Privacy Policy
This Privacy Policy describes how GRUPO ALAVA processes personal data.
In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), we hereby inform you about the processing of your personal data through this website.
Any person who accesses this website assumes the role of a user and agrees to strictly comply with the provisions set forth herein, as well as with any other applicable legal provisions.
The entities that make up GRUPO ALAVA work together to provide services, sharing certain operational and management activities. These entities have entered into a joint controller agreement regarding the processing of personal data, in accordance with Article 26 of Regulation (EU) 2016/679 (GDPR).
All data processing described in this Privacy Policy is carried out in accordance with the principles established in personal data protection regulations, therefore, GRUPO ALAVA will ensure that data minimization principles are applied when collecting data and will implement all appropriate technical and organizational measures to guarantee the security and confidentiality of the data. This commitment extends to all companies within GRUPO ALAVA and reflects our commitment to protecting the information of our users and data subjects who provide us with their personal data.
GRUPO ALAVA reserves the right to modify any information that may appear on the website, without any obligation to provide prior notice or inform users of such changes; publication on the GRUPO ALAVA website shall be deemed sufficient.
Who are the joint data controllers?
The data may be processed or disclosed by the following companies within the corporate group:
- Company Name: ALAVA INGENIEROS S.A.
Tax ID: A28570190
Registered office: Calle Albasanz 16, Edificio Antalia, 28037 Madrid
Phone: 915 67 97 00
Email: protecciondedatos@grupoalava.com - Company Name: ALAVA INGENIEROS SEGURIDAD, S.L.
Tax ID: B84529288
Registered office: Calle Albasanz 16, Edificio Antalia, 28037 Madrid
Phone: 915 67 97 00
Email: protecciondedatos@grupoalava.com - Company Name: MONOM SOLUTIONS, S.L.
Tax ID: B87663233
Registered office: Calle Albasanz 12, Edificio Antalia, 28037 Madrid
Phone: 915 67 97 00
Email: protecciondedatos@grupoalava.com - Company Name: TÉCNICAS PREDICTIVAS E INSTRUMENTACIÓN, S.L.
Tax ID (CIF): B80848864
Registered office: Calle Albasanz 16, Edificio Antalia, 28037 Madrid
Phone: 915 67 97 00
Email: protecciondedatos@grupoalava.com - Company Name: MRA INSTRUMENTAÇAO S.A.
Tax ID: 503257842
Registered Office: TAGUSPARK, Edificio Ciència II, N13, 1º B, 2740-120 Portugal
Phone: 214217472
Email: protecciondedatos@grupoalava.com - Company Name: ALAVA INTERNACIONAL INC.
Tax ID: 47-1599032
Registered office: 95 Merrick Way, 33134 Miami, USA
Phone: 7136118
Email: protecciondedatos@grupoalava.com
What categories of personal data do we process?
- Personal data provided by the user: The Joint Controllers will process the personal data provided through the form, including first and last names, email address, phone number, job title, and company.
- Personal data we collect automatically: The Site uses cookies and similar technologies that, depending on the user’s settings, allow the Joint Controllers to collect and process certain personal data.
For what purpose do we process data?
We use personal data solely for legitimate and specific purposes related to the provision of our services and within the framework of collaboration among the jointly responsible companies. Below, we explain in detail how we use it:
Contact
Users may contact us using the forms provided on the Website. To do so, they must provide their personal information, as well as the reason or subject of their message. GRUPO ALAVA will use this information to process the request and contact the User.
| Treatment | |
|---|---|
| Description | Communication, information, and management regarding products and services. Includes website and social media contacts |
| Purposes | Training, Event Management, Advertising and Business Development, End-User Data Management, Service Provision |
| Legal Basis | Consent of the data subject for specific purposes (Article 6.1.a of the GDPR) |
| Source of the data | Publicly available sources, private entity, the data subject or their legal representative |
| Categories of Data Subjects | Contacts, Customers and Users, Users, Applicants, Participants |
| Retention Criteria | Retained for no longer than necessary to fulfill the purpose of the processing or for as long as there are legal requirements mandating their retention |
| Treatment System | Partially Automated |
| Data Categories | |
| Identifying Information | ID number/Tax ID number/Foreign Resident ID number/Passport number, First and last names, Mailing address or email address, Phone number |
| Special or Criminal Data Categories | None |
| Other Types of Data | Personal characteristics, Academic and professional background, Employment details, Business information |
| Recipient Categories | |
| Disclosures | Organizations or individuals directly related to the data controller · Public and private entities involved and/or with jurisdiction · Companies belonging to the corporate group |
| International Transfers | USA |
Candidates
Candidate Users have the option to submit an application via email in order to participate in various selection processes or apply for available job openings. To do so, they must provide identifying information such as their full name, email address, resume, and any other personal information they choose to share voluntarily.
