Privacy Policy

The protection of your personal data is of particular importance to us. For this reason, at VORN Bioenergy Iberia, S.L., we process your personal data (hereinafter "data") exclusively in accordance with the applicable legal and regulatory provisions. With this data protection declaration, we would like to inform you in detail about the processing of your data in our company as well as the data protection rights to which you are entitled under the European General Data Protection Regulation (GDPR).

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA AND WHO CAN YOU CONTACT?

The data controller is VORN Bioenergy Iberia, S.L., with registered office in the city of Madrid, Calle Conde de Aranda, 1 – 2 izquierda, C.P. 28.001, with C.I.F. B-56.567.605.

In case you need it, or require it, you can contact us at the following email address: privacy-spain@vornbioenergy.com

WHAT DATA DO WE PROCESS AND FROM WHAT SOURCES DOES IT COME?

We process the data we receive from you within the framework of the initiation of the creation of a business relationship. In addition, we process data that we have lawfully obtained and/or received from credit institutions, creditor protection organisations, publicly accessible sources (e.g. commercial register, register of associations, land register, media) as well as from other companies with whom we have an ongoing business relationship.

THE PERSONAL DATA WE PROCESS IS

Their main contact details are:

• As a private customer: Name and surname, address, contact details (e.g. e-mail address, telephone number, fax), date of birth, national identity document and number (copy of identity document), bank details.
• As a corporate client or supplier: Name of your legal representative, company name, entry and registration number in the relevant commercial register, tax identification code, company number, address, contact person, contact details (e-mail address, telephone number, fax), bank details.

In addition to the data set out above, we also process the following data:

• Information about the nature and content of our business relationship, such as contractual data.
• Order data, sales data and documents, customer and supplier history, consultation documents, vehicle data.
• Advertising and sales data.
• Documentation data (e.g. query protocols), image data.
• Data from your electronic transactions with VORN Bioenergía Iberia, S.L. (e.g. IP address, login details).
• Other data we have received from you in the context of our business relationship (e.g. in meetings with customers).
• Data that we generate ourselves from master/contact data as well as other data, e.g. through analysis of customer needs and potential.
• Documentation of your declaration of consent to the receipt of, for example, newsletters.
• Image data from video surveillance systems.
• Photos taken at public events.

FOR WHAT PURPOSE AND WHAT LEGAL BASIS DOES THE PROCESSING OF YOUR DATA PROTECT?

We process your data in accordance with the provisions of the European General Data Protection Regulation - hereinafter "GDPR" - (EU Reg. 2016/679) and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights:

1) For the fulfillment of pre-contractual and contractual obligations. (Art. 6(1)(b)) GDPR).
Your data is processed, among other things, for the sale and distribution of our goods and services, for procurement and logistics purposes, as well as for the management and analysis of suppliers and customers.

The data is processed, in particular, for the start of business activities and the performance of contracts with you, for example, in the following cases:

• Creation and management of a customer or supplier account.
• Order delivery.
• Loyalty card storage.
• Participation in competitions.
• Sending information, e.g. requesting a catalogue.

2) For compliance with legal obligations (Art. 6 (1) (c) GDPR)

The processing of your data is essential and is intended to comply with certain and various specific legal obligations, e.g. with regard to fiscal/tax obligations, money laundering, provisions relating to the marketing of products (e.g. provisions on "dangerous substances and objects").

3) To safeguard our legitimate interests and those of third parties (Art. 6 (1) (f) GDPR)

Your data may be processed in pursuit of our legitimate interest or that of third parties, except when such interests conflict with the fundamental rights and freedoms of the data subject.

The processing of data to safeguard the aforementioned legitimate interests will take place, for example, in the following cases:

• Consultation and exchange of data with credit agencies and creditor protection organizations in relation to your creditworthiness/rating, to determine your creditworthiness and identify potential risks of financial insolvency.
• Advertising or marketing.
• Measures for business management and further development of services and products.
• Maintaining a customer database to improve customer service.
• Measures for the protection of VORN Bioenergy Iberia, S.L. spaces against contractual or legal violations, for example, security access controls, or access control even with video surveillance systems
• In the context of disputes and/or legal and judicial proceedings.

4) Your consent (Art. 6 (1) (a) GDPR)

If you have expressed your consent to the processing of your personal data, such processing will be carried out for the purposes and in the manner agreed in the declaration of consent.

You can revoke your express consent at any time with effect for the future (data processing carried out in the past on the basis of legitimately obtained consent remains valid). If you wish to revoke your consent, please send an email to privacy-spain@vornbioenergy.com.

Below are the personal data processing operations that are carried out on the basis of your consent.

