PURPOSE OF PROCESSING THE PERSONAL DATA PROVIDED

• For advanced socio-educational intervention in the educational field (for normalization and inclusion in ordinary educational center), training (Basic FP, Occupational Training and Training Support), social (in open environment – street – and family intervention) and family intervention) and family intervention) and family intervention) and family intervention) and (awareness and proposal) of minors and young people in tension with themselves, with society and with the school system. Development of its Individualized Educational Plan- PEI; Formulation of objectives; Design of interventions; Classroom activity designs; Family information; Coordination with derivative entities; Coordination with Institutes; Coordination with social and health agents involved in educational processes with the participant; Evaluation; Reporting; Facilitate the educational relationship and the intervention itself; Facilitate the intervention of other social and health workers working with the participant.
• Internal use, carrying out operations and justification in terms of administrative, health, economic and accounting management derived from the provision of services such as Socio-educational Intervention Center with Minors
• Management of services as well as compliance with contractual and regulatory requirements related to the requested organization or operation.
• Contact with the interested party through the means of communication provided (mail, postal address and / or telephone) in order to manage the queries that you send us through the channels enabled for this purpose, manage notices and coordinate actions derived from the provision of services by vinJOY-related persons and/or related processors for the legitimate and/or consented purposes.
• Sending commercial communications about products or services similar to those provided, legitimized in accordance with Article 21 of the LSSICE.
• Contact and sending of personal communications, invitations to events, as well as to periodically inform you of news, news and corporate information and proposals of other projects and services of the organization that may be of interest to you both written, telephoned as electronic media through the provided means of communication, to the extent that it would have unequivocally consented to us. VinJOY's updated list of activities is available in www.vinjoy.es
• Attention to your inquiries and requests: Response Management to Inquiries, Complaints or Incidents, Requests for Information, Resources and/or Activities.
• Quality control over our products and services, quality management of processes and activities, conduct of opinion surveys, as well as the evaluation of the satisfaction/perception results and performance of the organization's stakeholders.
• Providing evidence of justification for activities, projects and grants in which the organization participates.
• Compliance Management (applicable regulations as well as mandatory internal regulations): Investigation, monitoring and auditing of controls established for the prevention of crimes and the establishment of controls of access to the Facilities.
• Training and Research: Assistance and access by students and professionals related to VINJOY's teaching activity to processes and/or clinical histories, as well as analysis of their profile for medical research and case selection in trials clinical experiences by socio-health professionals, to the extent that it would have unequivocally consented to us.
• Scientific research and design of proposals for the prevention and/or optimization of intervention programs, guidance and/or therapeutic approach linked to hearing loss, requiring for this purpose, the communication of the data derived from the analysis and health assessment with collaborators of research projects in order to coordinate the actions associated with them, to the extent that it would have unequivocally consented to us.
• Dissemination of our best practices, the reference associated with the services we have provided to you and/or the publication and/or communication of your clinical case, graphic material in corporate media (e.g. and not limited, minutes, web, social networks , newsletters, activity memory, reports, presence in the media) and/or other public media (scientific publications and/or reports in written press, TV, ….), as a dissemination of the results of the activity, in the to the extent that he would have unequivocally consented to us
• Statistical, historical and scientific purposes that allow us to improve the provision of our services. Research and implementation of technical resources
• Management of visits to the facilities, as well as safety and regulatory compliance therein, the investigation of possible incidents or accidents, management of associated insurance and management of warnings or sanctions for breaches of Security.
• Communication to Social, Educational and/or Health Agents of non-public entities (Children's Day Centers, Drug Reduction Programs,..), to the extent that it would have unequivocally consented to us.
• Management and auditing of the organization's regulatory management and compliance systems
• Take, record and disseminate his image and, where appropriate, that of his family (videos, recordings and photographs), in the events held at VINJOY, and can be used for graduation orla, the editing of audiovisual reports, documents, dissemination in the means of communication of the publicly accessible organization (including web and social networks), as well as stored in the files of the Entity. VINJOY will guarantee the protection of the right to honor, privacy, self-image, as well as the confidentiality of the information obtained, in accordance with the provisions of the current legislation, to the extent that it has unequivocally consented to us.

