Privacy Policy
This website (the "Site") is owned and operated by BOSTLAN Industrial Group S.A. (hereinafter BOSTLAN), who is responsible for processing the personal data referenced in this privacy policy.
Identification and contact details:
- Data controller: BOSTLAN Industrial Group S.A. (BOSTLAN)
- Registered office: Polígono Industrial Trobika, Markosene 1, 48100 Munguía, Bizkaia
- Tax ID (NIF): A48155352
- Phone: (+34) 946 744 213
- Fax: (+34)946 744 240
- Contact email: rgpd@bostlan.com
The purpose of this website's privacy policy is to comply with the obligation of information and transparency established in Article 12 of the EU Regulation 2016/679 on personal data protection. Additionally, in cases where the obligation of information has been provided through a basic information layer known as the “first layer,” in accordance with Article 11 of the Organic Law 3/2018 on personal data protection and digital rights guarantee, this privacy policy corresponds to the additional information, considered as the “second layer,” where the additional elements required in Articles 13 and 14 of the EU Regulation 2016/679 on personal data protection are described.
The operations or set of operations performed on your personal data are identified as data processing activities. BOSTLAN provides below detailed information for each data processing activity in accordance with the guide established by the Spanish Data Protection Agency:
1. Processing related to contact persons:
The website includes a contact form to communicate with the organization, which collects the data of individuals or organizations requesting information.
- Legal basis: GDPR: 6.1.a) the data subject has given consent to the processing of their personal data for one or more specific purposes.
- Types of personal data processed: Contact details: full name, email, contact phone number, postal code, address.
- Retention period: The personal data provided will be retained for as long as the relationship with BOSTLAN lasts, and additionally for as long as any liabilities may arise, as well as for the fulfilment of other legal obligations for which the data controller is responsible.
- Recipients: Personal contact data will not be communicated to third parties.
2. Processing related to recruitment (applications):
BOSTLAN processes the data of job applicants for the purpose of managing the recruitment process.
- Legal basis: GDPR: 6.1.a) the data subject has given consent to the processing of their personal data for one or more specific purposes.
- Types of personal data processed: Contact details: full name, email, contact phone number, postal code, address. Professional and academic data from the CV.
- Retention period: The personal data provided will be retained for the duration of the recruitment process, and additionally for as long as any liabilities may arise, as well as for the fulfilment of other legal obligations for which the data controller is responsible.
- Recipients: The personal contact data will not be communicated to third parties outside of BOSTLAN.
3. Processing related to commercial communications:
BOSTLAN processes contact data for commercial communications in accordance with the provisions of the Law on Information Society Services (LSSI) if they are clients, and based on consent if they are not.
- Legal basis: GDPR: 6.1.a) the data subject has given consent to the processing of their personal data for one or more specific purposes. GDPR 6.1.f) legitimate interest in accordance with the LSSI.
- Types of personal data processed: Contact details: username, email.
- Retention period: The personal data provided will be retained for as long as the relationship with BOSTLAN lasts, and additionally for as long as any liabilities may arise, as well as for the fulfilment of other legal obligations for which the data controller is responsible. If you request to unsubscribe from commercial communications, BOSTLAN will stop sending emails, but your data will be retained unless you request their deletion.
- Recipients: The personal contact data will not be communicated to third parties.
4. Video surveillance processing:
BOSTLAN processes data for the purpose of maintaining the security of the facilities.
- Legal basis: GDPR: 6.1.f) Data processing is necessary for the legitimate interests pursued by the data controller or by a third party in accordance with Article 22 of the Organic Law 3/2018.
- Types of data processed: Image.
- Retention period: 30 days.
- Recipients: Upon a justified request, to law enforcement agencies and judicial bodies.
5. Personal data security:
We strive to use appropriate technical and physical security measures to protect the personal data transmitted, stored, or otherwise processed from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access in connection with our Site. These measures include computer safeguards and protected files and facilities. Our service providers are also carefully selected and are required to use appropriate security measures. Standard industry SSL encryption is used on the website to protect data transmissions. Most current browsers support the necessary security level to use these areas.
6. Your rights under data protection laws:
You have several rights under data protection laws. These may include (as applicable):
- Any person has the right to know and obtain information about whether BOSTLAN is processing personal data concerning them;
- The right to request access to personal data, which means that you can find out what data we hold about you;
- The right to request correction, including asking us to correct inaccurate personal data;
- The right to request the restriction of processing or to object to the processing of your personal data;
- The right to request the deletion of your personal data when they are no longer needed for the purposes for which they were collected;
- The right to object to the processing of your data, provided you have not previously given your consent and there are no compelling legitimate reasons or defenses of potential claims;
- The right to data portability, including the obtention of personal data in a commonly used machine-readable format in certain circumstances, provided the processing is automated;
- The right to withdraw your consent to any processing for which you have previously given that consent.
You can request your rights by sending a written request to the designated email address for this purpose at rgpd@bostlan.com. To process your request, it will be necessary to verify the identity of the applicant and ensure that they are the owner of the data. Therefore, the communication must include your full name, specific request, and the address where you wish to receive the response. If necessary, we may request a copy of an identity document to verify your identity.
If you need to file a complaint or require protection of your rights, the supervisory authority is the Spanish Data Protection Agency, whose website is www.aepd.es, and whose address is Calle Jorge Juan 6, Madrid, with postal code 28001.