Privacy Policy

1. Introduction

INTZA SA must ensure that the personal data of the interested party are treated according to the principles relating to treatment:
  • Processed in a lawful, fair and transparent manner in relation to the data subject (“lawfulness, fairness and transparency”).
  • Collected for specific, explicit and legitimate purposes and may not be processed in a manner incompatible with said purposes (“purpose limitation”).
  • Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (“data minimisation”).
  • Accurate and, if necessary, updated by adopting reasonable technical and organizational measures to ensure that they are deleted or rectified when they are inaccurate with respect to the purposes for which they are processed ("accuracy").
  • Kept in a manner that permits identification for no longer than necessary for the purposes of the processing (“retention period limitation”).
  • Treated in a way that ensures appropriate security through the application of appropriate technical or organisational measures (“integrity and confidentiality”).

Thus, INTZA SA will be responsible for compliance with the provisions set forth above and must be able to prove this subsequently (“proactive responsibility”).

Likewise, the processing carried out by the entity will only be lawful if it meets at least one of the following conditions (“lawfulness of processing”):

  • the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
  • processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the data subject's request prior to entering into a contract;
  • the processing is necessary for compliance with a legal obligation to which the controller is subject;
  • processing is necessary to protect the vital interests of the data subject or of another natural person;
  • processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. This legitimate basis shall not apply to processing carried out by public authorities acting in the exercise of their duties. Where processing is based on the data subject's consent, the controller must be able to demonstrate that the data subject has consented to the processing of his or her personal data.

If the data subject's consent is given in the context of a written declaration which also concerns other matters, the request for consent shall be presented in such a way that it is clearly distinguishable from the other matters, in an intelligible and easily accessible form and using clear and plain language.

The interested party shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of the processing based on consent prior to its withdrawal. Before giving consent, the interested party shall be informed of this. It will be as easy to withdraw consent as to give it.

Furthermore, personal data may only be processed that reveal ethnic or racial origin, political opinions, religious or philosophical beliefs, or trade union membership and the processing of genetic data, biometric data aimed at uniquely identifying a natural person, data relating to the health or data relating to the sexual life or sexual orientation of a natural person in the cases provided for in Article 9 of the GDPR.

The processing of personal data relating to criminal convictions and offences or related security measures may only be carried out under the supervision of public authorities or where authorised by Union or Member State law which provides for appropriate safeguards for the rights and freedoms of the data subjects.

INTZA SA must include in the forms used to collect personal data the information to comply with the duty to inform contained in articles 13 and 14 of the General Data Protection Regulation (hereinafter GDPR).

In this regard, and in order to comply with the applicable and current regulations on data protection, when INTZA SA obtains personal data directly from an interested party, it will have to:

  • Provide the identity and contact details of the Data Controller and, where applicable, of his/her representative, the contact details of the Data Protection Officer, where applicable, and the purposes for which the personal data are processed, as well as the legal basis for the processing.
  • Specify the legitimate interests pursued by the controller or by a third party when processing is necessary for the purposes of those interests, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
  • Provide the recipients or categories of recipients of the personal data and, where applicable, the controller's intention to transfer personal data to a third country or international organisation and the existence or absence of an adequacy decision by the Commission.
  • Indicate the period for which the personal data will be kept or the criteria used to determine the retention period.
  • Inform of the existence of the right to request from the Data Controller access to personal data relating to the interested party, its rectification or deletion ("right to be forgotten"), the limitation of its processing or the right to object to the processing, as well as the portability of their data.
  • Inform you about the possibility of withdrawing consent at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal. As well as informing you of the possibility of filing a claim with a Control Authority.
  • Specify whether the communication of personal data is a legal or contractual requirement, or a requirement necessary to enter into a contract and whether the interested party is obliged to provide the personal data and inform of the possible consequences of not providing such data.
  • Provide information on the existence of automated decisions, including profiling and, at least in such cases, provide information on the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

When INTZA SA does not obtain the personal data of the interested party, it will have to provide the information described in the previous section. As well as the categories of personal data being processed, the source from which they come and, where appropriate, whether they come from publicly accessible sources.

