DATA CONTROLLER

The Data Controller is COMERCIAL DEL SUR SA, Av. Fernández Murube 12B, 41007, Seville (SEVILLE).

Privacy Principles

At COMERCIAL DEL SUR SA, we are committed to continuously working to ensure the privacy of your personal data and to provide you with the most comprehensive and clear information possible at all times. We encourage you to read this section carefully before providing us with your personal data.
If you are under fourteen years old, please do not provide us with your data without parental consent.
In this section, we inform you about how we process the data of people who have a relationship with our organization. Starting with our principles:
– We do not request personal information unless it is necessary to provide the services you require.
– We never share personal information with anyone, except to comply with the law or with your explicit authorization.
– We will never use your personal data for purposes other than those expressed in this privacy policy.
– Your data will always be treated with an appropriate level of protection in accordance with data protection legislation, and we will not subject them to automated decisions.

We have drafted this privacy policy considering the requirements of the current data protection legislation:
– Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR).
– Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPD).
– Royal Decree 1720/2007, of 21 December (RLOPD).

This privacy policy is drafted as of 6 December 2018.
Due to changes in treatment criteria, to facilitate its understanding or to adapt it to current legislation, we may modify this privacy policy. We will update the date of the policy so you can check its validity.

Data Processing We Conduct

CONTACT PROCESSING
Purpose: To address your requests, inquiries, or queries received via the website, email, or phone. To respond to your request and follow up afterward.
Legal Basis: Consent of the data subject.
Recipients: Data will not be disclosed to third parties.
Retention Period: We will retain your data for as long as necessary to fulfill the purpose for which it was collected and to determine any potential responsibilities arising from that purpose and the processing of the data.

CLIENT PROCESSING
Purpose: To manage relationships with clients, billing, and collection. To send offers of products/services similar or complementary to those you have purchased from us.
Legal Basis: Contractual relationship and legitimate interest.
Recipients: Your data will be communicated to competent public administrations in the cases provided by current legislation, and for the purposes established by said legislation. We will only disclose them to third parties if it is essential for the provision of the service.
Retention Period: We will retain your data for an indefinite period once the legally required period has ended, or until you request their deletion.

MARKETING PROCESSING
Purpose: To provide you with information about products and services that we believe may be of interest to you. In each commercial communication, you will have the opportunity to object to this processing by unsubscribing.
Legal Basis: Consent of the data subject.
Recipients: Data will not be disclosed to third parties.
Retention Period: We will retain your data for an indefinite period. We will delete them if you request it, or if after a certain number of emails, you do not take any action.

HR PROCESSING
Purpose: To evaluate the CV you provide us to consider you in the personnel selection processes that we may conduct.
Legal Basis: Consent of the data subject.
Recipients: Data will not be disclosed to third parties.
Retention Period: We will retain your data for no more than 5 years.

VIDEO SURVEILLANCE PROCESSING
Purpose: Video surveillance of the facilities and labor control.
Legal Basis: Legitimate interest of the Data Controller.
Recipients: The images may be communicated to the Security Forces, Judicial Authorities, and the Public Prosecutor’s Office.
Retention Period: We will retain your data for no more than 1 month.

Your Rights

You have the right to request a copy of your personal data, to rectify inaccurate data or complete them if they are incomplete, or, if necessary, to delete them when they are no longer needed for the purposes for which they were collected.
You also have the right to restrict the processing of your personal data and to obtain your personal data in a structured, readable format.

You can object to the processing of your personal data in some circumstances (in particular, when we do not need to process them to comply with a contractual or other legal requirement, or when the purpose of the processing is direct marketing).

When you have given us your consent, you can withdraw it at any time. At that point, we will stop processing your data, or, if applicable, stop doing so for that specific purpose. If you decide to withdraw your consent, this will not affect any processing that took place while your consent was in effect.

These rights may be limited; for example, if to fulfill your request we had to disclose data about another person, or if you request that we delete some records that we are obligated to maintain due to a legal obligation or legitimate interest, such as the exercise of defense against claims. Or even in cases where the right to freedom of expression and information must prevail.

You can contact us by any of the means indicated in the Data Controller section of this privacy policy, providing a copy of a document that proves your identity (usually the ID).

Another of your rights is not to be subject to a decision based solely on automated processing, including profiling that produces legal effects or affects you.

In the event of any violation of your rights, such as if we have not addressed your request, you have the right to file a complaint with the Supervisory Authority for data protection. This can be the authority of your country (if you live outside of Spain) or the Spanish Data Protection Agency (if you live in Spain).

Additional Information

Processing of your data outside the European Economic Area.
We do not use resources from companies that are part of the Privacy Shield.

Links to third-party websites.
Our website may, on occasion, contain links to other websites. It is your responsibility to ensure you read the data protection policy and legal terms that apply to each site.

Third-party data.
If you provide us with third-party data, you assume the responsibility of informing them beforehand as established in Article 14 of the GDPR.