PRIVACY POLICY
In accordance with the General Data Protection Regulation, HESTIA ALLIANCE, S.L. informs users of www.hestiahealth.es of the following information regarding data protection:
Data Controller
- Company name: HESTIA ALLIANCE, S.L.
- Registered office: Plaza Karl Marx, 1, 08035 – Barcelona.
- Data Protection Officer: dpd@hestiahealth.es
Purpose of Processing
- To manage and respond to enquiries, suggestions or complaints received.
- To develop, carry out and manage staff recruitment and selection processes.
Lawfulness of Processing
The legal basis for processing the data collected is the consent of the data subject.
Recipients
The data subject is informed that their data will not be disclosed to third parties, except where required by law.
Where applicable, such data may be processed by third-party service providers, such as financial institutions or companies directly related to the Data Controller.
International Transfers
No international data transfers will be carried out.
Rights of Data Subjects
Data subjects may request access to their personal data, its rectification or erasure and, where applicable, restriction of processing, object to the processing and exercise the right to data portability.
They may do so by submitting a written request to the address indicated in the “Data Controller” section or by email to dpd@hestiahealth.es.
Where necessary to verify the identity of the person making the request, a copy of an identity document may be requested.
If you have provided your consent to the processing of your data, you also have the right to withdraw it at any time.
Likewise, the data subject has the right to lodge a complaint with the Spanish Data Protection Agency: https://www.aepd.es
Retention Period
Data relating to enquiries, suggestions or complaints will be retained for as long as necessary to fulfil the purpose for which it was collected.
Data relating to recruitment and selection processes will be deleted once 12 months have elapsed from the date it was submitted.
Regardless of the period during which we process the data in order to fulfil each purpose, it will subsequently be kept duly blocked and protected. This means that it will only be made available at the request of courts and tribunals, the Public Prosecutor’s Office or the competent public authorities, for the period during which legal liabilities may arise. This period will be determined in accordance with the legislation in force at any given time (data protection legislation, the Civil Code, etc.).
Once the applicable limitation periods have expired, the personal data will be permanently deleted.
The data you provide will be processed using appropriate technical and organisational security measures, in accordance with current personal data protection legislation, in order to prevent its alteration, loss, unauthorised processing or access, taking into account the current state of technology.
By completing the different forms and submitting the information indicated above, you declare that you have read and expressly accepted this data protection clause and grant us your unequivocal and explicit consent to process your personal data for the purposes indicated.