If INTZA SA obtains personal data directly from the interested party, the information must be made available to them at the time the data is requested, prior to collection or registration. In the event that the data is not obtained from the interested party, because it comes from a legitimate transfer, or from publicly accessible sources, INTZA SA will inform the interested parties within a reasonable period, but in any case, before one month from when the personal data was obtained, in the first communication with the interested party or before the data, if applicable, has been communicated to other recipients.

When INTZA SA plans the further processing of personal data for a purpose other than that for which they were obtained, it will provide the interested party, before such further processing, with information about that other purpose and any other relevant information.

2. Basic information on data protection

INTZA SA must include in the forms or documents used to collect personal data, including those established on the website owned by INTZA SA, the information to comply with the duty to inform contained in articles 13 and 14 of the General Data Protection Regulation (hereinafter RGPD), and, if necessary, record the consent granted by the interested party.

In order to make compatible the greater demand for information that must be provided to the interested party whose personal data is to be processed, the possibility of presenting the information by adopting a model of information by layers or levels is established. This must be in line with the fact that the information must be provided in clear, simple language and in a concise, transparent, intelligible and easily accessible manner.

Article 11 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter LOPDGDD), regulates the basic information required in a first layer.

The layered information consists of:

  • Presentation of basic information (1st layer): consists of presenting basic information at a first level, in a summarized form, at the same time and in the same medium in which the data is collected.
  • Reference to Additional Information (2nd layer): This consists of presenting the information in a detailed and complete manner, in an appropriate, structured, concise and precise medium. The way in which this additional information is presented depends on the characteristics of the medium used to report; it may be presented in paper format or in electronic format.
Basic Information on Data Protection - Commercial actions web form
Responsible INTZA SA
Purpose Collection, registration and processing of data for the purposes of responding to your queries and/or requests, as well as for advertising and commercial prospecting.
Rights Access, rectify and delete data, as well as other rights, as explained in the additional information.
Additional information You can consult additional and detailed information on Data Protection on our website, in the Privacy Policy section.


Basic Information on Data Protection - Web User Management
Responsible INTZA SA
Purpose Collection, registration and processing of user data.
Rights Access, rectify and delete data, as well as other rights, as explained in the additional information.
Additional information You can consult additional and detailed information on Data Protection on our website, in the Privacy Policy section.


Basic Information on Data Protection - Installation of cookies
Responsible INTZA SA
Purpose Management and installation of cookies.
Rights Access, rectify and delete data, as well as other rights, as explained in the additional information.
Additional information You can consult additional and detailed information on Data Protection on our website, in the Privacy Policy section.

3. Additional information on data protection


ADDITIONAL INFORMATION FOR CUSTOMERS

In accordance with current and applicable regulations on the protection of personal data, we inform you that your data will be incorporated into the processing system owned by INTZA SA with NIF A20181947 and registered office located at INDUSTRIALDEA 15,20720 AZKOITIA (GUIPÚZCOA), and that their respective purposes, retention periods and legal bases are listed below:

Economic and administrative management Purpose : Administrative management, invoicing, accounting and legal obligations.
Retention period : 5 years in compliance with tax law and 10 years for tax documentation in compliance with Organic Law 7/2012.
Legitimate basis : Compliance with a law.
Assignments : your data will be communicated, if necessary, to the Tax Agency, Banks, Savings Banks and Organizations and/or public administration with jurisdiction in the matter in order to comply with the tax and fiscal obligations established in the applicable regulations. In addition, please be advised that the legitimate basis for the assignment is compliance with a law.
Compliance Management Purpose : Management and processing of obligations and duties arising from compliance with the regulations to which the entity is subject.
Conservation period : conservation of copies of documents until the actions to claim possible liability expire.
Legitimate basis : Compliance with a law.
Assignments : your data will be communicated, if necessary, to Agencies and/or public administration with jurisdiction in the matter in order to comply with the obligations established in the applicable regulations. In addition, it is reported that the legitimate basis for the assignment is compliance with a law.
Commercial actions and/or advertising mailings Purpose : Collection, registration and processing of data for advertising and commercial prospecting purposes.
Retention period : as long as consent is maintained.
Legitimate basis : The consent of the interested party.


