Personal data that may be collected directly from the interested party shall be processed confidentially and used in the pertinent processing activity owned by GEROA PETNSIOAK E.P.S.V. DE EMPLEO (hereinafter, GEROA), with corporate headquarters at Paseo Lugaritz 27, bajo, 20018 San Sebastián-Donostia, Gipuzkoa (Spain).
Users may contact GEROA staff to answer questions related to processing their personal data at the post address provided above or the email address email@example.com
GEROA only uses your personal data for the following purposes related to our activity:
For Worker members:
In the event of beneficiaries appointed by worker members:
Regarding website users:
The data we will process at GEROA are:
Our members\' data are obtained from companies or organisations to which they belong, after entering into a membership contract with GEROA, as well as from the interested members themselves.
It is important to mention that the services that GEROA offers are not ordered or recorded through the website; only members, pursuant to the paragraph above, may access the site\'s forms.
Once a contract has been signed with GEROA to manage and administer worker contributions, the worker member and the company representative shall obtain a username and password to access private areas on the website "Worker Area" and "Company and Administrator Area," respectively, which house the data recording and updating forms.
Data are obtained from the worker members themselves that appointed the individual as beneficiary, pursuant to the contract entered into and the hired contingency. When a minor is designated as beneficiary by the individuals who hold parental authority or legal representation, then they shall authorise GEROA to collect, use and process said data for the aforementioned purpose.
Personal data shall be automatically collected through the cookies that load when browsing our website.
The legal basis for processing the personal data of worker partners regarding management and administration of their contributions, communications to inform them of the evolution of their equity based on GEROA\'s management, as well as data on configuration of their complement and calculations on the future complement, and appointment and provision of their beneficiaries\' data, is the execution of a contract wherein the interested party and his/her beneficiaries are a party, pursuant to article 6.1 letter b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 with regard to the processing of personal data and the free movement of such data (GDPR).
In the event of opinions, suggestions, and recordings of voice calls to control the service\'s quality, the legal basis for processing is the controller\'s legitimate interest, pursuant to article 6.1, letter f) of the GDPR.
The legal basis for processing the data of beneficiaries is fulfilment of the contract of which the worker member and his/her beneficiaries are a party, as well as fulfilment of the obligations set forth in Law 5/2012 of 23 February, on Voluntary Social Security Entities and their Regulations, pursuant to article 6.1, letters b) and c) of the GDPR.
The legal basis for processing the data obtained through cookies is the webpage user\'s consent, pursuant to article 6.1, letter a) of the same regulation.
Pursuant to Decree 203/2015 of 27 October, approving Regulation of the Law 5/2012 of 23 February, on Voluntary Social Security Entities, historic records of all members and beneficiaries shall be permanently stored: contributions, benefits, voluntary cancellations, and distributions, and all of their dates, as well as their amounts.
These records include communications between you and GEROA related to requests to modify the services provided (especially personal data).
Other communications, including the user\'s opinions and suggestions, shall be stored for a maximum period of 2 years.
Finally, recorded telephone conversations shall be stored for a period of one month, unless necessary to store them due to a conflict or incident. In this case, they will be stored until a resolution is reached.
After the aforementioned periods have expired, the information is definitively deleted.
Pursuant to Decree 203/2015 of 27 October, approving Regulation of the Law 5/2012 of 23 February, on Voluntary Social Security Entities, historic records of all members and beneficiaries must be permanently stored: contributions, benefits, voluntary cancellations, and distributions, and all of their dates, as well as their amounts.
Personal data provided through cookies shall be stored the time necessary to fulfil the purpose for which they collect the data, and to determine possible liabilities that may arise from said purpose, in addition to the periods established in regulations on archives and documentation.
As far as sharing your data is concerned, you are hereby expressly informed that data shall not be transferred to third parties unless there is a legal obligation to do so.
To carry out GEROA\'s activities, access may be given to data-processing suppliers who, under all circumstances, shall not process your personal data for their own purposes.
As follows, more details are provided on processing:
The data provided to us may be transferred to pertinent Public Administrations and Bodies, such as the Provincial Tax Treasury, the Provincial Council of Guipúzcoa and the Government of the Basque Country, by legal obligation.
Regarding processing orders, GEROA has established contractual relationships with suppliers located in the European Union, for services including messenger service, documentation management and IT resource management.
It has also subcontracted the services of a marketing automation platform (Mailchimp) to data processors (The Rocket Science Group LLC d/b/a MailChimp), located outside the European Union (in USA).
Regarding the guarantees included in said international data transfer, The provider has contracting conditions adapted to the standard contractual clauses approved by the European Commission. https://mailchimp.com/legal/data-processing-addendum/
Some of the data collected by the cookies will be transferred to Google Analytics, which acts as Data Controller, insofar as it uses the information for its own purposes, such as developing new services, measuring the effectiveness of advertising, protecting users from fraud and abuse and personalising content and ads that appear on Google or on websites and applications of its partners. Your IP address will be anonymised, so it shall not be collected by Google.
Finally, Google Analytics has contracting conditions adapted to the standard contractual clauses approved by the European Commission.
In general, GEROA has subcontracted hosting, support and maintenance services for the systems supporting personal data processing to processors located in the European Union
For supplier companies located outside the EU that have some sort of access to personal data to provide some ancillary service, we shall select them by ensuring that they have established sufficient guarantees to maintain European data protection requirements.
GEROA shall take the technical and organisational measures necessary to ensure the security of personal data and prevent their alteration, loss or unauthorised processing or access, bearing in mind the state of technology, the type of the data stored and the risks to which they are exposed, either from human action or the physical or natural environment.
This section is applicable to worker members, their beneficiaries and website users.
They are hereby informed that they may exercise the rights granted to them by applicable personal data protection regulations, which are:
If you wish to exercise any of the aforementioned rights, you must send a written and signed request, along with a photocopy of your National ID card or any other document proving your identity at the post address indicated above, or to this email address: firstname.lastname@example.org
Additionally, the interested party is hereby informed that he or she may address the competent Control Authority (the Spanish Data Protection Agency) to file any claim he or she deems appropriate. If you would like more information on the rights you may exercise, and to request forms to exercise your rights, you may visit the Spanish Data Protection Agency\'s website: www.aepd.es.