Privacy policy

What is the purpose of the Privacy Policy?

In compliance with current legislation on the protection of personal data, the purpose of this policy is to inform the user of this website. www.gnarum.com (hereinafter website or site), the policy regarding the processing and protection of personal data as a result of the use of this website.

This policy is completed and is of subsidiary application with those informative texts and informed consent request that are incorporated into any data request form of this website or included in any particular conditions that may be published for the use of this website.

It is the responsibility of the user to read -prior to communicating his/her personal data to GNARUM- the informative texts and consent request texts included in any form or other means of requesting data on this website.

What is the normative scope?

GNARUM informs the user that any processing of personal data, will fall under the scope of application of the legislation in force in Spain on data protection consisting of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation or GDPR) and the Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDDD).

Who is the controller of personal data?

The party responsible for the processing of personal data carried out through the site is GNARUM TECNOLOGÍA Y ENERGÍA, S.L., (hereinafter GNARUM) with address at C/ Serrano Galvache, 56, Centro Empresarial Parque Norte, Edif. Abedul, 7th Floor, 28033 Madrid, with Tax Identification Code B-86421807; registered in the Mercantile Register of Madrid, Volume 29.756, Folio 79, Section 8, Page M-535388.

Contact details: info@gnarum.com or Telephone +34 913 569 362.

How to contact our data protection officer?

The contact details of the GNARUM Data Protection Officer are as follows:delegado.proteccion@gnarum.com

How do we guarantee the accuracy and veracity of personal data?

The personal data that the user communicates to GNARUM must be truthful, accurate and up to date and only correspond to his/her own identity, through any data collection channel published on this website, such as forms, sending an e-mail, postal communication and/or by means of a telephone call.

It is prohibited to provide data of third parties except with consent or other legitimate basis for processing and for a legitimate purpose.

The user is solely responsible for the truthfulness, accuracy, updating and correctness of the data provided to GNARUM, exonerating GNARUM from any liability in this regard, and the user undertakes to keep the personal data duly updated, for which purpose he/she may also exercise his/her right to rectification. In any case, personal data obtained by GNARUM directly from the user will be considered accurate and up to date.

For what purpose and on what legal basis will we process your personal data?

Users who access the website and voluntarily provide personal information to browse the site in a personalised manner, contact or use any service that requires the communication of data to GNARUM, are informed of the following purposes for the processing of users’ personal data that GNARUM may carry out:

Contact with GNARUM: When the user uses the services provided for this purpose to contact GNARUM (by means of forms, telephone, post or e-mail), GNARUM will process his/her personal data in order to attend to and manage the reply to the communication made by the user and provide him/her with the information requested, as well as to send him/her advertising information if the user expressly consents to this. The legal basis for the processing of the user’s data by GNARUM is the consent given by the user by means of the acceptance of the corresponding boxes prior to sending the completed form to GNARUM.
Exclusion from the sending of commercial and advertising communications: When the user requests cancellation of the service of sending commercial and advertising communications that he/she has previously expressly accepted, GNARUM will process his/her data on the legal basis of legitimate interest in order to conserve the essential data of the interested party in order to identify him/her and adopt the necessary measures to avoid sending commercial and advertising communications.
Sending Curriculum Vitae to GNARUM: When the user sends his/her curriculum vitae to GNARUM, the data provided will be processed for the purpose of assessing and allowing, where appropriate, his/her participation in the selection processes carried out to fill vacant or newly created positions in GNARUM. The legal basis for the processing of the user’s data by GNARUM is the consent given by means of the acceptance of the corresponding box prior to sending the completed form to GNARUM.
In the forms provided on the GNARUM website, those categories of personal data that are compulsory and/or voluntary will be indicated. If all the obligatory fields are not filled in, GNARUM will not be able to deal with the user’s communication.

In any case, the user is informed that the purposes of processing the data collected through the forms published on the website will be explained by means of informative texts published on the forms themselves, and when so required, as stated above, the user will be asked for his/her consent to the processing.

Personal information will only be used for limited purposes, such as those set out above and/or, without limitation, those purposes of which the user has been unambiguously informed prior to collection and processing.

Are your personal data communicated to third parties?

