Processing of (personal) data by the entity in charge of the online application process

Introduction

DELFOS ENERGY S.L. (hereinafter “the Company” or “Delfos”) is the owner of the Web Site https://www.delfos.energy/ (hereinafter the "Web Site") and is responsible for the processing of the personal data of its users (hereinafter the "User(s)").

Through this Privacy Policy, and in compliance with Articles 12 and 13 of Regulation (EU) 2016/679 (hereinafter "GDPR") and Article 11 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights ("LOPDPGDD"), the Company informs Users browsing the Website about the processing of their personal data that may be collected through this and processed by the Company.

Information about the data controller:

Data Controller: DELFOS ENERGY, SOCIEDAD LIMITADA.

TAX ID: B56184161

Registered office: Plaza de Gal La Placidia, 1-3 08006-Barcelona

Data processed, legal basis, purposes and storage period.

DATA PROCESSED	LEGAL BASIS	PURPOSES	CONSERVATION PERIOD
BROWSING DATA. Due to Internet communication standards, when the User accesses our Web Site we automatically receive the IP address of your computer and the type of browser you are using. We use this information to analyze general trends and improve the service. This information is not shared with third parties without your consent.	Consent given through the cookie banner at the start of navigation. Users may withdraw their consent by following the steps indicated in the Cookies Policy. Legitimate interest. Those cookies categorized as technical will be deemed necessary for the operation of the Website.	Analysis of browsing behavior and statistics: The information collected through cookies and other similar tracking technologies allow an analysis of the navigation made by Users.	The retention periods depend on each specific cookie. For more information on the information retention periods for each type of cookie, please consult the Cookies Policy.
CONTACT INFORMATION. (When clicking on Contact Us and or ChatBot) Name, telephone, email, country and company.	Consent of the User.	To attend and respond to requests, comments, suggestions. As well as providing support, recommendations to improve the user experience and recommend products more accurately during the use of the Website. In addition to helping Delfos to improve its website and the products and services they offer.	The personal data will be processed by Delfos for the period necessary to answer the question and/or resolve the incident indicated by the User. Said data will be blocked in order to comply with Delfos’ s legal obligations and, once this period has elapsed, will be definitively deleted.
COMMERCIAL COMMUNICATIONS. The User, if he/she so wishes, may authorizes Delfos to contact via social networks and messaging applications. For this purpose, the Costumer’s e-mail address will be processed.	Consent of the User.	If you have consented to receive commercial communications, this data is used to send you commercial information about Delfos. For more information on commercial communications, please see our Legal Notice.	The data will be processed by Delfos until the Costumer withdraws his/her consent. Once consent has been withdrawn, Delfos will block your data for the time necessary to comply with legal obligations. At the end of this period, the data will be definitively deleted.
CANDIDATES DATA: Email address, information contained in the CVs.	Consent of the User	Creation of a User account: This data will be processed in order to create a user account for you so that you can be informed of vacancies at Delfos. In case the user does not find the vacancy he/she is looking for, he/she can register his/her Curriculum Vitae in the talent pool.	The personal data indicated will be kept as long as the User maintains his or her status as a Registered User, that is, until the User communicates to Delfos his or her desire to unsubscribe or Delfos has proceeded to unsubscribe the User.

TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

Delfos informs that, for the fulfillment of the purposes described above, it will not transfer the User's personal data to third parties. Notwithstanding the foregoing, Delfos may give access to such personal data to:

Hosting service providers.
Service providers to monitor and analyze the use of the Website.
Service providers of email marketing services.- (when applicable to commercial communications).
Candidate service provider platform (when applicable to manage candidatures for job vacancies)
ChatBot service providers.
Affiliates (may include Delfos’ parent company and any other subsidiaries, joint venture partners or other companies that Delfos control or that are under common control with Delfos).
With other users or registration through a Third-Party Social Media Service.