DATA RETENTION TIME

• The data provided will be kept for as long as the transfer of the transfer is maintained, its deletion is not requested by the data subject after the formal completion of the relationship with the data subject, with the exception of its retention for the formulation, exercise or defence of claims of the controller or with a view to the protection of the rights of another natural or legal person and/or for reasons of legal obligation.
• In any case, at the end of the relationship the Data of the data subject will be duly blocked, as provided for in the current data protection regulations.
• Clinical History: Health centers have an obligation to keep clinical documentation in conditions that ensure their proper maintenance and safety, although not necessarily in the original support, for proper patient assistance (Art. 17.1 of Law 41/2002 of November 14, on patient autonomy and rights and obligations in the field of information and clinical documentation). Clinical documentation will also be kept for judicial purposes in accordance with current legislation. It shall also be kept, where there are epidemiological, research or organisational and functioning reasons for the National Health System. Its treatment will be done in such a way as to avoid as far as possible the identification of the persons affected – pseudonymization (Art. 17.2 of Law 41/2002) – 5 years minimum from the date of discharge of each care process.
• Accounting and Tax Documentation – For Tax Purposes: Ledgers and other books mandatory records according to applicable tax regulations (IRPF, VAT, IS, etc.), as well as documentary supports justifying the entries recorded in the books (including computer programs and files and any other documents of tax significance) should be kept at least during the period in which the Administration has the right to check and investigate and, consequently, to liquidate tax debt (Arts. 66 a70 General Tax Law) – 4 years
• Accounting and Tax Documentation – For Commercial Purposes: Books, correspondence, documentation and justifications concerning your business, duly ordered from the last seat made in the books, except as provided by provisions general or special. This commercial obligation extends to both mandatory books (income, expenses, investment goods and provisions in addition to the documentation and supporting notes on the books (invoices issued and received, tickets, rectifying invoices, bank documents, etc.) (Art.30 Commercial Code) – 6 years.
• The data included in the automated treatments created to control access to buildings (Instruction 1/1996, of March 1, of the AEPD, on automated files established in order to control access to buildings) – 30 days
• The data processed for the sending of commercial communications will be kept until you revoke the consent granted.
• Therefore, the data will be kept as long as the commercial relationship remains in force, based on the retention periods established by the current regulations mentioned above, as well as the legal or contractual deadlines provided for the exercise or limitation of any action for liability for contractual breach by the interested party or the Organization (reform of the Civil Code establishes a period of 5 years to be able to carry out an action for civil liability, a period that counts from date on which compliance with the obligation may be required).

LEGITIMATION FOR THE PROCESSING OF DATA

• Compliance with the derivation of the Educational Administration of the Government of the Principality of Asturias, Administration on Social Rights, Ministry of Health, Competent Ministry in the Administration of Social Rights, or, where applicable, the request that make the data subject or his legal representative.
• Comply with a legal obligation: Administrative, educational, social, health, tax, tax, accounting and financial regulations, legislation on the protection of minors, and compliance with legal obligations applicable to the activities offered by the Organization.
• Satisfy a legitimate interest of the Responsible: Assumptions of legitimate interest in which the controller could be injured party and necessary the processing and communication of the data of the non-compliance to third parties in order to manage regulatory compliance and the defense of the interests of the controller, fraud prevention, as well as the legitimate direct marketing interest enabled by the LSSICE (sending commercial communications about products or services similar to those contracted/agreed with user).
• The consent of the data subject in the case that he has given us the consent by ticking the boxes enabled for this purpose in this data protection clause
• To which recipients can your data be communicated?
• Organizations or people related to VINJOY for the provision of services related to the purposes of treatment: Professionals related to the service in the educational, sports, cultural, social sphere. Likewise, there may be internal professionals of the Foundation in training students in internships, volunteers, interpreters who can have access to the service provided to the user.
• Agencies or bodies of the Public Administration with competences in the subject matter of the purposes of the treatment: Educational Administration of the Government of the Principality of Asturias, Competent Ministry in Social Rights Administration, Public Prosecutor's Office Children, Social Services,
• Reference Educational Centers and entities that exercise guardianship and/or related to intervention.
• Social, Educational and/or Health Agents of non-public entities (Children's Day Centers, Drug Use Reduction Programs,..), in cases where it so consents.
• Insurance companies, in cases of investigation of incidents and / or crimes or illicit and that are necessary for the coverage of responsibilities.
• Forces and Security Corps (specify): To the extent that a justified right of access was required in the investigation of a regulatory breach.

