1. Data Controller
The data controller responsible for the personal data collected through this website is:
EMSA TECNOLOGIA QUIMICA, S.A.U.
Tax ID: A-08685166
Registered office: C/ Mestre Nicolau, 19, 8th floor, 08021 Barcelona, Spain
Telephone: +34 934 701 196
Email: emsaquimica@emsaquimica.com
Website: www.emsaquimica.com
For any matter related to the processing of your personal data, you may contact EMSA by post at the address indicated above or by email at emsaquimica@emsaquimica.com.
2. Purpose of this Privacy Policy
This Privacy Policy aims to inform website users about how EMSA TECNOLOGIA QUIMICA, S.A.U. processes their personal data, for what purposes, on what legal basis, for how long such data is retained, to whom it may be disclosed and what rights users may exercise.
This Policy applies to personal data processed through the website, forms, email, telephone, corporate social media or other contact channels linked to EMSA’s activity.
3. Personal data we may process
EMSA may process the personal data voluntarily provided by users when contacting the company, requesting information, submitting forms, sending a job application, interacting on social media or browsing the website.
Depending on the relationship maintained with EMSA, the following categories of data may be processed:
Identification data: name and surname.
Professional data: company, position, sector of activity or department.
Contact details: email address, telephone number, postal address.
Data included in enquiries, requests or messages submitted by the user.
Commercial or contractual data necessary to manage relationships with clients, suppliers, distributors, collaborators or partners.
Curricular, academic and professional data included in job applications or CVs.
Browsing data, IP address, online identifiers, cookie preferences and technical device data, in accordance with the Cookie Policy.
Data published or communicated by the user when interacting with EMSA on social media.
EMSA does not request special categories of data through its website. Users should avoid submitting information relating to health, ideology, religion, trade union membership, sexual orientation, biometric data, genetic data, criminal convictions or any other particularly sensitive information, unless it is strictly necessary and legally appropriate.
4. Purposes and legal bases of processing
EMSA will process personal data for the following purposes:
Purpose | Data processed | Legal basis |
|---|---|---|
To respond to enquiries received through the contact form, email, telephone or other channels | Identification, professional and contact data, and the content of the message | The user’s consent when submitting the enquiry, the application of pre-contractual measures when the request is commercial or contractual in nature, and legitimate interest in responding to professional communications |
To manage requests for information, quotations, samples, technical documentation or commercial information | Identification, professional and contact data, and data relating to the request | Application of pre-contractual measures, performance of a contract and legitimate interest in managing B2B commercial relationships |
To manage the commercial relationship with current or potential clients | Identification, professional, contact, commercial, contractual, administrative and financial data | Performance of a contract, application of pre-contractual measures, compliance with legal obligations and legitimate interest in maintaining the commercial relationship |
To manage the relationship with suppliers, distributors, collaborators and partners | Identification, professional, contact, commercial, contractual, administrative and financial data | Performance of a contract, application of pre-contractual measures, compliance with legal obligations and legitimate interest in maintaining the professional relationship |
To send informative or commercial communications about EMSA products, services, events, news or activities | Identification, professional and contact data | The data subject’s consent where necessary. In the case of clients or contacts with a prior relationship, legitimate interest and applicable regulations on commercial communications, always with the possibility to object or unsubscribe |
To manage spontaneous applications or recruitment processes | Identification, contact, curricular, academic and professional data | The candidate’s consent and/or the application of pre-contractual measures when the application is linked to a specific recruitment process |
To retain applications for future recruitment processes | Identification, contact, curricular, academic and professional data | The candidate’s consent |
To manage EMSA’s presence on social media and interactions with users | Identification data, username, public profile, comments, messages and interactions | Legitimate interest in managing corporate profiles and responding to interactions, and the user’s consent according to the settings of each social network |
To ensure the security, maintenance and proper functioning of the website | IP address, technical data, logs, device information and strictly necessary browsing data | Legitimate interest in ensuring the security of the website and preventing abuse, fraud, unauthorised access or cyberattacks |
To manage cookies and similar technologies | Browsing data, online identifiers and consent preferences | User consent for non-technical cookies. Technical or strictly necessary cookies are based on the technical need to provide the requested service |
To comply with legal, tax, accounting, commercial or administrative obligations | Identification, professional, contact, contractual, administrative and financial data | Compliance with legal obligations applicable to EMSA |
5. User consent
Where data processing is based on consent, EMSA will request such consent in a free, specific, informed and unambiguous manner.
Consent may be requested, among other cases, for:
The sending of newsletters or commercial communications where there is no prior relationship that legitimises such communications.
The installation of statistical, marketing or non-essential external service cookies.
The retention of job applications for future recruitment processes.
Other processing activities requiring consent under applicable regulations.
