Privacy Policy
1.- Who is the data controller of the personal data?
WE HUMANS, S.L. (hereinafter, “WEHUMANS”) is the data controller of the personal data and respects data protection regulations in force, user privacy, secrecy and security of personal data, pursuant to Organic Law 3/2018, of 5 December, concerning Personal Data Protection and guarantee of digital rights (LOPD-GDD) and also pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, regarding the protection of individuals with respect to personal data processing (GDPR).
WEHUMANS has taken all technical and organisational measures necessary to guarantee the confidentiality, integrity, availability and resilience of the personal data that it keeps on file.
WEHUMANS is one of the companies of ABAI. The companies that make up ABAI are:
RAINBOW COMUNICACIONES, S.L., with Tax ID code: B81689069.
EXTEL CONTACT CENTER, S.A., with Tax ID code: A80221781.
If the data subject has a need to contact the data controller, then they can contact ABAI GROUP with registered office at Calle Vía de los Poblados 3, Edificio Cristalia, Play 4B, planta 5ª, (28033) Madrid (Spain). E-mail: dpd@abaigroup.com
The identification data of the Data Protection Officer are as follows:
Quod Solutio, S.L.
Telephone: (+34) 911845977
E-mail: dpd_rainbow@quod.es
Address: Avda. Europa, 26. Edificio Ática V-2º Pozuelo de Alarcón, Postal Code 28224 (Spain)
2.- What type of data are processed by WEHUMANS?
When data is collected, only those personal data that are absolutely necessary for the purpose and with the legitimation indicated will be requested.
Information obtained automatically.
When the User accesses the website, WEHUMANS can obtain information regarding their IP address and other browsing data.
Information provided by the User.
When the User fills in any form for matters such as a request, consultation of or petition for information, identification data (name and family names) are requested, as well as contact data (e-mail and telephone). Accordingly, if the form is sent in order to take part in personnel selection processes, then information regarding the profile and city desired is requested.
We will also process any data that might be stated in the message, comment or CV that may accompany the form.
The User commits to provide accurate information at all times regarding their data requested through the website and to keep the data up-to-date at all times. The User will not provide the personal data of third parties. In the event that the User has to provide personal data of third parties, then they guarantee that they are legally authorised to do so, that they have informed data subject of the transfer of their data and that they undertakes to facilitate the transfer for WEHUMANS. In this case, the User will be the only party responsible for the fulfilment of these obligations.
3.- What is the purpose of processing and the basis for its legitimacy?
-BASIS FOR LEGITIMACY OF PROCESSING
-HR MANAGEMENT
· GDPR: 6.1.b) Processing necessary to implement the contract to which the data subject is party or for the application, at the data subject’s request, of pre-contractual measures.
· GDPR: 6.1.c) Processing necessary to fulfil a legal obligation applicable to the data controller.
· Royal Legislative Decree 2/2015, of 23 October, which approves the consolidated text of the Spanish Workers’ Statute Act.
· Royal Legislative Decree 8/2015, of 30 October, which approves the consolidated text of the Spanish General Social Security Act.
-MANAGEMENT OF PERSONNEL SELECTION PROCESSES
· GDPR: 6.1.a) Express consent from the candidate for the purposes of processing
-CONTACT CENTER MANAGEMENT
· GDPR: 6.1.a) Express consent of the data subject to the processing of their data for one or more specific purposes.
· GDPR: 6.1.b) Processing necessary to implement the contract to which the data subject is party or for the application, at the data subject’s request, of pre-contractual measures.
· GDPR: 6.1.f) Processing necessary to satisfy the legitimate interests pursued by the data controller.
-SOCIAL NETWORK MANAGEMENT
· GDPR: 6.1.a) Express consent of the data subject to the processing of their data for one or more specific purposes.”
· GDPR: 6.1.b) Processing necessary to implement the contract to which the data subject is party or for the application, at the data subject’s request, of pre-contractual measures.
· GDPR: 6.1.f) Processing necessary to satisfy the legitimate interests pursued by the data controller.
-CLIENT MANAGEMENT
· GDPR: 6.1.b) Processing necessary to implement the contract to which the data subject is party or for the application, at the data subject’s request, of pre-contractual measures.”
· GDPR: 6.1.a) Express consent of the data subject to the processing of their data for one or more specific purposes.
· GDPR: 6.1.c) Processing necessary to fulfil a legal obligation applicable to the data controller.
· GDPR: 6.1.f) Processing necessary to satisfy the legitimate interests pursued by the data controller.
· Law 34/2002, of 11 July, on the Services of the Information Society and Electronic Commerce.
-SUPPLIER MANAGEMENT
· GDPR: 6.1.b) Processing necessary to implement the contract to which the data subject is party or for the application, at the data subject’s request, of pre-contractual measures.
· GDPR: 6.1.c) Processing necessary to fulfil a legal obligation applicable to the data controller.
Processing may be carried out for other purposes, and these will be communicated clearly and transparently, providing information and if necessary requesting your express authorisation, while always making it easier for data subjects to exercise their rights such as objection to this processing, always within the context of the regulations in force.
4.- Recipients of the data.
When the User provides their data (in the case of personnel selection processes) they authorise the transfer of the personal data to the following companies:
- AON Marketing Directo, S.A.U, who will hold the training sessions necessary for access to the position offered, when applicable.
- Quirón Prevención, S.L.U., who will hold Occupational Risk Prevention training sessions, when applicable.
- Adecco Outsourcing, S.A.U., when applicable, in order to conclude the contract.
In order to be able to meet the different needs derived from the accounting, tax and administrative management of our clients and suppliers it may be necessary that your data be transferred by WEHUMANS to the rest of the companies that make up our group.