The aforementioned suppliers may be located in jurisdictions that generally do not provide adequate safeguards in relation to the processing of personal data. For all entities that are not part of the European Economic Area (EEA), the Organizing Company has signed contracts with such entities that include the safeguards required by the applicable regulations, including the model clauses of the European Commission, the Company having carried out the corresponding Impact Assessment of the International Transfers that Users may obtain more information about technology service providers by requesting the same from Delfos through the means of contact provided in this privacy policy.

Also, Delfos may communicate User data to:

Companies interested in buying or acquiring the company or a part of its business and, consequently, give access to any national or international auditor to carry out their due diligence.
Authorities to investigate suspected fraud, harassment or other violations of any law, rule or regulation, or of the website policies.

SECURITY AND CONFIDENTIALITY

Delfos undertakes to adopt the necessary technical and organizational measures, in accordance with the provisions of the applicable regulations, to ensure the security of personal data and prevent the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorized communication or access to such data. Personal data will be treated confidentially by Delfos, which undertakes to inform and enforce, by legal or contractual obligation, such confidentiality to its employees, partners and any person who should have access to the User's personal data.

DATA RETENTION

Delfos only keeps personal data for as long as it is necessary to fulfil the purposes for which we have collected them, even to comply with legal, accounting or information requirements.

To determine the appropriate retention period for personal data, Delfos considers the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data, the purposes of processing personal data and the applicable legal requirements.

USERS' RIGHTS

The User may exercise the rights of access, rectification, deletion, opposition and, where appropriate, limitation of processing and portability of data by sending an email to contact.eu@delfos.energy.

Likewise, the User may file a complaint with a supervisory authority and, in particular, with the Spanish Data Protection Agency (www.aepd.es) if he/she considers that the rights set forth above in this Privacy Policy have been violated or if he/she considers that the processing of personal data concerning him/her violates the applicable regulations.

COMMERCIAL COMMUNICATIONS

When the User subscribes to the newsletter, the User will receive electronic commercial communications in accordance with applicable law, including alerts, notifications, newsletters, offers and promotions about Delfos services. If the User do not wish to receive information related to the Delfos services, the User may unsubscribe from any of our "Unsubscribe" communications or let us know by sending a notification to contact.eu@delfos.energy

CHANGES IN THE PRIVACY POLICY

Delfos reserves the right to modify this Privacy Policy at any time. Changes or updates to the Privacy Policy will be explicitly notified to the User by means of a notice on the Website, together with the updated version of the Privacy Policy.

Processing of (personal) data by the operator of the recruitment website

General information

This recruitment website is operated by Personio SE & Co. KG, which offers a human resource and candidate management software solution (https://www.personio.com/legal-notice/). Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The sole controller of this data within the meaning of article 24 of the GDPR is the enterprise carrying out this online application process. Personio’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 28 of the GDPR. In this case, the processing by Personio is based on an agreement for the processing of orders between the controller and Personio. In addition, Personio SE & Co. KG processes further data, some of which may be personal data, to provide its services, in particular for operating this recruitment website. We will refer to this in more detail below.

The controller

The controller under data protection law is:
Personio SE & Co. KG
Seidlstraße 3
80335 München
Tel.: +49 (89) 1250 1004
Entry in the commercial register
Commercial register entry number: HRA 115934
Registration Court: Amtsgericht München
Data Protection Officer contact: privacy@personio.com

Access logs (“server logs”)

Each access to this recruitment website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web. These access logs are stored for a period of up to 7 days. There is no right to object to this.

Error logs

So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected. These error logs are stored for a period of up to 7 days. There is no right to object to this.

Use of cookies

So-called cookies are used on parts of this recruitment website. They are small text files which are stored on the device with which you access this recruitment website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”), or placing targeted advertisements (“marketing”). On this recruitment website, we generally use only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website. The use of cookies is absolutely necessary for providing our services and thus for the performance of the contract (article 6 (1) b) of the GDPR). Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of this recruitment website.

Rights of data subjects

If Personio SE & Co. KG as the controller processes personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access (article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under article 7 III of the GDPR. To assert your rights as a data subject in relation to the data processed for the purpose of operating this recruitment website, please refer to Personio SE & Co. KG’s Data Protection Officer (see item B).

Concluding provisions

Personio reserves the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.