Privacy Policy
Your privacy and trust are important to us, which is why this Privacy Policy provides you with important information about how we treat your personal data in accordance with the regulations in force on the protection of personal data on this website. We recommend that you read the following carefully and, if you have any questions after doing so, you can consult us through the means we make available to you.
1. Data Controller
The party responsible for processing your personal data and owner of this website is FERSA BEARINGS, S.A. (hereinafter, FERSA), a mercantile company registered in the Zaragoza Mercantile Register in Volume 2885, Folio 7 and Sheet Z-16480 with Tax Identification Number A-50643469 and with registered address at Calle Bari nº 18, 50197, Zaragoza (Spain). However, the following is a list of companies in the FERSA GROUP that may act as data controllers by virtue of the professional collaboration between them and for the correct management of the company.
A&S Fersa Bearings Europe S.L. (B-99102410)
Fersa Innova S.L.U. (B-99298937)
Fersa Bearings Distribución Iberia S.LU. (B-99361966)
In addition to the address indicated above, if you wish to contact us, you can do so through our:
Fersa Innova S.L.U. (B-99298937)
Fersa Bearings Distribución Iberia S.LU. (B-99361966)
In addition to the address indicated above, if you wish to contact us, you can do so through our:
2. Typology, purpose and legitimate basis for the processing of personal data
We collect personal data on:
- Workers' data: The purpose of this data is to manage the employment relationship, draw up their pay slips, control the working day and other obligations deriving from the same. The data collected are identification data, special categories (health/disability), personal characteristics data, academic data and professions, employment details and financial data. The basis of legitimacy for the data processing is the relationship between the parties, the legal obligation to collect this type of data and the consent of the data subjects. The data retention period is set at five years from the end of the employment relationship, except for payslips, TC1 and TC2, which must be kept for ten years.
- Job seeker data: The purpose of this data is to manage selection processes. The data collected are identification data, data on personal characteristics, academic data and professions and employment details. The basis of legitimacy for the data processing is the pre-contractual relationship between the parties and the consent of the data subjects. The data retention period is set at six months from the end of the selection process.
- Supplier data: The purpose of this data is to manage commercial contracts for which identification data, financial or tax data and other data such as TC2 or civil insurance are collected. It is the execution of the contract or pre-contract itself that legitimises us to process your data, which will be cancelled within five years of the end of the commercial relationship.
- Customer data: The purpose of the data processing is the execution of a commercial contract or pre-contract and the supply of the requested services. For this purpose, identification data, property data and financial data are requested. The legitimate basis for data processing is the legitimate interest of the data controller and the performance of a contract. The data will be cancelled within five years of the end of the business relationship.
- Partner data: The purpose of the partners is to manage the company internally. The processing of their data is legitimised by the business relationship between the parties.
- Data relating to the exercise of rights: the purpose of the processing is to attend to the exercise of data protection rights. The basis of legitimacy is compliance with current data protection regulations. This data will be kept to a minimum and will be retained at all times in compliance with the provisions of current data protection legislation.
- Video surveillance data: the purpose of the processing is to ensure security on our premises. The basis of legitimacy for the processing of this data is the fulfilment of a mission carried out in the public interest. This data (image) will be deleted within a maximum period of 30 days.
- Contact data provided through the website: Through this channel we will collect the contact details with which you identify yourself in order to send us communications, your e-mail address, telephone or postal address, as well as any other information that you freely decide to send us and which we cannot detail as we do not know the content of all the possible communications that you may send us. We process this personal data in order to respond to your queries, as well as to respond to your personal data protection rights. The legitimate basis for responding to your communications is your consent, FERSA's legitimate interest in responding to your queries. This data will be deleted after two years.
- The use of Cookies: FERSA may process the personal data collected through the cookies informed in the Cookies Policy. Your personal data in this case will be processed for the purposes. The legitimate basis in this case is your consent.
- Data relating to the complaints channel: the purpose of the processing is to process complaints received as a result of non-compliance with the Internal Privacy Policy, Code of Conduct and other internal regulations. The basis that legitimises the processing of this data is the legitimate interest of the Data Controller. These data will be minimised and will be kept for 7 days unless they are to be investigated, in which case they will be kept for the duration of the investigation, the corresponding legal proceedings or the statute of limitations period for any actions that may be brought.
3. Retention periods
The personal data provided will be kept for as long as the relationship between us subsists, during the legal retention periods, or until the interested party requests its deletion or opposition. In general, a conservation period of five years from the end of the relationship between the parties is established. At the end of this period, the data will be cancelled or confidentially destroyed.
How do we share information with third parties?
