This Privacy Policy aims to help you understand what data we collect and for what purpose we process it, as well as our efforts to protect it under appropriate safeguards and in compliance with current regulations.
The personal data you provide through this website located at the URL https://www.p4q.com/ will be processed as described in detail below:
Who is responsible for processing your data?
In accordance with Law 34/2002 on Information Society Services and Electronic Commerce (hereinafter, LSSI), Regulation (EU) 2016/679 General Data Protection Regulation (hereinafter, GDPR), and Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights (hereinafter, LOPDgdd), we inform you that the personal data provided by filling out and submitting the forms published on the website will be incorporated into the files that form the record of activities of the company P4Q Electronics S.L. (hereinafter, P4Q), with N.I.F. B-95019212 and registered office at c/Nuestra Señora de la Guía 19, 48810, Alonsotegi.
What personal data do we process?
P4Q will process the following categories of User data:
- Identifying data: name and surname.
- Personal or professional contact details: postal address, email address, phone number.
- Academic data: if you participate in selection processes.
- Other data: data provided by the data subjects themselves for fostering business relationships and mutual interest.
For what purposes and legal basis do we process your data?
- Management of contact requests and information received via email and/or web form. The purpose of the processing is to manage requests received through the website and/or contact email. Legal basis: consent of the data subject (art. 6.1 a) GDPR). · Management of recruitment processes. The purpose is to manage recruitment processes at P4Q. Legal basis: application of pre-contractual measures at the request of the data subject (art. 6.1 b) GDPR).
- Management of relationships with our clients. P4Q will process the personal data of professional contacts belonging to corporate clients to manage the contractual relationship binding the parties. Legal basis: legitimate interest (art. 6.1 f) GDPR) in relation to art. 19 of Organic Law 3/2018, on Personal Data Protection and the guarantee of digital rights. In the case of individual clients, processing is legitimized by the execution of a contract between the parties (art. 6.1 b) GDPR).
- Management of relationships with our suppliers. P4Q will process the personal data of professional contacts belonging to corporate suppliers to manage the contractual relationship binding the parties. Legal basis: legitimate interest (art. 6.1 f) GDPR) in relation to art. 19 of Organic Law 3/2018. For individual suppliers, the processing is legitimized by the execution of a contract between the parties (art. 6.1 b) GDPR).
- Potential clients and commercial communications. P4Q may process identifying and contact data to maintain any type of relationship and to inform you about its products and services at your request or with your consent. Legal basis: legitimate interest (art. 6.1 f) GDPR) in relation to art. 19 of Organic Law 3/2018, in the case of professional contacts belonging to corporate entities. For individual potential clients, processing is legitimized by their express consent (art. 6.1 a) GDPR).
- Exercise of rights and privacy management. P4Q may process your data to manage your data protection rights requests or for purposes necessary to comply with legal requirements. Legal basis: compliance with a legal obligation (art. 6.1 c) GDPR).
- Whistleblowing channel. The purpose of the processing is to manage communications received through our whistleblowing channel regarding potential irregularities committed by P4Q personnel. Legal basis: compliance with a legal obligation (art. 6.1 c) GDPR).
- Video surveillance. P4Q has video surveillance cameras at its facilities to ensure the safety of individuals, property, and facilities. Legal basis: legitimate interest (art. 6.1 f) GDPR).
Who will your personal data be communicated to?
P4Q will only communicate personal data to: · Those third parties, public agencies, and institutions of the State Administration, regional and local administrations, including judicial bodies to which it is legally obliged to provide them. · Service providers contractually linked to P4Q as data processors who will process your data strictly following privacy instructions and with the necessary guarantees for processing purposes. · Other entities within the P4Q GROUP when strictly necessary for the requested purpose and/or for the execution of administrative activities within the corporate group.
How long will we retain your data?
The retention period depends on the purpose for which we process your data:
· Management of contact requests and information. If you contact P4Q to request information, your data will be retained for two years from the last communication made by the user, with this period being renewed with each new contact or interaction by the user.
· Processing of commercial communications. If you are not a client of P4Q, your data will be processed for this purpose until you withdraw your consent or object to receiving commercial communications. If you are a client, your data will continue to be retained to manage our contractual relationship, but you will not receive commercial communications once you object to such sending.
· Management of relationships with clients and suppliers. Personal data of clients and suppliers will be retained as long as the contractual relationship remains in force and, subsequently, until potential legal liabilities expire, duly blocked.
· Recruitment processes. Curriculum data and any other information provided for participation in recruitment processes will be retained during the selection process. If P4Q considers that your resume may be of interest for future selection processes, the candidate’s consent will be requested to retain the resume for 2 years from receipt.
· Exercise of rights and privacy management. If you have exercised your data protection rights or we need to process your data to comply with legal obligations, your data will be retained for the necessary time to fulfill our obligations and, subsequently, until potential legal actions expire, duly blocked.
· Whistleblowing channel. Personal data contained in communications received through our whistleblowing channel will be processed for the strictly necessary time. Personal data deemed unnecessary will be deleted immediately. Necessary personal data for investigations will be retained during the investigation and until potential legal actions expire, duly blocked.
· Video surveillance. Personal data captured by surveillance cameras are retained for a period of one month from capture. However, they may be retained for longer periods if needed to document acts that infringe on the integrity of people, property, or facilities.
What security measures will be applied to your personal data?
P4Q has implemented the necessary technical and organizational security measures to ensure an adequate level of security, taking into account the state of the art, the cost of implementation, and the nature, scope, context, and purposes of processing, as well as the varying likelihood and severity of risks to the rights and freedoms of natural persons, in compliance with art. 32 of Regulation (EU) 2016/679 General Data Protection Regulation. Specifically, P4Q Electronics SL has relied on compliance with the requirements of the ISO/IEC 27001:2013 Information Security Management Systems Standard.
How can you exercise your rights regarding your personal data?
To revoke the consent given and to exercise the rights of access, rectification, deletion, objection, restriction, and portability, as well as the right not to be subject to automated individual decision-making, you may submit a written request to the postal address at c/Nuestra Señora de la Guía 19, 48810, Alonsotegi, or via email to rgpd@p4q.com. If the data subject believes that these rights have not been attended to in accordance with current legislation, they may file the corresponding rights protection claim with the Spanish Data Protection Agency.