Privacy Policy
Interested or affected parties: Private clients, workers, professionals and company representatives.
Treatments
How do we process your personal data?
In compliance with Regulation (EU) 2016/679 and the Organic Law on the Protection of Personal Data, we inform you that your personal data may be subject to some of the following treatments:
- TR04 – Advertising campaigns (Legal basis: Law 34/1988, of November 11, General Advertising.)
- TR08 – Collecting the opinion of interested parties (Legal basis: Regulation (EU) 2016/679 on data protection and LOPD.)
- TR03 – Selection of own personnel (Legal basis: Royal Legislative Decree 3/2015, of October 23, approving the consolidated text of the Employment Law.)
- TG01 – Own accounting and bookkeeping management, as responsible. (Legal basis: Royal Decree 1514/2007, of November 16, regulating the General Accounting Plan.)
- TG25 – Data collection for own tax management (Legal basis: Law 58/2003, of December 17, General Tax Law.)
- TG12 – Own labour management: data collection (Legal basis: Royal Legislative Decree 1/1994, of June 20, approving the Revised Text of the General Social Security Law.)
- TR09 – Assurances on technical and organisational measures in the applied software (Legal basis: Regulation (EU) 2016/679 on data protection and LOPD.)
- TE08 – Protection of Personal Data (Legal basis: Regulation (EU) 2016/679 and Organic Law 3/2018.)
- TE02 – Prevention of occupational risks (Legal basis: Law 31/1995, of November 8, on the prevention of occupational risks.)
- TE07 – Destruction of documents (Legal basis: Regulation (EU) 2016/679)
- TV01 – Sales / Provision of Services (Legal basis: Commercial and Tax Legislation)
- TE03 – Transport and/or package delivery service (Legal basis: Royal Decree of August 22, 1885, which publishes the Commercial Code.)
- TR05 – Emails (Legal basis: Commercial Code and other applicable legislation.)
- TR01 – Information requests received (Legal basis: Commercial Code and other commercial provisions.)
- TR07 – Management of incidents and/or security breaches (Legal basis: Regulation (EU) 2016/679 on data protection and LOPD.)
- TE04 – Management of own legal affairs (Legal basis: Applicable commercial and labor legislation.)
- TE01 – Maintenance of computer systems (Legal basis: Commercial Code.)
Responsible
Who are we?
We are responsible for the processing of your data. Therefore, both the interested parties and the competent bodies are expressly, precisely and unequivocally informed of the following aspects relating to the data controller:
GREEN LIGHT GO LEADERSHIP AND CULTURE, SL.
B67752162
Trafalgar Street, 10, 3-2
BARCELONA 08010
admin@greenlightgo.es
Purposes
What do we use your personal data for?
In this organization, we may process your personal data exclusively for the purposes indicated below:
- Check that all the necessary technical measures are being carried out for the correct management of personal data with the applied software.
- Sending commercial and/or advertising information by email.
- Management of requests for information received by the interested party about our products or services.
- Exclusive management of internal incidents detected in compliance with GDPR requirements.
- Carry out advertising campaigns to advertise our services and/or products.
- Collect the opinions of interested parties.
- Selection of personnel to fill necessary job vacancies.
- Comply with all the requirements set forth in the Occupational Risk Prevention Act.
- Sending packages and correspondence.
- Manage any legal issues affecting the company.
- Manage, maintain and repair computer storage systems.
- Actions to carry out one’s own labour management.
- Actions to carry out one’s own tax and accounting management.
- Comply with the principle of limiting the period of conservation of personal data.
- Compliance with the requirements of Regulation (EU) 2016/679 and Organic Law 3/2018. Administrative management of private clients.
- Carry out the sale or provision of the contracted service.
A commercial or user profile may be created based on the information provided or obtained. Please be advised that, under no circumstances, will profiles be created with the data of a minor.
The personal data provided by you will be kept for the duration of the contractual relationship or, where applicable, as long as you do not exercise your right to object or withdraw the consent given. To do so, you can go to the corresponding section on our website or send an email to the address indicated in the section relating to the controller.
Legitimacy
Why do we use them? We are entitled to process your personal data for the following reasons:
- Your unequivocal, informed and express consent, in those cases where it is legally required, without, in any case, the withdrawal of the same conditioning the execution of other treatments whose legitimacy is different, and without said withdrawal affecting the legality of the treatment prior to the withdrawal of the same.
- A legal obligation of the data controller.
- The execution of the contract for the provision of services and/or the sale of the corresponding products, signed by you.
