Privacy Policy

  1. Data Controller

The Data Controller is the owner of the website, whose full details are provided in the Legal Notice.

  1. Data processed, purposes and retention period

2.1 Data processed:

For the purposes of requesting information or contacting the Owner, subscribing to our newsletters, registering for promotional events, or for any selection processes – whether advertised or as a result of a spontaneous application submitted by the user – certain information must be provided by filling in the forms on the website, which will state which fields are required.

During browsing, data such as the IP address assigned by your service provider or certain social profiles associated with the user may be provided.

2.2 Purposes:

The purposes are as follows:

  1. Contact: the email address or telephone number provided for contact purposes will be used to effectively answer any questions raised.
  2. CV submissions: the information provided in CVs will be used for present and future selection processes, although the Data Controller reserves the right to immediately delete the information provided.
  3. Newsletters: the email address, which must be verified by the user, or other similar means such as a telephone number, will be used to send newsletters, based on the user’s interests.
  4. Leave a comment: posted comments are subject to review by the Owner of the website, and the email address requested is used to manage or monitor these comments.
  5. Promotional events: the first name, surname and email address provided will be used to register you for the event and to send marketing messages tailored to your interests.

2.3 Retention

The retention period is as follows:

  1. Contact: the data will be processed in order to handle replies or requests for information, and will be deleted once this has been done.
  2. CV submissions: after it is received, the data will be processed for a period of two years, unless the user requests its removal before that time.
  3. Newsletters: the data will be processed from the moment the user gives his/her consent until it is withdrawn. Consent may be given as many times as the user wishes. In each communication, the user will find an accessible procedure to manage this that is free of charge.
  4. Leave a comment: the data will be processed from the moment it is received until the user requests that it be erased or deletes the comment.
  5. Promotional events: the data will be processed from the moment the user gives his/her consent until it is withdrawn. Consent may be given as many times as the user wishes. In each communication, the user will find an accessible procedure to manage this that is free of charge.
  1. Exercising your rights

Any person has the right to obtain confirmation as to whether or not personal data concerning him/her is being processed. Data subjects have the right to access their personal data, and to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

Under certain circumstances, data subjects may request that we restrict the processing of their data or object to the processing of their data, in which case we will only retain the data for the purpose of filing or defending claims.

To do this, users may (i) email the address comite.privacidad@.castrosua.com; or (ii) send a letter to Carretera A Coruña, Km 59.5, 15890 Santiago de Compostela. They must include a photocopy of their national identity card or equivalent proof of identity in both cases.

If you wish to exercise your right of portability, this data will be provided to the new Data Controller.

  1. Lawfulness of processing

The lawful basis for the processing of the data provided is the consent given by the user for the processing of his/her personal data for one or more specific purposes, and for the performance of a contract to which the user is a party, or for taking pre-contractual steps. Consent may always be withdrawn at any time.

  1. Recipients and transfers

The data will not be transferred and there will be no international transfers.