Privacy Policy
This Privacy Policy on the processing of personal data applies to website users of www.gesdocument.com, and of the different portals and internal platforms owned by GESDOCUMENT, who provide their personal data via any of the channels enabled therein.
Controller
GESDOCUMENT Y GESTIÓN, S.A.U., a company holding tax identification number A-59053355, with registered office at Carrer de Roc Boronat, 147, 08018 Barcelona and e-mail address protecciondatos@gesdocument.com (hereinafter known as “GESDOCUMENT”).
The data we collect
When data subjects browse this website and use cookies, GESDOCUMENT collects data from them, such as the type of browser used, their operating system or IP address, in order to improve their browsing and manage the website. Further information regarding the use of cookies can be found in the Cookie Policy .
In addition, GESDOCUMENT will request personal data from data subjects, such as their full name, e-mail address, phone number or CV, through the different forms and channels established on this website for this purpose.
These forms or channels will also indicate obligatory personal data, and merely failing to provide it may result in it being impossible for GESDOCUMENT to fulfill the purpose required by the data subject.
Purposes of and lawful basis for processing
The personal data of the data subjects will be processed for the following purposes:
i. To handle requests for information, queries and requests submitted by data subjects via the channels and e-mail address provided on the website. The lawful basis of this processing is the consent given by the data subject by sending them.;
ii. To send newsletters with tax, employment and corporate news published by GESDOCUMENT, and to send commercial and advertising information regarding business opportunities. This processing is justified in the consent given by the data subject when completing the subscription form or, where there is a prior relationship, based on the legitimate interest of GESDOCUMENT. Data collected from users so that newsletters can be sent may also be used to determine business opportunities.
iii. To manage and evaluate your application for present or future vacancies in the recruitment processes that match the profile of our candidates based on the consent given when sending this application.
iv. To manage complaints sent through our Ethics Channel by personnel or any other data subject regarding GESDOCUMENT with the aim of confidentially processing and investigating communications made regarding breaches of law and/or internal regulations. The lawful basis is compliance with a legal obligation applicable to GESDOCUMENT. Furthermore, where the complainant has given their personal data, the lawful basis for this processing activity will be the consent given when the corresponding communication is made.
iv. To allow the website to function effectively with regard to the data collected through the use of cookies. The lawful basis for the processing activity is the legitimate interest of the company and the consent of the user given by accepting said cookies. The data subject may also consult the different purposes in the Cookie Policy .
Users of our website are informed of the need to provide all obligatory data so that the aforementioned purposes may be fulfilled. These fields are identified by an asterisk (*).
GESDOCUMENT will only use the personal data of data subjects for the aforementioned purposes. Where the information is used for a different purpose, GESDOCUMENT will request the prior consent of the data subject who is the owner of the personal information.
Recipients of transfers
In general, GESDOCUMENT is the only recipient of data collected from data subjects. No provision is made for communications to third parties, except in cases where this legally applies.
In certain cases, the personal data of the data subject may be processed by GESDOCUMENT service providers in order to send commercial, promotional or advertising communications, and to store personal data. These providers will process the information provided, respecting its confidentiality and in line with the previously authorized purposes.
With regard to data processing performed via the Ethics Channel, personal data may be communicated to:
· Third parties authorized by GESDOCUMENT, the involvement of whom is necessary for communication management (e.g. the provider of the i2Ethics tool).
· External third parties contracted to collaborate with/advise on the investigation (legal advisors, lawyers, and other professionals).
In the above cases, GESDOCUMENT ensures the appropriate technical and contractual measures are taken to ensure the protection of the information and personal data of data subjects.
· State law enforcement agencies, the Public Prosecution Service, court authorities or other competent authorities.
Furthermore, international data transfers are not envisaged. Where an international data transfer is required, GESDOCUMENT undertakes to take the technical and organizational security measures required to guarantee compliance with the regulations in force regarding data protection.
Storage of your data
GESDOCUMENT will only store the personal data of data subjects for as long as necessary for the purpose for which it was collected, and according to the lawful basis for its processing.
In particular, GESDOCUMENT will keep the personal data collected from the web forms, online chat, e-mail or any other means of contact for as long as required to manage communications related to the queries or requests made by the data subject.
Likewise, GESDOCUMENT will keep the personal data collected for the personnel selection process for as long as required for its correct management and for future selection processes, and provided the Data Subject does not withdraw their consent or exercise their rights of erasure, cancellation or restricted processing.
With regard to the Ethics Channel, GESDOCUMENT will keep personal data for as long as necessary to analyze the complaints received, and to conduct the corresponding investigations.
On all accounts, once the purpose for which it was collected has been fulfilled, the personal data may be effectively blocked for the periods during which a claim or injunction may arise, in line with the provisions of the data protection regulations in force.
Rights of data subjects
Data subjects may exercise their right of access to personal data and information relating thereto, and request rectification of inaccurate data or, where applicable, request its erasure when the data is no longer needed for the purposes for which it was collected. They may also request its restricted processing, data portability, and object to its processing for reasons related to their particular situation.
Furthermore, data subjects have the right to withdraw the consent given at any time, without affecting the lawfulness of the processing activity conducted before consent is withdrawn.
Data subjects may exercise the aforementioned rights under the terms and conditions provided for in the law in force by sending an e-mail to protecciondatos@gesdocument.com indicating the right to be exercised, attached a scanned copy of their ID Card or equivalent valid legal document to the request to prove their identity.
Please be advised that, if the data subject fails to obtain a satisfactory response in exercising their rights, they may file a complaint with the Spanish Data Protection Agency at www.aepd.es .
Security measures
GESDOCUMENT has adopted appropriate technical and organizational measures to ensure a level of security appropriate to the personal data it processes, and has implemented other means and additional technical measures at its disposal to prevent its loss, alteration, processing or unauthorized access to the data.
Amendment of the Privacy Policy
GESDOCUMENT reserves the right to amend this policy in order to adapt it to new legislation or case law, with the corresponding communication to users by way of publication on this website or by any other means of communication or disclosure deemed appropriate.
Update date: June 2023.