Accordingly, we hereby notify you that we work with third-party collaborators who provide different services (hosting, development and web maintenance, web analytics and other services related with the website), which as a result of the contractual relationship with WEHUMANS may have access to the User’s personal data.
WEHUMANS have concluded the corresponding processing assignment contracts with each of the suppliers in order to guarantee that suppliers process personal data pursuant to the regulations in force.
5.- Will data be transferred internationally?
We hereby notify you that WEHUMANS does not plan to transfer the User’s personal data to any third party located outside the European Union nor to any international organisation.
6-. Will automated decisions be made with the personal data supplied?
WEHUMANS does not plan to make automated decisions with the User’s data, including the preparation of profiles, that produce legal effects for the User or that could significantly affect the User.
7.- How long will personal data be kept on file?
The data will be kept on file as long as they are necessary for the purposes indicated. These data will be erased once they cease to be necessary, without prejudice to their conservation during the compulsory period for handling any possible liabilities of WEHUMANS, although during this period they will be kept properly blocked.
Nevertheless:
The CVs received and the rest of complementary information provided in order take part in personnel selection processes will be destroyed in the event that the candidates were ruled out for the possible personnel selection processes that we might carry out, while the personal data of the candidates selected will be kept on file for future processes for a maximum period of 24 months
The personal data necessary for sending commercial information will be kept on file until the data subjects declares their objection to processing.
8.- What are the User’s rights?
The user is not obliged to provide their personal information, as a whole or in part, but if they do not, it is possible that they cannot be contacted to be notified of the topics indicated above.
Regarding data processing, the User is entitled to rights of access, rectification, erasure, limitation of processing, objection and data portability, which means that they can request of WEHUMANS at any time following:
-That it provide the User with access to personal data processed by WEHUMANS, as well as the information related with them (purposes, category of data, recipients, conservation period …).
-That it correct any personal data if it is inaccurate or incomplete.
-That it proceed to the erasure of the personal data involving them, if specific reasons for this arise, including: that the data are no longer necessary for the purpose, that consent is withdrawn, that they object to processing or that they believe that WEHUMANS is processing the data without a legitimate basis.
-That it limit data processing on a permanent or temporary basis in certain specific cases including: because they believe that WEHUMANS is processing their data without a legitimate basis, in cases of challenging the accuracy as long as the accuracy is being verified, in cases of objection to processing as long as the legitimate motivations of the data controller are being verified, as well as in specific cases in which WEHUMANS no longer needs to process the data for the alleged purpose, but the data subject requires this in order to prepare, assert or defend against claims.
-That it refrain from carrying out processing activities on the personal data, in certain specific cases including: for reasons related with particular situation of the data subject in the cases in which the legal basis for processing is the public interest or the pursuit of the interests of the data controller or of a third party, when the purpose of treatment has as its aim direct marketing, scientific or historical research or statistical purposes.
-In the specific cases in which processing is based on consent or on a contract and is carried out by automated methods, the User has the right to be provided with the data for which WEHUMANS acts as data controller and that have been provided by the data subject or to have them transferred to the data controller that the User requests in a structured, commonly used, machine-readable and interoperable format.
Likewise, we hereby notify you that you have the right to withdraw your consent to processing of your personal data, although this does not affect the legitimate basis for processing derived from the consent prior to its withdrawal.
9.- How can I exercise the rights above?
If you wish to exercise any of your rights, you can contact dpd@abaigroup.com, indicating the right that you wish to exercise and attaching a copy of your identification document. You may request that WEHUMANS make available to you a form to be filled in.
Likewise, the User may contact the Data Protection Officer any time by post or e-mail using the contact data provided above, without prejudice to their right to submit a complaint to the Spanish Data Protection Agency, either through its electronic headquarters, or at its registered office, in Calle Jorge Juan, 6, 28001, Madrid (Spain).
You can obtain more information on your right at: https://www.aepd.es/es, in the section “Conoce tus derechos” del “Reglamento” (“Know your rights” of the “Regulation”).
10.- Cookies and similar technologies.
For automatic collection of data, and also to be able to offer you a better experience in service in accordance with your browsing, we use different techniques such as cookies, including both own and third-party cookies. If you wish to obtain detailed information on how we use the cookies or how to disable them, see our Cookies Policy.
11.- Privacy of minors.
For the use of the content and services provided through this website, we do not request consent for data processing from minors younger than 14 years of age. If needed, proper consent will be requested of the parent or guardian.
Nevertheless, we encourage parents/guardians of children under 14 years of age to become acquainted with the website and to notify us of any personal data processing operation involving the minor’s data that they consider inappropriate.
12.- Access to services of third parties.
This Privacy Policy does not apply to websites, services or applications provided by third parties. Access to and use of the content and services provided by third parties that can be accessed via this website will be subject to their respective privacy and cookies policies, which you must read and accept, when relevant.
13.- Technical and organisational measures.
As data controller of the data provided by the users, we assume liability for any possible data breach, and we hereby inform you that we have taken appropriate technical and organisational measures to guarantee compliance with the requirements established in the GDPR, and hence to guarantee the security of processing and the effective application of data protection principles, thus guaranteeing your rights and freedoms.
14.- Modifications.
WEHUMANS reserves the right to modify the privacy policy of this website in order to adapt it to new developments in regulations, case law and practices in the sector.
This modification will be supervised and coordinated by our Data Protection Officer.
In the event of significant changes, WEHUMANS will announce these changes and indicate clearly and with timely advance notice the modifications made, requesting your acceptance, if needed.
15.- Training and Awareness of the Personnel
In order to ensure that all principles of data protection regulations are obeyed, all staff members at WEHUMANS who must process personal data in the discharge of their duties receive continuing education related with data management and confidential information.
Moreover, internal protocols are in place and available to our staff for reporting of data breaches.
