When we need to obtain information from you, we will always ask you to provide it voluntarily and expressly. The data collected through the data collection forms on the website or by other means will be incorporated into the processing systems of Hermes Iberland XXI, S.L.
This entity will process the data confidentially and exclusively for the purpose of offering the requested services, with all the legal and security guarantees imposed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as Organic Law 3/2018, of 5 December (LOPDGDD), and Law 34/2002, of 11 July (LSSI-CE).
Who is the controller of your data?
- The controller is: Hermes Iberland XXI, S.L.
- Tax ID (CIF): B75510156
- Address: Calle Aribau 171, 1º 1. 08036, Barcelona (Barcelona)
- Email: info@face360clinic.com
- Mercantile Registry: of Barcelona, Volume IRUS 1000435943263, Folio 1, Sheet B-624955, Entry 1.
Data protection officer contact: dpd@radiofisica.group
For what purpose do we process your personal data?
At Hermes Iberland XXI, S.L. we process the information provided by data subjects in a fair, lawful and transparent manner, complying with EU Regulation 2016/679 of 27 April of the European Parliament and of the Council and Law 3/2018 of 5 December on Data Protection and the guarantee of digital rights.
If you are a CLIENT or USER
If you are a client or user, we will process the following categories of personal data:
- Identifying data (name, surname, ID number…)
- Contact data (email, WhatsApp…)
- Bank data (account number, bank card…)
- Other data (provided by the data subject in open forms or communications)
We process your data for the purpose of:
- Managing the requested services, information and/or products.
- Sending communications of interest (if the data subject has given the appropriate authorisation).
- Complying with the legal obligations applicable to the controller.
If you are an EMPLOYEE or JOB APPLICANT
If you are an employee or applicant/candidate, we will process the following categories of personal data:
- Identifying data (name, surname, ID number…)
- Data included in the curriculum vitae (education, work experience, hobbies…)
- Contact data (email, WhatsApp…)
- Bank data (account number, holder, SEPA mandate)
- Image
- Other data (provided by the data subject in open forms or communications)
We process your data for the purpose of:
- Managing the rights and obligations relating to the contractual relationship.
- Candidate selection.
- Use, reproduction or publication of image, name and voice (if the data subject has given the appropriate authorisation).
- Complying with the legal obligations of companies.
If you are a SUPPLIER of our company
If you are a supplier, we will process the following categories of personal data:
- Identifying data (name, surname, ID number…)
- Contact data (email, WhatsApp…)
- Bank data (account number, invoicing…)
- Other data (provided by the data subject in open forms or communications)
We process your data for the purpose of:
- Administrative, accounting and tax management.
- Monitoring and control of the commercial relationship.
- Complying with the legal obligations of companies.
Am I obliged to provide the personal data?
Hermes Iberland XXI, S.L. will only request the data strictly necessary to carry out the purpose for which it is collected. Refusal to provide it may prevent the provision of the requested service.
For how long will we keep your data?
The personal data provided and obtained during the relationship between the data subject and Hermes Iberland XXI, S.L. will be kept for a maximum period of five (5) years from the last sign of interest, or for as long as required by a legal provision, in which case it will be kept duly blocked and deleted when no longer necessary.
What is the legal basis for processing your data?
In compliance with article 6.1 of EU Regulation 2016/679 of 27 April, we inform you that the legal basis for the processing of your data is the following:
a) the data subject has given consent to the processing of their personal data for one or more specific purposes; and/or
b) processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract; and/or
c) processing is necessary for compliance with a legal obligation to which the controller is subject; and/or
c) processing is necessary for compliance with a legal obligation to which the controller is subject; and/or
To which recipients will your data be communicated?
The data processed by Hermes Iberland XXI, S.L. may be communicated to third parties when required by a legal provision.
Likewise, Hermes Iberland XXI, S.L. uses service providers for which it is necessary to communicate data in different business areas (administration, accounting, taxation, marketing, labour…). The relationship with these companies is regulated under article 28 of EU Regulation 2016/679 of 27 April of the European Parliament and of the Council (GDPR). The data accessed by these companies will only be used for the necessary business purpose and will not be kept for any further purpose.
What are your rights when you provide us with your data?
Any data subject has the right to obtain confirmation as to whether or not Hermes Iberland XXI, S.L. is processing personal data concerning them.
Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where applicable, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only keep it for the exercise or defence of claims. Users may also object to the processing of their data. Hermes Iberland XXI, S.L. will stop processing the data, except on compelling legitimate grounds, or for the exercise or defence of claims.
The user may send a letter to Hermes Iberland XXI, S.L., to the controller’s address, or by means of an email to the address indicated in the header of this Policy, attaching a photocopy of their identity document, at any time and free of charge, in order to:
- Revoke the consents granted.
- Obtain confirmation as to whether or not personal data concerning the User is being processed.
- Access their personal data.
- Rectify inaccurate or incomplete data.
- Request the erasure of their data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
- Obtain the restriction of data processing when any of the conditions provided for in data protection regulations are met.
- Request the portability of their data.
- Contact the DPO of Hermes Iberland XXI, S.L.
- Lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Hermes Iberland XXI, S.L. adopts the corresponding security levels required by the aforementioned Personal Data Protection regulations and other applicable regulations. These security levels are mandatory for those entities that access our information by virtue of a contractual relationship and/or provision of service, in application of article 28 of EU Regulation 2016/679 (GDPR).
However, it assumes no responsibility for damages arising from alterations that third parties may cause in the computer systems, electronic documents or files of the user.
Cookies may be used during the provision of the website’s services. Cookies are physical files of personal information hosted on the user’s own terminal. The user has the possibility of configuring their browser so as to prevent the creation of cookie files or to be warned of them. Please review our cookie policy through the link you will find on this website.
If you choose to leave our website through links to websites not belonging to our entity, Hermes Iberland XXI, S.L. will not be responsible for the privacy policies of those websites or for the cookies they may store on the user’s computer.
Our policy with regard to email focuses on sending only the communications that you have requested to receive.
If you prefer not to receive these messages by email, we will offer you, through them, the possibility of exercising your right of cancellation and waiver of receipt of these messages, in accordance with the provisions of Title III, article 21 of Law 34/2002 on Information Society Services and Electronic Commerce.
