Privacy Policy

This privacy policy is in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (RGPD), to Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), as well as, as far as it is not contrary to the aforementioned regulations, to Organic Law 15/1999, on the Protection of Personal Data (LOPD) and its implementing regulations, and/or those that may replace or update them in the future.

Our organization is committed to the privacy of your personal data. The personal data provided are necessary to provide our services and are processed in a lawful, fair and transparent manner, ensuring adequate security of the data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage through the implementation of technical and organizational measures.

By means of this document, we would like to provide you with all the necessary information regarding the processing of your personal data by this organization in a transparent and fair manner.

I.— RESPONSIBLE FOR DATA CONTROLLER: TOL2 JAVEA SL

Tax ID Number / Tax ID No.: B53335220

ADDRESS: AVDA. ARENAL, APTOS L’ANCORA, BLOCK 5, 03730 XABIA (ALICANTE)

PHONE: 965795801

E-MAIL: info@tol2javea.com

II. RECIPIENTS OF PERSONAL DATA

1. The personal personal provided will not will not subject to assignment of any kind except unless it otherwise in the specific processing activities.

2. Optionally, when contracting cloud computing services and/or services for delivery of e-emails, or communication, as well as other IT IT , personal data may include:

   • Assigned to IT service companies located within the European Economic Area (EEA) or,

   • In the event that any of our suppliers or service providers are located outside the European Economic Area (EEA), We guarantee that the International data transfers will be conducted in accordance with applicable regulations. In in particular, at the case from suppliers located at States Together, Such transfers may be covered by the EU-U.S. Data Privacy Framework ( https://www.dataprivacyframework.gov ) , whose compliance was recognized by the European Commission on July 10, 2023, or in contractual contractual standard approved by the European .

3. Optionally, to government agencies and other organizations when required to comply with legal obligations.

III. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

For each specific processing of personal data, we will inform you of the legal basis that legitimizes it.

IV. RIGHTS

4. 1. LAW TO ACCESS

This is the right to obtain from the controller confirmation as to whether or not personal data relating to the data subject are being processed and, if so, the right of access to the personal data and to the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data were or will be disclosed, the storage period or the criteria used to determine this period, the existence of the right to request from the controller the rectification or erasure of personal data or the restriction of the processing of personal data concerning the data subject or to object to such processing, the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the existence, where applicable, of automated decisions, including profiling, when data are transferred to third countries the right to be informed of the appropriate safeguards applied.

4. 2. RIGHT OF RECTIFICATION

It is the right to request the rectification of your personal data if it is inaccurate, including the right to complete incomplete data. It should be noted that by providing us with personal data by any means, you guarantee that they are true and accurate and undertake to notify us of any changes or modifications to them. Therefore any damage caused by reason of the communication of erroneous, inaccurate or incomplete information in the web forms, will be the sole responsibility of the person concerned.

4. 3. RIGHT OF CANCELLATION

It is the right to request the deletion of your personal data when, among other assumptions, they are no longer necessary for the purpose for which they were collected, or they are being otherwise processed or you withdraw your consent. It should be noted that the deletion will not proceed when the processing of personal data is necessary, among other assumptions, for the fulfillment of legal obligations or for the formulation, exercise or defense of claims.

4. 4. RIGHT TO LIMITATION

This is the right to request that the processing of your personal data be restricted, which means that, in certain cases, you may ask us to temporarily suspend the processing of your personal data or to retain it beyond the necessary period when you may need it.

4. 5. RIGHT TO WITHDRAW CONSENT

It is the right to withdraw the consent you have provided by checking “I have read and accept the privacy policy” at any time and as specified in the corresponding section “Exercise of rights” or in the specific processing of commercial communications or Newsletter. It should be noted that this right will not take effect if, among other cases, the processing of personal data is necessary for compliance with a legal obligation, the execution and maintenance of a contractual relationship, or for the formulation, exercise or defense of claims. Likewise, the withdrawal of consent shall not have retroactive effects, i.e. it shall not affect the lawfulness of the processing based on the consent prior to its withdrawal.

4. 6. RIGHT TO PORTABILITY

This is the right to receive the personal data concerning you that you have provided in a structured, commonly used and machine-readable format and to transmit it to another data controller, provided that: the processing is based on your consent and is carried out by automated or computerized means.

4. 7. RIGHT OF OPPOSITION

It is the right to object to the processing of your personal data on the basis of our legitimate interest. We will not continue to process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or for the formulation, exercise or defense of claims.

4. 8. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

If you believe that we are processing your personal data in an incorrect manner, you may contact us or you also have the right to file a complaint with the Spanish Data Protection Agency (AEPD):

https://www.agpd.es/portalwebAGPD/index-ides-idphp.php

4. 9. EXERCISE OF RIGHTS

You may exercise your rights by sending a letter to the mailing address listed above or by emailing info@tol2javea.com; in both cases, please attach a copy of your Tax ID Number (NIF), Foreign Resident ID Number (NIE), passport, or similar document.

V. SECURITY MEASURES

The person in charge implements appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of the data.

VI. PROCESSING OF PERSONAL DATA.

6. 1. PROVISIONS GENERAL

The personal data requested in each of the specific processing operations are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed, thus complying with the principle of data minimization.

The personal data requested for each specific processing activity is strictly necessary; refusal to provide it would mean that we would be unable to provide the requested service.

The communications of personal data provided for in each of the specific processing operations are in some cases necessary for the performance and maintenance of a contract and in other cases for the fulfillment of a legal obligation applicable to the data controller.

6. 2. BASIC TREATMENTS CONTACT FORM

The personal information provided in the contact form will be used solely to respond to inquiries or requests for information and to manage the relationship arising from the inquiry.

The legal basis for the processing of personal data is the express consent given by checking the box that says “I have read and accept the privacy policy.”

The data will not be disclosed to third parties, except where required by law or when necessary for the proper provision of the service.

Personal data will be retained for a period of two years from the time it ceases to be processed, without prejudice to your rights as a data subject, unless there is a contractual or legal relationship that requires it to be retained for a longer period.

FORM RESUME

The personal data included in the resume, as well as any data collected during the recruitment process, will be processed to manage the company’s recruitment process—including interviews, tests, and related communications—and to evaluate the suitability of the candidates. The data will also be retained for future recruitment processes if the candidate is not selected and consents to such retention.

The legal basis that legitimizes the processing of personal data is the express consent given by checking the box that says “I have read and accept the privacy policy.”

Personal data is obtained directly from the candidate via the resume form.

Personal data will be retained for a period of two years from the time processing ceases, without prejudice to your rights as a data subject.

Once this period has elapsed or consent has been revoked, the data will be securely deleted