DATA PROTECTION POLICY
DATA CONTROLLER
GROUNDFORCE HANDLING, S.A.U., CIF A-57218737 and its subsidiaries (including UTEs and Groundforce Cargo) all operate the GROUNDFORCE brand. Their registered office is at Ctra. Arenal - Llucmajor Km 21.5 - 07620 Llucmajor- Balearic Islands - Spain.
You can contact the Data Protection Officer (DPO) at the above postal address and/or via e-mail at: delegadopd@groundforce.aero
The DPO is responsible for ensuring that GROUNDFORCE complies with data protection regulations. The DPO carries out their supervisory and monitoring work independently and confidentially.
SCOPE OF THE POLICY
By accessing and using this website, or by using any other means involving the processing of personal data, you agree to accept this Privacy Policy, as well as the provisions contained in the Legal Notice and Cookies Policy.
GROUNDFORCE provides you with information so that you can access the Privacy Policy and any other relevant Data Protection prior to filling in your personal data.
PURPOSES OF DATA PROCESSING
° To manage spontaneous applications and/or specific job offers.
° To manage employment or human resources relationships.
° To manage contractual and commercial relashionships with service providers (contact persons and/or legal representatives).
° Addressing queries, complaints, incidents, claims and requests made by interested parties (customers, employees, suppliers, users, etc.), and forwarding them to GROUNDFORCE areas/companies as required.
° To handle requests to exercise rights and for defence in any legal action.
° To manage the Ethics Channel (communications, investigations, messures, etc.).
° To manage the preventions, investigation and detection of criminal offences.
° To control security (people, goods and facilities) and access to GROUNDFORCE facilities (video surveillance and turnstiles).
° To manage the publications of GROUNDFORCE news.
° To track the connections and navigation data of users of the website.
TERM OF CONSERVATION OF PERSONAL DATA
The retention period for personal data varies depending on the purpose for which it was collected, ranging from contacting users who request it tho hiring or not hiring our services, managing your CV, and so on.
Subsequently, we will keep your data blocked during the limitation periods for obligations that may have arisen from the processing and/or applicable legal periods (maximun of 10 years), remaining available to the competent authorities for addressing potential liabiliteis arising from the proecssing.
In the case of video surveillance images, they will be keep for a period not exceeding 30 days from the capture of the images.
LEGITIMACY
- Pre-contractual and, where appropriate, contractual measures, based on Article 6.1.b) of the GDPR.
- To manage employment or human resources relationships
- For the contractual relationship with suppliers.
- When users browse the Web Site and accept the Terms of Use of this.
- Compliance with legal obligations, based on Article 6.1.c) of the GDPR.
- In cases in which the data subject exercises the rights indicated below.
- As a consequence of legal actions brought by or against GROUNDFORCE.
- In response to requirements of the different Public Administrations (Tax Agency, Social Security, Spanish Data Protection Agency, etc.).
- Public interest or in the exercise of public powers, based on art. 6.1. e) of the GDPR.
- When carrying out video surveillance and access control of the facilities.
- When the Ethical Channel is managed through the parent company (GLOBALIA CORPORACIÓN EMPRESARIAL, S.A.).
- For crime prevention through the Criminal Risk Management System through Globalia’ s parent company (GLOBALIA CORPORACIÓN EMPRESARIAL, S.A.).
- Legitimate interest based on Article 6.1.f) of the GDPR.
- To attend the Contact that the different press media may request regarding GROUNDFORCE.
- To attend to any type of enquiry, request for information, complaint or claim relating to GROUNDFORCE companies.
- Consent of the data subject based on Article 6.1.a) of the GDPR.
- Obtained through the box prepared for this purpose when the user registers for a GROUNDFORCE job offer or when he/she freely submits his/her curriculum vitae.
- When the user accepts the use of cookies and other analytical tools on the website.
RECIPIENTS
1. Competent Public Agencies (AENA, AESA, etc.), Tax Agency, the State Security Forces and Corps and Judges and Courts, when GROUNDFORCE is legally obliged to provide them.
2. In the case of the Job Portal, the CVs of applicants and candidates will be communicated to the GROUNDFORCE company whose activity best matches the profile. GROUNDFORCE companies are all those companies or entities in which GLOBALIA HANDLING, S.A.U. is the parent company for the purposes of Article 42 of the Code of Commerce and, specifically, the companies listed in the annual report of the Globalia Group published on the website www.globalia-corp.com.
