PRIVACY POLICY

In accordance with the provisions of EU Regulation 679/2016 on Data Protection and Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights, we inform you:

IDENTITY OF THE DATA CONTROLLER

CROSSCOMAR, S.A. with Tax ID A11522323

Address: Pol. Ind. Palmones II - C/ Mastil S/N, Palmones - Los Barrios (Cádiz).

Email: admon@crosscomar.com

PURPOSES OF DATA PROCESSING

The APPLICATION is a tool for exclusive and internal use by employees of CROSSCOMAR, S.A. It aims to manage corporate email accounts and link emails with company tasks and contacts.

The APPLICATION is intended EXCLUSIVELY for employees of the company. It is not accessible to the public or third parties. Access is restricted and controlled by the internal administrators of CROSSCOMAR, S.A.

CATEGORIES OF DATA PROCESSED

• Personal data: Name, surname, corporate email address.
• Device data: IP address and the date and time of last use.

LEGAL BASIS FOR DATA PROCESSING

The processing of your data is justified on the basis of:

• Being necessary for the employment relationship and the performance of the employee's duties, which implies acceptance of these terms and conditions of use (art. 6.1.b GDPR).
• Our legitimate interest in responding to your requests or inquiries submitted through any of the forms and/or contact methods we make available in the APPLICATION (article 6.1.f GDPR).

DATA RETENTION PERIODS

We will retain your personal data for no longer than necessary to maintain the purpose of processing, that is, as long as your employment relationship with CROSSCOMAR, S.A. continues (including the obligation to retain them during applicable prescription periods), and when they are no longer necessary for such purpose, they will be deleted with appropriate security measures to ensure anonymization or complete destruction of the same.

DATA SHARING WITH THIRD PARTIES

Your personal data will be shared with:

• Public administrations and other private entities for compliance with legal obligations to which CROSSCOMAR, S.A. is subject due to its activities.
• Technical service providers who need access to personal data to provide the services that CROSSCOMAR, S.A. has contracted with them, or who, due to the operation of electronic services (mobile application, website and email), may have access to certain personal data. With all of them CROSSCOMAR, S.A. has subscribed the necessary confidentiality and data processing contracts required by regulations to protect your privacy (article 28.3 GDPR).

INTERNATIONAL DATA TRANSFERS

No international data transfers are carried out.

DATA CONFIDENTIALITY OBLIGATION

The Data Controller guarantees the confidentiality of personal data in its files and will adopt regulatory measures to prevent, as far as possible, its alteration, loss, processing or unauthorized access.

EXERCISE OF RIGHTS

The employee has the right to:

• Withdraw consent at any time.
• Right of access, rectification, portability and deletion of your data, and limitation or objection to its processing.
• Right to lodge a complaint with the control authority (www.aepd.es) if you consider that the processing does not comply with current regulations.

Contact details to exercise your rights:

CROSSCOMAR, S.A.
Address: Pol. Ind. Palmones II - C/ Mastil S/N, Palmones - Los Barrios (Cádiz)
Email: admon@crosscomar.com

SECURITY MEASURES

In accordance with the provisions of applicable regulations on personal data protection, the CONTROLLER is complying with all the provisions of GDPR and LOPDGDD regulations for the processing of personal data under its responsibility, and clearly complies with the principles described in article 5 of the GDPR, by which they are processed in a lawful, fair and transparent manner in relation to the data subject and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

CROSSCOMAR, S.A. guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and LOPDGDD in order to protect the rights and freedoms of employees and has communicated appropriate information so they can exercise them.

All information transfer that the APPLICATION performs with cloud servers (cloud), whether our own or third parties, is carried out in an encrypted and secure manner through a secure hypertext transfer protocol (HTTPS), which also ensures that the information cannot be intercepted.