Introduction

At AGALEUS MEDIO AMBIENTE Y ENERGIA SL, and all the companies in the AGALEUS group (currently: AGALEUS MEDIO AMBIENTE Y ENERGIA SL; PROFERSA, SAU; TECNOLOGIAS MEDIOAMBIENTALES QUIMICAS Y CATALIZADORES SL (QUIMYCAT); SOCIEDAD ANÓNIMA DE DESCONTAMINACION Y

ELIMINACION DE RESIDUOS, S.A. (SADER) and SOGECAR, S.A. we are committed to protecting the privacy and proper use of the personal data that you supply to us and we process, both online on this website, and where applicable any of its subdomains, and off-line.

Please read this policy carefully and make sure you understand and agree with it, before supplying us with your personal data. If you do not agree with it, do not use this website or its services, or supply us with your data.

When you access this site, use any of its services or supply your data, whether online or offline, we will take this as a clear affirmative action whereby you give us your consent (where this is necessary) to process your data for the purposes stated below.

Who  is  responsible  for  processing  your  data?

AGALEUS MEDIO AMBIENTE Y ENERGIA SL

 

Postal address: Ercilla, 18 2º Izda 48009 – (Bilbao) – Bizkaia
Email: info@www.agaleus.com

Telephone: 94 425 72 40

 

How did we get your data?

Obtained from the data subject themselves.

 

If you are a client (current or potential) or a user of our website, you have supplied your data, either offline or online, when requesting our services or contacting us with an enquiry. You may also have supplied them in person, if you have visited our premises.

By giving us your data, you guarantee that you are entitled to do this, and that the information is true, up to date and does not infringe any contractual restriction or third-party rights. You are responsible for keeping your data and your profile correct and up to date, and AGALEUS MEDIO AMBIENTE Y ENERGIA SL declines all responsibility should you fail to do so. You undertake not to supplant other users by using their registration data in the different services and/or content on this website.

Obtained automatically when visiting our website:

 

When you visit our website or any of our other platforms (social networks), we compile information through cookies and other web tracking and analytics technologies. This means that data are sent from your browser to our servers to optimise our services and enhance your experience as a user. These data may be collected and stored automatically by us or by third parties on our behalf. You can consult our cookie policy

Obtained from someone other than the data subject.

 

It is possible that you did not supply us with your data directly, but they were supplied to us by a third party with whom we work, to whom you gave these data previously. For example, employees of subcontracted companies who come to our premises to coordinate business activities.

In the event that is not the data subject themselves but a third party that supplies us with the former’s data, the categories of data we process may be, depending on each specific case: identifying data; personal features; social, academic and professional, economic, financial and insurance circumstances; transactions involving goods and services, and employment data.

It is the responsibility of the person supplying the data: a) to have the subject’s explicit, prior consent to use them, and b) to inform the subject that we are going to process their data. In agreeing to this privacy policy, anybody supplying third-party data expressly guarantees that they are authorised to do so, holding us entirely harmless in the event of any claim by the data subject.

What types of data do we process?

The categories of data we process may include:

 

Obtained from the data subject themselves: identifying data (name and surnames, ID no.), contact data (telephone, postal address, email address, invoicing or delivery address), commercial and economic data (information about the products requested, client history) and those required for payment (bank data).

Obtained automatically when visiting our website: user’s IP address, date and time of visit, URL of the site the user comes from, pages visited on our website, information about the browser used (browser type and version, operating system, etc.).

Provided by a third party: identifying data; data on personal features; data on social, academic and professional, economic, financial and insurance circumstances; transactions involving goods and services, and employment data.

Why do we process your data and with what legitimacy?