GNARUM informs the user that, unless legally obliged to do so, it does not plan to transfer or communicate his or her personal data to third parties. Therefore, such communication will only take place, based on compliance with the applicable legal regulations, to the competent public administrations or authorities, in the event that GNARUM is obliged to make such communication.

In any case, GNARUM informs the user that his/her personal data may be processed on behalf of entities that provide GNARUM with different auxiliary services (also known as data processors), as well as support and administration tasks for its systems, through processing contracts and always following GNARUM’s instructions, with the due guarantees of confidentiality and security.

Do we transfer your data internationally?

The entity MailChimp (The Rocket Science Group LLC d/b/a MailChimp), which is a member of the Privacy Shield Framework Agreement and has certified its compliance with the EU-US privacy framework, accesses the data to provide the emailing service as a data processor. This transfer is based on the existence of a Commission adequacy decision (Decision (EU) 2016/1250) applicable to entities certified under the EU-US Privacy Shield. You can find the list of entities adhered to Privacy Shield through the following link: https://www.privacyshield.gov/list

How long will we keep your personal data?

In general, GNARUM will keep the user’s data for as long as the purpose and legitimate basis of the processing is maintained, as well as for the periods established in the regulations in force for the fulfilment of legal obligations and attention to possible liabilities.

When the user sends his/her curriculum vitae to GNARUM, the data will be kept by GNARUM for a period of two years from its receipt, unless the user requests its deletion before the end of this period. Once the indicated period has elapsed, GNARUM will proceed to delete them or will request the interested party’s agreement to keep them for an equivalent period of time in the event that it considers that the user may be an appropriate candidate for future selection processes carried out in the company.

What rights can be exercised with regard to the protection of personal data?

GNARUM informs the user of the possibility of exercising their rights of access, rectification, erasure, opposition, limitation of processing, portability, to withdraw the consent given for processing at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal, as well as not to be subject to decisions based solely on the automated processing of your data which have legal effects or which significantly affect you in a similar way, by sending your written request, indicating the right you are exercising, together with a copy of your DNI/NIF or legally valid document identifying you, to the following addresses:

56 Serrano Galvache Street, Building. Abedul. 7th Floor 28033 Madrid

info@gnarum.com

To whom can you lodge a data protection complaint?

Likewise, the user is informed that he/she has the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) and postal address at C/ Jorge Juan, 6. 28001 – Madrid, and/or contact telephone number 912 663 517, as well as to request their guardianship in relation to the exercise of their rights.

Prior to filing a complaint with the Spanish Data Protection Agency, and on a completely voluntary basis, the user may contact the GNARUM data protection officer at the following e-mail address delegado.proteccion@gnarum.com.

What other rights do users have with regard to e-commerce and commercial marketing communications?

GNARUM informs the user who has expressly authorised the sending of commercial advertising communications by electronic means that, pursuant to articles 21 and 22 of the Law on Information Society Services and Electronic Commerce (LSSICE), he/she has the right to oppose the processing of his/her data for promotional purposes for the receipt of commercial advertising communications as well as the right to revoke at any time the consent given for this purpose by simply notifying GNARUM of his/her wish and/or sending an e-mail with the subject line UNSUBSCRIBE.

To this end, the user may send a communication requesting the cessation of the sending of commercial communications due to revocation of consent and/or opposition to the e-mail address: info@gnarum.com requesting it and/or indicating UNSUBSCRIBE in the subject line.

GNARUM will attend to your request, keeping the data necessary to adopt the necessary measures to prevent the sending of such commercial communications.

What are the safeguards adopted by GNARUM with regard to personal data published on this site?

In relation to the personal data that may be published on this website (e-mail addresses, names and surnames, images, or others) the user is informed that such data form part of one or more data processing activities under the responsibility of GNARUM in which they have been incorporated with the prior informed consent of the interested parties or other lawful legal bases for specific and unequivocal purposes.

What are the obligations of the user with regard to the personal data published on this site?

The personal data published on this website by GNARUM may not be freely processed and reproduced by the user or other third parties – not even when reference is made to the origin of the data – unless prior authorisation and informed consent is obtained from the person concerned and/or the processing is based on another lawful legal basis.

