Privacy policy

Effective Date: 2018/12/18

Introduction

OJMAR, S.A., with registered office in Elgoibar (Gipuzkoa), Polígono Industrial Lerún s/n (“Company” or “we”), acting in the role of autonomous data controller, wants to inform you about how we collect, use and disclose personal data from and about you, through this website www.ojmar.es ("Website") and its connected services ("Services"), in compliance with all applicable data protection laws and regulations and with particular reference to: (i) Ley Orgánica de Protección de Datos y Garantía de los Derechos Digitales; (ii) Regulation (EU) no. 679 of 27th April 2016 (the so-called General Data Protection Code or "GDPR"), effective from May 25th, 2018; and (iii) any other act, order, regulation or provisionof the competent national and European data protection authorities - hereinafter jointly the "Applicable Data Protection Legislation".

You can find a Table of Content and a brief summary of this privacy policy ("Privacy Policy") in the chart below. For further details with regard to the data processing carried out by the Company click to the links in each section of the summary to access the full content of the Privacy Policy relevant to that topic.

  • 1. WHAT AND WHO THIS PRIVACY POLICY COVERS?
  • 2. WHAT TYPE OF PERSONAL DATA DO WE COLLECT ABOUT YOU?
  • 3. WHY DO WE COLLECT YOUR PERSONAL DATA?
  • 4. ON WHAT LEGAL BASIS DO WE PROCESS YOUR PERSONAL DATA?
  • 5. HOW LONG DO WE RETAIN YOUR PERSONAL DATA?
  • 6. HOW DO WE PROCESS YOUR PERSONAL DATA?
  • 7. WHO HAS ACCESS TO YOUR PERSONAL DATA?
  • 8. IS YOUR PERSONAL DATA TRANSFERRED ABROAD?
  • 9. MINORS UNDER THE AGE OF 18
  • 10. WHAT ARE YOUR RIGHTS WITH REGARD TO YOUR PERSONAL DATA?
  • 11. AMENDMENTS AND UPDATES

 

 

ISSUEINFORMATION
WHAT AND WHO THIS PRIVACY POLICY COVERS?

The Company is the data controller of the personal data we collect from and about you through the Website and the Services.

This Privacy Policy applies to all users, including both those who use the Website of the Services without being registered or having subscribed.

For further information click here

 

WHAT KIND OF PERSONAL DATA DO WE COLLECT ABOUT YOU?

The Company might collect data from and about you.

More in particular, the Company collects (1) data that you have volountarily shared with the Company, (2) activity data and (3) information shared with other sources.

However, we do not collect either financial information or special categories of personal data relating to you (e.g., health or judicial data).

For further information click here

 

WHY DO WE COLLECT YOUR PERSONAL DATA?

The main reason why we collect data about you is to allow you to use the Website or to provide you with our Services and to allow you to interact with such services.

We also process your data to recruit personnel and maintain our files during the recruitment procedures open and filing the proffessional background of candidates whose profile is adjusted to the Company’s needs.

We also process your data to send you offers, marketing communications from us and from our trusted partners etc, only with your prior consent.

For further information click here

 

ON WHAT LEGAL BASIS DO WE PROCESS YOUR PERSONAL DATA?

Your personal data are mainly collected in order to allow you to use the Website and the relevant Services.

Your personal data are also necessarily collected to comply with legal obligation or to protect the legitimate interests of the Company.

Failure to provide such data may entail the impossibility to offer you the Services or grant you access to the Website, as the case may be.

For further information click here

 

HOW LONG DO WE RETAIN YOUR PERSONAL DATA?

We retain your personal data only for as long as is necessary to fulfill the purposes for which they were originally collected. Sometimes we may retain your personal data for longer periods in order to comply with legal and fiscal obligations.

For further information click here

 

HOW DO WE PROCESS YOUR PERSONAL DATA?

The security of your data is a priority for us. For this purpose, the Company has implemented adequate administrative, technical and physical measures to safeguard your personal data against loss, theft and unauthorized use, disclosure of modification.

For further information click here

 

WHO HAS ACCESS TO YOUR PERSONAL DATA?

The Company might share your personal data with (1) service providers, (2) public authorities, when allowed by applicable laws, and (3) trusted business partners.

We may also share your personal data with our commercial partners for their marketing purposes but only upon your prior optional consent.

For further information click here

 

IS YOUR PERSONAL DATA TRANSFERRED ABROA

Your personal data might be transferred to other countries within the European Economic Area (EEA). In any case, we always make sure that appropriate and suitable safeguards compliant with Applicable Data Protection Legislation.

For further information click here

 

WHAT ARE YOUR RIGHTS WITH REGARD TO YOUR PERSONAL DATA?

You have among others the right to access, integrate, update, amend and delete your personal data.

For further information click here

 

UPDATES TO THIS PRIVACY POLICY

The Company may modify or update this Privacy Policy also in order to comply with applicable law.