UNDER WHAT WARRANTIES DO THE DATA COMMUNICATE?

The communication of data to third parties is made to entities that prove the provision of a Personal Data Protection System in accordance with the current legality.

PURPOSE OF PERSONAL DATA COLLECTED

FUNDATION PADRE VINJOY DE LA SAGRADA FAMILY uses, stores and processes the personal data you provide us for the following purposes:

• Management of queries, requests for information, resources and/or activities. Treatments relating to promotions and advertising are only carried out when you have consented to them.
• Contact the interested party through the means of communication provided (mail, postal address and / or telephone) in order to manage the queries that you send us through the channels enabled for this purpose, manage notices, notify you of changes in our and coordinate actions derived from the services you request from us.
• For the correct commercial, administrative, accounting and tax management if you contract a product/service. The data collected is necessary in order to be able to properly manage the relationship between the parties. Such data may also be used to resolve issues related to the products/services purchased. The processing of this data is based on the existence of the contractual relationship.
• Management of the subscription to our newsletter.
• Contact and send personal communications, invitations to events and gifts addressed to customers, congratulate you on special dates, conduct quality and satisfaction surveys, as well as to periodically inform you of news, news and information information about competitions, rates, offers and promotions of products and services of the organization, in order to evaluate the quality of our processes and provide you with offers of products and services of interest through the different means of facilitated communication, to the extent that it would have consented to us.
• Management of personnel selection procedures. The data collected are those provided by the data subject himself, being the processing of data based on the express consent of the same for use in personnel selection processes.
• Compliance with legal and regulatory obligations: to comply with our legal obligations to comply with the information requirements made by judicial bodies, regulatory and supervisory bodies and State security. FUNDATION FATHER VINJOY DE LA SAGRADA FAMILY, as data controller is subject to the laws of the countries in which they carry out their activity, and is obliged to comply with them. These obligations include the delivery, in certain circumstances, of personal data to judicial bodies, regulatory or supervisory bodies and state law enforcement agencies. These data processings are based on the existence of a legal obligation to collaborate with such bodies.

RESPONSIBILITY FOR THE VERACITY OF THE DATA

You will be responsible, in any case, for the veracity of the data provided, reserving FATHER VINJOY FUNDATION OF THE SAGRADA FAMILY the right to exclude you from the services provided in the event that you have provided false data, without prejudice to the other actions that you have proceed in accordance with the law.

DATA DESTINATIONS

We only use, transfer or share personal data with third parties in the terms described in this Privacy Policy. FUNDATION FATHER VINJOY DE LA SAGRADA FAMILY does not sell or rent your personal data to third parties and will only communicate it to individuals or entities if we obtain your prior consent or in compliance with or in accordance with applicable law when such consent not necessary for a specific transfer.
We will share or give third parties access to your personal data when doing so is necessary to achieve one of the objectives described below and in accordance with applicable law:

• Our suppliers: PARENT FUNDATION VINJOY DE LA SAGRADA FAMILIA will communicate or allow access to your personal data to companies that provide services to us under a contract of provision of services, when necessary for the fulfillment of the purposes described earlier in this Privacy Policy. If any of these service providers need access to your personal data, we ensure that they use it only to provide us with a service and in accordance with our instructions. We also require you to maintain data confidentiality and security and return or destroy data when you no longer need it.
• Legal obligations: INFUNDATION FATHER VINJOY DE LA SAGRADA FAMILY may communicate your personal data when the transfer is authorized by law or is necessary to comply with a legal obligation, including the transfer to the competent authorities, judges and Courts.

UNDER WHAT WARRANTIES ARE YOUR DATA COMMUNICATED?

The communication of data to third parties is made to entities that prove the provision of a Personal Data Protection System in accordance with the current legality.

