Personal Data Protection. Privacy Policy

Who is the Data Controller of your data processing?

This Privacy Policy is applicable to all personal data provided by any interested party to Tubacex Group via this website, and any natural person interested in the products and services offered by Tubacex Group through its websites and any other means of communication.

The purpose of Tubacex Group Privacy Policy is to clearly show how your personal data are processed in compliance with the data protection regulation currently in force.

Data Controller identification:

Tubacex Group is an industrial group founded in 1963 devoted to manufacturing seamless tubes in stainless steel and high-nickel alloys and superalloys. To manage our business we need to process personal data based on the types of processing described in the next chapter. For further details about who we are and our organizational structure, please visit www.tubacex.com
The Applicant may contact Tubacex Group by email to gdpr@tubacex.com or writing to the postal address: Tres Cruces 8, 01400, Llodio (Alava, Spain), in the event of any query or concern regarding data protection.

Why do we process your personal data and how are we authorized?

Tubacex Group has a Register of Processing Activities where each type of processing carried out by us as Data Controller is described in detail:

1. Shareholders’ personal data
   In accordance with the provisions of Royal Decree-Law 1/2010 of July 2nd, which approves the revised text of the Spanish Corporate Enterprises Act.
2. Claims Channel
   The personal data of those affected in accordance with the provisions of Organic Act 1/2015 of March 30th, which amended the Penal Code.
3.  Applicants
   Personal data of job applicants based on their consent with the purpose of entering selection processes.
4. Clients, Suppliers and Contact Persons
   Contact details of natural persons working in legal entities whose data are processed on the basis of their contractual or pre-contractual relationship with Tubacex Group, as well as personal data of those who have a professional relationship based on Tubacex Group legitimate interest.
   Such processing includes contact details of journalists and people who work with the media.
5. Access Control
   Register of visits based on a legitimate interest regarding the security of facilities and the control of people visiting Tubacex Group at any of its buildings and offices.
6. External Personnel
   Details of subcontracted personnel or staff employed by a contractor based on the provisions related to the coordination of business activities of Act 31/1995 on Occupational Risk Prevention.
7. CCTV
   Based on a legitimate interest regarding the security of facilities and in accordance with the provisions of Instruction 1/2006 of the Data Protection Agency and private security regulations.
8. Voluntary Social Welfare Entities (EPSV in Spanish)
   Processing personal Data of permanent employees to manage their Voluntary Social Welfare Entities.
9. Donations
   Processing Data of employees in relation to donations to charities.
10. Different types of processing related to Human Resources which are not detailed in this Privacy Policy.

How long do we keep your personal data?

Tubacex Group will keep personal data of data subjects while they have a relationship with the organization. Once the relationship is terminated, data will be kept according to the provisions related to filing and documentation regulations which may be applicable by law. If you wish to exercise your rights, your data will be deleted according to the right requested.

Who has access to your personal data?

Tubacex Group may transfer or communicate personal data to comply with its obligations with Public Administrations in the event this is required by the applicable law, as well as other bodies including the Spanish Security Forces and Judiciary bodies, if applicable.

What are your rights as a data subject?

You are informed you may exercise the following rights:

1. Right to access your personal data to know data subject to processing;
2. Right to rectification of inaccurate personal data;
3. Right to erasure of personal data, if possible;
4. Right to request a restriction of your personal data processing when the accuracy, lawfulness or need for data processing is questionable; and in such event we may retain your data to file or defend against claims;
5. Right to object to the processing of your personal data when the legal basis of the processing is legitimate interest. Tubacex Group will stop processing your data unless we have a legitimate pressing interest or to prepare for, file or defend against claims.
6. Right to data portability when the legal basis for data processing is your consent.

The aforementioned rights may be freely exercised by the Applicant or his/her representative, if any, via written request submitted by email to gdpr@tubacex.com

In addition to the foregoing rights, the Applicant will be entitled to withdraw the consent granted at any time and such consent withdrawal shall not affect the lawfulness of any processing prior to such withdrawal. Tubacex Group may continue to process the Applicant’s data to the extent permitted by the law.

Tubacex Group reminds the Applicant of his/her right to lodge a complaint with the Spanish Data Protection Agency.

Unsubscription from the commercial communication service

The Applicant has the right to withdraw the consent granted for the forwarding of commercial communications at any time, simply by sending a notification to Tubacex Group informing that he/she no longer wishes to receive commercial communications. To do so, the Applicant can click on the link found in each commercial communication to cancel the submission of electronic commercial communications or withdraw his/her consent via notification to the email address gdpr@tubacex.com

What security measures have we implemented?

Tubacex Group, committed to honor its obligation to maintain secrecy and safekeeping of personal data, will implement the necessary measures to prevent data modification, loss and unauthorized processing or access to data, pursuant to the provisions laid out in the applicable regulation.

Tubacex Group has implemented the necessary technical and organizational safety measures to guarantee security of personal data and to prevent data modification, loss and/or unauthorized processing and access to data, taking into account the state-of-the-art technology, the nature of data stored and the risks they are exposed to, either due to human error or to the physical or natural environment according to the applicable regulations.

Links

Tubacex Group web page includes links to other websites which are not operated or controlled by Tubacex Group. As a result, Tubacex Group shall not be liable and make no representation or warranty regarding the accuracy, reliability, suitability, veracity and validity of the contents of such websites or their privacy practices. Prior to providing personal data to the aforementioned websites unrelated to Tubacex Group, please take into account that their compliance with data protection policies may be different from ours.

Changes to the Privacy Policy

Tubacex Group may change its Privacy Policy in accordance with the applicable legislation from time to time. In any event, any change to our Privacy Policy will be duly notified to the Applicant to inform him/her of the changes implemented in the processing of his/her personal data and, so that the Applicant may give his/her consent, if the applicable regulations require it.