The user may withdraw consent at any time, without affecting the lawfulness of processing carried out prior to its withdrawal.
Acceptance of the Privacy Policy does not, in itself, replace consent for specific processing activities that require it. Where consent is necessary, EMSA will request it through a clear action by the user, such as a specific unticked checkbox or an express configuration in the cookie panel.
6. Commercial communications
EMSA may send commercial, promotional or informative communications by electronic means when the recipient has requested or expressly authorised them.
Likewise, where there is a prior contractual relationship, EMSA may send commercial communications relating to its own products or services similar to those initially contracted or requested, provided that the contact details have been obtained lawfully and the recipient is offered the possibility to object or unsubscribe easily and free of charge.
All commercial communications will include a clear mechanism to unsubscribe or exercise the right to object.
7. Applications and recruitment processes
When a user submits their CV or participates in a recruitment process, EMSA will process their data for the purpose of assessing their application and, where appropriate, managing their participation in current recruitment processes.
If the candidate expressly authorises the retention of their data for future processes, EMSA may retain their application for a maximum period of 24 months, unless the candidate requests its deletion beforehand.
The candidate must ensure that the data provided is true, accurate and up to date. Likewise, the candidate must avoid including particularly sensitive information or information that is not necessary to assess their professional profile.
8. Data obtained from third parties
In certain cases, EMSA may receive personal data from third parties, such as client companies, suppliers, collaborators, distributors, professional platforms, social media, trade fairs, events, business directories or publicly accessible sources.
In such cases, EMSA will process only the data necessary to manage the corresponding professional, commercial or corporate relationship, respecting the information, lawfulness and transparency obligations provided for under applicable regulations.
9. Recipients of the data
As a general rule, EMSA will not disclose personal data to third parties unless there is a legal basis that permits it, it is necessary to manage the relationship requested by the user, or there is a legal obligation.
Data may be disclosed to:
Public administrations, authorities, courts and tribunals where there is a legal obligation.
Financial institutions, advisors, auditors, insurers or professional service providers where necessary for administrative, accounting, tax, commercial or contractual management.
Technology providers, hosting providers, website maintenance providers, email providers, CRM tools, management tools, cybersecurity, analytics, digital marketing, consent management or similar services.
Companies linked to EMSA, subsidiaries or collaborating companies where necessary to respond to a request, manage a commercial relationship or provide a service in the relevant territory.
Transport companies, logistics providers, customs operators or other providers necessary for the performance of commercial or contractual operations.
Recruitment service providers or application management platforms, where they are involved in recruitment processes.
Where these third parties act as data processors, EMSA will require them to process the data in accordance with its instructions, with the safeguards required by data protection regulations and through the corresponding data processing agreement where necessary.
10. International transfers
EMSA will endeavour to ensure that personal data is processed within the European Economic Area.
However, certain technology providers, digital services, analytics tools, social networks, Google services, Mixpanel or other third parties may process data from countries located outside the European Economic Area.
Likewise, where necessary to handle commercial, logistics, corporate or international distribution requests, EMSA may disclose professional or contact data to linked companies, subsidiaries, collaborators or partners located outside the European Economic Area.
Where international transfers take place, EMSA will adopt the appropriate safeguards provided for under applicable regulations, such as adequacy decisions, standard contractual clauses approved by the European Commission, additional contractual safeguards or other legally valid mechanisms.
11. Retention periods
EMSA will retain personal data for the time necessary to fulfil the purpose for which it was collected and, subsequently, for the periods necessary to address any legal, contractual, tax, commercial or administrative liabilities.
By way of guidance:
Processing activity | Retention period |
|---|---|
Enquiries received through forms, email, telephone or other channels | For the time necessary to respond to the enquiry and, where applicable, for the period necessary to evidence the response provided |
Commercial requests, quotations, samples or technical documentation | While the request is being managed and, where applicable, for the period necessary to maintain the commercial relationship or address liabilities |
Relationships with clients, suppliers, distributors, collaborators or partners | For the duration of the contractual or commercial relationship and during the applicable legal periods |
Accounting, tax, commercial or administrative data | During the periods required by applicable regulations |
Commercial communications based on consent | Until the user withdraws consent or requests to unsubscribe |
Commercial communications based on a prior relationship | Until the user exercises their right to object or requests to unsubscribe |
Applications linked to specific recruitment processes | During the recruitment process and, where applicable, for the period necessary to address possible liabilities |
Applications retained for future processes | Maximum 24 months, unless consent is withdrawn or deletion is requested earlier |
Browsing data and cookies | As indicated in the Cookie Policy and in the cookie settings panel |
Technical security logs | For the time necessary to ensure website security and address possible incidents or liabilities |
12. User rights
Users may exercise the following data protection rights:
Right of access: to know whether EMSA processes their personal data and to obtain information about such processing.
