The present privacy policy is applicable to the treatment of all personal data provided by the user to URBASER, S.A.U. (hereinafter, “URBASER“) when accessing its web page, which will treat the data provided by the user in the terms foreseen in the present policy.
Who is responsible for the processing of your data?
URBASER, S.A.U. with CIF number A-79524054, and registered office at Agustín de Foxá, 4, 28036 Madrid (Spain) street, in its capacity as Data Controller, will process the data provided by the user in accordance with the General Data Protection Regulation (GDPR) and other applicable legislation in force.
In case of doubt about the processing of personal data, the user may contact the Data Protection Area of URBASER through pdp@urbaser.com.
What personal data do we collect through the Site?
- Data collected directly: by filling out forms and questionnaires located in the different sections of the page in order to send us your requests for information, requests, register your registration, process your resume, etc.
- Data collected indirectly through the use of cookies: for statistics, to analyze the use made of our Site and to provide value-added services such as the location map of our offices. Please see our Cookie Policy for information about the cookies we use.
For what purposes do we process your personal data?
- Contact
- Purpose: to attend and manage the requests, claims and/or suggestions received through the different e-mails and contact channels that appear on URBASER’s website.
- Data processed for this purpose: contact data (e-mail); other categories of data that may be provided by users when communicating with URBASER.
- Basis of legitimacy: user consent.
- Ethical channel
- Purpose: to identify infractions, irregularities or non-compliances committed within the entity or any of its subsidiaries, and, if appropriate, to initiate the corresponding investigation file.
- Data processed for this purpose: identification and contact data (name and surname, city, country, address, e-mail, telephone), and other categories of data that may be provided by users when communicating with URBASER.
- Legitimate basis: the entity’s legitimate interest in crime prevention at the European level in compliance with Directive (EU) 2019/1937 of the European Parliament and of the council of 23 October 2019 on the protection of persons reporting breaches of Union law, and in California, in compliance with the California Whistleblower Protection Act.
Please refer to our Ethics Channel (Spain) Privacy Policy for additional information about the processing of your personal data.
What personal information do you need to provide in each case?
URBASER informs users that, when personal data are collected through a form made available through our website, it will be necessary for the user to provide at least those data marked with an asterisk (*). In case of not providing such data, considered necessary, URBASER will not be able to process your request.
How long do we keep your personal data?
The data provided by the user through the contact channels listed on the website of Urbaser will be retained for the time necessary to respond to your request, complaint and / or suggestion and, if legal deadlines apply until the end of these or the prescription of legal actions attached.
The data provided by the user through the ethical channel will be kept for the time necessary to decide on the appropriateness of initiating an investigation into the facts reported. In any case, after three months from the receipt of the communication without having initiated investigation actions, it will be deleted, unless the purpose of conservation is to leave evidence of the functioning of the complaints system.
With whom do we share users’ personal data?
The following data transfers are foreseen:
- In response to your requests for information or services, URBASER may redirect your identification data, the data contained in the request and those that it deems necessary for the resolution of the same, to entities that are part of the corporate group of which URBASER is the parent entity (hereinafter URBASER Group). Some of these recipients may be located outside the European Economic Area. In such a case, we will carry out such transfers only when we have a legal basis to do so or when the recipient (i) is in a country or organization that provides an adequate level of protection, or (ii) has signed an agreement that ensures that it will comply with the requirements set out in the European Union (EU) for the transfer of personal data to processors outside the EU. Moreover, URBASER counts with corporate data protection policies and procedures and centralizes its activity in a single Data Protection Officer, supported by local coordinators, ensuring that the necessary data protection and security standards for sharing your personal information are always met.
- Responsible for web analytics services: The Site has enabled tools provided by Google LLC. The use of these tools may involve an international transfer of data to the United States.
- To Public Administrations when necessary, in accordance with the regulations in force at any given time, as well as to the judicial authorities and State Security Forces and Corps when necessary.
What are the rights of users?
Users, as well as their authorized representative, may exercise their rights of access, rectification, deletion, portability and limitation or opposition by writing to URBASER, S.A.U., with address at Calle Agustín de Foxá, 4, 28036 Madrid (España), or by sending an e-mail to the following address pdp@urbaser.com. In both cases, the identity of the person exercising their rights must be accredited. If this is not sufficient, additional information may be requested.
In the case of accessing from California and according to Privacy Rights Act (CPRA), users may also exercise de rigth to opt-out and the right to non-discrimination through the means described above.
The interested parties have the right to withdraw the consent given and to complain to the competent Data Protection Authority in each case:
- In case you are accesing from Spain (Agencia Española de Protección de Datos | AEPD).
- In case you are accessing from other EU member state (Miembros | European Data Protection Board (europa.eu)).
- In case you are accessing California (California Privacy Protection Agency (CPPA)).
Safety measures
URBASER adopts the necessary technical and organizational measures to ensure the security of personal data to prevent its alteration, loss, unauthorized processing or access, given the state of technology, the nature of the data and the risks to which they are exposed.
Point of contact
If you have any questions or concerns regarding the privacy policy or the proccesing of your personal data you may contact us at the following address: pdp@urbaser.com.
Modification of the Privacy Policy
URBASER reserves the right to modify this Privacy Policy when it deems necessary, without the need for new acceptance by the user.
Under no circumstances will URBASER modify policies or practices to make them less effective in protecting our customers’ previously stored personal data, without the prior consent of the affected customers.
Last update: August 16th 2024
