Privacy Policy

1. Data controller

The controller of the personal data that may be collected through this website is:

2. What personal data do we process?

Through this website, EMINOX TECH, S.L. may process the personal data that the user voluntarily provides through the forms available, including but not limited to:

• Name and surname.
• Email address.
• Telephone number.
• Information included in the message or enquiry field.
• Information relating to job applications, curriculum vitae and other information that the candidate voluntarily provides.
• Any other information that the user chooses to provide through the forms or contact channels available on the website.

Certain technical data relating to browsing and use of the website may also be processed, in accordance with the provisions of the corresponding Cookie Policy.

EMINOX TECH, S.L. seeks to apply the principle of data minimisation and to limit the collection and processing of data to what is adequate, relevant and necessary for the corresponding purposes.

3. For what purposes do we process the data?

The personal data provided by users may be processed for the following purposes:

a) Contact form

To manage the enquiries, requests for information or communications that the user sends to EMINOX TECH, S.L. through the contact form or the other channels available on the website, and to respond to such requests.

b) Management of job applications

To manage the job applications received through the corresponding section of the website, to assess how well the candidate’s profile matches the available selection processes and to contact the candidate in relation to those processes.

Where appropriate, the data may be retained for an additional period so that the candidate can be considered in future selection processes.

c) Handling requests and communications

To handle and manage the requests, communications or enquiries that users send to EMINOX TECH, S.L. through any of the available means of contact.

d) Compliance with legal obligations

To comply with the legal obligations applicable to EMINOX TECH, S.L. at any given time.

e) Security and operation of the website

To ensure the security, integrity and correct operation of the website, as well as to prevent fraudulent, unlawful or unauthorised use and to detect possible security incidents.

4. What is the legal basis for processing the data?

Personal data will be processed on the basis of the following legal grounds, depending on the specific purpose:

• The consent of the data subject, where this is necessary for the specific processing.
• The application of pre-contractual measures or the performance of a contractual relationship, where the processing is necessary in order to deal with a request relating to the products or services of EMINOX TECH, S.L.
• Compliance with a legal obligation, where the processing is necessary in order to comply with a legal obligation applicable to EMINOX TECH, S.L.
• The legitimate interest of EMINOX TECH, S.L., where applicable and provided that the interests or fundamental rights and freedoms of the data subject do not override it.

Where processing is based on consent, that consent must be given freely, specifically, in an informed manner and unambiguously. Consent may be withdrawn at any time, without this affecting the lawfulness of processing carried out prior to its withdrawal.

5. Is it compulsory to provide the data?

Providing the personal data requested in the forms is, as a general rule, voluntary.

However, certain data may be necessary in order to properly manage the enquiry, request or application. In such cases, failure to provide the necessary data could prevent EMINOX TECH, S.L. from dealing with the request or providing the corresponding service.

The user warrants that the data provided is truthful, accurate and up to date, and undertakes to notify any change that may occur.

6. How long will we keep the data?

Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected.

Once that purpose has been fulfilled, the data may be kept duly blocked for the periods necessary to comply with the applicable legal obligations or to address any liabilities arising from the processing.

In particular:

• Data provided through the contact form will be retained for as long as necessary to manage and respond to the enquiry or request and, subsequently, for the periods necessary to address any liabilities.
• Data relating to job applications will be retained for as long as necessary to manage the selection process and, where appropriate, for a reasonable additional period so that the candidate can be considered in future selection processes, unless the candidate requests the erasure of their data beforehand.
• Data processed in order to comply with legal obligations will be retained for the periods established by the applicable legislation.

Retention of the data will be limited to the period necessary to achieve the corresponding purposes, in accordance with the principle of storage limitation.

7. Who may the data be disclosed to?

As a general rule, EMINOX TECH, S.L. will not disclose personal data to third parties, except where:

• It is necessary for the proper provision of a service.
• There is a legal obligation to disclose it.
• The data subject has given their consent.
• Disclosure is necessary for the exercise or defence of the rights and legitimate interests of EMINOX TECH, S.L.