Right to rectification: to request the correction of inaccurate or incomplete data.
Right to erasure: to request the deletion of their data where appropriate.
Right to object: to object to the processing of their data in certain circumstances.
Right to restriction of processing: to request that the processing of their data be restricted.
Right to data portability: to receive the data in a structured, commonly used and machine-readable format, where applicable.
Right to withdraw consent at any time, where processing is based on such consent.
Right not to be subject to automated individual decision-making, including profiling, where it produces legal effects or similarly significantly affects the user.
To exercise these rights, users may contact:
EMSA TECNOLOGIA QUIMICA, S.A.U.
C/ Mestre Nicolau, 19, 8th floor, 08021 Barcelona, Spain
Email: emsaquimica@emsaquimica.com
The request must clearly indicate the right the user wishes to exercise. EMSA may request additional information to confirm the applicant’s identity where there are reasonable doubts about their identity.
Users also have the right to lodge a complaint with the Spanish Data Protection Agency if they consider that the processing of their personal data does not comply with applicable regulations.
13. Obligation to provide data
The data requested in website forms that are marked as mandatory is necessary to respond to the corresponding request. If the user does not provide such data, EMSA will not be able to properly manage the relevant enquiry, request, application or relationship.
Data not marked as mandatory is provided voluntarily.
14. Accuracy and updating of data
The user guarantees that the personal data provided to EMSA is true, accurate, complete and up to date.
The user is responsible for informing EMSA of any change to their data so that the information processed is kept up to date at all times.
15. Minors
EMSA’s website is not intended for minors.
EMSA does not intentionally collect personal data from minors. If EMSA becomes aware that it has received personal data from a minor without the required authorisation, it will take appropriate measures to delete it.
16. Social media
EMSA has corporate profiles on social media, such as LinkedIn and other platforms, for the purpose of providing information about its activity, products, services, events, corporate content, sustainability initiatives, communications or news related to its sector.
When the user interacts with EMSA through social media, their data may be processed by EMSA to manage such interaction, respond to enquiries, moderate content, maintain the activity of the corporate profile and carry out communications within the platform itself.
The user should be aware that social networks are also governed by their own privacy policies, terms of use and privacy settings.
17. Cookies and similar technologies
The website uses cookies and similar technologies, both first-party and third-party, to ensure its operation, remember preferences, measure website activity, manage external services and, where applicable, carry out marketing or analytics activities.
Technical or strictly necessary cookies may be installed without consent, as they are essential for browsing or for providing a service requested by the user.
Statistical, marketing, advertising, non-essential external service cookies or similar technologies will only be installed if the user gives consent through the cookie settings panel.
Users can consult complete information on the cookies used, their purposes, providers, duration and how to modify or withdraw consent in the Cookie Policy.
18. Data security
EMSA applies appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.
These measures are reviewed periodically to ensure a level of security appropriate to the risk of processing.
19. Confidentiality
EMSA undertakes to process personal data confidentially and to ensure that personnel authorised to process personal data are subject to confidentiality obligations.
20. Automated decisions and profiling
EMSA does not make decisions based solely on automated processing that produce legal effects concerning the user or similarly significantly affect them.
If automated processing or profiling with such effects is carried out in the future, EMSA will inform the user in advance in accordance with applicable regulations.
21. Amendments to the Privacy Policy
EMSA may amend this Privacy Policy to adapt it to legislative changes, criteria of supervisory authorities, technical modifications, organisational changes or new data processing activities.
Where changes are significant, EMSA will endeavour to inform users through reasonable means, such as notices on the website.
Users are advised to review this Privacy Policy periodically.
At EMSA TECNOLOGIA QUIMICA, S.A.U. we process the information you provide us with in order to keep you informed about job vacancies in our organisation. The data provided will be kept until a job vacancy is awarded or until you exercise your right of withdrawal. The data will not be passed on to third parties. You have the right to obtain information about whether we at EMSA TECNOLOGIA QUIMICA, S.A.U. are processing your personal data, so you can exercise your rights of access, rectification, deletion and portability of data and opposition and limitation to their processing by contacting EMSA TECNOLOGIA QUIMICA, S.A.U., Carrer del Mestre Nicolau, number 19, 8ª, 08021-Barcelona or at the e-mail address emsaquimica@emsaquimica.com, attaching a copy of your National Identity Document (DNI) or equivalent document. In addition, and especially if you consider that you have not obtained full satisfaction in the exercise of your rights, you may lodge a complaint with the national supervisory authority by contacting the Spanish Data Protection Agency, C/ Jorge Juan, 6 – 28001 Madrid.