Privacy Policy

Your privacy and trust are important to us. Therefore, in this Privacy Policy, we provide important information about how we process your personal data in accordance with current personal data protection regulations on this website. We recommend that you read the following carefully and, if you have any questions after doing so, you can contact us through the means we make available to you.

DATA CONTROLLER

The Data Controller for your personal data and owner of this website is the company POPPY SHARE S.L.U., with CIF B-44593671 and registered office in Zaragoza, Calle Cantín y Gamboa 8, local; 50.002 Zaragoza.

In addition to the address indicated above, if you wish to contact us, you can do so through our:

TYPOLOGY, PURPOSE, AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

We collect personal data from:

Job applicants: this data is collected for the purpose of conducting selection processes and affects categories such as identification data, special categories of data (health/disability), personal characteristics data, academic and professional data, and employment detail data. The legal basis for processing this data is the consent expressed by the data subjects themselves and the execution of a pre-contract. This data will not be transferred to third parties and will be kept for a period of six months.

Employee data: this data is intended for the management of the employment relationship, preparation of payroll, control of the workday, and other obligations derived from it. The data collected includes identification data, special categories (health/disability), personal characteristics data, academic and professional data, employment detail data, and economic data. Furthermore, if consent is provided, it may be used to send social benefits or similar to workers. The legal basis for data processing is the relationship between the parties and compliance with various legal obligations. The data retention period is set at five years from the end of the employment relationship, except for payroll, TC1, and TC2 forms, which must be kept for ten years.

Customer data: This data is intended to maintain a commercial relationship and carry out the administrative, economic, and accounting management of the same. The processing of this data is legitimized by the execution of a contract, compliance with a legal obligation, and the legitimate interest of the entity itself. Customer data is purely identification and economic and may be transferred to the competent Public Administrations for compliance with the appropriate legal obligations. This data will be kept for a period of 5 years from the end of the commercial relationship.

Supplier data: The purpose of the data processing is to maintain a commercial relationship and carry out economic and accounting management as well as the control of income and expenses. The legal basis for the data processing is the execution of a contract between the parties and the legitimate interest of the data controller. The data included are identification data, commercial information, and economic data. This data may be transferred to the competent Public Administrations for compliance with the appropriate legal obligations.

Website user data: this data is intended to attend to the user’s request. The data included in this processing is identification data. The basis that legitimizes the processing is the consent of the interested party. This data will not be transferred to third parties and will be kept as long as the interested party does not request its express cancellation.

Partner data: the purpose of the processing is to comply with the appropriate commercial obligations. The data collected is purely identification and employment details. The basis that legitimizes the processing of this data is compliance with a legal obligation. This data may be communicated to the commercial registry and will be kept indefinitely.

Video surveillance data: the purpose of the processing is to guarantee security in the company’s facilities. The data collected is purely identification and the basis that legitimizes the processing of this data is the public interest pursued. This data may be communicated to the State Security Forces and Corps and will be kept for a period of one month.

Data derived from the exercise of rights: the purpose of the processing is to attend to the exercise of rights regarding data protection, and for this purpose, only identification data is collected. The legal basis for the data processing is compliance with current regulations on data protection. This data will be minimized and kept for 2 years in compliance with the provisions of current data protection regulations.

Web analytics data (cookies): only IP and MAC data are collected and are intended to perform analytics on website traffic. The consent of the interested party by authorizing the use of cookies is our legal basis for the processing of personal data. Since this data is transferred to Google through “Google Analytics,” the retention period will be that established by Google in its policy at any given time. For more information regarding the use of cookies, you can consult the cookies policy on our website.

HOW DO WE SHARE INFORMATION WITH THIRD PARTIES?

We share personal information with third parties in order to provide services under the terms described in this Privacy Policy or by legal requirement. When we share personal information, we do so in accordance with privacy and data security requirements.

In addition, POPPY SHARE has the collaboration of some service providers who have access to your personal data and who process said data on behalf of this entity as data processors and as a result of their provision of services. Specifically, and by way of example and not limitation, the aforementioned providers perform their services in the following sectors: legal advice, multidisciplinary professional services companies, maintenance-related companies, IT service providers, training companies, etc.

INTERNATIONAL TRANSFERS

At this time, POPPY SHARE does not perform international transfers of the data handled and, should it be necessary to perform them, you will be previously informed of it.

EXERCISE OF RIGHTS AND COMPLAINTS BEFORE THE SPANISH DATA PROTECTION AGENCY

At any time, the User may withdraw their consent and/or exercise their rights of access, rectification, erasure, limitation, objection, and portability provided for in European personal data protection regulations, by sending an email to administracion@poppylife.es or by sending postal mail addressed to:

POPPY SHARE S.L.U.

Attn: Internal Data Protection Officer

Calle Cantín y Gamboa nº 8, local

50.002 Zaragoza

In such a case, the User must indicate the right they wish to exercise and attach a copy of their ID or any other valid identification documentation that legitimizes them to do so, including that which allows their electronic identification.

In case of not seeing your rights effectively addressed, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

YOUR COMMITMENT, THE ACCURACY OF THE DATA YOU PROVIDE US

The User declares that the personal data they provide to this entity is true. As a User, you should know that you are solely responsible for any damage or harm, direct or indirect, that could be caused to this company as the party responsible for this website or to a third party if you send us false data or data of third parties without having their prior consent, causing deception, damage, or harm.

So that we can keep your data accurate and up to date, we ask the User to communicate any variation that may occur in the data provided.

APPLICABLE SECURITY MEASURES

In order to protect the personal data of the interested parties, POPPY SHARE ensures by itself and controls its data processors in the application of technical and organizational measures appropriate to the state of the art to protect personal data, taking into account the scope, context, and purposes of the processing, as well as the risks of varying probability and severity for the rights and freedoms of the interested parties, striving to be able to ensure the confidentiality, integrity, availability, and resilience of the processing systems and services.

Our information security policies and procedures are reviewed and updated regularly to meet our business needs, technological changes, and regulatory requirements.

APPLICABLE LEGISLATION AND JURISDICTION

POPPY SHARE is based in Spain, so the content of this Privacy Policy has been drafted under Spanish legislation and applicable European Union regulations.

By accepting this Privacy Policy, you agree that any claims or complaints against this entity arising from or related to the use of this website and more specifically with the processing of your personal data will be resolved by the court of competent jurisdiction located in Zaragoza.

If the User accesses this site from a location outside of Spain, they are responsible for complying with all local and international laws that apply to them.

LAST UPDATED

Privacy Policy last updated on December 22, 2024.