3. GROUNDFORCE also collaborates with certain third-party service providers, including Globalia Group companies such as the parent company Globalia Corporación Empresarial, S.A. These providers have access to your personal data and process it on GROUNDFORCE's behalf as part of their service provision.
Specifically, and by way of example and not limitation, these suppliers provide services in the following sectors: logistics/handling, legal advice, multidisciplinary professional services, technology, physical security and call centres.
Please note that some of the aforementioned service providers, as well as certain partners, are based in countries outside the European Economic Area, some of which do not offer the same level of data protection as the European Union.
In such cases, GROUNDFORCE carries out international data transfers based on an adequacy decision or with adequate safeguards (standard contractual clauses). In the absence of adequate safeguards, this will be done with the user's explicit consent or to fulfil a contract with the user.
Therefore, under no circumstances will your personal data be shared with third parties without your prior consent, unless the transfer of your data is necessary to maintain our relationship with you or in cases provided for by data protection regulations in force at any time.
DATA PROTECTION RIGHTS
You can request the exercise of the following rights by sending a written communication to GROUNDFORCE's registered office, addressed to the "Data Protection Officer", or to the email address delegadopd@groundforce.aero, providing the necessary identification details:
Right of access. You authorise us to contact us to find out if your data is being processed and, if it is being processed, to obtain information on this matter.
Right of rectification. You can request the rectification of any data you consider inaccurate, and we will proceed to correct it with the new data you provide us with.
Right to object. Whenever the processing is covered by a public or legitimate interest, profiles are created or the processing is intended for direct marketing, you may oppose it. GROUNDFORCE (except for direct marketing) may prove reasons that prevail over this right.
Right of Erasure. You can request the deletion of the data provided that the causes stipulated by the regulations are met (see article 17 GDPR).
Right to request the limitation of processing. This is an auxiliary right whereby, while you have requested the deletion, rectification or opposition to the processing, GROUNDFORCE will block the data until your complaint has been resolved.
Right to data portability. You may request, when the processing is carried out by automated means, the transfer of your data to another company, provided that the processing is legitimate, based on the consent or in the framework of the execution of a contract.
Right not to be subject to automated decision making. This right aims to ensure that you are not the subject of a decision based solely on the processing of your data, including the creation of profiles, if the decision produces legal effects concerning you or significantly affects you in a similar way.
How can you make a complaint to the Control Authority?
If you consider that GROUNDFORCE is processing your data incorrectly, you can make a complaint to the Data Protection Officer or the relevant data protection supervisory authority. In Spain, this is the Spanish Data Protection Agency (AEPD).
SECURITY
At GROUNDFORCE, we maintain the highest levels of security required by law to protect your personal data from accidental loss, as well as from unauthorised access, processing or disclosure. We consider the state of technology, the nature of the data stored, and the risks to which it is exposed. When we receive your data, we use rigorous procedures and security features to prevent any unauthorised access.
The actions outlined in this section, intended to ensure an appropriate level of security for the identified risk, should include the following measures as needed:
1. Pseudonymisation and encryption of personal data.
2. Measures to guarantee the confidentiality, integrity, availability and permanent resilience of processing systems and services.
3. Measures to restore the availability and accessibility of personal data quickly in the event of a physical or technical incident.
4. A process for regularly verifying, evaluating and assessing the effectiveness of technical and organisational measures to ensure processing security.
5. Periodic assessment of the risk of accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or of unauthorised communication or access to such data.
6. Measures to ensure that any GROUNDFORCE employee with access to personal data can only process such data in accordance with GROUNDFORCE's instructions.
CONFIDENTIALITY
Any personal data collected will be processed in the strictest confidence. We are committed to keeping this data secret and will adopt all necessary measures to prevent its alteration, loss, or unauthorised access or processing, in accordance with applicable legislation.
COOKIES
Our website may use "cookies" to collect information about how you use the Website. For more detailed information on how GROUNDFORCE uses cookies, please refer to the Cookies Policy.
UPDATE PRIVACY POLICY
This privacy policy may be modified by GROUNDFORCE as a result of legislative changes, jurisprudential doctrine and rulings of the AEPD that are directly, indirectly or sectorially applicable.
Any changes we make to our Privacy Policy will be posted on this page.