Privacy Policy

Identity of the person responsible for processing personal data

The person responsible for the processing of personal data collected on tuberiasdelsur.com is: SOUTHERN PIPES SL, with NIF: B11349032 (hereinafter, the Company). Its contact details are as follows:

Address: POL. IND. LA MENACHA C/ PORTUS ALBUS, 23-25, 11205 Algeciras, Cadiz, Spain

Contact phone number: 956 65 53 70

Contact email: gerencia@tubosur.com

SOUTHERN PIPES SL (the Company) is an Organization in which personal data processing activities take place, which gives it significant responsibility in the design and organization of procedures so that they are aligned with legal compliance in this matter.

In the exercise of these responsibilities and in order to establish the general principles that must govern the processing of personal data in the Company, this Personal Data Protection Policy is approved, which is notified to its Employees and made available to all its stakeholders.

• Purpose

The Personal Data Protection Policy is a proactive Responsibility measure that aims to ensure compliance with the applicable legislation in this area and, in relation to it, respect for the right to honour and privacy in the processing of personal data of all persons who interact with the Company. In accordance with the provisions of this Personal Data Protection Policy, the Principles that govern the processing of data in the organisation are established and, consequently, the procedures and organisational and security measures that the persons affected by this Policy undertake to implement within their area of responsibility. To this end, Management will assign responsibilities to the staff involved in data processing operations.

• Scope of application

This Personal Data Protection Policy will apply to the Company, its directors, managers and employees, as well as to all persons who have a relationship with it, expressly including service providers with access to data (“Data Processors”).

• Principles of processing personal data

As a general principle, the Company will scrupulously comply with the legislation on the protection of personal data and must be able to demonstrate this (Principle of "proactive responsibility"), paying special attention to those treatments that may pose a greater risk to the rights of those affected (Principle of "risk approach"). In relation to the above, TUBERIAS DEL SUR SL will ensure compliance with the following:

Beginning:

– Legality, loyalty, transparency and limitation of purpose. The data processing must always be reported to the affected party, through clauses and other procedures; and it will only be considered legitimate if there is consent for the processing of data (with special attention to that given by minors), or there is another valid legitimation and the purpose of the same is in accordance with the Regulations.

– Data minimisation. The data processed must be adequate, relevant and limited to what is necessary in relation to the purposes of the processing.

– Accuracy. The data must be accurate and, where necessary, up-to-date. In this regard, the necessary measures will be taken to ensure that any personal data that is inaccurate with respect to the purposes of the processing is deleted or rectified without delay.

– Limitation of the retention period. The data will be kept in a way that allows the identification of the interested parties for no longer than necessary for the purposes of the processing.

– Integrity and Confidentiality. The data will be treated in such a way as to ensure adequate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, by applying appropriate technical or organizational measures. – Data transfers. The purchase or obtaining of personal data from illegitimate sources or in those cases in which said data has been collected or transferred in violation of the law or its legitimate origin is not sufficiently guaranteed.

– Hiring of suppliers with access to data. Only suppliers that offer sufficient guarantees to apply appropriate technical and security measures in data processing will be chosen for contracting. The appropriate Agreement in this regard will be documented with these third parties.

– International data transfers. Any processing of personal data subject to European Union regulations that involves a transfer of data outside the European Economic Area must be carried out in strict compliance with the requirements established in the applicable law.

– Rights of affected parties. The Company will facilitate the exercise of the rights of access, rectification, deletion, limitation of processing, opposition and portability by those affected, establishing internal procedures for this purpose, and in particular the models for their exercise that are necessary and appropriate, which must satisfy, at least, the legal requirements applicable in each case.

The Company will promote that the principles included in this Personal Data Protection Policy are taken into account (i) in the design and implementation of all work procedures, (ii) in the products and services offered (iii) in all contracts and obligations formalized or assumed and (iv) in the implementation of all systems and platforms that allow access by employees or third parties and/or the collection or processing of personal data.

• Commitment of workers

Employees are informed of this Policy and declare that they are aware that personal information is an asset of the Company, and in this regard they adhere to it, committing to the following:

– Carry out the data protection awareness training that the Company makes available to you.

– Apply the user-level security measures that apply to your job, without prejudice to the responsibilities in their design and implementation that may be attributed to you based on your role within TUBERIAS DEL SUR SL

– Use the established formats for the exercise of Rights by those affected and inform the Company immediately so that the response can be effective.

– Inform the Company, as soon as it becomes aware, of any deviations from the provisions of this Policy, in particular “Violations of personal data security”, using the format established for this purpose.

• Control and evaluation

An annual verification, evaluation and assessment will be carried out, or whenever there are significant changes in data processing, of the effectiveness of the technical and organisational measures to ensure the security of the processing.

 

SOUTHERN PIPES SL