In accordance with the rights conferred on you by current and applicable data protection regulations, you may exercise the rights of access, rectification, limitation of processing, deletion ("right to be forgotten"), portability and opposition to the processing of your personal data, as well as the revocation of the consent given for the processing thereof, by directing your request to the postal address indicated above or to the email address i.lonbide@intza.com. You may contact the competent Control Authority to submit any complaint you consider appropriate. INTZA SA informs you that by signing this document you give explicit consent for the processing of data for the purposes mentioned above.

Name and surname:
DNI:
Signature:


SUPPLEMENTARY INFORMATION SUPPLIERS

In accordance with current and applicable regulations on the protection of personal data, we inform you that your data will be incorporated into the processing system owned by INTZA SA with NIF A20181947 and registered office located at INDUSTRIALDEA 15,20720 AZKOITIA (GUIPÚZCOA), and that their respective purposes, retention periods and legal bases are listed below:

Economic and administrative management Purpose : Administrative management, invoicing, accounting and legal obligations.
Retention period : 5 years in compliance with tax law and 10 years for tax documentation in compliance with Organic Law 7/2012.
Legitimate basis : Compliance with a law.
Assignments : your data will be communicated, if necessary, to the Tax Agency, Banks, Savings Banks and Organizations and/or public administration with jurisdiction in the matter in order to comply with the tax and fiscal obligations established in the applicable regulations. In addition, please be advised that the legitimate basis for the assignment is compliance with a law.
Compliance Management Purpose : Management and processing of obligations and duties arising from compliance with the regulations to which the entity is subject.
Conservation period : conservation of copies of documents until the actions to claim possible liability expire.
Legitimate basis : Compliance with a law.
Assignments : your data will be communicated, if necessary, to Agencies and/or public administration with jurisdiction in the matter in order to comply with the obligations established in the applicable regulations. In addition, it is reported that the legitimate basis for the assignment is compliance with a law.


In accordance with the rights conferred on you by current and applicable data protection regulations, you may exercise the rights of access, rectification, limitation of processing, deletion (“right to be forgotten”), portability and opposition to the processing of your personal data, as well as the revocation of the consent given for the processing thereof, by sending your request to the postal address indicated above or to the email address i.lonbide@intza.com. You may contact the competent Control Authority to submit any complaint you consider appropriate.



ADDITIONAL INFORMATION COLLABORATORS

In accordance with current and applicable regulations on the protection of personal data, we inform you that your data will be incorporated into the processing system owned by INTZA SA with NIF A20181947 and registered office located at INDUSTRIALDEA 15,20720 AZKOITIA (GUIPÚZCOA), and that their respective purposes, retention periods and legal bases are listed below:

Economic and administrative management Purpose : Administrative management, invoicing, accounting and legal obligations.
Retention period : 5 years in compliance with tax law and 10 years for tax documentation in compliance with Organic Law 7/2012.
Legitimate basis : Compliance with a law.
Assignments : your data will be communicated, if necessary, to the Tax Agency, Banks, Savings Banks and Organizations and/or public administration with jurisdiction in the matter in order to comply with the tax and fiscal obligations established in the applicable regulations. In addition, please be advised that the legitimate basis for the assignment is compliance with a law.
Compliance Management Purpose : Management and processing of obligations and duties arising from compliance with the regulations to which the entity is subject.
Conservation period : conservation of copies of documents until the actions to claim possible liability expire.
Legitimate basis : Compliance with a law.
Assignments : your data will be communicated, if necessary, to Agencies and/or public administration with jurisdiction in the matter in order to comply with the obligations established in the applicable regulations. In addition, it is reported that the legitimate basis for the assignment is compliance with a law.


