Data-Protection-Policy

Home > Data Protection Policy

Data Protection Policy

GENERAL PRIVACY POLICY OF THE WEBSITE

We provide you with this Privacy Policy in order to inform you in detail about how we treat your personal data and protect your privacy and the information you provide to us.

If, in the future, we make changes to this Privacy Policy, we will notify you through this website or by other means, so that you can be aware of the new privacy conditions that will be adopted.

We inform you below, in the form of questions and answers, of the conditions under which our entity processes your personal data:

Who is responsible for the processing of your data?

The data controller is the ASOCIACIÓN ESPAÑOLA DE SOLDADURA Y TECNOLOGÍAS DE UNIÓN (hereinafter, CESOL), owner of the Website, whose contact details are as follows:

VAT NUMBER: G-80592918.
Postal address: C/ CONDADO DE TREVIÑO, 2, LOCAL F31, 28033 - MADRID.
Telephone: (+34) 91 475 83 07
E-mail: cesol@cesol.es

For what purpose do we process your personal data?

We process personal data for the following purposes, depending on the purpose for which you have provided it, for the following purposes:

The management of the relationship with the interested party. Provision of the services requested, invoicing and payment. The provision of data for this purpose is mandatory, otherwise the provision of the requested service will be prevented.
The management of relations with our suppliers, as well as the invoicing and payment of services. For this purpose, it is compulsory for the supplier to provide us with their data, otherwise the contract cannot be executed.
To manage registration for events and conferences developed by CESOL or in which this entity participates. The provision of data for this purpose is voluntary, and it will not be possible to register for the events or conferences if this is not the case. For this purpose, the user's identification and contact details will be processed and, in the event that the event is recorded, their image and voice.
To channel requests for information, suggestions and complaints that you may send us, to contact the sender of the information, to respond to your request or query and to follow up subsequently. Providing the data for this purpose is voluntary, although if you do not do so, we will not be able to respond to your request, query or complaint. Therefore, the communication of your personal data for these purposes is a necessary requirement for us to be able to deal with such requests. The user's identification and contact details will be processed for this purpose.
The management of satisfaction surveys completed by the interested parties. Analysis of results. The provision of data for this purpose is voluntary, and the survey cannot be carried out if they are not provided. As a general rule, surveys are anonymous. However, surveys that are handed out when diplomas and books are sent out are not anonymous. For these non-anonymous surveys, the user's identification and contact details will be processed.
To send commercial communications about our services or the events or conferences that we organise or in which we participate, as well as events or information from third parties related to the Spanish Association of Welding and Joining Technologies-CESOL that may be of interest. If you wish to know the identity of these third parties, you can contact CESOL at any of the addresses indicated above. The authorisation to process your data for this purpose is voluntary and your refusal would only result in the fact that you would not receive these commercial communications. The user's identification and contact details will be processed for this purpose.
In the event that you send us your CV, we will process it in order to have information about those people who wish to do an internship and/or work with us in order to be able to carry out the corresponding personnel selection processes. The provision of your data is voluntary; if it is not provided, the user will not be able to participate in CESOL's personnel selection processes.
Publish the image and videos of the attendees captured during the events or conferences held or in which CESOL participates on its website, social networks, corporate magazines, or any other similar means of communication owned by CESOL, in order to promote these events and conferences. The authorisation to process your data for this purpose is voluntary and your refusal would only result in the fact that we would not be able to process your image and voice for the purposes described

For how long will we process your data?

We only keep your data for the period of time necessary to fulfil the purpose for which they were collected, to comply with the legal obligations imposed on us and to meet any possible liabilities that may arise from the fulfilment of the purpose for which the data were collected.

For the management of the relationship with the interested party. Provision of the services requested, invoicing and payment: The data will be kept for as long as the provision of services is in force. Once this relationship has ended, if applicable, the data may be kept for the time required by the applicable legislation and until any liabilities arising from the service provided expire.
The data of the files of the Diplomas of the International Institute of Welding (IIW), the International Welding Federation (EWF) and Inspectors of Welded Constructions (ICS) will be kept indefinitely.
For the management of the relationship with suppliers and the invoicing and collection of services: The data will be retained for that purpose for as long as the contract is in force. Once this relationship has ended, if applicable, the data may be kept for the time required by the applicable legislation and until any liabilities arising from the contract expire.
To manage registration for events and conferences developed by CESOL or in which this entity participates. The data will be kept for the duration of the event or conference and its promotion and, subsequently, for as long as any legal liability may arise as a result of participation in them.
In order to channel requests for information, suggestions and complaints that you may send us, to contact the sender of the information, to respond to your request or query and to follow up afterwards: The data will be kept for the time necessary to respond to your request, petition, query or complaint and to consider it definitively closed. Subsequently, they will be kept as a communications history for a period of one year, unless the user requests their deletion before then.
For the management of satisfaction surveys completed by interested parties: For the management of satisfaction surveys completed by interested parties, the data will be kept for one year, after which they will be destroyed or anonymised if they are no longer anonymous.
To send commercial communications: The data will be kept indefinitely, until, where appropriate, the user expresses their wish to delete them at any of the contact addresses.
In the event that you send us your CV: The data that you provide us with or that we obtain in order to take part in a specific open personnel selection process will be kept until said process is concluded and then cancelled, unless the candidate is selected, in which case they will be incorporated into your employee file. If unsuccessful candidates wish us to retain their CVs for future selection processes, they must expressly request this by e-mail. In the latter case, as well as when you provide us with your CV spontaneously, simply so that we can take it into account in future selection processes, the data will be kept for a maximum of one year from the last update. You must keep the personal data you provide us with up to date, in particular with regard to education and professional experience.
Occasionally, during recruitment processes, job portals may be used to search for candidates who match the professional profiles that are of interest to us, subject to the Privacy Policies of such platforms. The categories of personal data processed in these cases are the following: identification data, personal characteristics data, employment details data, academic and professional data and any other information that the candidate has posted on the job portal or included in their CV.
In the case of the images and videos captured: The image and videos of the attendees will be kept indefinitely, unless the interested party requests the deletion of these to any of the contact addresses referred to in this Policy.

