In accordance with the provisions of EU Regulation 2016/679 on Data Protection (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights, we inform you:
Identity of the data controller
CROSSCOMAR, S.A. — Tax ID A11522323
Address: C/ Mástil 6, Pol. Ind. Palmones II, 11379 Los Barrios (Cádiz), Spain
Email: admon@crosscomar.com
Purposes of data processing
The APPLICATION is a tool for exclusive and internal use by employees of CROSSCOMAR, S.A. It aims to manage corporate email accounts and link emails with company tasks and contacts.
The APPLICATION is intended EXCLUSIVELY for employees of the company. It is not accessible to the public or third parties. Access is restricted and controlled by the internal administrators of CROSSCOMAR, S.A.
Categories of data processed
- Personal data: name, surname, corporate email address.
- Device data: IP address and the date and time of last use.
Legal basis for data processing
The processing of your data is justified on the basis of:
- Being necessary for the employment relationship and the performance of the employee’s duties, which implies acceptance of these terms and conditions of use (art. 6.1.b GDPR).
- Our legitimate interest in responding to your requests or inquiries submitted through any of the forms and/or contact methods we make available in the APPLICATION (art. 6.1.f GDPR).
Data retention periods
We will retain your personal data for no longer than necessary to maintain the purpose of processing, that is, as long as your employment relationship with CROSSCOMAR, S.A. continues (including the obligation to retain them during applicable prescription periods). When they are no longer necessary for that purpose, they will be deleted with appropriate security measures to ensure their anonymisation or complete destruction.
Data sharing with third parties
Your personal data will be shared with:
- Public administrations and other private entities, for compliance with the legal obligations to which CROSSCOMAR, S.A. is subject due to its activities.
- Technical service providers who need access to personal data to provide the services that CROSSCOMAR, S.A. has contracted with them, or who, due to the operation of electronic services (mobile application, website and email), may have access to certain personal data.
With all of them CROSSCOMAR, S.A. has signed the confidentiality and data processing agreements required by regulations to protect your privacy (art. 28.3 GDPR).
International data transfers
No international data transfers are carried out.
Confidentiality
The data controller guarantees the confidentiality of the personal data in its files and will adopt the regulatory measures to prevent, as far as possible, their alteration, loss, processing or unauthorised access.
Exercise of rights
The employee has the right to:
- Withdraw consent at any time.
- Access, rectify, port and delete their data, and to restrict or object to its processing.
- Lodge a complaint with the supervisory authority (www.aepd.es) if they consider that the processing does not comply with current regulations.
Contact details to exercise your rights: CROSSCOMAR, S.A., C/ Mástil 6, Pol. Ind. Palmones II, 11379 Los Barrios (Cádiz) — admon@crosscomar.com
Security measures
In accordance with the applicable data protection regulations, the controller complies with all the provisions of the GDPR and the LOPDGDD for the processing of the personal data under its responsibility, and with the principles described in article 5 of the GDPR, by which data are processed lawfully, fairly and transparently in relation to the data subject, and are adequate, relevant and limited to what is necessary for the purposes for which they are processed.
CROSSCOMAR, S.A. guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of employees, and has given them the appropriate information so that they can exercise them.
All information transfer that the APPLICATION performs with cloud servers, whether our own or third parties’, is encrypted and carried out through a secure protocol (HTTPS), which ensures that the information cannot be intercepted.
Last updated: 26 October 2026