Legal information and privacy policy

In accordance with the new regulations on the protection of personal data, the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, effective as of May 25, 2018. and the Organic Law 3/2018 of December 5, 2018, on the Protection of Personal Data and guarantee of digital rights.We update our privacy policy and inform you of the most important aspects regarding the processing and free movement of personal data.

Contact details of the person in charge of the file.
Sunsundegui, S.A., is responsible for the file and the processing of personal data, with the following contact details: Polígono Ibarria, 16, 31800, Alsasua (Navarra).
E-mail address: sunsundegui@sunsundegui.com
Phone: +34 948 562011 or 902070851.

Personal data object of treatment.
Sunsundegui, S.A. will request the personal data that are considered necessary for the fulfillment of the obligations for which they were collected.

The categories of personal data to be processed will be those related to identification data, personal circumstances, contact data, academic and professional data, economic, financial and insurance data, commercial information and information on social circumstances.

Sensitive data related to political opinions, religious beliefs, racial or ethnic origin, health or sexual identity of the data subjects will not be processed.

Purposes of data processing.
Sunsundegui, S.A. will process personal data for purposes related to:

– Compliance with the obligations that may derive from the different legal regulations in force.

– The fulfillment and management of the contractual relationship established with the customer, necessary for the provision of contracted services, being the legal basis for processing the execution of the contract and the consent of the person concerned that is requested for this purpose.

– Commercial purposes based on a legitimate interest of the owner of the data that will allow him/her to receive commercial communications, by any channel, including electronic ones, about products or services similar to those already contracted, as well as to offer similar products or services, adjusted to the characteristics of the data subject. This is without prejudice to the holder’s right to express his/her opposition to such processing, or to revoke consent already given, by writing to the File Manager at the postal address indicated above or by e-mail: sunsundegui@sunsundegui.com.

The processing of personal data for commercial purposes aimed at sending personalized communications, based on profiling or automated decision making, about new products or services, will require the prior unequivocal and explicit consent or authorization of the owner of the data. This is without prejudice to the holder’s right to express his/her opposition to such processing or to revoke consent already given, by writing to the File Manager at the postal address indicated above or by e-mail: sunsundegui@sunsundegui.com.

Communication of personal data to third parties.
Excluding those cases in which data communications are imposed by a legal obligation, Sunsundegui, S.A. will always seek the prior unequivocal and explicit consent of the owner of the data, in case of communicating them to third parties with identical activities and for the same purposes for which they were collected.

When the development of a professional service requires the access of a third party to the personal data, Sunsundegui, S.A as responsible of the file, will formalize with the person in charge of the treatment – the service provider – a contract that binds him with the responsible and that will make reference to the object, duration, nature and purpose of the treatments; to the type of personal data treated and to the category of the interested parties; the obligation to treat the personal data only following the documented instructions of the responsible; the conditions for the authorization of subcontracting; the attention of the legally recognized rights and to the rest of provisions established in the Regulation and in the Organic Law.

Data retention period.
Personal data will be retained for as long as the contractual relationship with the customer is in force. Once the contractual relationship has ended, the personal data may be kept for a period not exceeding six years, or for the period of time established by the legal obligations in force.

The retention periods will be for a shorter period of time than that indicated above, specifically between six months and two years, in relation to those obtained for purposes related to personnel selection processes.

International data transfers outside the European Economic Area.
Personal data may only be disclosed to countries or organizations outside the European economic area, to which the Commission recognizes an adequate level of protection, or which provide adequate safeguards for their protection: binding corporate rules establishing similar protection measures to those required by European legislation, European Union standard clauses or other similar measures.

Rights recognized to the owner of the data and channels for their exercise.
The holder of personal data has the following recognized rights: the right of access to know the specific data that are subject to processing; the right to revoke at any time, the consent given, as well as the right to oppose the processing of data based on a legitimate interest; the right to rectification of inaccurate or incomplete data; the right to request limitation in the processing of data in the cases provided by law and the right to data portability. In your case, as established by the regulations in force, you have the right to file a complaint before the corresponding control authority (Spanish Data Protection Agency).

The interested party may exercise these rights by writing to SUNSUNDEGUI, S.A. at the registered address: Polígono Ibarria, 16, 31800, Alsasua (Navarra). (Navarra), or through the following e-mail address: sunsundegui@sunsundegui.com