In accordance with the rights conferred on you by current and applicable data protection regulations, you may exercise the rights of access, rectification, limitation of processing, deletion (“right to be forgotten”), portability and opposition to the processing of your personal data, as well as the revocation of the consent given for the processing thereof, by sending your request to the postal address indicated above or to the email address i.lonbide@intza.com. You may contact the competent Control Authority to submit any complaint you consider appropriate.



ADDITIONAL INFORMATION FOR POTENTIAL CUSTOMERS

In accordance with current and applicable regulations on the protection of personal data, we inform you that your data will be incorporated into the processing system owned by INTZA SA with NIF A20181947 and registered office located at INDUSTRIALDEA 15,20720 AZKOITIA (GUIPÚZCOA), and that their respective purposes, retention periods and legal bases are listed below:

Economic and administrative management Purpose : Administrative management, invoicing, accounting and legal obligations.
Retention period : 5 years in compliance with tax law and 10 years for tax documentation in compliance with Organic Law 7/2012.
Legitimate basis : Compliance with a law.
Assignments : your data will be communicated, if necessary, to the Tax Agency, Banks, Savings Banks and Organizations and/or public administration with jurisdiction in the matter in order to comply with the tax and fiscal obligations established in the applicable regulations. In addition, please be advised that the legitimate basis for the assignment is compliance with a law.


In accordance with the rights conferred on you by current and applicable data protection regulations, you may exercise the rights of access, rectification, limitation of processing, deletion (“right to be forgotten”), portability and opposition to the processing of your personal data, as well as the revocation of the consent given for the processing thereof, by sending your request to the postal address indicated above or to the email address i.lonbide@intza.com. You may contact the competent Control Authority to submit any complaint you consider appropriate.



ADDITIONAL INFORMATION FOR CANDIDATES

In accordance with current and applicable regulations on the protection of personal data, we inform you that your data will be incorporated into the processing system owned by INTZA SA with NIF A20181947 and registered office located at INDUSTRIALDEA 15,20720 AZKOITIA (GUIPÚZCOA), and that their respective purposes, retention periods and legal bases are listed below:

HR Management Purpose : Collection, registration and processing of candidate data for staff selection purposes and management, analysis and archiving of candidate CVs.
Retention period : 1 year.
Legitimate basis : Legitimate interest.


In accordance with the rights conferred on you by current and applicable data protection regulations, you may exercise the rights of access, rectification, limitation of processing, deletion (“right to be forgotten”), portability and opposition to the processing of your personal data, as well as the revocation of the consent given for the processing thereof, by sending your request to the postal address indicated above or to the email address i.lonbide@intza.com. You may contact the competent Control Authority to submit any complaint you consider appropriate.

4. Website privacy policy

PRIVACY POLICY OF www.intza.com


Website owner details:

COMPANY NAMEINTZA SA
NIFA20181947
DOMAINwww.intza.com
MAILING ADDRESSINDUSTRIALDEA 15,20720 AZKOITIA (GUIPÚZCOA)
ELECTRONIC ADDRESSi.lonbide@intza.com
TELEPHONES943852600
REGISTRATION NUMBER/ADDITIONAL DATA


Data protection

In accordance with current and applicable regulations on the protection of personal data, we inform you that your data will be incorporated into the processing system owned by INTZA SA with NIF A20181947 and registered office located at INDUSTRIALDEA 15,20720 AZKOITIA (GUIPÚZCOA), and that their respective purposes, retention periods and legal bases are listed below:

TREATMENTS PERFORMED
Commercial actions web form Purpose : Collection, registration and processing of data for the purposes of responding to your queries and/or requests, as well as for advertising and commercial prospecting.
Retention period : as long as consent is maintained, unless legally required.
Legitimate basis : The consent of the interested party.
Type of Data : Basic data: Name and surname, Email address.
Installation of cookies Purpose : Management and installation of cookies.
Retention period : as long as consent is maintained.
Legitimate basis : Consent of the interested party.
Data Type : Basic data: Electronic address, IP address.
Newsletter Purpose : Management of the newsletter subscription, to make the corresponding shipments.
Conservation period : while the consent given is maintained.
Legitimate basis : The consent of the interested party.
Type of Data : Basic data: Name and surname, Email address.
Web Form Management Purpose : Respond to your queries and/or requests.
Retention period : as long as the consent given is maintained.
Legitimate basis : The consent of the interested party.
Type of Data : Basic data: Name and surname, Email address, IP address.