What is the legitimacy for the processing of your data?

For the management of the relationship with the data subject. Provision of the services requested, invoicing and collection: The data will be processed on the basis of the execution of the contractual relationship existing between the parties as a result of the service requested.
For the management of the relationship with suppliers and the invoicing and collection of services: The data will be processed on the basis of the execution of the contractual relationship existing between the parties as a consequence of the requested service.
To manage registration for events and conferences developed by CESOL or in which this entity participates: The data will be processed on the legal basis of the consent of the person providing it. This consent may be withdrawn at any time, although this will not affect the lawfulness of the processing previously carried out.
To channel requests for information, suggestions and complaints that you may send us, to contact the sender of the information, to respond to your request or query and to follow up on it: The data will be processed on the legal basis of the consent of the person providing it. This consent may be withdrawn at any time, although this will not affect the lawfulness of any processing previously carried out.
For the management of satisfaction surveys completed by data subjects: Personal data (where they are not anonymous) will be processed on the legal basis of legitimate interest. Said legitimate interest is considered prevalent, taking into account that the processing of the surveys will be exclusively internal to analyse the quality of the services provided, not being transferred to any third party, that the only data collected are identification and contact data, that the persons to whom the surveys are sent are customers of the entity and that the data are kept only for the essential time, as indicated in the previous section.
To send commercial communications: The data will be processed on the legal basis of the consent of the person providing the data. This consent may be withdrawn at any time, although this will not affect the lawfulness of the processing previously carried out.
For the management of personnel selection processes: The legitimate basis for the processing of CVs that you send us or that we obtain from employment platforms for a specific open personnel selection process is the existence of a pre-contractual relationship. In addition, further data may be collected during interviews or selection processes, the processing of which has the same basis.
The legal basis for processing the data contained in your CV, if you have asked us to keep it after a recruitment procedure or if you have sent it to us spontaneously, is your consent, which can be revoked at any time. However, data processing carried out previously shall not be rendered unlawful by the fact that the consent has been withdrawn.
If the interested party gives their consent, we may include a brief description of their professional training in the CESOL job bank, accessible through the Web and the corporate magazine, in order to make them known to companies looking for workers and to provide their contact details to them. Specifically, if one of these companies is interested in any of the candidates published in the job exchange, they will contact CESOL so that we can provide them with the candidate's contact details. You may revoke the consent given at any time, although this will not affect the lawfulness of the data previously processed. The authorisation for the publication and transfer of your data as indicated above is voluntary, although, if you do not give your consent, your data will not be published for the purposes indicated in this paragraph nor will they be transferred to third party companies.
For the processing of image and voice (in the case of videos): Data will be processed on the legal basis of the consent of the person providing the data. This consent may be withdrawn at any time, although this will not affect the lawfulness of the processing previously carried out. In any case, CESOL reserves the right to take photographs and recordings of all the activities and events it organises, individually or in collaboration with third parties, so that the interested party, should they wish their image and voice to be captured and used for the promotional purposes indicated, must give their consent. When consent has not been given, the interested party must abstain from voluntarily participating in the photographs and recordings made by CESOL during the same. In the event that the image of the attendee is captured in an accessory manner, in accordance with Organic Law 1/82, it will not be considered an unlawful interference with privacy and self-image, and may be captured without the need to obtain the express consent of the affected party, the public interest being the legitimate basis for the processing of the data.

To which recipients will your data be communicated?

The data will be communicated to the following entities:

The competent Public Administrations, in the cases provided for in the Law and for the purposes defined therein.
The financial institutions through which the management of collections and payments is carried out, in the event that this is the chosen means of payment.
The companies in which the student is going to carry out the corresponding practical training, if applicable. In the event that the interested party obtains the certificate as Welding Construction Inspector, diplomas of the International Institute of Welding (IIW) and European Welding Federation (EWF), his/her name and surname will be published in our corporate magazine in order to avoid professional intrusion and possible fraud when selecting certified ICS or qualified EWF/IIW personnel. This publication is based on CESOL's legitimate interest in making known all those ICS, EWF/IIW, who have legally obtained their certificate/diploma for the aforementioned purpose, as well as being able to detect those professionals who falsify their certificates. This legitimate interest is considered prevalent, taking into account that the medium is suitable for the purpose pursued, and that the only data published is the name and surname. For the same purpose, enquiries from third parties requesting CESOL to confirm that a specific ICS, EWF/IIW has the certificate or diploma in force will also be dealt with.
With the consent of the candidates, a brief description of their professional training will be published in CESOL's job bank, accessible through the website and the corporate magazine, in order to make it known to companies looking for workers and to provide their contact details to them.

