Extended privacy statement

• Company name: ALCAD ELECTRONICS SL
• Tax ID no.: B86876984
• Registered office: Polígono Industrial Arreche-Ugalde, 1 - 20305 Irun (Gipuzkoa)
• Registered in the Mercantile Register of Gipuzkoa, Page SS 36805, Folio 11, Volume 2664, Section 8, First Entry.
• Telephone: +34 943 639 660
• Email: dir.gen@alcad.net

In accordance with the provisions of EU Regulation 679/2016 (GDPR) and Organic Law 3/2018 of December 5 on the protection of personal data and guarantee of digital rights, we inform you that the personal data you provide us with, and those that are generated during the development of the relationship with you, are processed for the following purposes:

• To respond to your requests.
• To provide you with information about the products of ALCAD ELECTRONICS SL, consenting to the sending of commercial communications by email or by any other equivalent means of electronic communication (such as SMS) that you have provided us with.
• To allow you to participate in giveaways and/or commercial promotions.
• If you send us a CV, so that your application may be evaluated during employee recruitment processes.
• The sending of communications by any means that you have provided us with, related to the activities carried out by the entity and which may be of interest to you.
• Responding to queries, complaints and suggestions, and carrying out all kinds of communication actions.
• Accounting, tax and administrative management of the entity.

The personal data provided shall be kept for as long as their deletion is not requested by the person concerned, or whoever legally acts as their legal representative, for as long as the data are necessary (including the need to keep them for the applicable or relevant limitation periods) for the purpose for which they were collected or recorded.

The conservation of the data is conditional on the legal obligation that ALCAD ELECTRONICS SL has to conserve them. After these deadlines, the data shall be destroyed or erased, and the deletion, elimination or destruction shall be carried out in such a way that the information contained in the media is not recoverable.

The legal basis for the processing of your data is the consent given by the person concerned. This is obtained expressly and unequivocally by completing and, where appropriate, sending the paper or electronic documents and forms in which your data are collected. In all of the entity's documents, which are used to collect data for the various uses, there are informative clauses in accordance with the provisions of the data protection regulations and consent is manifested expressly by the signature of the person concerned, or by sending the existing forms on the website.

The processing is also legitimate if it is necessary for the performance of a contract or the provision of a service to the persons concerned, to which they are party, or for the application, at their request, of pre-contractual measures (art. 6.1.a and b GDPR).

ALCAD ELECTRONICS SL is also legitimised to process your data in order to comply with the legal obligations to which it is subject and for the satisfaction of legitimate interests, provided that the interests or fundamental rights of the persons concerned do not prevail over these.

Whatever the grounds of entitlement, consent may be withdrawn at any time.

Your data will not be transferred to any entity without your consent, except for the transfers provided for by law. In this regard, your express consent will be requested for the transfer of your data to any other entity.

As a consequence of the management of the authorised purposes, your data may be communicated to entities or persons directly related to ALCAD ELECTRONICS SL and with the services provided by the same. Likewise, your personal information will be at the disposal of the Public Administrations, Judges and Courts, for the attention of possible liabilities arising from the processing, and provided that these transfers are protected by law.

Your data may also be disclosed to companies that provide us with consultancy, IT maintenance, marketing, training or auditing services. These entities only have access to personal information that is necessary to carry out these services, and are required by a "data processing contract" to maintain confidentiality, not to use the information for other purposes, and to take measures to ensure the integrity and availability of the information.

No international transfers of data outside the European Union or to entities that do not comply with the data protection standards established by the GDPR are foreseen.

The personal data processed by ALCAD ELECTRONICS SL are provided by the person concerned or obtained from sources accessible to the public.

ALCAD ELECTRONICS SL will process the data you provide us with, which may be in the following categories:

• Identification and contact data
• Academic and professional data
• Detailed employment data
• Economic, financial and insurance data
• Commercial information

Anyone has the right to obtain confirmation as to whether or not ALCAD ELECTRONICS SL is processing personal data concerning them.

Data subjects have the right to access their personal data and to obtain a copy of the personal data undergoing processing, to update them, as well as to request the rectification of inaccurate data or, where appropriate, to request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, and for reasons relating to their particular situation, interested parties may object to the processing of their data. ALCAD ELECTRONICS SL will stop processing the data, unless there are legitimate reasons no to do so, or where it may be necessary to exercise or defend possible claims.

Also, in certain circumstances provided for in article 18 of the GDPR, data subjects may request the limitation of the processing of their data, in which case ALCAD ELECTRONICS SL will process them, with the exception of their storage, with the consent of the data subject or for the formulation, exercise or defence of claims, or for the protection of the rights of another natural or legal person, or for reasons of public interest provided for in the law of the European Union or of a specific Member State.

As a consequence of the application of the right to deletion or objection to the processing of personal data in the online environment, data subjects have the right to be forgotten, according to the case law of the Court of Justice of the EU.

Under the right to portability, data subjects have the right to obtain the personal data concerning them in a structured, commonly used and machine-readable format, and to transmit it to another processor.

Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, subject to the exceptions provided for in article 22.1 of the GDPR.

The data subject has the right to the erasure of their data, due to the disappearance of the purpose for which the data were processed or collected, due to the revocation of consent when this legitimises the processing, or for the other reasons contained in article 17 of the GDPR. Erasure shall be carried out by high-level erasure of data on automated media and physical destruction of non-automated media.

By means of a letter, always accompanied by a copy of an ID card or other document that accredits the identity of the interested party, addressed to the addresses indicated in the heading.

If you feel that your rights have not been properly addressed, you have the right to lodge a complaint with the Spanish Data Protection Agency, whose contact details are: Telephone: 901 100 099 / 912 663 517 Postal address: C/ Jorge Juan, 6 Madrid.