Privacy policy

PRIVACY POLICY

WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?

The DATA CONTROLLER responsible for processing your personal data is:

NEREALOR, S.L.
Tax ID (CIF): B75171256
Registered address: Parque Empresarial Zuatzu 5, Edificio Donosti, 2nd Floor, Office 2, 20018 Donostia-San Sebastián, Gipuzkoa, Spain
Email address: info.rgpd@alor-tech.com

WHAT TYPES OF PERSONAL DATA DO WE PROCESS?

Depending on the products, services or features you wish to use at any given time, we may need to process different types of personal data. In general, depending on the circumstances, this data may include:

  • Identification data, such as your first name, surname, language, the country from which you interact with us and your contact details.

  • Connection, geolocation and browsing data, for example, when you interact with us using a mobile device.

  • Marketing information, where you have subscribed to our newsletter.

  • Information regarding your interests and preferences.

Please remember that when we ask you to provide personal data in order to access a particular website feature or service, certain fields will be marked as mandatory. This is because the information requested is necessary for us to provide the relevant service or grant you access to the feature in question.

Please note that, should you choose not to provide this information, you may be unable to complete your registration as a user or use certain services or features.

Through the whistleblowing channel, we will not collect personal data that is clearly irrelevant to the handling of a specific report. Where such data is collected accidentally, it will be deleted without undue delay.

FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?

Depending on how you interact with our website, we will process your personal data for the following purposes:

1. To respond to requests or enquiries submitted through the various channels available on our website

We only process the personal data that is strictly necessary to manage or respond to your request or enquiry.

2. For marketing purposes

Where you subscribe to our newsletter, your personal data will be used to send you periodic company newsletters and updates.

You may unsubscribe from the newsletter at any time and free of charge by contacting us at the Data Controller’s email address or by following the unsubscribe instructions included in each of our communications.

3. To manage the whistleblowing channel

We process your personal data in order to manage your report and provide appropriate protection against retaliation.

4. To manage our social media accounts

Where you follow or contact us through any of the social media platforms on which we are present, we will process the data you provide through those platforms solely for the purpose of responding to your messages or comments and managing our contact list.

5. Usability and quality analysis to improve our services — cookies

When you access our Platform, we process your browsing data for analytical and statistical purposes. This enables us to understand how users interact with our Platform and to make improvements.

From time to time, we may also conduct quality initiatives and surveys to assess the level of satisfaction among our customers and users and identify areas in which we can improve.

6. Careers and job applications

The purpose of this processing is to manage your job application with NEREALOR, S.L.

WHAT IS THE LAWFUL BASIS FOR PROCESSING YOUR PERSONAL DATA?

The lawful basis that enables us to process your personal data depends on the purpose for which the data is processed. The applicable lawful bases are therefore as follows:

1. Responding to information requests

The lawful basis for processing your personal data is the informed consent you provide so that we can respond to enquiries submitted through the website. This entails your acceptance of these terms.

2. Marketing

The lawful basis for processing your personal data for marketing purposes is the consent you provide.

3. Whistleblowing channel

The lawful bases for processing are:

  • Compliance with a legal obligation.

  • The performance of a task carried out in the public interest.

  • Where special categories of personal data are processed, the processing will be necessary for reasons of substantial public interest.

4. Social media

The lawful basis for processing is the informed consent you provide when submitting enquiries through a social media platform, as well as when you follow us and choose to become part of our contact list.

5. Usability and quality analysis — cookies

The lawful basis for processing is the consent provided through our website for the installation of the cookies you choose to accept.

6. Careers and job applications

The lawful basis in this case is the implementation of pre-contractual measures requested by the data subject, in accordance with Article 6(1)(b) of the GDPR.

HOW LONG WILL WE RETAIN YOUR PERSONAL DATA?

Information requests

We will process your personal data for as long as necessary to respond to your request or enquiry and for one year thereafter.

Marketing

We will process your personal data until you request to unsubscribe or cancel your newsletter subscription.

