PRIVACY POLICY
I. PRIVACY POLICY LYL INGENERÍA S.L.
07-02-2024
LYL INGENIERIA S.L. (the “Company”) is an organisation in which personal data processing activities take place, which gives it an important responsibility in the design and organisation of procedures so that they are in line with legal compliance in this area. In the exercise of these responsibilities and in order to establish the general principles that should govern the processing of personal data in the Company, it approves this Personal Data Protection Policy, which it notifies to its Employees and makes available to all its Stakeholders.
1. Purpose
The Personal Data Protection Policy is a measure of proactive responsibility that aims to ensure compliance with applicable legislation in this area and, in relation to this, respect for the right to honour and privacy in the processing of personal data of all persons who are related to the Company. In development of the provisions of this Personal Data Protection Policy, the Principles governing the processing of data in the organisation and, consequently, the procedures, and the organisational and security measures that the persons affected by this Policy undertake to implement in their area of responsibility are established. To this end, management shall assign responsibilities to staff involved in data processing operations.
2. Scope of application
This Personal Data Protection Policy shall apply to the Company, its directors, officers and employees, as well as to all persons who deal with it, expressly including service providers with access to data (“Processors”).
3. Principles for the processing of personal data
As a general principle, The Company will scrupulously comply with personal data protection legislation and must be able to demonstrate this (“proactive accountability” principle), paying special attention to those processing operations that may pose a greater risk to the rights of data subjects (“risk-based approach” principle). In relation to the above, LYL INGENIERIA S.L. shall ensure compliance with the following Principles:
– Lawfulness, fairness, transparency and purpose limitation. Data processing must always be informed to the data subject, by means of clauses and other procedures; and it will only be considered legitimate if there is consent for the processing of data (with special attention to that given by minors), or it has another valid legitimation and the purpose of the processing is in accordance with the law.
– Data minimisation. The data processed must be adequate, relevant and limited to what is necessary for the purposes of the processing.
– Accuracy. The data must be accurate and, if necessary, updated. In this respect, the necessary measures shall be taken to ensure that personal data which are inaccurate in relation to the purposes of the processing are deleted or rectified without delay.
– Limitation of the retention period. The data will be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes of processing.
– Integrity and Confidentiality. Data shall be processed in such a way as to ensure appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, by implementing appropriate technical or organisational measures.
– Transfer of data. It is forbidden to purchase or obtain personal data from illegitimate sources or in those cases in which such data have been collected or transferred in contravention of the law or where their legitimate origin is not sufficiently guaranteed.
– Contracting suppliers with access to data. Only providers offering sufficient guarantees to implement appropriate technical and security measures in the processing of data shall be chosen for contracting. With these third parties the appropriate agreement in this respect will be documented.
– International data transfers. Any processing of personal data subject to European Union law involving a transfer of data outside the European Economic Area must be carried out in strict compliance with the requirements of applicable law.
– Rights of those affected. The Company shall facilitate the exercise of the rights of access, rectification, erasure, limitation of processing, objection and portability for data subjects, establishing for this purpose the necessary and appropriate internal procedures and, in particular, the models for their exercise, which shall at least satisfy the legal requirements applicable in each case.
The Company will promote that the principles set out in this Personal Data Protection Policy are taken into account. (i) in the design and implementation of all working procedures, (ii) in the products and services offered (iii) in all contracts and obligations entered into or assumed by them, and (iv) in the implementation of any systems and platforms allowing access by employees or third parties and/or the collection or processing of personal data.
4. Commitment of workers
Employees are informed of this Policy and declare that they are aware that personal information is an asset of the Company, and in this respect they adhere to it, committing themselves to the following:
– Undertake the data protection awareness training that the Company makes available to them.
– Apply the security measures at user level that apply to their job, without prejudice to the responsibilities in their design and implementation that may be attributed to them depending on their role within LYL INGENIERIA S.L..
– Use the formats established for the exercise of rights by those affected and inform the company immediately so that the response can be made effective.
– To inform the Company, as soon as they become aware of deviations from the provisions of this Policy, in particular “Personal Data Security Breaches”, using the format established for this purpose.
5. Monitoring and evaluation
A verification, evaluation and assessment of the effectiveness of the technical and organisational measures to ensure the security of the processing shall be carried out annually, or whenever there are significant changes to the data processing. LYL INGENIERIA S.L
WEB FORM CLAUSE WITH ADVERTISING
In accordance with the provisions of current legislation on the Protection of Personal Data, we inform you that your data will be incorporated into the processing system owned by LYL INGENIERIA SL with CIF B62871199 and registered office at C/ Salvador Espriu 59, 3º 2ª, 08005 Barcelona, in order to answer your queries and send you commercial communications that may be of interest to you. In compliance with current legislation, LYL INGENIERIA SL informs that the data will be kept for the period of time strictly necessary to comply with the aforementioned precepts.
We inform you that we will process your data in accordance with the existence of your consent.
LYL INGENIERIA SL informs that it will proceed to process the data in a lawful, loyal, transparent, adequate, relevant, limited, accurate and updated manner. For this reason, LYL INGENIERIA SL undertakes to adopt all reasonable measures to ensure that they are deleted or rectified without delay when they are inaccurate.
In accordance with the rights conferred by current legislation on data protection, you may exercise your rights of access, rectification, limitation of processing, deletion, portability and opposition to the processing of your personal data, as well as the consent given for the processing thereof, by sending your request to the postal address indicated above or by e-mail to lyl@lyl-ingenieria.com.
Likewise, and in accordance with the provisions of Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, in article 21, we also request your express consent to send you advertising of our products or promotions that we consider may be of interest to you, by e-mail or by any other equivalent means of electronic communication.
- I have read and agree to receive advertising or promotional information from LYL INGENIERIA SL.
- I have read and do not accept to receive advertising or promotional information from LYL INGENIERIA SL.
- I have read and accept all the above conditions.
PRIVACY POLICY SOCIAL NETWORKS
In accordance with the provisions of the current regulations on Personal Data Protection (RGPD) and Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE), LYL INGENIERIA SL informs users that it has proceeded to create a profile on the Social Networks Facebook and Linkedin, with the main purpose of advertising its products and services.
Data of LYL INGENIERIA SL:
- CIF: B62871199
- ADRESS: C/ Salvador Espriu 59, 3º 2ª, 08005 Barcelona
- EMAIL: lyl@lyl-ingenieria.com
- WEB DOMAIN: www.lyl-ingenieria.com
- Right of Access: This is the user’s right to obtain information about their specific personal data and the processing that has been or is being carried out, as well as the information available about the origin of said data and the communications made or planned for said data.
- Right of rectification: This is the right of the data subject to have data that proves to be inaccurate or incomplete amended. It can only be satisfied in relation to information that is under the control of LYL INGENIERIA SL, for example, delete comments posted on the page itself, images or web content containing personal data of the user.
- Right to restriction of processing: This is the right to have the purposes of the processing originally intended by the controller limited.
- Right of Deletion: This is the right to delete the user’s personal data, with the exception of the provisions of the GDPR itself or other applicable regulations that determine the obligatory nature of the conservation of the same, in time and form.
- Right of portability: The right to receive the personal data provided by the user in a structured, commonly used and machine-readable format and to transmit it to another data controller.
- Right of Opposition: This is the user’s right not to have his or her personal data processed or to have the processing of such data by LYL INGENIERIA SL ceased.
- Access to public profile information.
- Publication in the user’s profile of all information already published on the website of LYL INGENIERIA SL.
- Send personal and individual messages through the Social Network channels.
- Page status updates to be posted on the user’s profile.