Legal Notice

ADDITIONAL INFORMATION ABOUT DATA PROTECTION – PRIVACY POLICY:

DATA CONTROLLER: Who is responsible for processing your data?

Identity: CAVE BILBAÍNOS LOGISTICA ESPAÑA, S.L. - VAT: B46211132

Postal Address: AVDA. GALILEO GALILEI Nº 6 GETAFE, 28906 MADRID

Phone: 962722000 - Email: centralmadrid@cbl-logistica.com

DATA PROCESSING – WORK TIME REGISTRATION

For what purpose do we process your personal data?

Management of employee data for the monitoring of working hours.

How long will we keep your data?

Your data will be kept for 4 years as established by the Workers' Statute, Art. 34.9.

What is the legal basis for processing your data?

Legal obligation. Compliance with the Workers' Statute, Art. 34.9.

Who will receive your data?

Trade Union Representation (if applicable).

Labour Inspectorate.

Social Security.

How have we obtained your data?

Directly from you, as an employee of the company.

What data do we process?

Identification data (Name, Surname, and ID).

Others: Entry and Exit times.

DATA PROCESSING – EMPLOYEES

For what purpose do we process your personal data?

Management of employee data for the administration of the employment relationship.

How long will we keep your data?

For the period established by employment legislation.

What is the legal basis for processing your data?

Performance of the employment contract.

Who will receive your data?

Labour management services.

Medical/occupational mutual insurance companies.

Insurance entities.

Social Security bodies.

Tax Administration.

How have we obtained your data?

Directly from you, as an employee of the company.

What data do we process?

Identification data (Name, Surname, ID, Address, Phone, Email).

Personal information (Marital status, Date and place of birth, Gender, Nationality).

Academic data.

Professional data.

Bank data.

DATA PROCESSING – SUPPLIERS

For what purpose do we process your personal data?

Management of supplier contact data for organizational, administrative, and accounting purposes.

How long will we keep your data?

6 years as established by trade, tax, and fiscal regulations.

What is the legal basis for processing your data?

Performance of a contract or pre-contract.

Who will receive your data?

Tax Administration.

Accounting services.

How have we obtained your data?

Directly from you and/or your legal representative.

What data do we process?

Identification data (Name, Surname).

Professional data (Phone, Email, Job position).

DATA PROCESSING – POTENTIAL CLIENTS

For what purpose do we process your personal data?

Management of potential client contact data for organizational, administrative purposes and to provide the information requested by the data subject.

How long will we keep your data?

Until the potential client becomes a client or, if not, for a maximum of one year.

What is the legal basis for processing your data?

Performance of a contract or pre-contract.

Who will receive your data?

No data will be disclosed to third parties.

How have we obtained your data?

Directly from you and/or your legal representative.

What data do we process?

Identification data (Name, Surname, Address, Phone, Email).

DATA PROCESSING – CLIENTS

For what purpose do we process your personal data?

Management of client contact data for organizational, administrative purposes and for issuing invoices.

How long will we keep your data?

6 years as established by trade, tax, and fiscal regulations.

What is the legal basis for processing your data?

Performance of a contract or pre-contract.

Who will receive your data?

Tax Administration.

Accounting services.

IT support companies.

How have we obtained your data?

Directly from you and/or your legal representative.

What data do we process?

Identification data (Name, Surname, ID, Address, Phone, Email).

Bank data.

DATA PROCESSING – CANDIDATES

For what purpose do we process your personal data?

Management of Curriculum Vitae received by the company.

How long will we keep your data?

For a maximum period of one year.

What is the legal basis for processing your data?

Consent of the data subject.

Who will receive your data?

No data transfers are foreseen.

How have we obtained your data?

Directly from you.

What data do we process?

Identification data (Name, Surname, ID, Address, Phone, Email).

Personal information (Marital status, Date and place of birth, Gender, Nationality).

Academic data.

Professional data.

DATA PROCESSING – VIDEO SURVEILLANCE FOR SECURITY

For what purpose do we process your personal data?

Management of recordings made by the installed cameras to maintain the security of the facilities.

How long will we keep your data?

For a maximum period of one month.

What is the legal basis for processing your data?

Public interest: GDPR 6.1.e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority. Law 5/2014, of 4 April, on Private Security.

Who will receive your data?

Law enforcement authorities.