We share personal information with third parties in order to provide services on the terms described in this Privacy Policy or where we believe it is permitted or required by law. When we share personal information, we do so in accordance with privacy and data security requirements.
FERSA informs the data subject that some of our suppliers may process their personal data as data processors, for example, in the case of:
- Third-party service providers, when necessary for the provision of services, coordination of activities, internal management, approval of suppliers, software support, systems and platforms, cloud hosting services and electronic communications. In such cases, access to your data by third parties will only be carried out when FERSA maintains a contractual relationship with the data processor that guarantees confidentiality, the non-use of the personal information of users that we make available for purposes other than those indicated above, as well as compliance with our internal privacy and information security regulations.
When said transfer of data is covered by a legal obligation or is required by the competent authorities to respond to legal requirements, criminal investigation of a possible illegal activity or claims that a content infringes the rights of third parties or to protect the rights, property or security of third parties, in the event of merger, sale, restructuring, acquisition, joint venture, assignment, transfer or other disposal, total or partial, of our business, assets or shares (e.g., transfers to the AEAT, TGSS...).
Likewise, FERSA BEARINGS, S.A. may transfer information to companies belonging to the same Group for business management purposes.
4. International transfers
In some cases FERSA uses third-party tools and services for the management of services. Some of these services may be owned by third parties resident outside the European Economic Area.
FERSA tries to use secure tools whose servers are preferably located in Spain or, failing that, in a member state of the European Union, or which comply with European legislation in accordance with the guides and recommendations of the Spanish Data Protection Agency, the European Commission and the Community agreements of reference in matters of international data transfer.
In the event that the international transfer of data is necessary, acceptance of this Privacy Policy means that as a User you expressly consent to the aforementioned transfer.
Specifically, FERSA plans to make an international transfer of data to the company of the same group that is located in the United States as a result of the business collaboration between the Fersa Group. International data transfers may also be made to the same destination as a consequence of the contracting of IT platforms with external suppliers.
In these cases, given that the United States offers the same confidentiality guarantees as those required in Spain (‘Safe Harbor’), it is a secure transfer.
5. Exercise of rights and complaints to the Spanish Data Protection Agency
Users may at any time withdraw their consent and/or exercise their rights of access, rectification, suppression, limitation, opposition and portability provided for in the European regulations on personal data protection, by sending an e-mail to [email protected] or by post to FERSA, PolÃgono Calle Bari nº 18, 50197, Zaragoza (Spain).
In this case, the User must indicate the right he/she wishes to exercise and attach a copy of his/her ID card or any other valid identification documentation that legitimises him/her to do so, including that which allows electronic identification.
In the event that your rights are not effectively exercised, you may file a complaint with the Spanish Data Protection Agency.
6. Your commitment, the veracity of the data that you provide us with.
The user declares that the personal data provided to FERSA are truthful.
As a user you should be aware that you are solely responsible for any damage or harm, direct or indirect, that may be caused to FERSA as the party responsible for this website or to a third party if you send us false data or data on third parties without their prior consent, causing deception, damage or harm.
So that we can keep your data accurate and up to date, we ask the user to inform us of any variation that may occur in the data provided.
7. Consent of minors
Fersa prohibits the sending of personal data through this website or the means indicated therein by users under 14 years of age. In the event that FERSA detects users who may be under the aforementioned age, it will not process their data and therefore will not respond to their requests.
FERSA reserves the right to request a copy of their ID card or equivalent document that accredits their legitimacy in the event of having well-founded suspicions about the User being under the age of majority.
8. Applicable security measures
In order to protect the personal data of users, FERSA ensures itself and controls its data processors in the application of technical and organisational measures appropriate to the state of the art to protect personal data, taking into account the scope, context and purposes of the processing, as well as the risks of varying likelihood and severity for the rights and freedoms of data subjects, trying to be able to ensure the confidentiality, integrity, availability and resilience of the systems and services of the processing.
Our information security policies and procedures are regularly reviewed and updated to meet our business needs, technological changes and regulatory requirements.
9. Applicable legislation and jurisdiction
FERSA is based in Spain, so the content of this Privacy Policy has been drawn up in accordance with Spanish legislation and applicable European Union regulations.
By accepting this Privacy Policy, you accept that claims or complaints against this entity arising from or related to the use of this website and more specifically to the processing of your personal data will be resolved by the court of competent jurisdiction located in Zaragoza. If it is FERSA that has to make any kind of claim, it will do so before the competent court of the User's domicile or at FERSA's domicile (Calle Bari nº 18, 50197, Zaragoza (Spain)) in the case of legal persons or non-consumer professionals.
If the User accesses this site from a location outside Spain, he/she is responsible for complying with all applicable local and international laws.