.
In those cases where corporate website requests consent for a specific purpose, by clicking on the “I accept” checkbox or similar, or by marking the selection box (checkbox), the user gives unequivocal and explicit consent for the data processing in question.
Who is responsible for the processing of your data?
- Identity: CLAITEC SOLUTIONS, S.L. -NIF: B55172381
- Postal address: C / Pic de Peguera, 15, (Local 27), 17003 GIRONA (SPAIN)
- Telephone: 972183225
- Email: rchetrit@claitec.com
Processing of DATA collected through the WEB
What do we use your personal data for?
At CLAITEC SOLUTIONS, we process the information provided by interested parties in order to address their requests and, if applicable, send them information about our products or services, as well as our newsletters. No automated decisions will be made based on the data provided.
How long will we keep your data?
The data will be retained as long as the interested party does not request its deletion or for the duration of the commercial relationship, always respecting the statutes of limitations for liabilities.
What are the legitimate reasons for processing your data?
Consent of the interested party (by checking the selection box or checkbox): To address their request and, if applicable, send them commercial communications as well as our newsletters.
To which recipients will your data be communicated?
No data will be transferred to third parties, except in case of legal obligation.
Will data be transferred to third countries?
No data transfers are planned for third countries.
How have we obtained your data?
The personal data processed at CLAITEC SOLUTIONS comes directly from the interested party.
Processing of DATA for STAFF SELECTION
What do we use your personal data for?
At CLAITEC SOLUTIONS, we process the information provided by interested parties for the purpose of conducting staff selection processes. No automated decisions will be made based on the data provided.
How long will we keep your data?
The data will be retained for two years, unless the interested party withdraws their consent before the maximum retention period.
What are the legitimate reasons for processing your data?
Consent of the interested party: To participate in the staff selection processes.
To which recipients will your data be communicated?
No data will be transferred to third parties, except under legal obligation.
Will data be transferred to third countries?
No data transfers are planned for third countries.
How have we obtained your data?
The personal data processed at CLAITEC SOLUTIONS comes from the interested party or their legal representative. The categories of data processed are:
- Identification data
- Postal and email addresses
- Professional and academic data
Treatment of IMAGE USAGE
What do we use your personal data for?
At CLAITEC SOLUTIONS, we process the data obtained (image and, if applicable, voice) for the purpose of publishing such images on websites or social media platforms, as well as other dissemination channels such as magazines, publications, etc., for advertising or promotional activities.
No automated decisions will be made based on the provided data.
How long will we keep your data?
The data will be retained from the moment the user gives their consent until they withdraw it.
What are the legitimate reasons for processing your data?
Express consent of the interested party: Use of photographs and, if applicable, videos where the image of the interested parties appears. It is also informed that by giving consent, the images may be published on the company’s website, social media, and any other platform that the company deems appropriate to advertise its activities, events, and services.
To which recipients will your data be communicated?
They will be published on the company’s website and/or social media platforms or other media.
Will data be transferred to third countries?
The use of images on social media may involve international transfers of data.
Processing of CUSTOMER DATA
What do we use your personal data for?
At CLAITEC SOLUTIONS, we process the information provided by interested parties primarily to provide the requested services, as well as to carry out administrative, accounting, and tax management derived from such services or product sales, and, if applicable, to send commercial communications about our products and services. No automated decisions will be made based on the provided data.
How long will we keep your data?
The data will be kept until the interested party requests its deletion, and if applicable, for the years necessary to comply with legal obligations.
What are the legitimate reasons for processing your data?
Contractual necessity:
Providing the requested services Legal obligation:
Carrying out administrative, accounting, and tax management of the requested services Legitimate interest of the controller:
Sending commercial communications about our products and services.
To which recipients will your data be communicated?
The data will be communicated to the following recipients:
Tax Agency, for the purpose of fulfilling legal obligations. (Legal requirement).
Financial entities, for the purpose of issuing corresponding invoices, if applicable (Contractual requirement).
Will data be transferred to third countries?
No data transfers are planned for third countries.
How have we obtained your data?
The personal data processed at CLAITEC SOLUTIONS comes from the interested party themselves or their legal representative.
The types of data used include:
- Identifying data
- Postal and electronic addresses
- Commercial information
- Banking information, if applicable.
Data processing for ADVERTISING
What do we use your personal data for?
At CLAITEC SOLUTIONS, we process the information provided by interested individuals to manage the sending of commercial communications about our products and/or services through electronic means (email, WhatsApp, SMS, etc.).
No automated decisions will be made based on the provided data.
How long will we keep your data?
The data will be retained from the time the user gives their consent until they withdraw it.
What are the legitimate reasons for processing your data?
Consent of the data subject (by signing the consent document, checking a selection box, or any other valid means of obtaining it): For the sending of commercial communications.
To which recipients will your data be communicated?
Plataformas de envió de publicidad mediante medios electrónicos, con la finalidad de realizar él envió con garantías y obtener datos estadísticos.
Will data be transferred to third countries?
No data transfers are planned for third countries.
How have we obtained your data?
The personal data processed at CLAITEC SOLUTIONS come from the data subject. The categories of data processed are:
• Identifying data and postal and electronic addresses
• Commercial information.
Data processing of the parties involved in the INTERNAL WHISTLEBLOWING
CHANNEL
What do we use your personal data for?
