Personal Data Protection policy

PROCESSING OF PERSONAL DATA

At PRODUCT & PROCESS DEVELOPMENT, S.L., we are committed to protecting personal data and strictly complying with current data protection regulations in accordance with Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD), and Law 34/2002 on Information Society Services and E-commerce (LSSI-CE).

In this regard, the following information is provided regarding the processing of personal data carried out by PRODUCT & PROCESS DEVELOPMENT, S.L.:

Who is responsible for processing your personal data?

• Identity: PRODUCT & PROCESS DEVELOPMENT, S.L.
• Tax ID: B01386127
• Postal Address: Calle Leonardo Da Vinci, nº 14 – Edificio PIE Oficina 8A – 01510 Miñano (Álava)
• Phone: +34 945 29 69 81
• Email: administracion@grupoays.es
• Data Protection Officer (DPO): Sheila González – dpo@grupoays.es

Principles applicable to data processing:

Personal data processing is governed by the principles set out in Article 5 of the GDPR:

• Lawfulness, fairness, and transparency
• Purpose limitation
• Data minimization
• Accuracy
• Storage limitation
• Integrity and confidentiality
• Accountability

What purpose do we use your personal data for (website users and non-users)?

• Customer Data:
  • Management of contractual relationships
  • Provision of contracted services
  • Billing and administrative management
• Training Customers’ Data:
  • Management of registration, participation, and attendance at training actions
  • Issuance of certificates and academic and administrative management
• Commercial Communications:
  • Sending technical, operational, or commercial information related to our products or services

Legal Basis:

• Previous customers: Legitimate interest (art. 6.1.f GDPR and art. 21.2 LSSI-CE)
• Non-customers: Prior consent (art. 6.1.a GDPR)
  In any case, the interested party can object at any time to the sending of commercial communications.
• Supplier Data:
  • Management of contractual and administrative relationships
  • Compliance with legal obligations
• Employee Data:
  • Management of the employment relationship
  • Compliance with labor, Social Security, and occupational risk prevention obligations
• Candidate Data:
  • Management of recruitment processes
• Newsletter Subscription Data:
  • Management of subscription and sending newsletters
• Data collected via contact form or email:
  • Management and response to queries, complaints, suggestions, or information requests

What is the legal basis for processing your personal data?

• Execution of a contract (art. 6.1.b GDPR)
• Compliance with legal obligations (art. 6.1.c GDPR)
• Legitimate interest (art. 6.1.f GDPR)
• Consent of the interested party (art. 6.1.a GDPR)

How have we obtained your personal data?

The personal data processed comes directly from the interested parties or their legal representatives through forms, emails, contracts, or recruitment processes.

Who will receive your personal data?

Data may be communicated to:

• Competent public authorities (Tax Agency, Social Security, etc.)
• Financial institutions for the management of payments and collections
• Service providers acting as data processors, with whom corresponding contracts have been signed according to art. 28 GDPR

If service providers located outside the European Economic Area are used, PRODUCT & PROCESS DEVELOPMENT, S.L. will ensure that these transfers are carried out in accordance with Articles 44 and following of the GDPR, applying appropriate safeguards, such as adequacy decisions from the European Commission or the signing of Standard Contractual Clauses.

How long will we keep your personal data?

• Customers and suppliers: During the contractual relationship and, subsequently, during the legal prescription periods.
• Employees: During the employment relationship and subsequent legal periods.
• Candidates: Up to 2 years, unless previously revoked.
• Newsletter: Until the interested party withdraws their consent.
• Queries: For as long as necessary for their management and resolution.

What are your rights when you provide us with your personal data?

The interested party can exercise the following rights:

• Access
• Rectification
• Erasure
• Limitation of processing
• Objection
• Portability
• Not to be subject to automated decisions, including profiling

How can you exercise your data protection rights?

To exercise your rights, you can contact us:

• By email: dpo@grupoays.es
• By postal mail: Calle Leonardo Da Vinci, nº 14 – Edificio PIE Oficina 8A – 01510 Miñano (Álava)

Documentation for identity verification will only be requested when necessary, in accordance with the data minimization principle. PRODUCT & PROCESS DEVELOPMENT, S.L. will respond to all requests within the deadlines and conditions required by the current personal data protection regulations.

How to file a complaint with the Spanish Data Protection Agency (AEPD)?

If you believe that the processing does not comply with current regulations, you can file a complaint with the Spanish Data Protection Agency (AEPD) via its electronic headquarters or at its address at Calle Jorge Juan, nº 6, 28001 Madrid.
More information: www.aepd.es

Data Security

In accordance with Article 32 of the GDPR, PRODUCT & PROCESS DEVELOPMENT, S.L. has adopted appropriate technical and organizational measures to ensure a level of security appropriate to the risk.
In evaluating the adequacy of the security level, particular attention has been given to the risks presented by data processing, particularly due to the accidental or unlawful destruction, loss, alteration, or unauthorized access to personal data transmitted, stored, or otherwise processed.

Use of the website by minors

We ask users to read the website use policies for minors published in the “Legal Notice” section of our website.
The services offered are not directed to children under 14 years old. If data processing of minors is detected without authorization, it will be deleted.

Social Networks

PRODUCT & PROCESS DEVELOPMENT, S.L. has profiles on social networks. The processing of data from followers is governed by this policy and by the conditions of each social network.
No data will be extracted from the social network environment unless with express consent or request from the interested party.

Cookies

This website uses first-party and third-party cookies.
You can consult detailed information on their use, configuration, and acceptance in our Cookie Policy, in accordance with the AEPD’s current Cookie Guide.