In addition, the image and videos captured during the event or conference will be published on the CESOL website, social networks, corporate magazines, or any other similar media owned by CESOL, which also involves a transfer of personal data.

Although it is not a transfer of data, it may be that third party companies, acting as our suppliers, access your information to carry out the service. These providers access your data following our instructions and without being able to use it for any other purpose, maintaining the strictest confidentiality and on the basis of a contract in which they undertake to comply with the requirements of current legislation on the protection of personal data.

What are your rights when you provide us with your data?

Any person has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

Under the conditions provided for in the General Data Protection Regulation, data subjects may request the limitation of the processing of their data or their portability, in which case we will only retain them for the exercise or defence of claims.

In certain circumstances and on grounds relating to their particular situation, data subjects may object to the processing of their data. If you have given consent for a specific purpose, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal. In such cases, we will stop processing the data or, as the case may be, we will stop processing it for that specific purpose, except for compelling legitimate reasons, or for the exercise or defence of possible claims.

In addition, data protection regulations allow you to object to being subject to decisions based solely on automated processing of your data, where applicable.

The aforementioned rights are characterised by the following:

They are free of charge, except in the case of manifestly unfounded or excessive requests (e.g. repetitive nature), in which case a fee may be charged in proportion to the administrative costs incurred or refusal to act.
You may exercise your rights directly or through your legal representative or volunteer.
Your request must be responded to within one month, although, taking into account the complexity and number of requests, the deadline may be extended by a further two months.
We are obliged to inform you about the means of exercising these rights, which must be accessible and without being able to refuse you the exercise of the right on the sole ground that you choose another means. If the request is made by electronic means, the information will be provided by electronic means where possible, unless you ask us to do otherwise.
If, for whatever reason, the request is not complied with, we will inform you of the reasons for this and of the possibility to complain to a supervisory authority within one month at the latest.

In order to facilitate the exercise of the aforementioned rights, we provide below links to the application form for each of these rights:

All the above-mentioned rights can be exercised through the means of contact listed at the beginning of this clause. In all cases, you must prove your identity by attaching a photocopy or scanned copy of your ID card or equivalent document, or a document proving representation, if the right is exercised through a representative.

All the aforementioned rights may be exercised through the means of contact with the entity listed at the beginning of this clause. In the event of any infringement of your rights, especially when you have not obtained satisfaction in exercising them, you may lodge a complaint with the Spanish Data Protection Agency (contact details available at www.aepd.es), or other competent supervisory authority. You can also obtain further information about your rights by contacting these bodies.

How do we process your data on Social Networks?

If you become a friend or follower of ours on social networks, we will process your data to keep you informed of our activities and promotions through these channels. This data will be processed on the legal basis of your consent and will be retained for as long as you remain our friend or follower on the corresponding platform, and you may revoke your consent at any time, although this will not affect the lawfulness of the processing previously carried out. Providing the data for this purpose is voluntary, although, if you do not do so, you will not be able to be our friend or follower on the corresponding social network. The categories of data processed for this purpose are identification data.

How do we protect your personal data?

We are committed to protecting the personal data we process. We use reasonably reliable and effective physical, organisational and technological measures, controls and procedures to maintain the integrity and security of your data and to ensure your privacy. In addition, all staff with access to personal data have been trained and are aware of their obligations in relation to the processing of your personal data.

In the case of the contracts we sign with our suppliers, we include clauses requiring them to maintain the duty of secrecy with respect to the personal data to which they have had access by virtue of the assignment, as well as to implement the necessary technical and organisational security measures to guarantee the permanent confidentiality, integrity, availability and resilience of the systems and services for the processing of personal data.

All these security measures are regularly reviewed to ensure their adequacy and effectiveness.

However, absolute security cannot be guaranteed and no security system is impenetrable so, in the event that any information under our control and subject to processing is compromised as a result of a security breach, we will take appropriate steps to investigate the incident, notify the Supervisory Authority and, where appropriate, those users who may have been affected to take appropriate action.

What is your responsibility as a data subject?

By providing us with personal data, the person who does so guarantees that he/she is over 14 years of age and that the data provided is true, accurate, complete and up to date.

To this effect, the interested party is responsible for the veracity of the data and must keep them suitably updated so that they correspond to their real situation, taking responsibility for any false or inaccurate data that may be provided, as well as for any damages, direct or indirect, that may arise.

If you provide data of third parties, you assume the responsibility of previously informing them of all the provisions of article 14 of the General Data Protection Regulation under the conditions established in said precept.

In order to guarantee compliance with the regulations on personal data protection, CESOL has received legal advice from the specialised firm Picón & Asociados Abogados.

BACK