Rights of interested parties

INTZA SA informs Users that they may exercise their rights of access, rectification, limitation, deletion, portability, opposition to the processing of their personal data and the right not to be subject to automated decisions, including profiling, before the Data Controller, as well as the right to withdraw the consent given.

  • Right of Access : This is the user's right to obtain confirmation as to whether their data is being processed and, if so, the specific personal data processed and legal information regarding the processing (purposes, legitimate basis, retention periods, transfers, origin of the data, etc.).
  • Right of Rectification : This is the right of the affected party to have data that is found to be inaccurate or incomplete modified. In relation to the website, this right may only be fulfilled in relation to information that is under the control of the website, for example, deleting comments published on the website itself, images or web content containing personal data of the user.
  • Right to Limitation of Processing : This is the right to have the purposes of processing originally intended by the data controller limited in certain cases.
  • Right to Deletion : This is the right to delete the user's personal data, except as provided in the GDPR itself (freedom of expression and information, retention obligations, formulation, exercise or defense of claims, etc.).
  • Right to Portability : The right to receive the personal data that the user has provided, in a structured, commonly used and machine-readable format, and to transmit them to another controller when the processing is based on consent or the execution of a contract and is carried out by automated means.
  • Right to Object : This is the user's right to prevent the processing of their personal data or to stop the processing of said data by the website when the processing is based on legitimate interest or public interest or when it involves direct marketing processing.
  • Right not to be subject to automated decisions, including profiling : Where processing is not necessary for entering into, or the performance of, a contract, is not authorised by Union or Member State law and is not based on consent, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on you or similarly significantly affects you.
  • Right to withdraw consent : For any processing based on your consent, you have the right to withdraw it at any time and free of charge.

To exercise any of the data protection rights described above, you must follow the instructions below:

  • Submission of a written request to the address INDUSTRIALDEA 15,20720 AZKOITIA(GUIPÚZCOA) (for the attention of INTZA SA) or by email to i.lonbide@intza.com.
  • The letter sent by the owner of the personal data (interested party) requesting the exercise of rights must take into account the following:
    • The applicant must provide reliable identification and, if there are any doubts about the identity of the applicant, he/she will be asked to correct the request (e.g. by requesting more information, such as the ID number, the ID document, the email address provided, etc.)
    • The request may be made by the representative, legal or voluntary, when he or she is duly identified and authorized by the owner of the data (through express authorization from the owner to exercise the very personal rights regulated in the regulations on the protection of personal data).
    • Request specifying the application (Right/s that you intend to exercise). If you do not refer to a specific treatment, you will be provided with a response in relation to all the treatments that affect your personal data. If you request information about a specific treatment, only the information about it. If you request it by telephone, you will be told to do so in writing and you will be informed of how you can do so and the address to which you must send it. You will never be given information over the telephone.
    • Postal or electronic address for notification purposes.
    • Documents supporting the request you make, if necessary.
    • The applicant must use any means that allows proof of sending and receiving the application.

Finally, we inform you that you have the right to file a complaint with the Spanish Data Protection Agency if you become aware of or consider that a fact may constitute a breach of the applicable data protection regulations.

INTZA SA undertakes to adopt the necessary technical and organisational measures, in accordance with the level of risks associated with the processing carried out by them and indicated in the section on the terms and conditions of use, in order to guarantee their integrity, confidentiality and availability.