Courts for resolution of possible offenses and/or crimes.

Company responsible for the maintenance of the video surveillance system.

How have we obtained your data?

When you access the company's premises.

What data do we process?

Images.

DATA PROCESSING – VIDEO SURVEILLANCE FOR LABOR CONTROL

For what purpose do we process your personal data?

Management of recordings made by the installed cameras to monitor the activities carried out by staff within the facilities during working hours.

How long will we keep your data?

For a maximum period of one month.

What is the legal basis for processing your data?

Performance of the employment contract, considering Article 20.3 of the Workers' Statute which allows the employer to adopt monitoring and control measures to verify compliance by the worker with their obligations, respecting their human dignity.

Who will receive your data?

Law enforcement authorities.

Courts for resolution of possible offenses and/or crimes.

Company responsible for the maintenance of the video surveillance system.

How have we obtained your data?

When you access the company's premises.

What data do we process?

Images.

DATA PROCESSING – WEB FORM INQUIRIES

For what purpose do we process your personal data?

Management of data of users who contact the company through the website form.

How long will we keep your data?

For the time necessary to resolve the inquiry.

What is the legal basis for processing your data?

Consent of the data subject.

Who will receive your data?

No data will be disclosed to third parties.

How have we obtained your data?

Directly from you.

What data do we process?

Identification data (Name, Surname, Phone, Email).

Professional data (Company).

DATA PROCESSING – WEBSITE USERS

For what purpose do we process your personal data?

Management of data of registered users who access the private area of the website.

How long will we keep your data?

6 years as established by trade, tax, and fiscal regulations.

What is the legal basis for processing your data?

Consent of the data subject.

Who will receive your data?

No data will be disclosed to third parties.

How have we obtained your data?

Directly from you.

What data do we process?

Identification data (Name, Surname, Phone, Email).

Professional data (Company).

DATA PROCESSING – RIGHTS EXERCISE REQUESTS

For what purpose do we process your personal data?

To respond to requests from individuals exercising their rights under the General Data Protection Regulation.

How long will we keep your data?

For the time necessary to resolve the claims.

What is the legal basis for processing your data?

GDPR 6.1.c) Processing necessary for compliance with a legal obligation applicable to the data controller.

Who will receive your data?

Spanish Data Protection Agency.

How have we obtained your data?

Directly from you.

You and/or your legal representative.

What data do we process?

Identification data (Name, Surname, Address, Signature, Phone).

USE BY MINORS

The services and/or products provided through this website are not intended for minors. Data will not be collected when it is known that the data belongs to persons under 14 years of age.

INTERNATIONAL DATA TRANSFER

No international data transfers are carried out to countries outside the European Economic Area.

PROFILING

No profiling is performed.

SECURITY

CAVE BILBAÍNOS LOGISTICA ESPAÑA, S.L. has implemented appropriate administrative, technical, and physical security measures to prevent unauthorized access, use, modification, disclosure, or destruction of the information provided by our users. Specifically:

Administrative:

Both staff and service providers sign a confidentiality agreement.

Technical:

The personal data collected electronically is stored encrypted and password-protected.

All data transmission to CAVE BILBAÍNOS LOGISTICA ESPAÑA, S.L. services is encrypted.

Periodic backups of user data are made on various servers to help protect the data in case of hardware failure or disaster.

Physical:

Our IT systems are located in restricted areas. Only authorized personnel may access personal data.

RIGHTS: What are your rights when you provide us with your data?

The company informs you that you have the right to:

· Access your personal data and obtain information on how it is being processed.

· Request rectification of inaccurate data.

· Request the erasure of data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

· Object at any time to the processing of your data; the company will stop processing your data unless there are compelling legitimate grounds or for the exercise or defense of possible claims.

· Request data portability to yourself or another service provider.

· In certain circumstances, request the restriction of processing, in which case the company will only retain the data for the exercise or defense of claims.

· Withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, please contact: centralmadrid@cbl-logistica.com

You must verify your identity by providing a copy of your ID, NIE, passport, or equivalent document (both sides).

The company will provide you with the requested information within a maximum period of one month from receipt of the request. This period may be extended by two additional months if necessary, considering the complexity and number of requests.

You may file a complaint with the relevant Data Protection Authority.

For additional information about your rights, visit the website of the Spanish Data Protection Agency (https://www.agpd.es/).