Please look at the Effective Date at the top of this Privacy Policy to see when this Privacy Policy was last revised.

 

HOW CAN I CONTACT YOU WITH REGARD TO THE PROCESSING OF MY PERSONAL DATA?

You can contact us at the following email address lopd@ojmar.es

 

1. WHAT AND WHO THIS PRIVACY POLICY COVERS?

The Company is the data controller of the personal data (i.e. any information relating to an identified or identifiable natural person known as data subject) we collect from and about you through the Website and the Services that is processed in compliance with the terms of this Privacy Policy.

This Privacy Policy and our Cookies Policy apply to all users, including both those who use the Website and the Services without being registered or having subscribed to a specific service.

2. WHAT TYPE OF PERSONAL DATA DO WE COLLECT ABOUT YOU?

The Company collects (1) data that you have volountarily shared with the Company, (2) activity data collected when you access and interact with the Website or the Service and (3) additional information. More in particular, the Company collects the following data from and about you:

  • 1. Registration data: collected through our registration form.
  • 2. Data that you have volountarily shared with the Company: we might collect your personal data (such as name surname, email, address, phone number, etc.) if you submit a request through the contact form made available to you via the Website, if you register an account on the Website or if you are willing to benefit from the Services we provide;
  • 3. Activity Data: when you access and interact with the Website or the Services, we may collect certain information about those visits. For example, in order to permit your connection to the Website or the Services, our servers receive and record information about your computer, device, and browser, including potentially your IP address, browser type, and other software or hardware information. If you access the Website or the Services from a mobile or other device, we may collect a unique device identifier assigned to that device, geolocation data, or other transactional information for that device. Cookies and other tracking technologies (such as browser cookies, pixels, beacons, and Adobe Flash technology including cookies) may also be collected. These technologies may also be used to collect and store information about your usage of the Website or the Services, such as pages you have visited, content you have viewed, search queries you have run and advertisements you have seen. For more information please visit our Cookie Policy.
  • 4. Information from Other Sources. We may supplement the information we collect with information from other sources, such as publicly available information and commercially available sources.

When the information collected from or about you does not identify you as a specific person (e.g., raw, aggregated or anonimyed data), directly or indirectly, we may use that information for any purpose or share it with third parties, to the extent permitted by the Applicable Data Protection Legislation.

We do not collect

  • Financial information from a payment service provider: in some cases, we may use an unaffiliated payment service to allow you to purchase a product or make payments. In that case, the information that you provide will be subject to the applicable payment service's privacy policy, rather than this Privacy Policy.  
  • Special categories of personal data: we ask that you do not send us, and you do not disclose, any information included in a special category of personal data (such as social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, criminal background or trade union membership) on or through the Website, the Services or otherwise.

Linked Services. The Services may also be linked to sites operated by unaffiliated companies, and may carry advertisements or offer content, functionality, games, newsletters, contests or sweepstakes, or applications developed and maintained by unaffiliated companies. The Company is not responsible for the privacy practices of unaffiliated companies, and once you leave the Services or click an advertisement you should check the applicable privacy policy of the other service.

3. WHY DO WE COLLECT YOUR PERSONAL DATA?

We process the personal data we collect from and about you to:

  1. allow you to use the Website and the Services;
  2. measure and improve our Services and the relevant features;
  3. improve your experience with the Website and the Services;
  4. provide you with customer support and to respond to inquiries;
  5. comply with legal obligations (also including the provision of the Services); or respond to
  6. requests from public and government authorities;
  7. protect the rights of the Company and others: more in particular there may be instances
  8. when the Company may disclose your personal data, including situation where the Company has a good faith belief that such processing is necessary in order to: (i) protect, enforce, or defend the legal rights, privacy, safety, or property of the Company or their employees, agents and contractors (including enforcement of our agreements and our terms of use); (ii) protect the safety, privacy, and security of users of the Website or of the Services or members of the public; and (iii) protect against frauds or for risk management purposes;
  9. upon your optional consent, sending you customized marketing and promotional communications in line with your preferences and personal choices;
  10. upon your optional consent, share your data with our trusted business partners to allow them to send you marketing communications;
  11. we may recruit personnel that submits our application form and maintain our files with proffessional background of candidates whose profile is adjusted to the Company’s needs.

When the data collected from or about you does not identify you personally, we may use that information for additional purposes or share it with third parties.

4. ON WHAT LEGAL BASIS DO WE PROCESS YOUR PERSONAL DATA?

The processing of your personal data for the purposes of:

  1. Section 3, letters from a) to d) of this Privacy Policy is necessary for the running of the Website and the provision of the Services;
  2. Section 3, letter e) of this Privacy Policy is mandatory as it is required under applicable laws;

    • Section 3, letter f) of this Privacy Policy are based on the legitimate interest of the Company, as the case may be;
    • Section 3, letters g), h) and i) of this Privacy Policy are performed on the basis of your optional consent and, where possible, on the the legitimate interest of the Company.

