Isati Global Solutions

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

Company: ISATI ENGINEERING SOLUTIONS, S.L.
Address: Vitoriabidea, 17 01010 Vitoria-Gasteiz (Álava)
E-mail: isati@isati.aero
Telephone: 945 197 111

HOW DID WE OBTAIN YOUR DATA?

Obtained from the person concerned. If you are a customer (current or potential), or user of our website, you have provided them, either offline or online, when requesting our products or services, or contacting us for information, or, for example, if you have sent us your curriculum. By providing us with your data, you warrant that you are authorized to do so and that the information is accurate, up to date, and does not infringe any contractual restrictions or third-party rights. You are responsible for keeping your data and your profile correct and updated, declining all responsibility ISATI ENGINEERING SOLUTIONS, S.L. in case of not doing so. You agree not to impersonate other users using their registration data for the various services and/or contents of the Website.

Obtained automatically when you visit our website: When you visit our website, we collect information through cookies and other tracking and web analytics technologies. This means that data is sent from your browser to our servers to optimize our services and improve your user experience. This data may be automatically collected and stored by us or by third parties on our behalf. You can consult our cookie policy.

Communication by the interested party of third-party data: Concerning other people's data, you must respect their privacy, taking special care when communicating or publishing their data. Only the owner can authorize the processing of their data. The publication of third parties' data without their consent may infringe, in addition to the data protection regulations, those relating to the right to honour, privacy or self-image of such third parties. If you provide us with data of third parties, it is your responsibility to have their prior and express consent to use them, and you must inform them of the treatment that we will carry out with their data. By accepting this privacy policy, you expressly guarantee that you have the authorization for such contribution, exonerating us from any liability in case of any claim by any interested party.

WHAT TYPES OF DATA DO WE PROCESS?

The categories of data we process are identification data; professional data; economic, and financial data; and transactions of goods and services.

WHY DO WE PROCESS YOUR DATA?

The data you provide us with, as well as all the data generated during the development of the relationship we have with you, can be processed for different purposes:

If you are a current or potential customer to maintain contact and communication with you, manage the contractual and/or commercial relationship, including after-sales and warranty services.
If you are a mere user of our website or the sender or recipient of an e-mail, maintain contact and communication with you and manage the requests you make to us online.
In the case of providing us with your curricular data or sending us your curriculum, contact you and manage the selection processes that we carry out.
To send you, by means of electronic communications, information about our activities, products and/or services similar to those requested, including advertising and/or commercial communications for the purposes of art.21 LSSICE 34/2002. If we already have a previous contractual relationship, such communications will be sent on the basis of our legitimate interest. In the case of not having a previous contractual relationship, we will only send you these types of communications if you authorize us to do so by marking the option expressly included for this purpose in the corresponding forms. The electronic communications that we send you will include, in the communication itself, the option to stop receiving them. If you opt-out, we will stop sending you these types of communications in the future.

HOW LONG WILL WE KEEP YOUR DATA?

We will keep the personal data you provide for as long as the contractual, pre-contractual or commercial relationship is maintained and, once these are terminated, as long as the person concerned does not request their deletion. Even if the deletion is requested, we may keep them for the necessary time and limit their treatment, only to:

Comply with legal/contractual obligations to which we are subject,
and/or during the legal periods foreseen for the prescription of any liability on our part,
and/or the exercise or defence of claims arising from the relationship with the person concerned.

In coordination with the above criteria, the deletion of personal data either in computer records or on paper, may be carried out, at the discretion of the organization, depending on logistical needs and/or storage space that make it advisable to delete information or documentation.

WHAT IS THE LEGAL BASIS FOR THE PROCESSING OF YOUR DATA?

The legal basis that legitimizes us to process your data can be diverse:

On the one hand, it can be the legal relationship that binds us if you are a current customer/supplier, or the pre-contractual relationship of any kind existing between the parties if you are a potential customer/supplier (for example if you have asked us for information, an offer or quote ...). The provision of the requested data is mandatory because it is essential to formalize and/or maintain the contractual or pre-contractual relationship and meet the legal obligations arising therefrom; if you do not provide them, we can not provide the service derived from that relationship.
It may also be your consent if you have made a request through our website in the case of being a mere user of it or if you have sent us your resume. You give us your consent unequivocally when you provide us with your data online or offline, and this is considered a clear affirmative act that manifests your consent. You may withdraw such consent at any time by sending us an e-mail to isati@isati.aero but such withdrawal may mean that we cannot answer your request or take your resume into account.
It may also be compliance with regulations, tax, labour or prevention of occupational hazards.
It also constitutes a legal basis for processing your data and our legitimate interest as an organization to:
Conduct opinion and/or satisfaction surveys
Inform you of our activities, products and/or services (including by electronic communications) If we already have a prior contractual relationship, we will send you such communications based on our legitimate interest. Otherwise, we will only send you these types of communications if you give us your consent by marking the option expressly included for this purpose in the corresponding forms. In any case, the electronic communications that we send you will include, in the communication itself, the option to stop receiving them in the future.
To disclose your data, in accordance with recital 48 of the GDPR, to other group companies in order to provide the customer with a comprehensive or specialized service that requires the intervention of interdisciplinary teams; or for internal administrative purposes including the processing of personal data of customers or employees.

TO WHICH RECIPIENTS MAY WE COMMUNICATE YOUR DATA?

We inform you that the data you provide may be communicated to third parties for the fulfilment of purposes directly related to legitimate functions of the transferor and transferee as:

To banking entities for the management of collections and payments.
To entities or organizations to which there is a legal obligation to communicate data (Tax Administration...).
To insurance companies for the management and insurance of commercial risks.
To client companies to which ISATI transfers workers.
To any of the companies that make up the business group (currently, ISATI MATERIALS, S.L. and ISATI ENGINEERING SOLUTIONS, S.L.) for internal administrative purposes, including the processing of personal data of customers, suppliers or staff.

INTERNATIONAL DATA TRANSFERS

We will ensure that personal data is always processed and located within the European Economic Area. However, in certain circumstances, we may make international transfers of data, for example, if necessary for the conclusion or performance of a contract, in the interest of the data subject, between ISATI and another natural or legal person; or if necessary for the performance of a contract between the data subject and ISATI, for example when using service providers located outside the European Union, who may have access to personal data, for the provision of services ancillary to our business (hosting, housing, SaaS, remote backups, IT support or maintenance services, e-mail managers, sending e-mails and e-mail marketing, file transfer, etc.) or for the performance of prearranged measures (e.g., if the data subject has access to personal data, for the provision of services ancillary to our business (hosting, housing, SaaS, remote backups, IT support or maintenance services, e-mail managers, sending e-mails and e-mail marketing, file transfer, etc.). ) or for the execution of pre-contractual measures taken at the request of the data subject.

These entities may be different and vary over time, but we will try to choose entities either belonging to countries that have a level of protection equivalent to the European level in terms of data protection, or that have adequate guarantees to achieve that level, or they will be carried out based on one of the exceptions provided for in the GDPR.

Apart from the cases mentioned above, in the event of transfers to a country that does not have a level of protection equivalent to the European level, for example, because it does not have a data protection authority or regulation that protects the rights of data subjects, we will inform you of this risk so that you can explicitly authorize such transfers, giving your consent to them.

WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?

You can, where appropriate, exercise your rights of access, rectification, deletion, limitation and opposition to their treatment, as well as other rights, at the postal or email address indicated at the beginning of this privacy policy; in both cases by written and signed request attaching a copy of your ID card or passport or other valid document that identifies you. In case of modification of your data, you must notify it at the same address, declining this entity any responsibility in case of failure to do so.

Right of access: You can ask us what personal data we are processing and even request a copy of it.
Right of rectification: You can ask us to rectify inaccurate personal data or to complete incomplete personal data, including by means of an additional declaration.
Right to erasure (right to be forgotten): You can ask us to delete your personal data when: it is no longer necessary for the purposes for which it was collected, you withdraw your consent, there has been unlawful processing of the data or in compliance with a legal obligation.
Right to limitation of processing: You can ask us to limit the processing of your data, in which case we will only keep them for the exercise or defence of claims.
Right to object: You may object to the processing of your data if such processing is based on the legitimate interest of the data controller or is for advertising purposes.
Right to object to automated decisions: You can object to being subject to a decision based solely on automated processing of your personal data, including profiling that produces legal effects on you or significantly affects you. E.g. analyzing or predicting aspects related to job performance, economic situation, health, personal preferences or interests, etc. In this case, we may profile your preferences, if you do not object.

Once we receive any of the above requests we will respond to you within the legally established deadlines. You may complain to the Spanish Data Protection Agency. If you would like more information about the rights you can exercise and for the request of model forms for the exercise of rights you can visit the website of the Spanish Data Protection Agency, www.aepd.es.