In accordance with the provisions of the current data protection legislation, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, GDPR), as well as Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter, LOPD-GDD), the user is hereby informed in compliance with Articles 13 of the GDPR and 11 of the LOPD-GDD:
DATA CONTROLLER
Who is responsible for processing your data?
Company name: Sherish Consulting SL
VAT ID: B44939627
Address: Chancillería, 8 11403, Jerez de la Frontera
Email: info@bbjerez.com
PURPOSE
For what purpose will we process your personal data? SHERISH CONSULTING SL processes your information for:
Maintaining the business relationship and providing the contracted service.
Creating a tailored quote based on your needs.
Managing communications via email and/or WhatsApp with interested parties.
Sending commercial information related to our sector: TOURIST ACCOMMODATION, EXPERIENCES AND EVENTS.
Monitoring the security of facilities (video surveillance).
Managing training activities.
How long will we keep your data? Personal data provided will be retained as long as the business relationship is maintained. However, for maximum transparency, we inform you of the general retention periods:
General identification data (email, name, surname, phone, etc.): while the business relationship lasts or until consent is revoked. In any case, data will be deleted when no longer necessary for the purpose they were collected for.
Accounting, tax and employment: six (6) years.
Employment: ten (10) years.
For commercial information, SHERISH CONSULTING SL may retain your information to send newsletters related to our products and services, even after the relationship ends. You may exercise your rights at any time by contacting us through your preferred method.
Recruitment processes: two (2) years from CV submission.
Video surveillance: thirty (30) days, unless a violation or crime is recorded.
We periodically review our systems to delete data not legally required.
LEGAL BASIS
What is the legal basis for processing your data? According to the purpose of data collection, your data processing is based on:
Managing the business relationship: Execution of a contract (Article 6.1.b GDPR) and consent of the data subject (Article 6.1.a GDPR).
Creating tailored quotes: Execution of a contract/pre-contractual relationship (Article 6.1.b GDPR).
Managing email communications: Consent (Article 6.1.a GDPR) and Legitimate interest (Article 6.1.f GDPR).
Recruitment processes: Consent (Article 6.1.a GDPR).
Internal HR and employee management: Execution of a contract (Article 6.1.b GDPR).
Sending commercial communications: Consent (Article 6.1.a GDPR), Consent under Article 20 LSSICE, Legitimate interest (Article 6.1.f GDPR).
Video surveillance for facility security: Legitimate interest (Article 6.1.f GDPR).
Managing training activities: Execution of a contract (Article 6.1.b GDPR), Consent (Article 6.1.a GDPR).
All data collected are necessary for the provision of the service. Fields marked with an asterisk (*) are mandatory. If these are not provided, SHERISH CONSULTING SL will be unable to deliver the contracted service.
DATA SUBJECT RIGHTS
What are your data protection rights? In accordance with Articles 13 GDPR and 11.2.c) LOPDGDD, you may exercise the following rights by contacting us at Chancillería 8, Jerez de la Frontera, 11403, Cádiz, Spain or via email at info@bbjerez.com. In any case, under the applicable regulations, you have the following rights as per Articles 15 to 22 GDPR and 12 to 18 LOPDGDD:
Right to access personal data
Right to rectification or erasure
Right to restrict processing
Right to object to processing
Right to data portability
You may request forms to exercise your rights from the Data Controller via the email provided. Additionally, you may file a complaint with the Spanish Data Protection Agency (AEPD). See Section VII below for more information.
RECIPIENTS
Who will your data be shared with? You will always be informed and, when necessary, your express consent will be requested to share personal data or make international data transfers, in compliance with current regulations (Articles 13.1.e and 44 GDPR; Articles 11.1 and 40 LOPDGDD 3/2018).
SOURCE OF YOUR DATA
How did we obtain your data? The personal data processed by SHERISH CONSULTING SL come directly from the data subject, in accordance with Articles 13 GDPR and 11 LOPDGDD, or from group or partner companies. You can request more information via email at info@bbjerez.com or at the Data Controller’s office at the address provided.
What categories of data do we process?
Identification data: Name, surname, ID/passport, postal and email addresses, gender, date and place of birth, phone number
Commercial information
Financial data: Bank account number, credit card number
Curriculum vitae, academic background, degrees, hobbies, memberships
Video surveillance: Image
Sensitive data will be processed in accordance with Articles 9 GDPR and 9 LOPDGDD. The data subject will always be informed of which sensitive data are being used.
SUPERVISORY AUTHORITY
SHERISH CONSULTING SL strives to comply with data protection regulations as it is one of our most valuable assets. However, if you believe your rights have been violated, you may file a complaint with the Spanish Data Protection Agency (AEPD), located at C/ Jorge Juan, 6, 28001 Madrid. More information: http://www.agpd.es/
