PROCESSING OF PERSONAL DATA THROUGH THE WEBSITE

In compliance with the provisions of applicable Data Protection regulations, we inform you that the data that will be processed as Controller by ISMAEL ANDRÉS, S.A. are intended to provide you with the service you request through our contact form. To this end, you must check the box provided to indicate your acceptance of this policy; if you do not do so, we will not have your express consent and will be unable to respond to your request.

For the proper provision of the services offered by ISMAEL ANDRÉS, S.A., it is necessary that you answer every question appearing in the forms on our website. You also declare that you are of legal age.

The processing of the personal data requested will also serve to send you commercial information about products and services currently and in the future offered by ISMAEL ANDRÉS, S.A. Such information includes advertising and promotional communications via postal mail, fax, e-mail or any other means you provide and for which you give us your consent. To carry out this processing, you must check the corresponding box in the form on the website.

If you include your data in our job application form, we inform you that the processing of such data by ISMAEL ANDRÉS, S.A. has the purpose of collecting and evaluating your candidature should any vacancy matching your profile arise in the future. You undertake to keep your résumé up to date; therefore, if no express written communication of an update is sent, we will understand that it remains current. Your CV will be retained for a maximum period of two years. The legal basis for processing your résumé is your request to apply pre-contractual measures.

Given the personal nature of the data provided, ISMAEL ANDRÉS, S.A. undertakes to treat it with strict confidentiality and to maintain the required secrecy. To this end, the company has implemented appropriate security measures in accordance with the risk analysis performed.

We inform you that your data will not be transferred to third parties nor subject to international transfers, except in cases of legal obligation, necessary transfer for the performance of the contract, or with your express consent.

RIGHTS

The data collected and processed will be retained for a limited period of time—namely, as long as necessary to comply with the legal obligations imposed on ISMAEL ANDRÉS, S.A. by applicable regulations.

As data subject, you may exercise at any time the following rights at the address indicated in the Legal Notice:

• Right of access: you may request confirmation from the Controller as to whether your personal data is being processed and, if so, request access to those data.
• Right of rectification: you may request the correction of your personal data if it is inaccurate.
• Right of erasure: you may request the deletion of your personal data.
• Right of objection: you may object to the processing of your personal data.
• Right to restriction of processing: you may request that processing of your personal data be temporarily suspended under certain circumstances.
• Right to data portability: you may request the transfer of your automated personal data in a structured, commonly used and machine-readable format.

More information about your rights is available at www.agpd.es.

You also have the right to lodge a complaint with the Spanish Data Protection Agency.

COOKIES

This website installs only technical cookies on users’ devices when browsing. Such cookies enable you to navigate through the website, platform or application and to use the various options or services available, including:

• Controlling traffic and data communication
• Identifying your session and accessing restricted-access areas
• Remembering the items in your order and completing the purchase process
• Managing payment and controlling fraud related to service security
• Requesting registration or participation in an event
• Counting visits for software license billing purposes
• Using security elements during navigation
• Storing content for video or audio playback
• Enabling dynamic content (e.g. loading animations)
• Sharing content via social networks

By their technical nature, cookies that enable the most efficient management of advertising spaces—embedded as part of the design or “layout” of the service based on criteria such as edited content—also fall into this category, provided that they do not collect information for purposes other than the personalization of those advertising elements.

Technical cookies are exempt from the consent requirement under article 22.2 of the LSSI when they permit the provision of the requested service. However, if they are used for non-exempt purposes (for example, behavioural advertising), they will be subject to the same obligations.

COMPLETE INFORMATION ON THE PROCESSING OF PERSONAL DATA

DATA CONTROLLER
Who is responsible for processing your data?

• Identity: ISMAEL ANDRÉS, S.A.
• Postal Address: Polígono Industrial de Cantabria, calle Las Cañas, número 105 – 26.006, Logroño
• Email: iasa@ismaelandres.com

PURPOSE OF PROCESSING
For what purposes do we process your personal data?
At ISMAEL ANDRÉS, S.A. we process the information you provide for the following purposes:

1. Management and administration of the contractual relationship with suppliers, clients and employees.
2. Providing you with commercial information about products and services that may be of interest.
3. Responding to your inquiries via the website.
4. Evaluating your candidature for future job vacancies when you submit your CV.
5. Ensuring compliance with occupational risk prevention regulations for subcontractor employees.
6. Controlling kilometers traveled, vehicle speed, and drivers’ activity and rest times for tachograph data.
7. Managing reports of serious or very serious criminal or administrative infringements submitted under legally regulated whistle-blowing procedures.

How long will we retain your data?
Your personal data will be kept:
a) While the commercial relationship is maintained.
b) Unless you request its deletion.
c) For any period required by law for specific information.

LEGAL BASIS FOR PROCESSING
What is the legal basis for processing your data?

• Performance of the contract, when you are an employee, client or supplier.
• Compliance with occupational risk prevention laws for subcontractor employees.
• Your consent when you make inquiries via our contact form.
• Your request for pre-contractual measures when you submit your CV.
• Our legitimate interest in sending advertising to clients.
• Compliance with legal obligations (Regulation EC 165/2014 on tachograph data).
• Compliance with legal obligations (Law 2/2023, of February 20, on whistle-blower protection).

RECIPIENTS OF THE PROVIDED DATA
To which recipients will your data be communicated?
a) By legal requirement to:

• Social Security bodies (employees)
• Public registries
• Tax authorities (employees, suppliers, clients)
• Other public administration bodies (employees, suppliers, clients)
• Insurance companies (employees)
  b) By contractual requirement to:
• Organizations/persons related to the Controller
• Banks, savings banks and rural credit cooperatives

DATA SUBJECTS’ RIGHTS
What are your rights?
Any person has the right to obtain confirmation as to whether ISMAEL ANDRÉS, S.A. is processing personal data concerning them, and if so, to access that data. You also have rights to rectify, erase, object to, restrict processing of, and port your personal data as detailed above.

How can these rights be exercised?
Submit a written request to:
ISMAEL ANDRÉS, S.A.
Calle Las Cañas, número 105 – 26.006, Logroño

What complaint options are available?
If you consider that your rights have not been duly upheld, you may lodge a complaint with the Spanish Data Protection Agency at:
C/ Jorge Juan, 6, 28001 – Madrid.