This post is also available in: Español English

PRIVACY POLICY

GHESSU BATH S.L. In compliance with the provisions of the General Data Protection Regulation (GDPR 2016/679) and the Law on the Protection of Personal Data and Guarantee of Digital Rights (Organic Law 3/2018), we hereby inform users of the website http://www.ghessu.es/:

Who is responsible for processing your data?

GHESSU BATH S.L., with Tax ID Number (CIF) B99234486 and a registered address for service of process at C/ Dinamarca 43, Pol. Ind. La Casaza, 50180 Utebo (Zaragoza).

You can contact us by calling 976775757 or by emailing admon@ghessu.com.

For what purpose do we collect your data, and what is the legal basis for processing it?
CUSTOMER PERSONAL INFORMATION

Purpose: To provide a quote for the requested services
Legal Basis: This constitutes the performance of pre-contractual measures at the request of the data subject (quotes)

Purpose: To provide the requested services
Legal Basis: Performance of a contract

Purpose: Internal customer-company management
Legal Basis: GHESSU BATH S.L.’s legal obligation to comply with its tax obligations

Purpose: Administrative management of our company
Legal Basis: Performance of a contract

Purpose: Billing for requested services, if applicable
Legal Basis: GHESSU BATH S.L.’s legal obligation to comply with its tax obligations

SUPPLIERS’ PERSONAL INFORMATION

Purpose: Management of the service provided and/or the supply of products
Legal Basis: Performance of a contract

Purpose: Internal supplier-company management
Legal Basis: GHESSU BATH S.L.’s legal obligation to comply with its tax obligations

Purpose: Administrative management of our company
Legal Basis: Performance of a contract

Purpose: Payment for services rendered, if applicable
Legal Basis: GHESSU BATH S.L.’s legal obligation to comply with its tax obligations

CANDIDATES’ PERSONAL INFORMATION

If a candidate submits a resume to us without a job offer having been made (unsolicited application):

Purpose: To enable the candidate to participate in the recruitment processes conducted by GHESSU BATH S.L.
Legal Basis: The candidate’s consent

If the applicant submits a resume to us in response to a job posting by GHESSU BATH S.L.

Purpose: To allow the candidate to participate in the selection process initiated by GHESSU BATH S.L.
Legal Basis: These are pre-contractual measures taken at the candidate’s request; if the candidate is not selected and GHESSU BATH S.L. wishes to retain the resume, consent will be required.

PERSONAL INFORMATION COLLECTED ON OUR WEBSITE

In addition, this website collects personal data through various forms. The data requested on each form is necessary for the purpose for which it is collected. The purposes of processing are as follows:  

CONTACT FORM:

Purpose: To be able to answer the queries raised and send the user the requested information via the email or telephone number indicated in the form
Legal Basis: It is the user’s consent

NEWSLETTER SUBSCRIPTION FORM:

Purpose: To subscribe the user to the company’s newsletter, through which they will receive information about offers, promotions, products, and activities organized by the company.
Legal Basis: The user’s consent

QUOTE REQUEST FORM:

Purpose: To manage and prepare the budget requested by the user, as well as to contact them to resolve doubts related to said request through the email or telephone indicated in the form
Legal Basis: Application of pre-contractual measures at the user’s request

EMAIL:

Purpose: If the user contacts us via the email address published on this website, their data will be processed to answer the queries raised and to send the requested information via the email address through which the query is received.
Legal Basis: It is our company’s legitimate interest to respond to communications received

What types of data do we process?

The data collected—including, but not limited to—relates to the category of identifying data, such as: first and last names, phone number, mailing address, company, and email address; academic and professional data, such as: if the data subject submits a resume, academic background, degrees, professional experience, employment history, skills, languages, and other information included in the resume; economic and financial data, such as: bank account information.

How long do we keep your data?
PERSONAL INFORMATION OF CUSTOMERS AND SUPPLIERS

The personal data provided will be retained for as long as the business relationship continues or until the user requests its deletion. Once the business relationship has ended, the data will be retained for as long as necessary to comply with legal obligations. Once the liabilities arising from those legal obligations have expired, your data will be deleted.

CANDIDATES’ PERSONAL INFORMATION

In the case of a self-nomination, the information provided by the candidate will be retained for 1 year.

If you are offered a job, the information you provide will be retained for the duration of the selection process. Once the process is complete, resumes will be deleted unless you are hired. If you are not hired and GHESSU BATH S.L. wishes to retain your resume, we will ask for your consent.

