The Management of DHV TECNOLOGIA ESPACIAL AVANZADA MALAGUEÑA, S.L., (hereinafter, DHV) is committed to compliance with current data protection legislation and has therefore developed this data protection policy.
DHV is committed to promoting compliance with the principles of active responsibility established in the General Data Protection Regulation (hereinafter, GDPR) through a process of continuous improvement whose purpose is:
- To process personal data in a lawful, legal and transparent manner in relations with data subjects.
- To solely and exclusively use the personal data for the purposes provided for in each processing. Under no circumstances use the data for different or incompatible purposes.
- Analyse the legal bases for processing and obtain consent from the data subjects where it is necessary to do so in order to process it.
- To process as little personal data as necessary for the intended purpose.
- To keep personal data updated and accurate. In cases where inaccuracies are observed in the data, update or delete it.
- Keep personal data for the minimum time necessary for the purposes of processing and pursuant to the legally established retention periods.
- Maintain the confidentiality, integrity and availability of the personal data processed at all times.
This commitment translates into the following:
- To provide the necessary resources and establish the necessary objectives in order to correctly implement and continuously improve information security and protect the personal data processed.
- Promote and implement appropriate measures for training, education and awareness of all staff on information security and data protection.
- Establish the appropriate criteria for assessing the risk to which the processing is exposed so that all risks of an unacceptable level are adequately addressed until an acceptable residual risk level is obtained.
- Create and keep records of all data processing activities carried out.
- Establish procedures to prevent data security breaches and, if they occur, notify them without delay.
- Appoint a Data Controller and respect their impartiality and independence in the exercise of his or her duties.
This policy is mandatory and applies to all staff who process personal data. It is therefore reviewed, approved and published to be known by all Data Subjects in Malaga, on 18 May 2022.
DATA PROTECTION INFORMATION
Pursuant to DHV’s data protection policy, any personal data processing will be informed in a clear and understandable way on the data provided by Data Subjects by any channel (through this website, email, telephone or by any other electronic or manual channel).
Identity of the Data Controller
The identity of the Data Controller for processing the personal data you have provided is: DHV TECNOLOGIA ESPACIAL AVANZADA MALAGUEÑA, S.L. (hereinafter DHV), with Tax ID number B93291474 and registered address at Parque Tecnológico de Andalucía. C/ Severo Ochoa, 13. 29590 Málaga (Spain). Telephone +34 951 956 837 E-mail: firstname.lastname@example.org.
How your data is obtained
The data is obtained through the information request or contact forms, application forms to work with DHV and traditional communication channels that are indicated in the contact section of this web service or because the Data Subjects have provided their data directly when accessing DHV facilities.
Users who provide the data are responsible for its accuracy, undertaking not to enter or provide with false data. They also responsibly declare that they are over 14 years old and are solely responsible for the accuracy of the data provided.
The purpose for which the personal data is processed
The data you have provided will be processed for the purpose of managing customer and supplier relations as well as for managing sales and customer loyalty relations.
If you have provided your express consent to receive information on news and promotions, this information may be provided through any channel that you have provided (e-mail, post or telephone).
DHV has a statistical program on its server that monitors the general data of visitors to its web services in aggregate, such as most viewed pages, visitors’ country of origin and the like. The purpose of these statistics is to provide DHV with an overview of the website and its evolution, always at an aggregate level. Therefore, visits by specific users are not monitored.
The purpose of the video surveillance system in DHV’s facilities is to preserve the security of people, facilities and goods.
Any visit to the DHV facilities must be registered beforehand in order to control and register access to the facilities for security reasons.
People who send their application to participate in a personnel selection process are advised that their data will be processed with total confidentiality and will be used in present or future selection processes, as well as to keep them informed of job offers that may fit their job profile.
Data retention policy
The data provided will be kept for as long as the commercial and contractual relationship with our customers and suppliers is maintained or for the years necessary to comply with legal obligations.
Data kept for commercial communications will be kept until the Data Subject exercises his or her right to delete the data.
The images recorded in the video surveillance system will be automatically deleted within a maximum period of one month from the date they are captured.
Manually recorded control data for access to DHV premises will be kept for one year.
Applications for selection processes and CVs sent by Data Subjects will be stored until there is a personnel selection process and, in any case, will not be stored for more than one year. If there is an open recruitment process, the data will be kept until the job applied for is awarded.
Personal data recipients or categories of recipients
No communication of data is foreseen unless there is a legal or contractual obligation to do so.
DHV collaborates with other companies to provide its services. In which case, the necessary data will be provided in order to be able to provide the contracted services.
The recorded images may only be communicated to the Security Forces and Bodies or to the Courts and Tribunals that require them.
Lawfulness of processing
DHV takes special care to analyse the lawfulness of all data processing carried out.
In this sense, the processing carried out with customers or suppliers with whom DHV maintains a contractual relationship is carried out on the basis of the agreement signed between both parties (GDPR article 6.1.c).
In cases where customers are contacted to find out about their satisfaction with the services provided and the quality of the same, the lawfulness of the processing is based on DHV’s legitimate interest (GDPR article 6.1.f).
If users of the web service send an enquiry, application or candidacy application to participate in a recruitment process, the consent of the user who has ticked the corresponding box authorising the processing of their data or has voluntarily sent an email to DHV (GDPR article 6.1.a).
If the user has consented to receive commercial communications, the lawfulness of processing is based on consent (GDPR article 6.1.a).
In the case of video surveillance and visitor access control systems, the lawfulness of processing is based on DHV’s legitimate interest in preserving security (GDPR article 6.1.f).
DHV is concerned at all times to maintain the confidentiality, integrity and availability of the information processed. It therefore uses international standards to comply with these measures (ISO/IEC 27001 and ISO/IEC 27002). In this sense, DHV is committed to establishing the appropriate criteria for assessing security risks and the rights and freedoms of natural persons to address them and to establish plans for addressing them in order to reduce them to acceptable levels.
Rights of the Data Subject
You have the right to obtain confirmation as to whether DHV is processing your personal data and therefore you have the right to access your personal data, modify inaccurate data or request its deletion when the data is no longer necessary.
You also have the right to limit processing, which means that the processing of your data will be stopped and it will only me held duly blocked for the exercise or defence of any claims.
In order to exercise their rights, Data Subjects should contact DHV by email at email@example.com or by post to C/ Severo Ochoa, 13. 29590 Málaga (Spain), and in any case must prove their identity by means of an identification document.
Please also be advised that you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), especially if you consider that you have not obtained full satisfaction in the exercise of your rights.