Therefore, all personal data of any nature that have been published on this site may only be used by the user for the purpose of participating and enjoying our website in the manner established in this policy, or where appropriate general and specific conditions that regulate it and within the framework of current legislation, being expressly prohibited any other uses other than those indicated, including the incorporation of the images or data into files or processing and/or the creation of databases of persons and/or the sending of publicity or transfer to third parties, without the prior informed consent of the interested party who is the owner of the information and data, GNARUM not being responsible for the uses that the user or other third parties make in contravention of the provisions of these conditions and others that regulate them.

At no time should the user consider this GNARUM website to be a publicly accessible source from which personal data, information, images and content published through it can be made freely available.

In addition, the contents where personal data or images of third parties are published may be protected by intellectual property rights of GNARUM and/or third parties.

What security measures are we implementing?

GNARUM informs the user that it will process the personal data it collects through this website securely, applying appropriate technical and organisational measures to ensure a level of security appropriate to the risk, taking into account the state of the art, the costs of implementation, and the nature, scope, context and purposes of the processing, as well as risks of varying likelihood and severity to the rights and freedoms of users.

GNARUM shall regularly verify, evaluate and audit the effectiveness of these measures and update them if necessary according to the outcome of these evaluations.

On the use of cookies and data storage and retrieval devices on users’ terminal equipment
GNARUM may use cookies on this website. Such cookies will be used by GNARUM under the conditions and for the purposes described in its Cookie Policy.

Information society service providers and other third parties
GNARUM warns the user that this entity is only responsible for and guarantees the confidentiality, security and treatment of the data in accordance with this policy, with respect to the personal data collected from the user through its website, not having any type of responsibility with respect to the collection of data and the treatment and subsequent use of the personal data that could be made by third party service providers of the information society that could access such data due to the provision of their services or the exercise of their activity.

Third-party information society service providers shall mean, but not be limited to, those natural or legal persons who provide the following services: (i) Transmission over a communication network of data provided by the recipients of the service. (ii) Network access services. (iii) Data storage or hosting services. (iv) Provision of content or information.

GNARUM is also not responsible for the data processing carried out by third parties who establish hyperlinks to GNARUM nor for those third parties (private companies and/or public administrations) mentioned on the GNARUM website and whose websites are accessible through the corresponding links that may be published on the GNARUM website.

Follow us on social media

Social networks are services provided by third party providers that allow users to participate in a virtual community with other users through which they can create their own public profile where they can create and share content, information and personal data with other users of the network.

On a social network, pages, accounts or profiles can be created and shared for personal and/or commercial purposes. The operation of the social network is regulated, firstly, by the conditions established by the owner and/or provider of the network and, secondly, in the case of pages, accounts or profiles for commercial purposes, by the terms and conditions established by the person responsible for the profile or commercial account who, where appropriate, will also be responsible for the processing of their data.

GNARUM has profiles in some social networks which are linked and accessible to the user, through the corresponding icons and links published on the website. The user can follow us and become a fan of the official GNARUM pages on the social networks mentioned above.

The user is informed that the processing of data carried out through the pages, profiles or accounts of GNARUM on social networks will be governed by the corresponding policies and conditions of both the official page and the provider and owner of each social network where applicable, with the said owner and provider of the social network also being responsible for the processing of the user’s personal data processed on the official page.

On updating this policy

From time to time GNARUM may update this Privacy Policy. Without prejudice to the communication by GNARUM to the user of the updates that are carried out, it will be the responsibility of the user to periodically access the GNARUM Privacy Policy published on this website, in order to be aware of the latest version at all times.

How to contact GNARUM for any questions about this privacy policy?

For any queries regarding this Privacy Policy, the user may contact GNARUM either by electronic means or by post at the addresses shown below:

info@gnarum.com
GNARUM TECNOLOGÍA Y ENERGÍA, S.L., 56 Serrano Galvache, Building. Abedul, 7th Floor, 28033, Madrid.

For any queries or contact with the company, users may contact GNARUM TECNOLOGÍA Y ENERGÍA, S.L. through the following telephone number +34 913 569 362 and postal address: Serrano Galvache, 56, Edif Abedul, Planta 7, 28033, or e-mail address: info@gnarum.com.