PERSONAL DATA PROTECTION POLICY
STOREPARQUET S.L. (the company") is an Organization in which activities of
processing of personal data, which gives you an important responsibility
in the design and organization of procedures so that they are aligned with the
legal compliance in this matter.
In the exercise of these responsibilities and in order to establish the general principles
that should govern the processing of personal data in the Company, approve this
Personal data protection policy, that notifies its Employees and makes
disposition of all your stakeholders.
1. Purpose
The Personal Data Protection Policy is a measure of Responsibility
proactive that has the purpose of ensuring compliance with the applicable legislation in this
matter and relation to it, respect for the right to honor and privacy in the treatment of
the personal data of all the people who are related to The Company.
In development of the provisions of this Personal Data Protection Policy, I know
establish which are the Principles that govern the processing of data in the organization and in
consequence, the procedures, and the organizational and security measures that people
affected by this Policy undertake to implement in their area of ​​responsibility.
To this end, The Directorate will assign the responsibilities to the personnel participating in the
data processing operations.
2. Area of ​​application
This Personal Data Protection Policy will be applicable to the Company, to their
administrators, managers and employees, as well as all the people who are related to
her, with express inclusion of service providers with access to data ("In charge of the
treatment")
3. Principles of the processing of personal data
As a general principle, The Company will scrupulously comply with the legislation on the matter
protection of personal data and must be able to demonstrate it (Principle of
"Proactive responsibility"), paying special attention to those treatments that can
pose a greater risk to the rights of those affected (Principle of «risk approach»).
In relation to the above STOREPARQUET S.L. will ensure compliance with the following
Beginning:
- Legality, loyalty, transparency and purpose limitation. Data processing
should always be informed to the affected, through clauses and other procedures; Y
It will only be considered legitimate if there is consent for data processing (with
special attention to that provided by minors), or has other legitimacy
valid and its purpose is in accordance with the Regulations.
- Data minimization. The data processed must be adequate, relevant and
limited to what is necessary in relation to the purposes of the treatment.
- Accuracy. The data must be accurate and, if necessary, updated. A is
In this regard, the necessary measures will be adopted so that they are suppressed or rectified without
delay personal data that are inaccurate with respect to the purposes of the
treatment.
- Limitation of the conservation period. The data will be kept in such a way that
allows the identification of the interested parties for no longer than necessary to
the purposes of the treatment.
- Integrity and Confidentiality. The data will be treated in such a way as to guarantee
adequate security of personal data, including protection against
unauthorized or illegal treatment and against its loss, accidental damage or destruction,
through the application of appropriate technical or organizational measures.
- Data transfers. The purchase or obtaining of character data is prohibited
personnel from illegitimate sources or in those cases in which said data has been
collected or transferred in contravention of the law or their legitimacy is not sufficiently guaranteed
origin.
- Hiring providers with access to data. They will only be chosen for their recruitment to
suppliers that offer sufficient guarantees to apply technical measures and
appropriate security in data processing. With these third parties the
due Agreement in this regard.
- International data transfers. All processing of personal data
subject to European Union regulations that involve a transfer of data outside
of the European Economic Area must be carried out in strict compliance with the
requirements established in applicable law.
- Rights of those affected. The Company will facilitate to those affected the exercise of the
rights of access, rectification, suppression, limitation of treatment, opposition and
portability, establishing for this purpose the internal procedures, and in particular the
models for its exercise that are necessary and timely, which should
satisfy, at least, the legal requirements applicable in each case.
The Company will promote that the principles contained in this Data Protection Policy of
personal character are taken into account (i) in the design and implementation of all
work procedures, (ii) in the products and services offered (iii) in all contracts
and obligations that formalize or assume and (iv) in the implementation of how many systems and
platforms allow the access of employees or third parties and / or the collection or processing of data
of a personal nature.
4. Workers commitment
Workers are informed of this Policy and declare themselves aware that the
Personal information is an asset of the Company, and in this respect adhere to
her, committing to the following:
- Carry out the awareness training on Data Protection that the Company puts at its disposal.
provision.
- Apply the security measures at the user level that apply to their job,
without prejudice to the responsibilities in its design and implementation that may be
could be attributed to him based on his role within STOREPARQUET S.L..
- Use the formats established for the exercise of Rights by the
affected and inform the Company immediately so that it can be done
effective response.
- Inform the Company, as soon as I have knowledge, deviations from what
established in this Policy, in particular of "Data security breaches
personal ", using the format established for this purpose.
5. Control and evaluation
A verification will be performed, annual evaluation and assessment, or whenever there are changes
significant in data processing, of the effectiveness of technical and organizational measures
to guarantee the security of the treatment.
STOREPARQUET S.L.