PURPOSE OF THE TREATMENT OF PERSONAL DATA PROVIDED

• For the application of Intervention Model for the development of audiology, as an indispensable means for improving the quality of life of people with hearing problems. Implementation of plans and actions aimed at the training of professionals, specialization, research and awareness of hearing health. Training of Senior Technicians in Prosthetic Audiology. Collaboration agreement between entities in the case of trainee companies.
• Internal use, conduct of operations and justification in terms of administrative and educational management required to services provided by supported centers with public funds in Asturias
• Management of services as well as compliance with contractual and regulatory requirements related to the requested organization or operation.
• Contact with the interested party through the means of communication provided (mail, postal address and / or telephone) in order to manage the queries that you send us through the channels enabled for this purpose, manage notices and coordinate actions derived from the provision of services by vinJOY-related persons and/or related processors for the legitimate and/or consented purposes.
• Sending commercial communications about products or services similar to those provided, legitimized in accordance with Article 21 of the LSSICE.
• Contact and sending of personal communications, invitations to events, as well as to periodically inform you of news, news and corporate information and proposals of other projects and services of the organization that may be of interest to you both written, telephoned as electronic media through the provided means of communication, to the extent that it would have unequivocally consented to us. VinJOY's updated list of activities is available in www.vinjoy.es
• Attention to your inquiries and requests: Response Management to Inquiries, Complaints or Incidents, Requests for Information, Resources and/or Activities.
• Quality control over our products and services, quality management of processes and activities, conduct of opinion surveys, as well as the evaluation of the satisfaction/perception results and performance of the organization's stakeholders.
• Providing evidence of justification for activities, projects and grants in which the organization participates.

Compliance Management (applicable regulations as well as mandatory internal regulations): Investigation, monitoring and auditing of controls established for the prevention of crimes and the establishment of controls of access to the Facilities.

• Training and Research: Assistance and access by students and professionals related to VINJOY's teaching activity to processes and/or clinical histories, as well as analysis of their profile for medical research and case selection in trials clinical experiences by socio-health professionals, to the extent that it would have unequivocally consented to us.
• Scientific research and design of proposals for the prevention and/or optimization of intervention programs, guidance and/or therapeutic approach linked to hearing loss, requiring for this purpose, the communication of the data derived from the analysis and health assessment with collaborators of research projects in order to coordinate the actions associated with them, to the extent that it would have unequivocally consented to us.
• Dissemination of our best practices, the reference associated with the services we have provided to you and/or the publication and/or communication of your clinical case, graphic material in corporate media (e.g. and not limited, minutes, web, social networks , newsletters, activity memory, reports, presence in the media) and/or other public media (scientific publications and/or reports in written press, TV, ….), as a dissemination of the results of the activity, in the to the extent that he would have unequivocally consented to us
• Statistical, historical and scientific purposes that allow us to improve the provision of our services. Research and implementation of technical resources
• Management of visits, as well as safety and regulatory compliance therein, the investigation of possible incidents or accidents, management of associated insurance and management of warnings or sanctions for breaches of safety standards.
• Management and auditing of the organization's regulatory management and compliance systems
• Take, record and disseminate his image and, where appropriate, that of his family (videos, recordings and photographs), in the events held at VINJOY, and can be used for graduation orla, the editing of audiovisual reports, documents, dissemination in the means of communication of the publicly accessible organization (including web and social networks), as well as stored in the files of the Entity. VINJOY will guarantee the protection of the right to honor, privacy, self-image, as well as the confidentiality of the information obtained, in accordance with the provisions of the current legislation, to the extent that it has unequivocally consented to us.