These data processing activity are not mandatory and you can object or revoke your consent at any time through the modalities as per Section 10 of this Privacy Policy.

5. HOW LONG DO WE RETAIN YOUR PERSONAL DATA?

La Empresa tratará los datos personales durante el tiempo que sea necesario para lograr los fines previstos de conformidad con la Sección 3 anterior. En cualquier caso, se aplicarán los siguientes períodos de retención:

  1. the data collected for the purposes of Section 3, lett. a), to d) will be retained for a period strictly necessary for allowing you the use of the Website or the Services;
  2. the data collected for the purposes of Section 3, lett. e), will be retained for a period strictly necessary for allowing you the use of the Website or the Services;

    • the data collected for the purposes of Section 3, lett. f) will be retained for the period strictly necessary in order to pursue the Company's legitimate interests;
    • the data collected for the purposes of Section 3, lett. g), h), i) will be retained for the period strictly necessary in order to achieve the purpose for which they were originally collected.

6. HOW DO WE PROCESS YOUR PERSONAL DATA?

With regard to the above mentioned purposes, the data is processed through both electronic and manual means, and is protected through adequate security measures. With this regards, although the Company uses appropriate administrative, technical, personnel and physical measures to safeguard personal data in its possession against loss, theft and unauthorized use, disclosure or modification, it cannot guarantee that all possible cyber-risks can be excluded.

7. WHO HAS ACCESS TO YOUR PERSONAL DATA?

For purposes consistent with those at Section 3 of this Privacy Policy, the Company may share your personal data to the following categories of recipients located within the European Union or outside of the European Union in compliance and within the limits of the provisions of Section 7 below:

    1. Other companies of the Group, as the case may be;
    2. Third parties service providers entrusted with processing activities and duly appointed as processors or sub-processors when required by applicable laws (e.g. cloud service providers, other entities of the group, providers of services instrumental to or supporting the Services - and thus, by way of example and without limitation, companies that provide IT services, experts, consultants and lawyers - companies resulting from possible mergers, demergers, or other transformations); and

      • Competent national authorities in order to comply with applicable laws;
      • Trusted third parties business partners, upon your explicit consent. The categories to which such business partners belongs are: (i) consumer goods; (ii) personal care; (iii) beauty care; (iv) home care; (v) glues and sealants; etc.

    8. IS YOUR PERSONAL DATA TRANSFERRED ABROAD?

    Your personal data may be transferred to countries within and outside the European Economic Area (EEA), in particular in [-].

    Some non EEA countries are recognized by the European Commission as providing an adequate level of data protection according to EEA standards. The full list of these countries is available at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en

    Please note that, appropriate and suitable safeguards to protect your personal data in the transfer to countries outside the EEA have been put in place, therefore such transfers are compliant with the requirements and the obligations provided by Applicable Data Protection Legislation.

    We will not transfer the Personal Data in countries situated outside of the European Economic Area.

    9. MINORS UNDER THE AGE OF 18

    The Website does not address subjects under the age of 18, nor is the Company knowingly collecting personal data from people under the age of 18.

    10. WHAT ARE YOUR RIGHTS WITH REGARD TO YOUR PERSONAL DATA?

    The User may, at any time and at no charge have and/or exercise the following rights:

    1. the right to be informed on the purposes and methods of the processing;
    2. the right of access;
    3. the right to obtain a copy of the data held overseas and obtain information concerning the place in which such data are kept;
    4. the right to ask for updating, rectification or integration of the data;
    5. the right to request the cancellation, anonymization or blocking of the data;
    6. the right to limit the processing;
    7. the right to object to the processing, wholly or partly, also where it is carried out through automated individual decision-making, including profiling;
    8. the right to revoke the consent to the processing of the data freely and at any time.
    9. the right to contact the data protection officer, as the case may be;
    10. the right to lodge a complaint in front of the competent national data protection or judicial authority.

    In addition to the rights listed above, from 25 May 2018 you may also exercise the following rights, as a result of the full applicability of Regulation (EU) no. 679 of April 27th, 2016:

      1. the right to data portability (i.e., to receive an electronic copy of your personal data, if you would like to port your personal data to yourself or a different provider);
      2. the right to limitation of the processing.

      In case of any doubts, comments or complaints from the User on the personal data collection or methods of use, please contact us a lopd@ojmar.es.

      11. AMENDMENTS AND UPDATES

      This Privacy Policy shall apply from the date specified in the introduction. The Company may amend and/or supplement this Privacy Policy also as an effect of any subsequent amendments and/or supplements to the Applicable Data Protection Legislation. Such amendments shall be notified in advance to you on a regular basis by the same Company.