EMINOX TECH, S.L. may engage certain service providers that have access to personal data as data processors, such as providers of web hosting, IT maintenance, email, technology services or other services necessary for carrying out its activity. Those providers will process the data in accordance with the instructions of EMINOX TECH, S.L. and with the safeguards required by the applicable legislation.

8. Are international data transfers carried out?

Should any of the providers used by EMINOX TECH, S.L. involve a transfer of personal data outside the European Economic Area, this will only be carried out where there is an appropriate legal basis and the safeguards required by data protection legislation are met.

Where necessary, those safeguards may include an adequacy decision of the European Commission, the application of standard contractual clauses or any other legally established mechanism.

9. Is automated decision-making or profiling carried out?

As a general rule, EMINOX TECH, S.L. does not take decisions based solely on automated processing that produce legal effects or similarly significant effects on users.

Nor is profiling carried out for such purposes using the data collected through the website forms.

10. What rights does the user have?

The data subject may exercise the following rights, on the terms provided for by the applicable legislation:

• Right of access: to obtain information as to whether EMINOX TECH, S.L. processes their personal data and, where applicable, to access it.
• Right to rectification: to request the correction of inaccurate or incomplete personal data.
• Right to erasure: to request the deletion of their data where the legally established requirements are met.
• Right to restriction of processing: to request that the processing of their data be restricted in the cases provided for by law.
• Right to object: to object to the processing of their data in certain circumstances.
• Right to data portability: to receive the personal data in a structured, commonly used and machine-readable format, or to request its transmission to another controller where legally applicable.
• Right to withdraw consent: to withdraw the consent given at any time where the processing is based on that consent.

To exercise these rights, the data subject may send a request to EMINOX TECH, S.L., Avda. Països Catalans, 210-212, 17457 Riudellots de la Selva (Girona), Spain, or to the email address info@eminoxtech.com.

The request must state the right that the data subject wishes to exercise and, where necessary, must be accompanied by documentation making it possible to verify the identity of the applicant.

11. Right to lodge a complaint with the supervisory authority

If the data subject considers that the processing of their personal data infringes the applicable legislation, they have the right to lodge a complaint with the competent supervisory authority.

In Spain, the supervisory authority is the Spanish Data Protection Agency (AEPD). Information on exercising rights and lodging complaints is available on the website of the AEPD.

12. Data security

EMINOX TECH, S.L. adopts appropriate technical and organisational measures to ensure a level of security appropriate to the risk and to protect personal data against loss, destruction, alteration, and unauthorised access or disclosure.

These measures are determined taking into account the risks associated with the processing carried out and are reviewed where necessary, in accordance with the principle of accountability established by data protection legislation.

13. Personal data of third parties

Should the user provide EMINOX TECH, S.L. with personal data relating to third parties, they warrant that they have a sufficient legal basis to disclose that data and that they have complied, where necessary, with the corresponding duty to inform those persons.

The user is responsible for the accuracy and lawfulness of the third-party data provided.

14. Minors

This website is not specifically aimed at minors.

Minors must not provide personal data through the website without the consent of their parents, guardians or legal representatives where this is legally required.

15. Cookies

The website may use cookies and other similar technologies.

Detailed information on the cookies used, their purposes, those responsible for them, their duration and the management of consent is available in the corresponding Cookie Policy.

16. Updates to the Privacy Policy

EMINOX TECH, S.L. reserves the right to amend this Privacy Policy where necessary in order to adapt it to legislative, case-law or technical changes or to the processing actually carried out.

The version in force will be the one published on the website at any given time.

Users are advised to consult this Privacy Policy periodically in order to be aware of the current version.

17. Applicable legislation

This Privacy Policy is governed by the Spanish and European legislation applicable to the protection of personal data, in particular Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and Organic Act 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), as well as any other applicable legislation.