DATA RETENTION PERIOD

• The data provided will be kept for as long as the transfer of the transfer is maintained, its deletion is not requested by the data subject after the formal completion of the relationship with the data subject, with the exception of its retention for the formulation, exercise or defence of claims of the controller or with a view to the protection of the rights of another natural or legal person and/or for reasons of legal obligation.
• In any case, at the end of the relationship the Data of the data subject will be duly blocked, as provided for in the current data protection regulations.
• Accounting and Tax Documentation – For Tax Purposes: Ledgers and other books mandatory records according to applicable tax regulations (IRPF, VAT, IS, etc.), as well as documentary supports justifying the entries recorded in the books (including computer programs and files and any other documents of tax significance) should be kept at least during the period in which the Administration has the right to check and investigate and, consequently, to liquidate tax debt (Arts. 66 a70 General Tax Law) – 4 years
• Accounting and Tax Documentation – For Commercial Purposes: Books, correspondence, documentation and justifications concerning your business, duly ordered from the last seat made in the books, except as provided by provisions general or special. This commercial obligation extends to both mandatory books (income, expenses, investment goods and provisions in addition to the documentation and supporting notes on the books (invoices issued and received, tickets, rectifying invoices, bank documents, etc.) (Art.30 Commercial Code) – 6 years.
• The data included in the automated treatments created to control access to buildings (Instruction 1/1996, of March 1, of the AEPD, on automated files established in order to control access to buildings) – 30 days
• The data processed for the sending of commercial communications will be kept until you revoke the consent granted.
• Therefore, the data will be kept as long as the commercial relationship remains in force, based on the retention periods established by the current regulations mentioned above, as well as the legal or contractual deadlines provided for the exercise or limitation of any action for liability for contractual breach by the interested party or the Organization (reform of the Civil Code establishes a period of 5 years to be able to carry out an action for civil liability, a period that counts from date on which compliance with the obligation may be required).

LEGITIMATION FOR THE PROCESSING OF DATA

• Compliance with the request for the provision of services and / or pre-registration or registration.
• Comply with a legal obligation: Administrative, tax, tax, accounting and financial and educational regulations required to services provided by supported centers with public funds in Asturias
• Satisfy a legitimate interest of the Responsible: Assumptions of legitimate interest in which the controller could be injured party and necessary the processing and communication of the data of the non-compliance to third parties in order to manage regulatory compliance and the defense of the interests of the controller, fraud prevention, as well as the legitimate direct marketing interest enabled by the LSSICE (sending commercial communications about products or services similar to those contracted by the customer with a prior contractual relationship).
• The consent of the data subject in the case that he has given us the consent by ticking the boxes enabled for this purpose in this data protection clause

RECIPIENT OF DATA

• Organizations or persons related to VINJOY for the provision of services linked to the purposes of processing: Entities internship agreement (referral of CV + documentation of the selected).
• Agencies or bodies of the Public Administration with competences in the subjects subject to the purposes of the treatment: Centro Público Adcrito, Ministry of Education, University of Oviedo (EBAU Enrollment Management if required by the student).
• Insurance companies, in cases of investigation of incidents and / or crimes or illicit and that are necessary for the coverage of responsibilities.
• Forces and Security Corps (specify): To the extent that a justified right of access was required in the investigation of a regulatory breach.

UNDER WHAT WARRANTIES DO THE DATA COMMUNICATE?

The communication of data to third parties is made to entities that prove the provision of a Personal Data Protection System in accordance with the current legality.

HOW DO WE OBTAIN THE DATA?

• The interested party or his legal representative
• Families and third parties with whom VINJOY maintains a collaborative relationship in projects and / or provision of services and for which it must have their personal data for the processing of the requested service or to fulfill our commitments regulatory obligations associated with the service being provided and/or for the verification of regulatory compliance under the responsibility of the organization.

CATEGORY OF DATA TREATED

Personal data associated with the completion of the Pre-Registration Form (provided by Ministry of Education; it is the same model for all Asturias centers), Enrollment Form (it is proper to the Foundation), Photocopy of the ID/NIE/Passport, Certificate of disability or elite athlete, in case the applicant wants to access by the reserve quota for that condition, Student Acceptance Document in the case of students of the Master of Teacher Training and the Collaboration Agreement entities in the case of trainees.

