HEDAPEN GLOBAL SERVICES, S.L. (hereinafter, HEDAPEN) is fully committed to the fulfilment of Spanish and European legislation on personal data protection, and ensures full compliance with its obligations and the implementation of the provisions set out in Organic Law 3/2018, on Personal Data Protection and in the measures of the General Data Protection Regulation (GDPR) of the European Union 2016/679.
HEDAPEN provides users with this Privacy Policy in relation to personal data processing, informing them of the following aspects:
- Identity and Contact Details of the Controller
- Data processed, purpose and storage periods or criteria
- Legal basis for data processing
- Recipients of personal data
- Rights available to all users and how to exercise them
DATA CONTROLLER
Identity: Hedapen global services, S.L.
Tax Code: B95522082
Postal Address: Bizkaia Science and Technology Park, Ibaizabal Bidea, Edificio 101, 48170 Zamudio (Bizkaia) SPAIN
Telephone: +34 94 656 79 18
E-mail: rgpd@hedapengs.com
PERSONAL DATA PROCESSING
CLIENT PERSONAL DATA PROCESSING
a. Why do we process personal data?
At HEDAPEN, we process the information provided by clients for the following purposes:
i. Management, Administration and Provision of the services contracted. The management and maintenance of the commercial relationship for the provision of text translation services, as well as tax and accounting administration.
ii. Commercial Mailing. If consent has been granted, commercial, promotion and/or marketing actions will be performed by any means (including electronic, to which express consent is provided) related to the corporate purpose and professional activities.
b. Legitimation
The legal basis for data processing is the performance of the contract, and the express consent of the data subject, in those cases in which it has been provided.
c. Recipients
i. Data will be communicated to the competent Public Authorities and the Tax Agency as required for the provision of the service.
d. How long do we keep data for?
Personal data provided will be kept for as long as necessary for the provision of the service. Upon termination, data will be conserved in accordance with legal obligations.
Finally, provided that consent has been granted for this purpose, HEDAPEN will conserve data in order to keep interested parties up to date with the products, activities and services that may be of interest to them.
SUPPLIER PERSONAL DATA PROCESSING
a. Why do we process personal data?
At HEDAPEN, we process the information provided by suppliers for the following purposes:
i. Management, Administration and Provision of the products and services contracted. The management and maintenance of the commercial relationship for the provision of services, as well as tax and accounting administration.
b. Legitimation
The legal basis for data processing is the performance of the contract, and the express consent of the data subject, in those cases in which it has been provided.
c. Recipients
i. Data will be communicated to the competent Public Authorities and the Tax Agency as required for the provision of the service.
d. How long do we keep data for?
Personal data provided will be kept for as long as necessary for the provision of the service. Upon termination, data will be conserved in accordance with legal obligations.
Finally, provided that consent has been granted for this purpose, HEDAPEN will conserve data in order to keep interested parties up to date with the products, activities and services that may be of interest to them.
Processing of Personal Data from the website Contact Form
a. Why do we process personal data?
At HEDAPEN, we process the information provided by means of these forms in order to deal with any queries, handle claims or send out commercial information, if so requested.
b. Legitimation
The legal basis for data processing is the express consent of the data subject.
c. Recipients
Data will not be passed on to third parties unless there is a legal obligation to do so and international data transfer is not foreseen.
d. How long do we keep data for?
Data will only be kept for the time required to deal with queries and claims. Finally, provided that consent has been granted for this purpose, HEDAPEN will conserve data in order to keep interested parties up to date with the products, activities and services that may be of interest to them.
AUTOMATED DECISION-MAKING, PROFILING AND LOGIC APPLIED
Under no circumstances is processing contemplated based on automated decision-making.
RIGHTS
- What are your rights when you provide us with your data?
Individuals are entitled to obtain confirmation as to whether HEDAPEN is processing their personal data.
Pursuant to the General Data Protection Regulation, you are hereby informed that you are entitled to:
- Access your data: You are entitled to access your data in order to know what personal data we are processing which concerns you.
- Request the rectification or erasure of your data: Under certain circumstances, you are entitled to rectify any inaccurate personal data concerning you that is being processed by us, or even request its erasure when, among other reasons, the data is no longer required for the purpose for which it was collected.
- Request the restriction of the processing of your data: Under certain circumstances, you are entitled to request us to restrict the processing of your data, in which case you will be informed that we only keep data for the exercise or defence of claims as set out in the General Data Protection Regulation.
- Data portability: Under certain circumstances, you are entitled to receive the personal data concerning you, which you have provided, in a structured, commonly used and machine-readable format, and transmit such data to another controller.
- Object to the processing of your data: Under certain circumstances and on grounds relating to your particular situation, you are entitled to object to the processing of your personal data, in which case, we shall no longer process it unless there are compelling legitimate grounds for the processing or in the exercise or defence of any legal claims.
- When will we reply to your request?
We will reply to requests as soon as possible, and in any case, within one month of receiving it. This period may be extended for a further two months if necessary, taking into account the complexity and the number of requests made. The controller will inform the data subject of the extension within the first month of receiving the request.
- Do you have the right to withdraw your consent?
The data subject has the right to withdraw his/her consent at any time, without affecting the lawfulness of the data processing based on the consent given prior to its withdrawal.
- Who should you contact in order to exercise your rights?
To exercise recognised rights, the data subject may contact us via the following e-mail address: rgpd@hedapengs.com or by sending a letter to HEDAPEN to the address indicated in the first section about Data Controllers.
- Do you have the right to lodge a complaint?
Yes. You have the right to lodge a complaint before the national control authority, which for these purposes is the Spanish Data Protection Agency, particularly if you are not satisfied when exercising your rights www.agpd.es.
DATA CATEGORY
- The following data categories are processed:
- Identification data
- Postal or E-mail addresses
- Commercial information
- Financial data
- Sensitive data: Sensitive data is not processed.