- The legal basis for the processing of your data is a legitimate interest of the controller. This interest is based on the prior performance of a proportionality or weighing judgment between the legitimate interest of the controller and the interests or rights and freedoms of the interested parties. This weighing has involved the evaluation of the interest, the evaluation of the impact of the processing on the interested parties, the balance between the two previous concepts and the implementation of additional guarantees. The final weighing being in favor of the controller, the processing can be carried out in accordance with the applicable regulations regarding the protection of personal data. For any questions or clarifications, you can contact us through the email provided in the section corresponding to the data controller.
Recipients
With whom can we share your personal data?
Your personal data will be communicated to the following companies and organizations:
- Tax Agency
- State Public Employment Service
- General Treasury of Social Security
- National Data Protection Agency
- Banks and savings banks
Your personal data will not be transferred to any third country or international organization.
Origins
What rights can you exercise?
Your personal data will be incorporated into the following files, owned by the organization:
- FG01 Own accounting management
- FG02 Own labor management
- FG15 Own tax management. Data collection
- FE01 Computer maintenance
- FE02 Occupational risk prevention
- FE03 Transport and shipping
- FE04 Own legal matters
- FR01 Requests for information received
- FR03 Selection of own personnel
- FR04 Advertising campaigns
- FR05 Emails
- FR07 Management of incidents and/or security breaches
- FR08 Collect stakeholder feedback
- FR09 Software and hardware security
- FE07 Destruction of documents
- FE08 Protection of Personal Data
- FP01 Clients
The personal data that we process in our organization comes from the following sources:
- The interested party himself
Rights
What data do we process and how did we obtain it?
We guarantee that you may exercise your rights in relation to the processing of your personal data.
In particular, we inform you that you have the right to:
- Obtain confirmation as to whether your data is being processed.
- Exercise the right to access the personal data we have, obtaining information about the purposes of the processing, the category of data processed, the possible recipients, the retention period, the origin of the data and, where appropriate, the creation of profiles or automated decision-making.
- Exercise the right to rectification. For these purposes, we remind you that the personal data we have must always be a faithful reflection of reality, so do not hesitate to exercise your right if any data is modified, changed or cancelled. You guarantee that the personal data you have provided us by any means are true and accurate, and you agree to notify any change or modification thereof, being your sole responsibility for any loss or damage caused to the controller or any third party due to the communication of erroneous, inaccurate or incomplete information.
- For reasons relating to your particular situation, you may object to the processing of your data, in which case our organization will stop processing the data, unless there are legitimate reasons preventing this.
- Request the deletion of your personal data when, among other reasons, they are no longer necessary for the purposes described above or we no longer have the legitimacy to process them.
- Request the portability of your data, when the processing is carried out by automated means and provided that you are linked to our entity based on a signed contract or you have given consent for the processing carried out. In these cases, you will have the right to receive your personal data in a structured, commonly used and machine-readable format, or to have it transmitted directly to another controller, when technically possible.
- In certain circumstances, you may request that we restrict the processing of your data, in which case we will only retain it for the purpose of exercising or defending claims.
- Object to automated decision-making, including profiling.
These rights may be exercised free of charge, except in cases provided for by law, by means of a written request signed by you or, where applicable, by your representative, addressed to the person responsible, at the addresses provided for this purpose in the first section, or physically at any of our establishments.
You also have the right to file complaints, either with the Spanish Data Protection Agency (on the website https://www.agpd.es/) or with the corresponding supervisory authority.
You may also go to court to claim compensation.
Finally, you have the right to withdraw your consent, just as easily as you gave it. To do so, you can go to our website, where you will find the necessary information to quickly and easily revoke the authorization that has been granted to us to make these communications. You can also send an e-mail to the address indicated in the section relating to the person responsible.
We also inform you that in each processing of your personal data, the possible threats and impacts that may occur as a consequence thereof are determined, mitigating or eliminating, if possible, the potential damages, through the application of the corresponding security measures that are periodically reviewed to determine their effectiveness.
Our control system also enables compliance with the principles of data processing, allowing us to prove to the interested party the principle of limitation to the purpose of processing, the principle of limitation to the conservation period, the principle of data minimization, as well as the principle of integrity and confidentiality.
Finally, we also inform you that you will periodically receive surveys that will allow us to know your opinion on any suggestion regarding the processing of your personal data, as well as to comply with the principle of transparency and accuracy of the data processed.
For any questions or clarifications, you can contact us via the email provided in the first section.
This privacy policy was last updated on July 12, 2024.
