The company COMPAÑÍA IBÉRICA DE TRANSPORTES ESPECIALES, S.A. (hereinafter referred to as “the Entity”) is committed to due diligence and compliance with Data Protection regulations.

Below, detailed information is provided regarding the confidentiality and Personal Data Protection policy, in compliance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation or GDPR).

Data Controller and Contact Information for the Data Protection Officer (DPO):

> Identity: COMPAÑÍA IBÉRICA DE TRANSPORTES ESPECIALES, S.A. 

> Address: Calle 60, nº 1-5, P.I. Zona Franca, sector A. 08040 – Barcelona 

> Phone: +34 93 223 47 65 

> Email: lopd@citesa.com 

Purposes of Processing

The Entity will process the information provided by interested parties for the following purposes:

  • To manage your visit, appointment, and meeting at our facilities, as well as the administration and execution of contracted services/products. 
  • To handle any type of request, suggestion, or inquiry about our professional services submitted by interested parties. 
  • Informational and commercial communications: Processing of your data to inform you about activities, articles of interest, and general information related to our business and the services/products contracted. 
  • To manage data provided by job applicants through their Curriculum Vitae (CV) for the purpose of selection and recruitment processes. 

To ensure proper attention and management of the above purposes, the data subject consents to the processing of their data for these purposes, all in strict compliance with Data Protection regulations and the policy detailed herein. At any time, they may exercise their rights (see specific section). 

Data Retention Criteria 

  • Management of contracted services/products: The personal data provided in contracts, offers, and/or service proposals, as well as data from other persons necessary for their execution, will be retained as long as the contracted services remain in force. Once the service(s) have been completed, personal data will be retained in cases where liability may arise with the Entity and/or to comply with other applicable regulatory frameworks or legal obligations requiring data retention. Personal data will be stored in a way that allows identification and the exercise of data subject rights while ensuring confidentiality and integrity through necessary legal, technical, and organizational measures. 
  • Curriculum Vitae Management: As a general rule, the Entity retains CVs for a maximum period of one year; after this period, they will be automatically deleted in compliance with data quality principles. 
  • Other data: Any other data or information provided by users through any means will be retained for the time necessary to fulfill the purpose for which they were collected. 

Legal Basis 

The legal basis that allows the Entity to process the personal data of users, customers, and potential customers is based on the following grounds: 

  • The consent of the data subjects for handling and managing any request for information or inquiry about our services and products. 
  • The consent given by job applicants for selection and recruitment purposes. 
  • The contractual framework for the provision and/or contracting of services/products with the Entity. 
  • Legitimate interest in sending informational, commercial, and/or promotional communications related to the Entity’s activities and contracted services/products via email or other means. 

Recipients 

Personal data will not be disclosed to third parties, except as required by law. 

Data Sources 

Personal data is obtained directly from the data subjects and our collaborators. The categories of personal data provided by our collaborators include: 

  • Identification data. 
  • Postal or email addresses. 
  • Data provided and/or consented to by the data subjects, which are necessary for managing and executing the requested service/product. 

Rights 

  • Right of Access, Rectification, and Erasure: Interested parties have the right to obtain confirmation as to whether the Entity is processing personal data concerning them. They also have the right to access their personal data, request the correction of inaccurate data, or request their deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. 
  • Right to Restriction and Objection: In certain circumstances, data subjects may request the restriction of their data processing, in which case it will only be kept for the exercise or defense of legal claims. In certain situations, data subjects may also object to the processing of their data. In such cases, the Entity will cease processing the data unless there are compelling legitimate grounds or for the exercise or defense of possible claims. 

These rights may be exercised through our Data Protection Channel (see specific section). 

Support and Assistance 

Interested parties may contact the Entity regarding any questions about the processing of their personal data or interpretation of this policy by reaching out to the Data Protection Officer (DPO) at the address provided at the beginning of this policy.