Privacy policy

This Privacy Policy (hereinafter, the “PRIVACY POLICY”) governs, in general terms, the collection and processing by INTERAL, S.A. (hereinafter, “INTERAL”) of (i) the personal data you provide to us as a user of the website accessible through the domain name www.interal.es (hereinafter, the “WEBSITE”), including the services available at any given time through the WEBSITE; and (ii) other data collected through other duly identified collection systems described below. All of this is without prejudice to the specific provisions set out in certain sections, forms or services available on the WEBSITE in order to provide you with the relevant information and, where appropriate, obtain your consent.

INTERAL reserves the right to amend the PRIVACY POLICY to adapt it to legislative, case-law and/or administrative developments, as well as to the practices it carries out at any given time through the WEBSITE, always taking your rights and interests into account.

In any event, INTERAL will provide you with the appropriate technical resources so that you can access the PRIVACY POLICY, in order to duly comply with the information obligations incumbent upon us under the applicable data protection regulations.

1. Who is the Controller of your data?

For any matter relating to the PRIVACY POLICY and/or the processing of your personal data, you may contact us at the postal address indicated above and/or via the e-mail address rgpd@interal.es.

2. How did we obtain your data?

The data we process at INTERAL has been obtained from you, through (i) the various forms you complete while browsing the WEBSITE and/or through other channels (e.g. registration as a WEBSITE user –where available–, contact forms, forms relating to job offers and/or selection processes, etc.); (ii) by sending an e-mail enquiry; or (iii) through other duly identified collection systems, such as the video surveillance system installed at our facilities.

Where so indicated, providing the data requested in the forms available on the WEBSITE is mandatory, and failure to provide it will make it impossible to handle your request, whether this relates to your registration as a user, to obtaining information or to any other service available on the WEBSITE.

Should the personal data provided belong to a third party, you warrant that you have informed that third party of the PRIVACY POLICY and have obtained their authorisation to provide their data to INTERAL for the purposes set out below.

Additionally, we inform you of the possible processing of your social media data through the corporate profiles that INTERAL maintains on each social network on which it is present, all in accordance with the terms and conditions established by each social network.

3. What type of data do we process?

The data we process at INTERAL is the data you have provided to us while browsing the WEBSITE, through the relevant forms we use to formalise our contact with you and/or by e-mail, as well as any data we may obtain through INTERAL's corporate profiles on the social networks on which we are present.

In particular, at INTERAL we process the following categories of data:

• Identification and contact data (e.g. name, surname, ID number, postal and e-mail address, telephone, etc.).
• Professional data (the company in which you perform your duties, position and duties, professional postal and e-mail address, and professional telephone number) to the extent that (i) you provide it through the relevant forms; and (ii) it is necessary for your business identification and/or to maintain our commercial relationship with you or your organisation.
• Identification codes and keys as a registered WEBSITE user.
• Internet browsing data (e.g. IP address, visits to web pages, Wi-Fi connections, etc.).
• Data on personal characteristics, education, employment, etc. (in the case of job applications/offers and/or INTERAL selection processes in which you take part voluntarily).
• Images captured by the video surveillance system installed at the entrances to and inside our facilities.

4. For what purpose and on what legal basis do we process your data?

The processing of your personal data pursues the following purposes:

• To manage and process your registration as a WEBSITE user, where available, on the basis of your request for pre-contractual measures or of the contractual relationship established with you in this regard.
• To manage your access to and use of the content and services that INTERAL makes available through the WEBSITE, including blog and social media services or any other functionalities accessible from the WEBSITE at any given time, all on the basis of your request for pre-contractual measures or of the contractual relationship established with you in this regard.
• To handle and manage the information provided through the whistleblowing channel accessible via the WEBSITE and, where appropriate, to investigate the reported facts, all on the basis of compliance with the legal obligations incumbent upon INTERAL (Law 2/2023, of 20 February, governing the protection of persons who report regulatory breaches and the fight against corruption).
• To process and manage the requests for information, suggestions, complaints or claims you submit through the WEBSITE or by e-mail, all on the basis of your consent.
• To send you, by various means including electronic ones, commercial and advertising communications from INTERAL and from other companies in the business group to which INTERAL belongs, regarding products, services, offers, promotions and any other relevant information concerning such entities, provided that you have consented and on the basis of that consent.
• To manage your job application or your registration for a job offer and your participation in the corresponding selection process, all on the basis of your request for pre-contractual measures.
• To ensure the safety and integrity of persons and property by capturing images through the video surveillance system installed at the entrances to and inside our facilities, all on the basis of public interest (safety of persons and property).

Where the processing of your data is based on your consent, you may withdraw it at any time, freely and free of charge, in the terms set out in Section 7 below.

5. To whom do we disclose your data?

Except in cases where INTERAL is required to do so by law (e.g. Tax Authorities, the Administration of Justice or other Public Authorities), your data will not be disclosed to third parties.

No international transfers of your data are envisaged.

6. How long will we keep your data?

As a general rule, personal data will be kept for as long as it remains necessary for the purpose for which it was collected and until you withdraw your consent to the processing or request its erasure at an earlier time, as well as for the additional period necessary to comply with the legal obligations that INTERAL must observe.

In any event, we inform you that INTERAL has established internal data-cleansing policies designed to control the retention periods of the personal data it holds, so that such data may be deleted when it is no longer necessary and/or appropriate for the purpose for which it was collected.

In particular, please note the following:

• With regard to the video surveillance system installed at our facilities, the images captured will be deleted within a maximum period of one month.
• For the management of job applications, your data will be kept for a maximum period of 2 years.
• For handling and managing the information provided through the whistleblowing channel accessible via the WEBSITE, your data will be kept for a maximum period of 3 months, without prejudice to its retention for the relevant investigation, should one need to be initiated, which will be governed by the specific privacy policy available on that whistleblowing channel.

7. What are your rights?

The applicable data protection regulations grant you a series of rights relating to your personal data that you may exercise during its processing. These rights are set out below:

• Access to your data: you have the right to access your data to find out which personal data concerning you we are processing.
• Request the rectification or erasure of your data: in certain circumstances, you have the right to rectify inaccurate personal data concerning you that we process or even to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• Request the restriction of the processing of your data: in certain circumstances, you have the right to request the restriction of the processing of your data, in which case we will only keep it for the exercise or defence of claims, as provided for in the applicable data protection regulations.
• Data portability: in certain circumstances, you have the right to receive the personal data concerning you that you have provided to us, in a structured, commonly used and machine-readable format, and to transmit it to another controller.
• Object to the processing of your data: in certain circumstances and for reasons relating to your particular situation, you have the right to object to the processing of your data, in which case we would stop processing it unless, for compelling legitimate grounds, or for the exercise or defence of possible claims, it must be kept.

You also have the right to withdraw your consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to its withdrawal.

You may exercise these rights by written request addressed to INTERAL at the postal address indicated in Section 1, or by sending an e-mail to rgpd@interal.es.

Finally, please note that you may lodge a complaint with the competent Supervisory Authority (in INTERAL's case, the Spanish Data Protection Agency), especially where you have not obtained satisfaction in the exercise of your rights. You can contact that Authority through its website: www.aepd.es.

8. Security measures

INTERAL will process your data at all times in a strictly confidential manner and observing the requisite duty of secrecy, in accordance with the applicable data protection regulations, adopting for this purpose the technical and organisational measures necessary to guarantee the security of your data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the data stored and the risks to which it is exposed.

9. Cookie policy

Additionally, we inform you that INTERAL has established a Cookie Policy which is accessible at the following link.

← Back to home