The purpose of this policy is to inform data subjects about the various processing operations carried out by this organization through the website and affecting their personal data in accordance with the provisions of Organic Law 3/2018 of December 5, 2018, on the Protection of Personal Data and guarantee of digital rights and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.
Identification and contact details of the Controller
Hispasat, S.A., with registered office at C/Anabel Segura 11, (BUILDING B, FLOOR 4) ALCOBENDAS, 29108, MADRID, with N.I.F. A79201075 and e-mail: protecciondedatos@hispasat.es.
DATA PROTECTION OFFICER
SEGURIDAD Y PRIVACIDAD DE DATOS S.L., with address at Aqua Multiespacio, Calle Menorca, planta 17, 19, 46023 Valencia, contact telephone: 963 12 28 68 and e-mail: infodpo@forlopd.es.2. Purposes of the processing of your personal data
Users browsing the website of the controller
We will process the personal data you provide through our web forms to:
- Address requests, complaints, and issues submitted through our contact channels available on the website.
- Understand user behavior on the website to detect potential cyber-attacks.
- Comply with the legal obligations directly applicable to us and that regulate our activity.
-Protect and exercise our rights or respond to claims of any kind.
-If applicable, send commercial communications related to the goods or services that make up our activity, and/or news or newsletters related to our sector.
- Manage registrations for events organized by the entity. In such cases, your data may be shared with the owners of the facilities where the event is organized, solely for the purpose of ensuring security and access.Candidates for job offers or job applicants.
Job Candidates or Applicants
We will process your personal data provided through our web forms to:
- Manage your application.
- Communicate with you to keep you informed about the status of the selection process and your application.
- Understand user behavior on the website to detect potential cyber-attacks.
- Protect and exercise our rights or respond to claims of any kind.
- Send communications regarding new job openings that match your profile, provided you have previously authorized us to send you this information.
- Transfer your data to entities within the Hispasat group, as indicated below.
Clients/Installers
We will process the personal data you provide through our web forms to:
3. Legal basis for processing
Users/browsers on the website of the controller.
Based on the consent you have provided for us to process your data for the indicated purposes. Refusal to provide your personal data will result in the impossibility of processing your data for the mentioned purposes.
To comply with the legal obligations that apply to us. In this case, the data subject may not refuse the processing of personal data.
Based on our legitimate interest to protect our image, business, and reputation by preventing attacks on our website. In this case, the data subject may not refuse the processing of personal data but may, where applicable, exercise the rights recognized in paragraph eight of this policy.
Job Candidates or Applicants
Based on the consent you have provided for us to process your data for the indicated purposes. Refusal to provide your personal data will result in the impossibility of processing your data for the mentioned purposes.
To comply with the legal obligations that apply to us. In this case, the data subject may not refuse the processing of personal data.
Based on our legitimate interest to protect our image, business, and reputation by preventing attacks on our website. In this case, the data subject may not refuse the processing of personal data but may, where applicable, exercise the rights recognized in paragraph eight of this policy.
Customers/Installers
4. Data retention periods or criteria
The personal data provided will be kept for the time necessary to fulfill the purposes for which they were initially collected.
Once the data are no longer necessary for the processing , they will be kept duly blocked in order to, if necessary, make them available to the competent Public Administrations and Bodies, Judges and Courts or the Public Prosecutor's Office, during the period of limitation of the actions that may arise from the relationship maintained with the client and/or the legally stipulated retention periods.
In the case of submitting your resume (CV), we will retain your data for a maximum period of one year from the date of receipt, unless you have authorized us to keep your data for a longer period of conservation than indicated.
5. Automated decisions and profiling
The website does not make automated decisions nor does it create profiles.
6. Recipients
During the period of processing your personal data, the organization may disclose your data to the following recipients:
- Judges and Courts.
- State Security Forces and Corps. (Police)
- Other competent authorities or public bodies, when the controller has a legal obligation to provide personal data.
- Where applicable, to data processors who provide services to us.
- Likewise, your data may be shared with companies belonging to the HISPASAT Group for the correct administrative management of the same.
7. International Data Transfers
The organization carries out international data transfers that ensure an adequate level of protection and all necessary guarantees in accordance with data protection regulations. Authorization for such transfers will be supported by one of the mechanisms provided by the regulations, whether through an adequacy decision or standard contractual clauses. However, we remind you of the exceptions established in Article 49 of the GDPR (mainly consent and the execution of the employment contract). You can request more information about this by contacting the email address provided in this privacy policy.
