Privacy policy
At CITRICO GLOBAL we care about privacy and transparency.
Pursuant to the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, the "GDPR"), and to Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we hereby inform you in detail of the processing of personal data that we carry out, as well as all the information relating thereto.
Who is responsible for the processing of your data?
CITRICO GLOBAL, S.L.
B66773607.
C/ MANUEL VIVANCO, Nº12 - 12550 - ALMAZORA - CASTELLÓN.
gdpr@citricoglobal.com
For what purposes do we process your personal data?
CITRICO GLOBAL processes the information provided by interested parties for the following purposes:
Contacts and potential customersTo manage potential customers who have expressed an interest in our products, as well as other commercial contacts and, where appropriate, to send commercial communications, including by electronic means.
Job applicantsThe aim is to manage the Curriculum Vitae received and to carry out the personnel selection processes, interviews and other procedures necessary for the search for the best possible candidate for a specific job position.
Clientsadministrative, accounting and fiscal management of the products ordered.
SuppliersFiscal, accounting and administrative management of suppliers, as well as professional contact details.
Visitors to the facilities: registering and managing visits to the manager's facilities.
Video surveillanceto ensure the security of persons, property and installations, using video surveillance systems.
If you do not provide your personal data, we will not be able to fulfil the functionalities described above.
No automated decisions will be made on the basis of the data provided.
How did we obtain your data?
The personal data that we process at CITRICO GLOBAL comes from the interested party or their legal representative. The categories of data processed are:
Contacts and potential clients: Identification data; Postal and e-mail addresses; Commercial information.
Job applicantsIdentifying information; Postal and e-mail addresses.
ClientsIdentification data; Postal and e-mail addresses; Commercial information; Financial data.
SuppliersIdentification data; Postal and e-mail addresses; Commercial information; Financial data.
Visitors to the facilitiesIdentification data; Commercial information.
Video surveillanceIdentifying data.
How long will we keep your data?
The data will be retained for:
Contacts and potential customersindefinite, as long as the data subject does not request its deletion.
Job applicantstwo years, since the last interaction
Clientsas long as the data subject does not request its deletion and, where appropriate, for the years necessary to comply with legal obligations.
Suppliersfor as long as the data subject does not request its deletion and, where appropriate, for the years necessary to comply with legal obligations.
Visitors to the facilitiesfor four years or until the person concerned requests its deletion.
Video surveillance30 days maximum, except in the case of notification to the Security Forces and/or the Courts and Tribunals.
What is the legitimacy for the processing of your data?
We indicate the legal basis for the processing of your data:
Contacts and potential contacts:
Execution of a contract: Management of potential customers who have expressed an interest in our products (art. 6.1.b GDPR).
Consent of the data subject: Sending commercial communications, including by electronic means (art. 6.1.a RGPD; art. 21 LSSICE).
Legitimate interest of the Controller: Management of professional contact data (art. 19 LOPDGDD; art. 6.1.f RGPD).
Job applicants:
Execution of a contract or pre-contractual measures: Management of the Curriculum Vitae submitted by the candidate in order to carry out personnel selection processes for the search for the best possible candidate for a specific job (art. 6.1.b RGPD).
Clients:
Execution of a contract: Fiscal, administrative and accounting management of clients (art. 6.1.b RGPD).
Legitimate interest of the controller: Sending commercial communications, including by electronic means (Recital 47 RGPD; art. 21.2 LISSICE).
Suppliers:
Execution of a contract: Fiscal, administrative and accounting management of the contracted services (art. 6.1.b RGPD).
Legitimate interest of the data controller: Management of professional contact data (art. 6.1.f RGPD; art.19 LOPDGDD).
Visitors to the facilities:
Legitimate interest of the Data Controller: Control of entries and exits to the premises of the data controller for security reasons and traceability of visits (art. 6.1.f RGPD).
Video surveillance:
Mission in the Public Interest: Processing necessary for compliance with an obligation carried out in the public interest or in the exercise of public powers vested in the controller (art. 6.1.e RGPD), as stated in the "Guide on the use of video cameras for security and other purposes", published by the Spanish Data Protection Agency.
To which recipients will your data be communicated?
The data will be communicated to the following recipients:
Contacts and potential clients:
according to demand, to the rest of the Organisations that make up the business group.
Job applicants:
all the Organisations that make up the business group, in order to participate in the different selection processes offered by all the companies in the group.
Clients:
All the organisations that make up the group of companies, with the aim of optimising our offers and products.
Tax Administration, in order to comply with legal obligations.
Financial institutions, in order to carry out the corresponding economic transactions.
Suppliers:
All the organisations that make up the business group, with the aim of optimising resources.
Tax Administration, in order to comply with legal obligations.
Financial institutions, in order to make the corresponding payments.
Visitors to the facilities: No data will be passed on to third parties, unless legally obliged to do so.
Video surveillance:
Where appropriate, to the State Security Forces and Corps, as well as to the Courts and Tribunals, in order to provide the images, in the event of a crime being committed.
Transfers of data to third countries
There are no plans to transfer data to third countries.
What are your rights when you provide us with your data?
Any person has the right to obtain confirmation as to whether or not CITRICO GLOBAL is processing personal data concerning them.
Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. You also have the right to the portability of your data.
In certain circumstances, data subjects may request that we restrict the processing of their data, in which case we will only retain the data for the purpose of exercising or defending claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, CITRICO GLOBAL will stop processing the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.
You may exercise your rights in the following ways: by contacting gdpr@citricoglobal.com.
Where commercial communications are sent using as a legal basis the legitimate interest of the controller, the data subject may object to the processing of his or her data for that purpose.
If you have given your consent for a specific purpose, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on your consent prior to its withdrawal.
In case you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can lodge a complaint with the competent Data Protection Supervisory Authority via its website: www.aepd.es.