PURPOSE OF THE TREATMENT OF PERSONAL DATA PROVIDED

• Internal use for selection processes to jobs, for incorporation into the Labour Exchange and for the offer and management of possible job or collaboration offers that may be generated.
• Management of assessment of competencies of candidates and people in selection and/or internal promotion to jobs
• Use in connection with the development of the application and its incorporation into the VINJOY Employment Exchange for the offer and management of any job or collaboration offers that may be generated, to the extent that it has unequivocally consented. To the extent that we were not agreed to that purpose, we would not be able to receive your candidacy to the extent that the management of candidates is carried out through the aforementioned employment market.
• Use of your CV in the technical offer to projects in which its incorporation is valued, if you have unequivocally consented.
• Compliance Management (applicable regulations as well as mandatory internal regulations): Investigation, monitoring and auditing of controls established for the prevention of crimes and the establishment of controls of access to the installations, information systems and printing of documentation for all personal data under the responsibility of the organization and therefore for all information systems of that entity.
• Management of the Contact with the interested party through the means of communication provided (mail and / or telephone) in order to manage notices and coordinate actions for the management of the selection process by people related to VINJOY and / or third parties to which contract the processes of selecting candidates for vacancies or jobs.
• The realization of the tests and / or certificates of aptitude that may be required for the purposes of selection of personnel, which will be optional, will be understood as an expression of the user's consent for the inclusion of the data provided, as well as, possibly, of its assessment, in the database of the VINJOY Labour Exchange and its automated processing in order to carry out that selection. As a result of access to facilities that may require the completion of such tests and/or certificates of fitness, treatments associated with the safety of such facilities may be carried out.
• Management of visits of the facilities, as well as the safety and compliance therein, preserve the safety of people and goods and facilities, as well as for the exercise of the functions of control of the workers provided for in the article 20.3 of the Workers' Statute, the investigation of possible incidents or accidents, management of associated insurance and management of warnings or sanctions for breaches of safety standards.
• Inclusion in the reporting channel systems of the data associated with the knowledge (even anonymously) of the commission within the organization or in the action of third parties who contract with it, of acts or conduct that could result contrary to the general or sectoral regulations applicable to it.

DATA RETENTION PERIOD

• Your Data will be kept for 1 year (except in cases where the candidate is selected in which case, they will become part of the processing of HR data of the contracting organization), as well as the legally provided deadlines for the exercise or any action for liability for breach of contract by the interested party or the Organization.
• The data included in the automated registers created to control access to buildings (Instruction 1/1996, of March 1, of the AEPD, on Automated Files established in order to control access to buildings) – 30 days.
• The data of the person who communicates the communication of a complaint and of the employees and third parties are kept in the complaint system to decide on the source of initiating an investigation into the reported facts as well as subsequently as evidence of the the model for preventing the commission of offences by the legal person, in accordance with Article 24 of the LOPDGDD.

LEGITIMATION OF DATA PROCESSING

• Compliance with the application to join the employee's job market through the candidate's self-candidacy through the referral of his CV through the organization's contact channels and/or selection companies hired for selection candidates for vacancies or jobs.
• To satisfy a legitimate interest of the Responsible: prevention of fraud and cases of legitimate interest in which the controller could be harmed party and it is necessary to process and communicate the data in the event of breaches to third parties in order to manage regulatory compliance and the defense of the interests of the controller), as well as assumptions of legitimate interest in specific treatments referred to in the LOPDGDD: Article 21. Processing related to the conduct of certain commercial transactions (corporate restructuring or business transmissions); Article 24 Internal Complaint Information Systems).
• The consent of the data subject who has provided us unequivocally through formal means and/or in the event that he has marked the boxes enabled for this purpose in this data protection clause

DATA DESTINATIONS

• Organizations or persons directly contracted by the Data Controller for the provision of services linked to the purposes of treatment: ETTS, entities with a convention of training practices and third parties to which the processes of selection of VINJOY vacancy candidates or jobs.
• Law Enforcement: To the extent that a justified right of access was required in the investigation of a regulatory breach.
• Compliance ComplaintS Channel (Complaints about regulatory and code of conduct violations are transmitted to the Compliance Unit): Access to the data contained in these systems will be limited exclusively to those who, whether or not they are in within the entity, develop the functions of internal control and compliance, or to those in charge of the processing that may be designated for this purpose. However, its access by other persons, or even communication to third parties, where necessary for disciplinary action or for the processing of judicial proceedings, where appropriate, shall be lawful.

UNDER WHAT WARRANTIES ARE YOUR DATA COMMUNICATED?

The communication of data to third parties is made to entities that prove the provision of a Personal Data Protection System in accordance with the current legality.

HOW HAVE WE OBTAINED THE DATA?

