| Record of processing activities

Data controller: Comercial Edizar, S.A.

DATA CONTROLLERComercial Edizar, S.A.
CIFA-50.064.131
ADDRESSPolígono Industrial El Borao, Ctra. Barcelona 341, 500, Parcela 16-17, CP 50.172, Alfajarín, Zaragoza.
TELF. FAX976 13 80 97
EMAILinfo@converzar.com

Datos del DPD: Juan Carlos Ibáñez Praderas

DATA PROTECTION OFFICERJuan Carlos Ibáñez Praderas
CUALIFICACIONABOGADO COL. Nº 5342 DEL R.e.I.C.A.Z.
DIRECTION

C/ Doctor Cerrada, nº 3, 4º G, CP 50005,

Zaragoza

TELF.976 96 40 06
EMAILjcibanez@reicaz.com

 

Processing: CUSTOMERS AND SUPPLIERS
Purpose of processing: Management of the commercial relationship with the company’s customers and suppliers. Resolution of questions and queries through the contact forms and chats available on our pages.
Intended uses:
Customer management, accounting, tax, and administrative purposes.
Advertising and commercial prospecting.
Answering queries through the web form.
Description of the categories of data subjects and categories of personal data:
Data subjects: customers and users; suppliers and contact persons; Information requesters
Categories of personal data:
Identification data: NIF/DNI, name and surname, address, telephone number, email address
Data on social circumstances
Commercial information data
Economic, financial, and insurance data
Data on transactions of goods and services
Employment details
Contact information: email and telephone number for contact between companies
Categories of recipients to whom the personal data has been or will be communicated:
Organizations or individuals directly related to the controller
Tax Administration
Banks, savings banks, and rural savings banks
Public authorities with jurisdiction over the matter
Data transfers to a third country or an international organization: no
Periods for deleting the different categories of data (if possible): as long as the relationship with the company is maintained or for the period required to comply with the law. For information requesters, the period required to respond to the query raised.
General description of technical and organizational security measures (if possible): Those contained in the Technical and Organizational Measures Manual delivered to qualified users of the Controller (administration).

 

Processing: HUMAN RESOURCES
Purpose of processing: Socio-labor management of the workforce as well as any selection processes that may occur in our company.
Intended uses:
Customer, accounting, tax, and administrative management
Human resources
Payroll management
Occupational risk prevention
Description of the categories of data subjects and categories of personal data:
Data subjects: Employees and candidates for employment at the Company.
Categories of personal data:
Health-related data (if applicable, processed in accordance with Article 9 of the GDPR).
Identification data: NIF/DNI, Social Security Number/Mutual Insurance Company Number; name and surname; address; telephone number, email address, signature; image/voice, fingerprint.
Social circumstances data
Academic and professional data
Employment details
Economic, financial, and insurance data
Categories of recipients to whom the personal data has been or will be disclosed:
Organizations or individuals directly related to the data controller
Publication of employees’ images on company websites with their consent
Tax authorities
Social security agencies
Other public administration bodies (Inaem)
Banks, savings banks, and rural savings banks
Insurance companies
Periods for deleting the different categories of data (if possible): Those provided for by tax and labor legislation regarding the statute of limitations for employees’ liabilities once they have left their position; and from the moment they exercise their right of cancellation for candidates or once the selection processes have been completed, and in any case, no later than one year from the moment they were General description of the technical and organizational security measures (if possible): Those contained in the Manual of technical and organizational measures delivered to qualified users of the Controller (administration).