The data you supply to us, as well as those generated in the course of our relations with you, may be processed by us for different purposes:

 

Summary table of purposes and their legal basis

 

The data you supply to us, as well as those generated in the course of our relations with you, may be processed by us for different purposes and with different legal bases

 

PURPOSE	LEGAL BASIS
Maintaining the contract and communication, managing the contractual relationship If you supply us with your curriculum data or send us your CV, contacting you and managing any selection processes we carry out.	Contractual relationship or taking precontractual measures at the request of the interested party (art. 6.1. b GDPR).
Sending electronic messages to potential clients with information about our activities, products and/or services similar to those requested Installing non-technical cookies	Consent
Transfers arising from tax regulations.   Processing the personal data of employees of subcontracted companies to coordinate business activities arising from subcontracted construction. Managing the internal information system. Where a report is not anonymous, the informant will not be identified to the object of the report	Fulfilment of a regulation or legal obligation (general law on tax and internal information system) Fulfilment of the said companies’ obligations in employment, safety and risk prevention and social security (general social security act, occupational risk prevention act and subcontracting in construction act)
Sending electronic messages to current clients with information about our activities, products and/or services similar to those requested. Managing access and monitoring visits to our premises Installation of technical cookies In the case of users of our website, or the sender or addressee of an email: to deal with online enquiries and contact you. Passing on data to companies currently in the AGALEUS group: AGALEUS MEDIO AMBIENTE Y ENERGIA SL; PROFERSA, SAU; TECNOLOGIAS MEDIOAMBIENTALES QUIMICAS Y CATALIZADORES SL (QUIMYCAT); SOCIEDAD ANÓNIMA DE DESCONTAMINACION Y ELIMINACION DE RESIDUOS, S.A. (SADER) and SOGECAR, S.A. for internal administrative processes, including the processing of the personal data of clients, suppliers or workforce	Legitimate interest
When legitimacy is based on consent you may withdraw this consent at any time by sending us an email at info@www.agaleus.com. Such withdrawal does not affect the processing of your data for the other purposes described. If the said processing of your data is based on our legitimate interest, we consider it to be proportionate and represent a minimal impact on your privacy, but your interests, rights and freedoms will always prevail over our legitimate interest, so if you do not wish us to process your data for these purposes, please send us an email to this effect at info@www.agaleus.com and we will proceed accordingly.
Specific information about our legitimate interest as a legal basis, both for internal administrative purposes within the business group made up of AGALEUS MEDIO AMBIENTE Y ENERGIA SL; PROFERSA, SAU; TECNOLOGIAS MEDIOAMBIENTALES QUIMICAS Y CATALIZADORES SL (QUIMYCAT); SOCIEDAD ANÓNIMA DE DESCONTAMINACION Y ELIMINACION DE RESIDUOS, S.A. (SADER) and SOGECAR, S.A. and for sending clients of group companies electronic messages with information about the said companies’ activities, products and/or services This legitimate interest is to be expected for the data subject (as they have been a client before, it is explicitly recognised in the GDPR and mentioned in all the information documents, including this privacy policy, that the aforesaid companies make up a business group for data protection purposes); the data passed on are primarily identifying and contact or financial data (special categories of data are not passed on), and the impact on the data subjects is very limited. We have a procedure for sending commercial messages, in accordance with data protection regulations, and a weighting analysis of this legitimate interest, from which you may request an extract. We therefore consider that the said transfers of data within the AGALEUS GROUP are proportionate and represent a minimal impact on privacy. In any case, your interests, rights and freedoms will always come first, so if you do not wish us to process your data for these purposes, please send us an email to this effect at info@www.agaleus.com
Providing the data requested is obligatory as they are essential to formalise and/or maintain the contractual of precontractual relationship and meet the legal obligations arising therefrom; if you do not give us them, we will be unable to provide the service arising from the said relationship.

How long will we keep your data?

We will keep the personal data you supply to us while our contractual, precontractual or commercial relationship lasts, and once these have ended, while the data subject does not request their erasure. Even when they request erasure, we may keep them for the necessary time, limiting their processing to:

 

Complying with the legal and contractual obligations incumbent on us,

and/or for the time stipulated by law for any liability on our part to expire, and/or the lodging of or defence against claims arising from our relationship with the data subject.