Last updated : July 28, 2022

5. Social media privacy policy

PRIVACY POLICY SOCIAL NETWORKS www.intza.com

In accordance with the provisions of current and applicable regulations on the protection of personal data and Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE), INTZA SA informs users that it has created a profile on the Facebook Social Network(s), with the main purpose of advertising its products and services.

INTZA SA data:

  • - Tax ID: A20181947
  • - ADDRESS: INDUSTRIALDEA 15,20720 AZKOITIA (GUIPÚZCOA)
  • - EMAIL: i.lonbide@intza.com

The user has a profile on the same Social Network and has decided to join the page created by INTZA SA, thereby showing interest in the information published on the Network. By joining our page, you provide us with your consent to process any personal data published on your profile.

The user can access the privacy policies of the Social Network itself at any time, as well as configure their profile to guarantee their privacy.

INTZA SA has access to and processes the user's public information, in particular, their contact name. This data is only used within the Social Network itself. It is not incorporated into any processing system.

Rights of interested parties

In relation to the rights of access, rectification, limitation of processing, deletion, portability and opposition to the processing of your personal data, which you have and which can be exercised before INTZA SA, in accordance with the RGPD, you must take into account the following nuances:

  • Right of Access: This is the right of the user to obtain information about his/her specific personal data and the processing that has been or is being carried out, as well as the information available about the origin of said data and the communications made or planned for said data.
  • Right of Rectification: This is the right of the affected party to have data that is found to be inaccurate or incomplete modified. This right may only be fulfilled in relation to information that is under the control of INTZA SA, for example, deleting comments published on the page itself, images or web content containing personal data of the user.
  • Right to Restriction of Processing: This is the right to limit the purposes of processing originally intended by the data controller.
  • Right to Deletion: This is the right to delete the user's personal data, except as provided in the GDPR itself or in other applicable regulations that determine the obligation to retain such data in a timely manner.
  • Right to portability: The right to receive the personal data that the user has provided, in a structured, commonly used and machine-readable format, and to transmit it to another controller.
  • Right to Object: This is the user's right to prevent the processing of their personal data or to stop the processing of their personal data by INTZA SA.

INTZA SA will carry out the following actions:

  • Access to public profile information.
  • Publication in the user profile of all information already published on the INTZA SA page
  • Send personal and individual messages through Social Network channels.
  • Page status updates that will be posted to the user's profile.

Users can always control their connections, delete content that no longer interests them, and restrict who they share their connections with. To do so, they must access their privacy settings.

Publications

Once the user has joined the INTZA SA page, he/she may publish comments, links, images or photographs or any other type of multimedia content supported by the Social Network. In all cases, the user must be the owner of the content, have the copyright and intellectual property rights or have the consent of the affected third parties. Any publication on the page, whether text, graphics, photographs, videos, etc., that violates or is likely to violate morality, ethics, good taste or decorum, and/or that infringes, violates or breaches intellectual or industrial property rights, the right to image or the Law, is expressly prohibited. In these cases, INTZA SA reserves the right to immediately remove the content, and may request the permanent blocking of the user.

INTZA SA will not be held responsible for the content freely published by a user.

Users must keep in mind that their posts will be known by other users, and that they are therefore primarily responsible for their privacy.

The images that may be published on the page will not be stored in any processing system by INTZA SA, but they will remain on the Social Network.

Contests and promotions

INTZA SA reserves the right to hold competitions and promotions, in which the user linked to its page may participate. The rules of each of them, when the Social Network platform is used for this purpose, will be published on the same. Always complying with the LSSI-CE and any other applicable regulations.

The Social Network does not sponsor, endorse or administer, in any way, any of our promotions, nor is it associated with any of them.

Advertising

INTZA SA will use the Social Network to advertise its products and services. In any case, if it decides to process your contact information to carry out direct commercial prospecting actions, it will always be in compliance with the legal requirements of the regulations on data protection and the LSSI-CE.

Recommending the INTZA SA website to other users so that they can also enjoy promotions or be informed of its activity will not be considered advertising.

Below we detail the link to the privacy policy of the Social Network:



Last updated : July 28, 2022