Transfers are made to entities located at:
| Country | Purpose | Typologies of Data | Guarantee |
| ARGENTINA | Manage job application procedures, as well as for internal administrative purposes of the group. | Identifying information: e-mail address, first and last names, CV, profession, date of birth, telephone number, country of origin. | Commission Decision 2003/490/EC of June 3, 2003 |
| BRAZIL | Manage job application procedures, as well as for internal group administrative purposes. | Identifying information: e-mail address, first and last names, CV, profession, date of birth, telephone number, country of origin. | Consent and/or conclusion of the employment contract (Article 49 of the RGPD). |
| CHILE | Manage job application procedures, as well as for internal group administrative purposes. | Identifying information: e-mail address, first and last names, CV, profession, date of birth, telephone number, country of origin. | Consent and/or conclusion of the employment contract (Article 49 of the RGPD). |
| COLOMBIA | Manage job application procedures, as well as for internal group administrative purposes. | Identifying information: e-mail address, first and last names, CV, profession, date of birth, telephone number, country of origin. | Consent and/or conclusion of the employment contract (Article 49 of the RGPD). |
| ECUADOR | Manage job application procedures, as well as for internal group administrative purposes. | - Identifying information: e-mail address, first and last names, CV, profession, date of birth, telephone number, country of origin. | Consent and/or conclusion of the employment contract (Article 49 of the RGPD). |
| MEXICO | Manage job application procedures, as well as for internal group administrative purposes. | Identifying information: e-mail address, first and last names, CV, profession, date of birth, telephone number, country of origin. | Consent and/or conclusion of the employment contract (Article 49 of the RGPD). |
| PERU | Manage job application procedures, as well as for internal group administrative purposes. | Identifying information: e-mail address, first and last names, CV, profession, date of birth, telephone number, country of origin. | Consent and/or conclusion of the employment contract (Article 49 of the RGPD). |
| UNITED KINGDOM | Manage job application procedures, as well as for internal group administrative purposes. | Identifying information: e-mail address, first and last names, CV, profession, date of birth, telephone number, country of origin. | Decision of June 28, 2021 |
| USA | Manage job application procedures, as well as for internal group administrative purposes. | Identifying information: e-mail address, first and last names, CV, profession, date of birth, telephone number, country of origin. | Consent and/or conclusion of the employment contract (Article 49 of the RGPD). |
8. Rights
Data subjects may exercise their rights to access, rectify, and erase their personal data at any time and free of charge. They may also request the restriction of the processing of their personal data, object to its processing, request data portability (where technically feasible), or withdraw the consent previously provided. Additionally, they may exercise their right not to be subject to a decision based solely on automated processing, including profiling, when applicable.
For this purpose, you may use the forms provided by the organization, or send a letter to the postal address or e-mail address referred to in the heading. For appropriate effects, we inform you that you may be asked for your ID card or any other similar document, in order to prove your identity, provided that this cannot be done by other less intrusive means.
If you believe your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you may file a complaint before the competent Data Protection Control Authority (Spanish Data Protection Agency), through its website www.aepd.es.
In compliance with the provisions of Article 21 of Law 34/2002 of Services Of The Information Society And Electronic Commerce, if you do not wish to receive further information about our services, you can unsubscribe by sending an email to the address protecciondedatos@hispasat.com with subject “UNSUBSCRIBE” or by clicking on the section of the mail *to unsubscribe*.
9. VERACITY OF THE DATA
The data subject guarantees that the data provided is true, accurate, complete, and up-to-date; committing to inform of any changes regarding the data provided, through the channels enabled for this purpose and indicated in point one of this policy. The data subject will be responsible for any damage or harm, whether direct or indirect, that may result from the failure to comply with this obligation.
In the event that the user provides data belonging to third parties, they declare that they have the consent of the data subjects and agree to communicate to them the information contained in this clause, releasing the organization from any liability arising from the failure to comply with this obligation.
10. Social Media
Social media is a part of everyday life for many internet users, and for them, the Organization has created various profiles on some of these platforms.
All users who visit our website have the opportunity to join our social media pages or groups.
However, please keep in mind that, unless we directly request your data (for example, through marketing campaigns, contests, promotions, or any other valid means), your data will belong to the corresponding Social Media platform. Therefore, we recommend that you carefully read their terms of use and privacy policies, and ensure that you configure your preferences regarding the handling of your data.
12. Modifications/Updates
This privacy policy may be modified/updated based on legal requirements or to adapt it to the guidelines issued by the Spanish Data Protection Agency or due to changes on our website. For this reason, we advise users to periodically review our privacy policy.
If you have any questions about this policy, you can contact Hispasat S.A. via the following email: protecciondedatos@hispasat.com