Through the interested party, ETTS, entities with a convention of training practices and third parties to which the processes of selection of candidates for vacancies or jobs of VINJOY

DATA CATEGORY

Identification and contact details; Academic and professional data relating to training, qualifications and professional experience; Personal data associated with marital status, family data, date and place of birth, age, sex, nationality; Work permit; Employment Status Data; Other data (Professional aspirations, Leisure and hobbies).

To the extent that the candidate reports on a disability condition, the certificates proving it may be required.

PURPOSE OF THE TREATMENT OF PERSONAL DATA PROVIDED

• Internal use for the management of the Employment Guidance and Insertion Service/Agency of the person responsible for the purpose of carrying out the intermediation in relation to managed job offers that respond to your professional profile.
• Use in terms of insertion and vocational training actions that may be carried out by our Employment Guidance and Insertion Service/Placement Agency or by the other Placement Agencies
• Management of assessment of competencies of candidates and people in selection and/or promotion to jobs
• Use in connection with the development of the application and its incorporation into the Employment Exchange generated as a result of the VINJOY Placement Agency service for the offer and management of possible job or collaboration offers that may be generated.
• Use of your contact details for the sending of information about events, training actions and the like, that the entity may consider of interest.
• Compliance Management (applicable regulations as well as mandatory internal regulations): Investigation, monitoring and auditing of controls established for the prevention of crimes and the establishment of controls of access to the installations, information systems and printing of documentation for all personal data under the responsibility of the organization and therefore for all information systems of that entity.
• Management of the Contact with the interested party through the means of communication provided (mail and / or telephone) in order to manage notices and coordinate actions for the management of the selection process by people related to VINJOY.
• The realization of the tests and / or certificates of aptitude that may be required for the purposes of selection of personnel, which will be optional, will be understood as an expression of the user's consent for the inclusion of the data provided, as well as, possibly, assessment, and automated processing for the purpose of carrying out such selection. As a result of access to facilities that may require the completion of such tests and/or certificates of fitness, treatments associated with the safety of such facilities may be carried out.
• Management of visits of the facilities, as well as the safety and compliance therein, preserve the safety of people and goods and facilities, as well as for the exercise of the functions of control of the workers provided for in the article 20.3 of the Workers' Statute, the investigation of possible incidents or accidents, management of associated insurance and management of warnings or sanctions for breaches of safety standards.
• Inclusion in the reporting channel systems of the data associated with the knowledge (even anonymously) of the commission within the organization or in the action of third parties who contract with it, of acts or conduct that could result contrary to the general or sectoral regulations applicable to it.

DATA RETENTION PERIOD

• The data provided will be kept for 1 year (except in the case in which it was selected by an offeror. In case the user wishes to extend the established retention period, it is necessary to register his resume again through the website: www.vinjoy.es/agencia-de-colocacion/).
• The data included in the automated registers created to control access to buildings (Instruction 1/1996, of March 1, of the AEPD, on Automated Files established in order to control access to buildings) – 30 days.
• The data of the person who communicates the communication of a complaint and of the employees and third parties are kept in the complaint system to decide on the source of initiating an investigation into the reported facts as well as subsequently as evidence of the the model for preventing the commission of offences by the legal person, in accordance with Article 24 of the LOPDGDD.

LEGITIMATION FOR THE PROCESSING OF DATA

• Compliance with the application to join the employee's job market through the candidate's self-candidacy through the referral of his CV through the organization's contact channels and/or selection companies hired for selection candidates for vacancies or jobs.
• To satisfy a legitimate interest of the Responsible: prevention of fraud and cases of legitimate interest in which the controller could be harmed party and it is necessary to process and communicate the data in the event of breaches to third parties in order to manage regulatory compliance and the defense of the interests of the controller), as well as assumptions of legitimate interest in specific treatments referred to in the LOPDGDD: Article 21. Processing related to the conduct of certain commercial transactions (corporate restructuring or business transmissions); Article 24 Internal Complaint Information Systems).
• The consent of the data subject who has provided us unequivocally through formal means and/or in the event that he has marked the boxes enabled for this purpose in this data protection clause