PROCESSING OF PERSONAL DATA FOR ADVERTISING PURPOSES (MARKETING CAMPAIGNS)

We will communicate with you by sending you marketing communications regarding your orders, certain products, as well as recommendations for such products or services that may be of interest to you. In particular, marketing campaigns refer to direct advertising of products or services already purchased or similar to these.

At any time you wish, you can object to the use of your personal data for advertising or marketing purposes.

NEWSLETTER

We use the so-called double opt-in procedure to send you our newsletter: We will only send you a first newsletter by e-mail if you have expressly authorised us to activate the newsletter service in advance. We will then send you a second email notification and ask you to confirm receipt of our newsletter by clicking on a link in this email.

Within each newsletter you will also find a link to unsubscribe from the newsletter service.

WHO RECEIVES MY DATA?

VORN Bioenergy Iberia, S.L. uses external suppliers to guarantee high quality services.

If we use external providers, from our position, we remain responsible for the protection of your data. All processors of your data that we use are contractually obliged to treat your data confidentially and to process it only within the framework of the provision of the service.

These will include, for example, providers of IT services that we need for the operation and security of our IT system, as well as publishers of advertisements and addresses for our advertising campaigns.

They will also be dealt with by public authorities (e.g. tax and tax authorities) and courts, as well as external auditors, all for the fulfilment of legal obligations and in the framework of judicial proceedings.

In addition, insurance companies, banks, credit agencies and service providers may be recipients of your data for the purposes of initiating and fulfilling contracts, as well as investors in the case of project sales.

HOW LONG WILL MY DATA BE STORED FOR?

We process your data until the end of the business relationship or until the expiry of the statutory warranty, limitation and retention periods.

WHAT RIGHTS DO I HAVE IN RELATION TO DATA PROTECTION?

You have the right to information, rectification, deletion or restriction of the processing of your stored data, the right to object to processing, as well as the right to data portability and the right to lodge a complaint in accordance with the provisions of the Data Protection Act.

You can ask us for information, at any time, about whether and to what extent we process your data.

RIGHT OF RECTIFICATION

If we process your data incompletely or incorrectly, you can ask us to correct or complete your data at any time.

RIGHT OF ERASURE

You can ask us to erase your data if we unlawfully process it or if the processing disproportionately affects your legitimate protection interests. Please note that there may be reasons that prevent immediate deletion, e.g. in the case of statutory retention obligations.

Whether or not you exercise your right to erasure, we will delete your data immediately and completely, unless prevented from doing so by a period of retention under any legal or regulatory provision.

RIGHT TO RESTRICT THE PROCESSING OF YOUR DATA

You can ask us to restrict the processing of your data if:

• You contest the accuracy of the data, for a period of time that allows us to verify its accuracy.
• The processing of the data is unlawful, but you object to the erasure of the data and request instead the restriction of its use.
• When we no longer need the data for its intended purpose, but you still need it to assert or defend legal claims,
• When you object to the processing of data.

RIGHT TO DATA PORTABILITY

You may request that we provide you with the data you have provided to us in a structured, commonly used and machine-readable format, and that we may transmit this data to another controller without hindrance, provided that:

• We process this data on the basis of consent given and revocable by you or for the performance of a contract between us, and the processing is carried out by automated means.

If technically feasible, you can ask us to transfer your data directly to another controller.

RIGHT TO OBJECT

If we process your data for legitimate interests, you can object to this processing at any time on grounds relating to your particular situation; This also applies to profiling based on these provisions. In this case, we will no longer process your data, unless we can demonstrate the existence of compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You can object to the processing of your data for direct marketing purposes at any time, without giving reasons.

RIGHT TO FILE A COMPLAINT

If you believe that we are infringing privacy and data protection legislation in the processing of your data, please contact us with any questions.

If you wish to assert any of the above rights against us, please email privacy-spain@vornbioenergy.com

AM I OBLIGED TO PROVIDE DATA?

The processing of your data is only necessary for the conclusion or performance of the contract concluded with you.

If you do not provide us with this data, we will generally have to refuse to enter into the contract, or to execute the order, or we will no longer be able to fulfil an existing contract and therefore have to terminate it. However, you are not obliged to consent to the processing of data that is not relevant to the performance of the contract or that is not required by law.

PRIVACY POLICY ON JOB APPLICATIONS

EMPLOYEES AND/OR COLLABORATORS

If you send us your request by email, we store your personal data in a secure, operational environment to protect it from loss or misuse.

WHAT DATA IS PROCESSED AND FROM WHAT SOURCES DOES IT COME?

As part of the application process, we process the following categories of personal data:

• Personal data (name, date of birth, nationality, place of residence)
• Documents (certificates, attestations, curriculum vitae)
• Education history ((university) education data, professional qualifications)
• Billing details (bank details for reimbursement of tuition fees)
• Contact details (email, phone)
• Log data generated during the use of computer systems
• All personal data provided by the candidate during the selection process.

