Privacy policy

Eiffage Metal España, S.L.U. is committed to protecting the privacy of users who access this website and/or any of its services. The use of the website and/or any of the services offered by Eiffage Metal España, S.L.U. implies the user’s acceptance of the provisions contained in this Privacy Policy and that their personal data will be processed as stipulated. Please note that although there may be links from our website to other websites, this Privacy Policy does not apply to other companies or organizations to which the website is redirected. Eiffage Metal España, S.L.U. does not control the content of third-party websites and does not accept any responsibility for the content or privacy policies of such websites.

1) DATA CONTROLLER INFORMATION

In compliance with Article 10 of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, the identifying details of the Controller are provided below:

2) APPLICABLE LAWS

This privacy policy is based on the current Spanish and European regulations on the protection of personal data on the internet. Specifically, it complies with the following rules:

– Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

– Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).

– Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

3) PRIVACY ISSUES

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, we provide the following information about the processing of personal data that you may provide us:

Data Controller

Eiffage Metal España, S.L.U.

Our data is at the top of this legal notice.

Personal Data Register

In accordance with the GDPR and LOPD-GDD, we inform you that personal data collected by Eiffage Metal España, S.L.U. through forms on its web pages will be incorporated and processed in our file in order to facilitate, expedite, and fulfill the commitments established between Eiffage Metal España, S.L.U. and the User or to maintain the relationship established in the forms the User fills out, or to respond to a request or inquiry. Likewise, in accordance with the provisions of the GDPR and the LOPD-GDD, unless the exception provided in Article 30.5 of the GDPR applies, a record of processing activities is maintained, specifying the processing activities carried out and the other circumstances established in the GDPR.

Legal Basis for Processing

The legal basis for the processing of personal data is consent. Eiffage Metal España, S.L.U. is committed to obtaining the User’s express and verifiable consent for the processing of their personal data for one or more specific purposes.

The User will have the right to withdraw their consent at any time. Withdrawing consent will be as easy as giving it. As a general rule, the withdrawal of consent will not affect the use of the Website.

In cases where the User must or may provide their data through forms to make inquiries, request information, or for reasons related to the content of the Website, they will be informed if the completion of any of them is mandatory due to the fact that they are essential for the proper development of the operation carried out.

Other Legal Bases:

Compliance with legal obligations.

Legitimate interest: sending our own advertising.

Categories of Data

The categories of data processed by Eiffage Metal España, S.L.U. are only identifying data. Under no circumstances are special categories of personal data processed as defined in Article 9 of the GDPR.

Origin of Your Data

Data included in the website forms.

Data collected through cookies to improve browsing experience as informed in the Cookie Policy.

Retention Period of Personal Data

Personal data will only be retained for the minimum time necessary for the purposes of its processing and, in any case, only for the following period: or until the User requests the right of cancellation, opposition, or limitation of processing. However, certain identifying personal data and traffic data will be retained for a maximum period of 2 years in case it is required by judges and courts or to initiate internal actions arising from misuse of the website.

At the time the personal data is obtained, the User will be informed about the period during which the personal data will be retained or, when this is not possible, the criteria used to determine this period.

Likewise, we inform you that our information retention policies are aligned with the timeframes defined by various legal responsibilities for statute of limitation purposes:

a) General Rule:

By virtue of Article 30 of the Commercial Code, and unless other criteria apply, all company documents and/or information will be retained for 6 years.

This applies to all accounting, tax, labor, or commercial documentation, including correspondence.

b) Specific timeframes:

Our company must also define minimum periods depending on the type of data and according to the various limitation periods, which must be known by each department.

There will be no automated decision-making based on data processing that produces effects on your data.

Purpose of the Processing

Below are the purposes of the data processing carried out:

STAFF RECRUITMENT: To manage all resumes and other information provided by job applicants and to keep them informed about the various job openings that occur in our organization and/or clients who contract our recruitment service. The provided data will be retained until a job position is awarded or until the right to cancellation is exercised (this period shall not exceed one year). At any time, the candidate may object to or limit the scope of the data processing.

RESPONDING TO INQUIRIES: If you have requested information through an explicit action via our form, the data you provided will be used for the purpose of responding to your inquiry.

– Information about data processing policies provided to staff.

– Regular backups.

– Access control to data.

– Regular verification, evaluation, and assessment processes.

6) SECRECY AND SECURITY OF PERSONAL DATA

Eiffage Metal España, S.L.U. undertakes to adopt the necessary technical and organizational measures, according to the appropriate level of security to the risk of the collected data, in order to ensure the security of personal data and avoid their destruction, loss, or accidental or unlawful alteration, or unauthorized communication or access to such data.

The Website has an SSL (Secure Socket Layer) certificate, which ensures that personal data is transmitted securely and confidentially, as the transmission of data between the server and the User, and in feedback, is fully encrypted.

However, because Eiffage Metal España, S.L.U. cannot guarantee the invulnerability of the internet nor the total absence of hackers or others who fraudulently access personal data, the Data Controller commits to notify the User without undue delay when a personal data security breach occurs that is likely to result in a high risk to the rights and freedoms of natural persons. According to Article 4 of the GDPR, a breach of the security of personal data is understood to be any security breach that causes the accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or unauthorized communication or access to such data.

Personal data will be treated as confidential by the Data Controller, who undertakes to ensure this confidentiality through a legal or contractual obligation for their employees, partners, and any person to whom the information is made accessible.

7) LINKS TO THIRD-PARTY WEBSITES

The Website may include hyperlinks or links that allow access to third-party websites other than Eiffage Metal España, S.L.U., and which are therefore not operated by Eiffage Metal España, S.L.U. The owners of these websites will have their own data protection policies, and they will be responsible, in each case, for their own files and their own privacy practices.

8) ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

It is necessary for the User to have read and be in agreement with the conditions regarding the protection of personal data contained in this Privacy Policy, as well as to accept the processing of their personal data so that the Data Controller can proceed accordingly, during the indicated periods and for the specified purposes. The use of the Website implies acceptance of its Privacy Policy.

Eiffage Metal España, S.L.U. reserves the right to modify its Privacy Policy, according to its own criteria, or motivated by a legislative, jurisprudential, or doctrinal change from the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User. It is recommended that the User consult this page periodically to stay informed of the latest changes or updates.

Last updated: 06/05/25