Whistleblowing channel

The personal data of the person submitting the report, employees and third parties will be retained within the whistleblowing system only for as long as strictly necessary to determine whether an investigation into the reported events should be initiated.

Where it is established that all or part of the information provided is inaccurate, the information will be deleted immediately upon becoming aware of this fact, unless the inaccuracy could constitute a criminal offence. In such cases, the information will be retained for as long as necessary during the relevant legal proceedings.

In all cases, personal data will be deleted from the whistleblowing system three months after it was entered, unless it must be retained as evidence of the system’s operation.

Social media

We will process your personal data for as long as necessary to respond to your request or enquiry and for as long as you continue to follow our profile.

Careers and job applications

We will retain the personal data contained in your CV for one year from the date on which it is received. After this period, the data will be destroyed and/or deleted.

WILL WE SHARE YOUR PERSONAL DATA WITH THIRD PARTIES?

Personal data will not be transferred or disclosed to third parties unless:

  • We are legally required to do so.

  • We have obtained your express consent.

  • We consider that we have a legitimate interest in doing so, in which case you will be duly informed.

However, please note that we are present on the following social media platforms: Facebook, LinkedIn, X, Instagram and YouTube. We use these platforms to keep our followers informed about company news and services.

You may access these social media platforms voluntarily through the links available on our website or directly through your browser or an installed application.

Please be aware that this website is not responsible for how these social media platforms use your personal data. However, where personal data is generated on a social media platform as a result of an interaction with our official account, we and the relevant social media platform may act as joint controllers of that data.

To consent to the transfer and processing of your personal data through this website, you should carefully read the privacy policy of the social media platform you wish to access:

LinkedIn: https://es.linkedin.com/legal/privacy-policy

With regard to personal data collected through the whistleblowing channel, your identity will remain confidential in all cases and will not be disclosed to the persons referred to in the reported events or to any third parties.

Personal data may be disclosed to the courts, the Public Prosecutor’s Office or the competent administrative authority in connection with a criminal, disciplinary or administrative investigation.

WHAT RIGHTS DO YOU HAVE WHEN YOU PROVIDE US WITH YOUR PERSONAL DATA?

We are committed to maintaining the confidentiality of your personal data and ensuring that you can exercise your rights.

You may exercise these rights free of charge by sending an email to info.rgpd@alor-tech.com, stating the reason for your request and specifying the right you wish to exercise.

Where we consider it necessary to verify your identity, we may ask you to provide a copy of an identity document.

Regardless of the purpose or lawful basis on which we process your personal data, you have the right to:

  • Request access to the personal data we hold about you.

  • Request that we rectify any personal data we hold about you. Please note that, when you actively provide us with personal data through any channel, you guarantee that the information is true and accurate and undertake to notify us of any changes or amendments.

  • Request that we delete your personal data where it is no longer necessary for the purposes for which it was processed, as previously explained, or where we no longer have a lawful basis for processing it.

  • Request that we restrict the processing of your personal data. In certain circumstances, this means that you may ask us to temporarily suspend the processing of your data or retain it for longer than would otherwise be necessary where you may require it.

  • Withdraw your consent at any time where you have consented to the processing of your personal data for any purpose.

  • Receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and transmit that data to another data controller.

  • Object to the processing of your personal data where the processing is based on our legitimate interests.

Lastly, you have the right to lodge a complaint with the relevant data protection supervisory authority, particularly the Spanish Data Protection Agency:

https://www.agpd.es/portalwebAGPD/index-ides-idphp.php

CHANGES TO THIS PRIVACY POLICY

We may amend the information contained in this Privacy Policy whenever we consider it appropriate.

Where we make changes, we will notify you through the Platform using various communication channels. Where a change is particularly significant in relation to your privacy, we may also notify you by email so that you can review and assess the changes and, where applicable, object to them or unsubscribe from a service or feature.

INFORMATION ABOUT COOKIES

We use cookies and similar technologies to make it easier for you to browse the Platform, understand how you interact with us and, in certain cases, display advertising based on your browsing habits.

Please read our Cookie Policy for more detailed information about the cookies and similar technologies we use, their purposes and other relevant information.