DATA DESTINATIONS

• Data may legitimately be communicated to entities related to the controller for the provision of services linked to the purposes under consideration, as well as to public entities within the scope of their competences, by obligation juridico. For this purpose, the data may be transmitted to any offering company for the purpose of selecting from the candidates submitted. At the same time the data may be transmitted between the different Placement Agencies that request it and the Public Employment Service and the different autonomous communities.
• Law Enforcement: To the extent that a justified right of access was required in the investigation of a regulatory breach.
• Compliance ComplaintS Channel (Complaints about regulatory and code of conduct violations are transmitted to the Compliance Unit): Access to the data contained in these systems will be limited exclusively to those who, whether or not they are in within the entity, develop the functions of internal control and compliance, or to those in charge of the processing that may be designated for this purpose. However, its access by other persons, or even communication to third parties, where necessary for disciplinary action or for the processing of judicial proceedings, where appropriate, shall be lawful.

UNDER WHAT WARRANTIES DO THE DATA COMMUNICATE?

The communication of data to third parties is made to entities that prove the provision of a Personal Data Protection System in accordance with the current legality.

HOW HAVE WE OBTAINED THE DATA?

Through the interested party, legal representative and / or contact persons of the interested party.

DATA CATEGORIES

Identification and contact details; Academic and professional data relating to training, qualifications and professional experience; Personal data associated with marital status, family data, date and place of birth, age, sex, nationality; Work permit; Employment Status Data; Other data (Professional aspirations, Leisure and hobbies).

To the extent that the candidate reports on a disability condition, the certificates proving it may be required.

WHAT ARE YOUR RIGHTS?

• You have the right to obtain confirmation as to whether or not we are processing personal data concerning you.
• The persons concerned have the right to access their personal data, as well as to request the rectification of the inaccurate data or, where appropriate, request its deletion when, among other reasons, the data are no longer necessary for the purposes that were collected.
• In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only retain them for the purposes of exercising or defending claims.
• In certain circumstances and for reasons related to their particular situation, the interested parties may object to the processing of their data, in which case the Data Controller will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of potential claims.
• Under the right to portability, data subjects have the right to obtain their personal data in a structured format of common use and mechanical reading and to transmit it to another controller.
• In the event that you have given consent for any specific purpose, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

WHERE TO GO TO EXERCISE YOUR RIGHTS?

• If you wish to exercise your rights, please go to the channel established for the exercise of rights by the controller: dpo@vinjoy.es so that we can respond to your request in a managed manner.

WHAT INFORMATION IS REQUIRED TO EXERCISE YOUR RIGHTS?

To exercise your rights, we need to prove your identity and the specific request you make to us, as we request the following information:

• • Documented information (written/email) of the request in which the request is made.
  • Proof of identity as the owner of data subject to the exercise (Name, surname of the interested party and photocopy of the ID of the interested party and/or the person representing it, as well as the document proving such representation.
  • Address for the purposes of notifications, date and signature of the applicant (in case of writing), or full name and surname (in case of email), or validation of the request in private area of the communication channel with personal key of authentication of its Identity.
  • Where the controller has reasonable doubts regarding the identity of the natural person making the request, he may request that the additional information necessary to confirm the identity of the data subject be provided.

WHAT IS THE GENERAL PROCEDURE FOR EXERCISING YOUR RIGHTS?

Once we have received the required information we will proceed to respond to your request in accordance with VINJOY's general rights exercise procedure:

• The controller shall provide the data subject with information concerning his actions on the basis of an application under Articles 15 to 22 (Rights of the data subject) and, in any event, within one month of receipt of the request.
• That period may be extended by another two months if necessary, taking into account the complexity and number of applications.
• The controller shall inform the interested party of any such extensions within one month of receipt of the request, indicating the reasons for the delay.
• Where the data subject submits the application by electronic means, the information shall be provided by electronic means where possible, unless the data subject requests that it be provided otherwise.
• If the controller does not comply with the request of the data subject, he will inform him without delay, and no later than one month after receipt of the request, the reasons for his non-action and the possibility of filing a complaint with a co-authority ntrol and to bring legal proceedings.
• The information provided shall be free of charge, except for reasonable fees for administrative costs.
• The controller may refuse to act in respect of the application, but shall bear the burden of demonstrating the manifestly unfounded or excessive nature of the application.

WHAT CLAIM WAYS ARE THERE?

• If you consider that your rights have not been properly addressed, you have the right to lodge a complaint with the competent data protection authority (agpd.es).