PERSONAL INFORMATION, FORMS, WEBSITE

The data collected through the forms on our website will be retained for as long as necessary to fulfill the purpose for which it was collected or until the user requests its deletion. Personal data necessary for sending marketing communications, if you have authorized such communications, will be retained unless you request its deletion.

Do we create profiles using your data?

Using the information provided by applicants in their resumes, GHESSU BATH S.L. will be able to conduct professional evaluations for the purpose of managing applications and assessing the suitability of professional profiles for future staffing needs.

Who do we share your information with?

We do not anticipate any data transfers, except as authorized by tax, commercial, and telecommunications laws, as well as in cases where a judicial authority requires us to do so.

GHESSU BATH S.L. may share personal data with third-party companies that provide services to GHESSU BATH S.L. A confidentiality agreement is entered into with each of these companies to ensure that personal data is used in accordance with the requirements of current data protection regulations. By way of example and without limitation, these companies may include:

  • Tax and Accounting Consulting.
  • IT Companies.

In addition, GHESSU BATH S.L. may share personal data with third-party companies, which are responsible for ensuring that the business can operate properly. By way of example and without limitation, these companies may include:

  • Transportation Companies

 

Which third parties provide services on this website?

The following service providers are used in the development of this website:

Hosting: The servers that host our website are located in the EU. They use secure protocols, so data is transmitted over an encrypted channel.

Spam protection: Akismet, a service provided by Automattic Inc., is used to filter spam in forms and comments. Its servers are located in the United States, and the service is covered by the Data Privacy Framework (DPF) approved by the European Commission.

Estadísticas y funcionalidades adicionales: Se utiliza Jetpack, servicio de Automattic Inc. (EE.UU., acogido al DPF), que puede recopilar datos estadísticos de navegación.

Web analytics: We use Google Analytics, a service provided by Google LLC (U.S., covered by the DPF), to analyze user behavior on the website on an aggregated basis.

Social media management and analytics: We use Metricool, a service that can process data on website visits and interactions, as well as social media engagement.

Backups: Website backups are stored using UpdraftPlus on Google Drive, a service provided by Google LLC (U.S., covered by the DPF).

Website security: Wordfence is used to protect the website against unauthorized access, and IP addresses may be logged for security purposes.

What rights do you have, and how can you exercise them?

Users have the right to access their personal data, to request the correction of any inaccurate data, and to request its deletion when, among other reasons, it is no longer necessary for the purposes for which it was collected. Under certain circumstances, you may also request the restriction of the processing of your data, in which case it will be retained solely for the purpose of asserting or defending legal claims, as well as request the portability of your data. For reasons related to their particular situation, they may object to the processing of their data, and GHESSU BATH S.L. will cease processing it, except for compelling legitimate grounds or the exercise or defense of potential claims. The data subject may revoke any consent provided at any time. You may exercise your rights by emailing admon@ghessu.com or by visiting our offices located at C/ Dinamarca 43, Pol. Ind. La Casaza, 50180 Utebo (Zaragoza), by providing reliable proof of identity and specifying the right you are exercising. You may also file a complaint with the Spanish Data Protection Agency.

What security measures have we implemented?

As part of our commitment to ensuring the security and confidentiality of your personal data, we hereby inform you that we have implemented the necessary technical and organizational measures to ensure the security of your personal data and prevent its alteration, loss, or unauthorized processing or access, taking into account the state of the art, the nature of the data stored, and the risks to which it is exposed, in accordance with Article 32 of the GDPR (EU Regulation 679/2016).

How do our social media platforms work?

Through our social media channels, you can share our content or leave us your comments, photos, or videos, as long as they are of interest to the entire community.

We constantly monitor our social media channels so we can respond to your questions and comments as quickly as possible.

We want this to be a space that everyone can enjoy, so it’s important that we all follow some basic rules of conduct:

  1. You are responsible for the content you post; do not violate any rights, laws, or regulations.
  2. Pay attention to your wording and tone, and avoid posting any abusive, defamatory, or obscene information.
  3. Respect the right to privacy; do not make illegal, offensive, or discriminatory comments about others.
  4. Avoid comments that are fraudulent, misleading, or deceptive.
  5. We do not allow spam, commercial messages, or advertisements, and we do not want repetitive messages.
  6. We will not engage in conversations with users we believe to be fake.


Please note that content posted by followers on our pages does not necessarily reflect our company’s views.

If your comments do not comply with the “Community Guidelines,” they may be deleted, hidden, or blocked. Anyone who posts prohibited content will be blocked from the community.

We reserve the right to modify these rules at any time without prior notice.