Identification and contact details of the data controller

FARO NOROESTE DE SERVICIOS, S.L., a company domiciled at C/ Baixada a Cabral, 6 - Módulo 3, 36416, Mos, (Pontevedra) - Spain, with Tax ID (CIF) B36897486, is the controller of the personal data processed through this website. This clause provides information about how the Company will use your personal data.

Likewise, the purpose of this Privacy Policy is to provide information about the rights afforded to both registered and non-registered Users under GDPR 2016/679 and Organic Law 3/2018 on the Protection of Personal Data. If you have any questions regarding the processing of your personal data, please contact the Company at the following address: C/ Baixada a Cabral, 6 - Módulo 3, 36416, Mos, (Pontevedra) - Spain.

Where we provide information

On the following website: www.grupofaro.com (+ information in our legal notice)

Data processing

FARO NOROESTE DE SERVICIOS, S.L. (GRUPO FARO) provides information through this website about its privacy policy regarding the processing and protection of the personal data of any data subject with whom it maintains a relationship that requires the processing of their data.

The operations, procedures and technical processes carried out in an automated or non-automated manner that enable the collection, storage, modification, transfer and other actions on personal data are considered personal data processing. In this case, we inform you of joint processing where necessary for the management of services and/or products contracted with any of the companies indicated above, without prejudice to the provisions of section 4 of this policy.

Maximum transparency in information: for this reason, we inform you about how we process data, even when we do not collect data from the website.

We do not share data with third parties; your data is safe and will only be disclosed to third parties when there is an obligation based on regulations or when it is essential in order to provide you with the service. We inform you of this in the "Recipients" section.

Legal compliance: FARO NOROESTE DE SERVICIOS, S.L. complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR), with Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights, and with Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE or LSSI); and although it has been repealed, having regulated the LOPD 15/99, we continue to implement the security measures of the excellent Royal Decree 1720/2007.

1. Data controller

In compliance with the data protection legislation in force, we inform you that the personal data you provide voluntarily through any of our means of collecting information will be incorporated into automated and/or manual processing operations, with FARO NOROESTE DE SERVICIOS, S.L. (GRUPO FARO), with which you maintain the contractual relationship, being the Controller of such processing. The data will not be transferred to third parties except in cases where there is a legal obligation.

Likewise, FARO NOROESTE DE SERVICIOS, S.L. declares and guarantees that it maintains the security levels for the protection of personal data as required by the legislation in force, and that it has established all the technical means at its disposal to prevent the loss, misuse, alteration, unauthorised access and theft of the data provided by data subjects, and to ensure that its employees observe such requirements, as well as the duty of secrecy regarding the protected data and other confidentiality obligations in force.

2. What personal data do we process?

The processing of your data is necessary to give you access to the content and/or functionalities of our Website or, should you so require, to be able to send you information or provide you with the services offered through it. In this regard, we maintain a firm commitment to processing your personal data lawfully and consistently in accordance with the principles and legal obligations set out in the current personal data protection regulations.

When you browse our Website and, in particular, when you interact with it, you provide us with data directly, for example when you complete any form or request available online in accordance with the processing purposes indicated in each case (for example, the contact form).

The data you provide relates to such forms. We will always request from you data that is adequate, relevant and limited to what is necessary in relation to the aforementioned processing purposes (principle of data minimisation):

  • Contact and Identification Data: name, surname, address, telephone number, email.
  • Commercial and Preferences: information you provide about your preferences, for example, the type of services you are interested in.
  • Any data that you decide to provide us voluntarily.
  • Data derived from the communications you maintain with us.
  • Information relating to your own browsing in the case of Online Services (IP address or information derived from cookies or similar devices; you can view our Cookie Policy on the website).
  • Information available in publicly accessible sources, which we may legitimately access.
  • Data derived from the contractual or pre-contractual relationship you maintain with us, including your image, always informing you in this case of the possibility of capturing your image.
  • Data that third parties provide us about you, where there is a legitimate basis for this or where we have obtained your consent to do so.
  • Third-party data that you provide us, subject to the prior consent of the third party in question.

3. How do we process the data?

At FARO NOROESTE DE SERVICIOS, S.L. we always process your personal data in strict compliance with the legislation in force. We also inform you that we have appropriate technical and organisational measures in place to guarantee an optimal level of security, thereby ensuring that only authorised persons will have access, that we will keep the data intact, preventing any intentional or accidental loss, and that we have strengthened our data processing systems and services.

