Legal Notice
1. Data Controller
- Owner: Tecnologías Plexus, S.L. (hereinafter, “PLEXUS”)
- VAT number: B15726177
- Registered address: José Villar Granjel 22-24. Boisaca Industrial Park, Santiago de Compostela.
- Email: rgpd@plexus.es
2. Information and Consent
By accepting this Privacy Policy, the user is informed and freely and unambiguously consents to the processing of personal data provided through the website (Project management software) by PLEXUS.
3. Obligation to Provide Data
All personal data requested through the website or any other medium is mandatory (unless otherwise specified in the required field) in order to fulfil the stated purposes. Registration on the Website will not be possible if complete data is not provided, without prejudice to the user’s ability to freely browse the Website’s content.
By entering data on the Website, the user guarantees that they are over fourteen (14) years of age and that the data provided is true, accurate, complete and up to date, and undertakes to notify PLEXUS of any changes to the data provided.
4. What is the Purpose of Processing Your Data by Plexus?
The personal data provided by the user will be processed for the following purposes:
- To complete the user’s registration and grant access to the products and services we may offer.
- To include curriculum-related data in the company’s database (“candidates”) for use in future selection processes related to job offers published by the company through its various available channels.
5. What is the Legal Basis for Processing?
The processing of the user’s data is based on the express consent requested from them, which they accept and may withdraw at any time.
The consent obtained for each purpose is independent, so the user may revoke only one of them without affecting the others.
The legal basis for processing your personal data may also derive from the concept of legitimate interest that the company may have, based on the regulations established in the applicable legislation.
The legal bases, in accordance with Article 6 of the GDPR, for the processing of your personal data are as follows:
Consent of the data subject (you) (Art. 6.1.a GDPR): For the processing of your personal data in the collection of data to complete the user’s registration and grant access to the products and services of the platform, and for the inclusion of your curriculum-related data for use in future selection processes related to job offers published by the company through its various available channels.
Compliance with a legal obligation (Art. 6.1.c GDPR): Some processing of your personal data may be carried out in compliance with applicable legal obligations that apply to SM2 SOFTWARE & SERVICES MANAGEMENT, S.A. When this occurs, you will be informed of the details of the processing, as well as the regulation that requires the specific processing.
Legitimate interest of SM2 SOFTWARE & SERVICES MANAGEMENT, S.A. (Art. 6.1.f GDPR): SM2 SOFTWARE & SERVICES MANAGEMENT, S.A. may have a legitimate interest in processing your data to analyse the usability of the website and your level of satisfaction, as this may be beneficial to you.
6. What is the Retention Period for Users’ Personal Data?
Personal data will be retained for as long as the relationship with the user is maintained, or until they exercise their right to object and/or request erasure. Once the relationship has ended or the aforementioned rights have been exercised, the data will be blocked for the entire period required by applicable legislation and until any liabilities arising from the processing have expired.
7. What User Data May Plexus Process?
PLEXUS will process the following categories of user data:
- Data provided by the user themselves:
- Identification data: first name, surname and national ID number.
- Contact data: email address.
- Data obtained from sources other than the user, such as publicly accessible sources.
- Data provided by third-party companies for the management of a candidate’s curriculum.
- Data derived from the development of the relationship: data provided indirectly by the user as a result of browsing the website, accessing the private area, or any other similar activity that allows its collection.
In cases where the user provides PLEXUS with third-party data, they declare that they have informed and obtained prior consent from that person for their personal data to be processed by PLEXUS. Should PLEXUS be held liable for unauthorised processing, it reserves the right to pass on any resulting penalties to the user who provided the data without the prior consent of the data subject.
8. Who Are the Recipients of the User’s Data?
PLEXUS may transfer the user’s personal data to companies that form part of its corporate group. These companies are:
- TECNOLOGIAS PLEXUS, S.L. B15726177
- AGMINA MULTIMEDIA, S.L. B15793409
- BRETEMA CONSULTING, S.L. B36458495
- PLEXUS AMERICA, S.L. B70071154
- PLEXUS SEGURIDAD, S.L. B70201330
- PLEXUS SERVICIOS GENERALES, S.L. B70071162
- PLEXUS TECNOLOGIAS DE LA INFORMACION Y LA B70244991
- REGO TORRES, S.L. B15939051
- INTRYO SERVICIOS DE SOFTWARE, S.L. B06611925
- SM2 SOFTWARE & SERVICES MANAGEMENT, S.A. A0723081
- EVOLTIA, S.L. B83887182
- HUMAN COMPUTER DEVELOPMENT, S.L. B83136200
- BRUCKE ASESORES, S.L., B84276781
- NOMASYSTEMS, S.L B15955503
- SOFT FOR YOU S.L, VAT NUMBER B60179108
- ITECHGRUP INNOVACIÓN EN TECNOLOGÍAS DE LA INFORMACIÓN SL. B64855893
Except as stated above, PLEXUS will not carry out any transfer of data that does not have a legal basis to justify it or that is not otherwise legitimised. Therefore, your data will be processed solely by PLEXUS or the companies within its corporate group, within their own scope of activity and across the various channels (digital and/or analogue) through which they operate.
Notwithstanding the above, PLEXUS may engage cloud storage services with entities whose servers are located outside the European Economic Area. However, PLEXUS will ensure that such providers guarantee adequate measures to maintain a comparable level of protection in accordance with applicable data protection regulations.
The ChatBot service is provided by Smartsupp.com, s.r.o., Company reg. no.: 03668681, VAT ID: CZ03668681, Lidická 20, Brno, 602 00, Czech Republic. Further information about this service is available on the Privacy page.
9. What Are Your Rights?
Data Protection regulations grant you a series of rights in relation to the processing of data involved in our services, which you may exercise by attaching a copy of your national ID to your request. These rights are as follows:
- Right of access: To know what type of data we are processing and the characteristics of the processing being carried out.
- Right to rectification: You may modify your data if it is inaccurate or untrue.
- Right to data portability: To obtain an interoperable copy of the data being processed.
- Right to restriction of processing: Where you have given consent for the processing of your data in relation to different matters, you may proceed to restrict such processing.
- Right to erasure: To request the deletion of your data when processing is no longer necessary.
- Right to object: To request that the sending of the aforementioned commercial communications cease.
- Right to withdraw consent previously given.
- Right to lodge a complaint with the supervisory authority (in Spain, the Spanish Data Protection Agency – AEPD).
You may exercise your rights by post at Rúa José Villar Granjel 22-24, Boisaca Industrial Park (Santiago de Compostela), or by email to the company’s Data Protection Officer at rgpd@plexus.es, indicating the right you wish to exercise and enclosing a copy of your national ID.
10. What Security Measures Does Plexus Apply?
PLEXUS will process the user’s data at all times in a strictly confidential manner, maintaining the required duty of secrecy in accordance with applicable regulations, and adopting the necessary technical and organisational measures to ensure data security and prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the stored data and the risks to which it is exposed.
Questions
Any queries, questions or comments regarding these terms may be sent to us at the following email address: rgpd@plexus.es