In coordination with the above criteria, the personal data either in computer records or on paper may be erased, as the organisation sees fit, in accordance with logistical and/or storage space needs that make it advisable to delete information or documentation.

 

If you have applied for a job by sending in your CV, we will keep it until you ask us to erase it or while it remains valid, in order to be able to contact you for selection processes.

To what addressees will your data be passed?

You are informed that the data you supply to us may be passed on to third parties in order to fulfil purposes directly related to legitimate functions of transferor and transferee, such as:

 

1. To banks: to manage collection and payment.

2.  To the accounts auditor.

3. To the entities or bodies to whom we are legally obliged to transfer data: for example, the tax authorities, or courts and tribunals in the case of complaints lodged through the internal information system.
4. To any of the companies making up the business group (AGALEUS MEDIO AMBIENTE Y ENERGIA SL; PROFERSA, SAU; TECNOLOGIAS MEDIOAMBIENTALES QUIMICAS Y CATALIZADORES SL (QUIMYCAT); SOCIEDAD ANÓNIMA DE DESCONTAMINACION Y ELIMINACION DE RESIDUOS, S.A. (SADER) and

SOGECAR, S.A.): for internal administrative purposes, including processing of the personal data of clients, suppliers or workforce.

 

International data transfers

AGALEUS MEDIO AMBIENTE Y ENERGIA SL tries to make sure personal data are always processed and located within the European Economic Area. However, under certain circumstances we may transfer data internationally, for example if this is necessary to make or execute a contract, in the interest of the data subject, between AGALEUS MEDIO AMBIENTE Y ENERGIA SL and some other individual or legal entity; or if this is necessary to execute a contract between the data subject and AGALEUS MEDIO AMBIENTE Y ENERGIA SL, for example when using service providers located outside the European Union, which may have access to personal data, to provide ancillary services to our activity (hosting, housing, SaaS, remote backup copies, computer maintenance or support services, email managers, sending emails and email marketing, file transfer, etc.) or to take precontractual steps at the request of the data subject.

These entities may be different and vary over time, but we will try to choose either entities in countries with a level of data protection equivalent to that in Europe or those which offer adequate guarantees or achieving this level, or else on the basis of any of the exceptions provided for in the GDPR.

What are your rights when you supply us with your data?

You may, when appropriate, exercise your rights of access, correction, erasure, limitation and objection to processing, as well as other rights, at the postal or email address shown at the beginning of this privacy policy; in both cases a signed, written application is necessary, attaching a copy of your identity card, passport or other valid identifying document. If your data change, you must notify us at the same address; should you fail to do this, we decline all liability.

 

Right of access: you may ask us what personal data we are processing, and even ask us for a copy of these.

Right of correction: you may ask us to correct inaccurate personal data or to complete those that are incomplete, including through a further declaration.

Right of erasure (right to be forgotten): you may ask us to erase your personal data when: they are not necessary for the purposes for which they were collected, you withdraw your consent, there has been some illicit processing thereof or in compliance with a legal obligation.

Right of limitation of processing: you may ask us to limit the processing of your data, in which case we will only keep them to make or defend ourselves against claims.

Right of objection: you may object to the processing of your data if this processing is based on the data controller’s legitimate interest or is for advertising purposes.

Right of objection to automated decisions: you may object to being the object of a decision based solely on the automated processing of your personal data, including the creation of profiles causing legal effects on you or which significantly affect you. e.g. analysing or predicting matters related to work performance, financial circumstances, health, personal preferences or interests, etc. In this case we can create profiles for your preferences, if you do not object to this.

On receiving any of the above applications we will reply within the deadlines legally established. You can complain to the Spanish Data Protection Agency. If you would like more information about the rights you can exercise and to request forms for exercising your rights, you can visit the website of the Spanish Data Protection Agency, www.aepd.es.