The operations, procedures and technical processes that we carry out in an automated or non-automated manner and that enable the collection, storage, modification, transfer and other actions on personal data are considered personal data processing.

4. Purposes of the data

FARO NOROESTE DE SERVICIOS, S.L. processes your data for the following purposes:

  • To enable you to browse our Website, thereby allowing you to access the information and content available on it.
  • To attend to and manage your queries and requests.
  • To send you all the necessary information regarding the characteristics of the service you have requested.
  • If you accept, or where there is a sufficient legal basis for it, to send you information and advertising about offers, products, services, promotions, gifts and campaigns relating to our services.
  • To adequately provide customer/data subject support services.
  • To carry out quality control of our services by conducting possible opinion surveys.
  • Where you have accepted the cookie policy, for the development of the purposes associated with the different types of cookies reported through it. At any time, if you so wish, you may configure the use of cookies, having the right to revoke your consent regarding the purposes associated with cookies. We inform you that revoking your consent to the processing of your data regarding certain types of cookies, such as session or technical cookies, may prevent you from browsing our Website (see cookie policy).
  • To adopt all applicable protection measures in accordance with current regulations, including the possible anonymisation of your personal data by applying the appropriate techniques available for this purpose. Consequently, in this area, anonymisation and pseudonymisation processing may also be carried out for the better protection of your personal data.
  • To apply the relevant technical and/or organisational security measures to your personal data with a focus on the risk existing at any given time.
  • Management of the whistleblowing channel.
  • HR management.
  • In general, to comply with legal and regulatory obligations, in accordance with the sector of activity (without limitation or exclusion), whether imposed by judicial bodies, regulatory and supervisory bodies and the state security forces and bodies, with which we are obliged to comply with the laws of the countries in which the activity is carried out, including actions aimed at detecting fraud and preventing crimes or unlawful acts.

5. Legal basis for processing

The legal basis for the processing of Personal Data is your express consent (art. 6.1, a of the GDPR) and, depending on the case, the satisfaction of legitimate interest (art. 6.1, f of the GDPR), whether our own or that of third parties, the application of pre-contractual measures (art. 6.1, b of the GDPR) at the request of the data subject, or your consent (art. 6.1, a of the GDPR).

Regarding the sending of information and advertising about offers, products, services, promotions, gifts and campaigns, in commercial communications the legal basis for processing your data is your consent (art. 6.1, a of the GDPR), and where such communications may be covered by the provisions of Article 21.2 of Law 34/2002 of 11 July on Information Society Services and Electronic Commerce, the legitimate interest (art. 6.1, f of the GDPR).

6. Minors

Minors under 14 years of age may not use the services available through the Website without the prior authorisation of their parents, guardians or legal representatives, who shall be solely responsible for all acts carried out through the Website by the minors in their care, including the completion of forms with the personal data of such minors and, where applicable, the ticking of the accompanying boxes. In this regard, and to the extent that FARO NOROESTE DE SERVICIOS, S.L. does not have the capacity to control whether users are minors, it is warned that it must be the parents and guardians who enable the necessary mechanisms to prevent minors from accessing the Website and/or providing personal data without their supervision, with FARO NOROESTE DE SERVICIOS, S.L. accepting no liability in this respect.

7. Electronic communications

  • If you receive communications by these means (emails, automated form response messages, and other communication systems), we inform you that the messages are addressed exclusively to their recipient and may contain privileged or confidential information. If you are not the intended recipient, you are notified that the unauthorised use, disclosure and/or copying is prohibited under the legislation in force.
  • In accordance with the provisions of Law 34/2002 of 11 July on Information Society Services and Electronic Commerce, and Directive 2002/58/EC, we inform you that if you do not wish to receive commercial communications and information through this electronic communication system, please let us know through this same channel, indicating UNSUBSCRIBE COMMUNICATIONS in the subject line so that your personal data may be removed from our database. Your request will be actioned within 10 days of its submission. If we do not receive an express reply from you, we will understand that you accept and authorise our company to continue carrying out the aforementioned communications.

8. How long do we keep your data?

The personal data relating to natural persons that FARO NOROESTE DE SERVICIOS, S.L. collects by any means will be kept as long as the data subject does not request its deletion. Likewise, it will be kept as long as the relationship that gave rise to the processing of the data is maintained, respecting in any case the legal retention periods. Once this period has ended, the personal data will be deleted from all of FARO NOROESTE DE SERVICIOS, S.L.'s systems.