In individual cases, the processed data may also include special categories of personal data within the meaning of Article 9(1) of the General Data Protection Regulation (GDPR), such as data on health, religious affiliation or trade union membership, if provided to us by the candidate.

FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS IS MY DATA PROCESSED?

We process your personal data in accordance with the GDPR, national data protection laws and other relevant national laws.

The processing of data is essential to carry out the selection procedure, initiate and establish an employment relationship with VORN Bioenergy Iberia, S.L.
The legal basis for carrying out the application procedure is consent and the need to perform the contract, in accordance with Article 6(1)(a) and (b), Art. 6 GDPR.

HOW DOES THE APPLICATION PROCESS WORK?

You can apply directly to a job advertisement published by VORN Bioenergy Iberia, S.L. on its website or on the company's Linkedin channels, by entering your details in the application form for the advertised position.

We will inform you by email about the status of processing your application.

As part of the selection process, we will ask you whether we can forward your application documents to other job offers that match your profile, including at other companies in our Group.

If, at the time of application, there are no vacancies that match your qualifications or wishes, we will ask for your permission to include you in our candidate pool, in order to consider possible job offers in the future.

WHO RECEIVES MY DATA?

Only the persons involved in the application and selection process will have access to your personal data for the purposes mentioned above.

HOW LONG WILL MY DATA BE STORED FOR?

In order to meet the requirements for the correct processing of an application and to be able to answer questions about your application and/or its rejection.

Six months after the completion of the selection process, i.e. after receiving your acceptance or rejection from us, your personal data will be deleted.

As soon as you agree to be part of our candidate pool, your data will be stored and processed for a period of 12 months. At the end of this period, your personal data will be deleted.

EMAIL COMMUNICATION

Please note that sending unencrypted emails is considered insecure, as unauthorized persons can see the content of the email and possibly tamper with it. Therefore, we advise you not to send sensitive data via email when you contact us. In case sensitive data needs to be sent via email, use a content encryption option.

IS PERSONAL DATA TRANSFERRED TO THIRD COUNTRIES?

The data is transferred to third countries on a case-by-case basis and only on the basis of an adequacy decision of the European Commission, standard contractual clauses, adequate safeguards or your explicit consent.

WHAT RIGHTS DO I HAVE IN RELATION TO DATA PROTECTION?

You have the right to information, rectification, deletion or restriction of the processing of your stored data, the right to object to processing, as well as the right to data portability and the right to lodge a complaint in accordance with the provisions of the Data Protection Act.

You can ask us for information about whether and to what extent we process your data.

RIGHT OF RECTIFICATION

If we process your data incompletely or incorrectly, you can ask us to correct or complete it at any time.

RIGHT OF ERASURE

You can ask us to erase your data if we unlawfully process it or if the processing disproportionately affects your legitimate protection interests. Please note that there may be reasons that prevent immediate deletion, for example, in the case of statutory retention obligations.

Whether or not you exercise your right to erasure, we will delete your data immediately and completely, unless prevented from doing so by a statutory or regulatory retention period.

RIGHT TO RESTRICTION OF PROCESSING

You can ask us to restrict the processing of your data if

• You contest the accuracy of the data, for a period of time that allows us to verify its accuracy.
• The processing of the data is unlawful, but you object to the erasure of the data and request instead the restriction of its use.
• We no longer need the data for its intended purpose, but you still need it to assert or defend legal claims.
• Or when you object to the processing of the data.

RIGHT TO DATA PORTABILITY

You may request that we provide you with the data you have provided to us in a structured, commonly used and machine-readable format, and that we may transmit this data to another controller without hindrance, provided that

• We process this data on the basis of consent given and revocable by you or for the performance of a contract between us, and the processing is carried out by automated means.

If technically feasible, you can ask us to transfer your data directly to another controller.

RIGHT TO OBJECT

If we process your data on the basis of a legitimate interest, you can object to this processing at any time on grounds relating to your particular situation; This also applies to profiling based on these provisions. In this case, we will no longer process your data, unless we can demonstrate the existence of compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You can object to the processing of your data for direct marketing purposes at any time, without giving reasons.

RIGHT TO LODGE A COMPLAINT

If you believe that we are in breach of privacy and data protection legislation in the processing of your data, please contact us with any questions.

If you wish to assert any of the above rights against us, please email privacy-spain@vornbioenergy.com

AM I OBLIGED TO PROVIDE DATA?

The processing of your data is only necessary for the conclusion or performance of the contract concluded with you.

If you do not provide us with this data, we will usually have to refuse to enter into the contract or to fulfil the order or we will no longer be able to fulfil an existing contract and therefore have to terminate it. However, you are not obliged to consent to the processing of data that is not relevant to the performance of the contract or that is not required by law.