At CLAITEC SOLUTIONS, we process the information provided by interested parties to manage the internal whistleblowing channel and protect individuals reporting regulatory infringements and anti-corruption issues. The aim is to inform the responsible party about acts or behaviors occurring within the entity or caused by third parties contracting with it, which might be contrary to applicable general or sectoral regulations. If you do not provide your personal data, we will not be able to fulfill the described purposes. No automated decisions will be made based on the provided data.
How long will we keep your data?
The data will be retained for the necessary time to decide whether to initiate an investigation of the reported facts. The maximum period will be three months from their entry into the system, unless their retention serves as evidence of the functioning of the prevention model, in which case the data will be kept anonymized. (LOPDGDD art. 24.4).
What are the legitimate reasons for processing your data?
We inform you of the legal basis for processing your data:
- Public Interest Mission: Risk control of non-compliance within the organization; (Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights [Preamble V]). Processing of special categories of data contained in the information about the infraction (Law 2/2023, of February 20, regulating the protection of persons who report regulatory infringements and anti-corruption, art. 30 and GDPR art. 9.2.g).
- Compliance with a Legal Obligation: Directive (EU) 2019/1937 of the European Parliament and of the Council of October 23, 2019, on the protection of persons who report breaches of Union law (art. 8; obligation to establish internal whistleblowing channels). Law 2/2023, of February 20, regulating the protection of persons who report regulatory infringements and anti-corruption.
- Consent of the Data Subject: For the retention and recording of reports made via telephone and voice messaging systems with recording. Also, for the recording of the personal meeting requested with the entity for the purpose of reporting. (Directive (EU) 2019/1937; art. 18.2 and 4).
To which recipients will your data be communicated?
The data will be communicated to law enforcement agencies, jurisdictional bodies, and the public prosecutor’s office for the purpose of reporting the possible commission of a crime (as required by law).
Will data be transferred to third countries?
No data transfers are planned for third countries.
How have we obtained your data?
The personal data processed at CLAITEC SOLUTIONS originate from the reports submitted by the interested parties who have a labor, commercial, or service relationship with the entity. The categories of data processed are:
- Identifying information.
- Commercial information.
- Economic data.
The following special categories of data are processed: health-related data.
RIGHTS OF DATA SUBJECT
What are your rights when you provide us with your data?
Any individual has the right to obtain confirmation from CLAITEC SOLUTIONS as to whether or not we are processing personal data concerning them. Data subjects have the right to access (Art. 15 GDPR) their personal data, as well as to request the rectification (Art. 16 GDPR) of inaccurate data or, where appropriate, request their deletion (Art. 17 GDPR) when, among other reasons, the data are no longer necessary for the purposes for which they were collected. Under certain circumstances, data subjects may request the restriction (Art. 18 GDPR) of the processing of their data, in which case we will only keep them for the exercise or defense of claims. Under certain circumstances and for reasons related to their particular situation, data subjects may object to the processing (Art. 21 GDPR) of their data. In this case, CLAITEC SOLUTIONS will stop processing the data, except for compelling legitimate reasons or the exercise or defense of possible claims. You also have the right to request the portability (Art. 20 GDPR) of your personal data. This means that you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, to transmit it to another entity directly, where technically feasible. If you have given your consent for a specific purpose, you have the right to withdraw your consent (Art. 7 GDPR) at any time, without affecting the lawfulness of the processing based on consent before its withdrawal. You can exercise your rights by contacting the data controller in person, by postal mail, or by email to the controller’s email address, by sending the request. The forms for exercising/requesting rights can be found on the website of the Spanish Data Protection Agency: https://www.aepd.es/reglamento/derechos/index.html#section1
If you feel that your rights regarding the protection of your personal data have been violated, especially if you have not obtained satisfaction in the exercise of your rights, you can lodge a complaint with the competent Data Protection Authority, by accessing the electronic headquarters of the Spanish Data Protection Agency: https://sedeagpd.gob.es/sede-electronica-web/vistas/infoSede/queSede.jsf
MANDATORY DATA PROVISION
The data requested in the forms accessible from the CLAITEC SOLUTIONS website and, in general, those requested by the company for the provision of the service/sale of the product, are generally mandatory (unless otherwise specified in the required field) to fulfill the established purposes. Therefore, if they are not provided or are not provided accurately, it may not be possible to properly address the requests.
In the event that the data subject provides third-party data, they declare to have the consent of these individuals and undertake to convey to the data subject, the owner of such data, the information contained in this Privacy Policy, thereby releasing CLAITEC SOLUTIONS from any liability in this regard.
SECURITY MEASURES
Personal data will be processed lawfully, fairly, and transparently in relation to the data subject (“lawfulness, fairness and transparency”); collected for specified, explicit, and legitimate purposes, and not further processed in a manner that is incompatible with those purposes; adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed, kept in a form which permits identification of data subjects for no longer than is necessary for the purposes of processing the personal data (while respecting the limitation periods for liabilities); processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures (“integrity and confidentiality”). We follow strict criteria for selecting service providers with access to personal data, all to comply with our data protection obligations, and formalize with them the corresponding data processing agreement (Art. 28 GDPR), whereby they will be imposed, among other obligations: to apply appropriate technical and organizational measures; to process the data following our instructions; and to delete or return the data to us once the services are completed.