9. To which recipients will your data be disclosed?

There will be no assignment, transmission or transfer of personal data, other than those already reported, unless required by a legal obligation. If, at the request of the Public Administration or the Regional Institutions within the scope of the functions expressly attributed to them by law, your data is requested from us, it will be transmitted.

Should there be an assignment, transmission or transfer of personal data outside the cases previously foreseen, you will be informed in advance so that you can give us your consent where appropriate.

However, in order to organise ourselves properly and to have good operations and procedures that guarantee good management of FARO NOROESTE DE SERVICIOS, S.L., it may be necessary to contract the services of advisers, professionals or other service companies to process data under our instructions.

This processing on behalf of third parties is governed by a contract set out in writing or in some other form that allows its conclusion and content to be evidenced, expressly specifying that the data processor will process the data in accordance with our instructions and will not apply or use it for a purpose other than that set out in said contract, nor will it disclose it, even for its storage, to other persons.

10. What are your rights when you provide us with your data?

Data protection regulations grant the owner of the personal data the following rights:

  • The right to revoke any consent previously given.
  • Right of access: to know what type of data is being processed and the characteristics of the processing being carried out.
  • Right of rectification: to be able to request the modification of data that is inaccurate or untrue.
  • Right to portability: to be able to obtain a copy in an interoperable format of the data being processed.
  • Right to restriction of processing in cases where you consider that it is not necessary.
  • Right of erasure: to request the cessation of the processing of the data and its deletion when its retention is no longer necessary.
  • Right to lodge a complaint with the Spanish Data Protection Agency, C/ Jorge Juan, 6 28001-Madrid – FAX: 914483680 - TEL: 901 100 099.
  • If you would like more information regarding the processing of your data, to rectify any inaccurate data, to object to and/or restrict any processing that you consider unnecessary, or to request the cancellation of the processing when the data is no longer necessary, you may write to: Postal address C/ Baixada a Cabral, 6 - Módulo 3, 36416, Mos, (Pontevedra) - Spain, email: info@grupofaro.com, Tel: 986 288 459
    • Said communication must reflect the following information: the user's name and surname, the request, the address and supporting identification details.
    • The exercise of rights must be carried out by the user themselves. However, they may be exercised by a person authorised as the legal representative of the authorising party. In such a case, documentation evidencing this representation of the data subject must be provided.

11. Purposes of the data processing

Below we detail the purposes of the data processing carried out by the Data Controller:

RECORD OF ACTIVITIES: CONTACTS

  • PURPOSE: Sending commercial information, offers, and information about products and/or services to clients and/or potential clients.
  • LEGAL BASIS: Express consent of the data subject (art. 6.1, a of the GDPR).
  • DESCRIPTION: Category of personal data (identification: name and surname, telephone, email).
  • DATA TRANSFER: Data will not be transferred to third parties.
  • DATA DELETION PERIOD: Until your information request is resolved.

RECORD OF ACTIVITIES: HR

  • PURPOSE: Management of the relationship with candidates for a job at the company.
  • LEGAL BASIS: Legitimation: the data subject's consent (art. 6.1, a of the GDPR).
  • DESCRIPTION: Category of personal data (identification: name and surname, tax ID, postal address, telephone, email, image/voice, signature; Personal characteristics: marital status, date and place of birth, age, sex, nationality; Academic and professional data).
  • DATA TRANSFER: Not envisaged.
  • DATA DELETION PERIOD: Until you are assigned a job or until you request its deletion. It will therefore be kept for the time necessary for the purpose of the processing.

RECORD OF ACTIVITIES: POTENTIAL CLIENTS

  • PURPOSE: Management of the relationship with potential clients.
  • LEGAL BASIS: Legitimation: the express consent of the data subject.
  • DESCRIPTION: Category of personal data (identification: name and surname, tax ID, postal address, telephone, email, image/voice, signature; Personal characteristics: marital status, date and place of birth, age, sex, nationality; Banking data: for the direct debit of payments).
  • DATA TRANSFER: Banks and financial institutions, data processors, Tax Administration.
  • DATA DELETION PERIOD: Until the data subject requests the cancellation or deletion of their data and, once deleted, it will be kept for a maximum period of 6 years at the disposal of the public administration, judges and courts, for the attention and defence of any liabilities arising from the processing.