The processing of personal data through this website complies with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), Law No. 58/2019 of August 8 (LPDP) and other applicable data protection legislation.
Who is responsible for the treatment?
1. Data collected through the contact form and other means of contact: BONDALTI CAPITAL, S.A.
2. Data collected through other means of contact: BONDALTI CAPITAL, S.A., BONDALTI CHEMICALS S.A., BONDALTI CANTABRIA S.A., GRUPO AGUAS ALFARO, S.L. and ENKROTT GESTÃO E TRATAMENTO DE ÁGUAS, S.A.
3. Data collected on the newsletter subscription form: BONDALTI CAPITAL, S.A.
4. Details of the persons submitting a non-anonymous complaint and details of the persons reported: BONDALTI CAPITAL, S.A., BONDALTI CHEMICALS, S.A., BONDALTI CANTABRIA, S.A., ELECTROQUÍMICA DEL NOROESTE, S.A.U., ENKROTT, GESTÃO E TRATAMENTO DE ÁGUAS, S.A., ENKROTT MADEIRA - GESTÃO E TRATAMENTO DE ÁGUAS, UNIPESSOAL, LDA., ENKROTT ESPAÑA, S.L. UNIPERSONAL, AGUA, ENERGÍA Y MEDIOAMBIENTE, SERVICIOS INTEGRALES, S.L.U., GRUPO AGUAS ALFARO, S.L., LABORATORIOS ALFARO, S.L.U. and AGUAS RIOJA MEDIOAMBIENTE, S.L.U.
What is the purpose and basis of legitimacy for processing your data?
1. Management of requests for information, questions, doubts, suggestions or complaints submitted via the form and other means of contact. We may process your data because we have a legitimate interest in managing the communications necessary to carry out our activity.
2. Newsletter subscription management. We process your data to promote and publicize our activity because you have given us your consent.
3. Complaint management. We process your data and that of the reported parties in order to manage the report, investigate the facts reported, adopt the necessary corrective measures and inform the whistleblower of the outcome. We may process your data for this purpose because there is a legal obligation under Law No. 93/2021 of December 20 (Portuguese law establishing the General Whistleblower Protection Regime) and Law No. 2/2023 of February 20 (Spanish law regulating the protection of persons who report regulatory infractions and the fight against corruption) or, in other cases, because it is necessary for the performance of a task in the public interest under the aforementioned legislation and other applicable legislation.
How long will your data be kept?
Your data will be kept for the time necessary to fulfill the purposes for which it was collected and for the longest limitation period, in accordance with the applicable law.
Who will receive your data?
1. Data of persons contacted through the contact form: on the basis of legitimate interest, consistent with the exercise of business activity, BONDALTI CAPITAL, S.A., BONDALTI CHEMICALS, S.A., BONDALTI CANTABRIA, S.A., ELECTROQUÍMICA DEL NOROESTE, S.A.U., BONDALTI WATER SOLUTIONS, S.A., ENKROTT, GESTÃO E TRATAMENTO DE ÁGUAS, S.A., ENKROTT MADEIRA - GESTÃO E TRATAMENTO DE ÁGUAS, UNIPESSOAL, LDA., ENKROTT ESPAÑA, S.L. UNIPERSONAL, ENKROTT - ÁFRICA - GESTÃO E TRATAMENTO DE ÁGUAS, LIMITADA, AGUA, ENERGÍA Y MEDIOAMBIENTE, SERVICIOS INTEGRALES, S.L.U., GRUPO AGUAS ALFARO, S.L., LABORATORIOS ALFARO, S.L.U. y AGUAS RIOJA MEDIOAMBIENTE, S.L.U.
2. Data on people contacted through other means of communication and data on people who subscribe to the newsletter: will not be passed on to third parties.
3. Data of the persons submitting a report and data of the persons reported: in accordance with the applicable legislation, the data necessary to adopt the necessary corrective measures may be communicated to lawyers and solicitors, competent public entities, the Public Prosecutor's Office and the Courts.
4. In the cases indicated, your data will be communicated to our subcontractors when this is necessary for the correct provision of the contracted services.
Will your data be transferred to third countries?
1. If you subscribe to the newsletter, by using the MailChimp platform to send communications, there may be an international transfer of your data to the USA or any other country where its subcontractors maintain operations. In accordance with the Data Processing Addendum of the MailChimp platform, data transfers outside the European Economic Area will be carried out in compliance with applicable data protection legislation, through standard contractual clauses or alternative transfer solutions. For more information see: https://mailchimp.com/legal/data-processing-addendum/#6._International_Transfers.
2. If you contact us via the form and your data is to be transferred to ENKROTT - AFRICA - GESTÃO E TRATAMENTO DE ÁGUAS, LIMITADA, it will be transferred internationally. This transfer is necessary to manage the communication.
What are your rights when you provide us with your data?
- Access: the right to obtain confirmation as to whether or not we are processing your personal data, the right to know what it is, for what purposes it is used, how long it will be kept, its origin and whether it has been or will be communicated to a third party.
- Rectification: the right to request the rectification of incorrect data and to complete incomplete personal data.
- Erasure: the right to request the erasure of personal data that is inappropriate, excessive or no longer necessary for the purposes for which it was collected, including the right to be forgotten, provided that the legal requirements for exercising this right are met.
- Objection: the right to object, in certain circumstances, to the processing of your personal data or to request that such processing ceases, provided that the legal requirements for exercising this right are met.
- Limitation of processing: the right to request, in legally established circumstances, that your data is not processed beyond the mere storage of it.
- Portability: the right to receive personal data in a structured, commonly used and machine-readable format, and the possibility of transmission to another controller, where technically possible and legally provided for.
- Right to withdraw consent: you can withdraw your consent at any time and, if you do so, the data processing operations previously carried out will continue to be valid.
How can you exercise your rights?
The exercise of rights must be made in writing and addressed to Lagoas Park, Edifício 6, 2º B, 2740-244, Porto Salvo, Portugal (c/o Data Protection Team) or by email to rgpd@bondalti.com. We provide the data subject with draft forms for the exercise of rights which can be requested via the email addresses indicated.
How can you lodge a complaint with the supervisory body?
If you feel that your rights have not been respected, you can lodge a complaint with the National Data Protection Commission or the Spanish Data Protection Agency (for more information www.cnpd.pt www.aepd.es).
August, 2023