| Treatment | |
|---|---|
| Description | Employee Candidate Management |
| Purposes | Administrative procedures, Job board management or recruitment process management (resumes), Human resources |
| Legal Basis | UNAMBIGUOUS consent through a clear action by the data subject (Article 6.1.a of the GDPR) |
| Source of the data | Publicly available sources, private entity, the data subject or their legal representative |
| Categories of Data Subjects | Employees, Job Seekers, Users, Applicants |
| Retention Criteria | Retained for NO LONGER THAN NECESSARY to achieve the purposes |
| Treatment System | Partially Automated |
| Data Categories | |
| Identifying Information | ID Number/Tax ID Number/Foreign Resident ID Number/Passport Number, First and Last Names, Mailing Address or Email Address, Phone Number, Photo |
| Special or Criminal Data Categories | None |
| Other Types of Data | Personal characteristics (personality or behavior), Personal characteristics, Social circumstances, Academic and professional background, Employment details |
| Recipient Categories | |
| Disclosures | Organizations or individuals directly related to the data controller · Public and private entities involved and/or with jurisdiction · Companies belonging to the corporate group |
| International Transfers | USA |
Participation in events
GRUPO ALAVA organizes various types of activities, such as seminars, conferences, and events, both in-person and online. Interested users may register using the provided forms, providing their first name, last name, email address, and the entity or organization to which they belong.
GRUPO ALAVA may use your information to send you information related to future activities, events, or other content that may be of interest to you.
| Treatment | |
|---|---|
| Description | Processing related to the management of registration and participation of event attendees |
| Purposes | Event Management, Advertising, and Business Development |
| Legal Basis | For the performance of a CONTRACT or preliminary contract with the data subject (Article 6.1.b of the GDPR) |
| Source of the data | Publicly available sources, private entity, the data subject or their legal representative |
| Stakeholder Categories | Customers and users, participants, speakers, and attendees at events |
| Retention Criteria | Retained for NO LONGER THAN NECESSARY to achieve the purposes |
| Treatment System | Partially Automated |
| Data Categories | |
| Identifying Information | ID number/Tax ID number/Foreign Resident ID number/Passport number, First and last names, Mailing address or email address |
| Special or criminal data categories | None |
| Other types of data | Business information |
| Recipient Categories | |
| Disclosures | Organizations or individuals directly related to the data controller · Public and private entities involved and/or with jurisdiction · Companies belonging to the corporate group |
| International Transfers | Japan, China, Australia, Canada, Colombia, Honduras, Israel, Panama, Peru, El Salvador, Turkey, Taiwan, New Zealand |
Newsletter Subscription
Interested users can subscribe to periodic communications from GRUPO ALAVA using the form provided for that purpose. Consent may be withdrawn at any time, either by clicking the unsubscribe links included in each communication received or by contacting us directly via email at protecciondedatos@grupoalava.com.
| Treatment | |
|---|---|
| Description | Communication, information, and management regarding products and services. Includes website and social media contacts |
| Purposes | Training, Event Management, Advertising and Business Development, End-User Data Management, Service Provision |
| Legal Basis | Consent of the data subject for specific purposes (Article 6.1.a of the GDPR) |
| Source of the data | Publicly available sources, private entity, the data subject or their legal representative |
| Categories of Data Subjects | Contacts, Customers and Users, Users, Applicants, Participants |
| Retention Criteria | Retained for no longer than necessary to fulfill the purpose of the processing or for as long as legal requirements mandating their retention remain in effect |
| Treatment System | Partially Automated |
| Data Categories | |
| Identifying Information | ID number/Tax ID number/Foreign Resident ID number/Passport number, First and last names, Mailing address or email address, Phone number |
| Special or criminal data categories | None |
| Other Types of Data | Personal characteristics, Academic and professional background, Employment details, Business information |
| Recipient Categories | |
| Disclosures | Organizations or individuals directly related to the data controller · Public and private entities involved and/or with jurisdiction · Companies belonging to the corporate group |
| International Transfers | USA |
Sending Commercial Communications
GRUPO ALAVA may send the User information about new developments, services, events, or relevant news via email.
| Treatment | |
|---|---|
| Description | Communication, information, and management regarding products and services. Includes website and social media contacts |
| Purposes | Training, Event Management, Advertising and Business Development, End-User Data Management, Service Provision |
| Legal Basis | Consent of the data subject for specific purposes (Article 6.1.a of the GDPR) |
| Source of the data | Publicly available sources, private entity, the data subject or their legal representative |
| Categories of Data Subjects | Contacts, Customers and Users, Users, Applicants, Participants |
| Retention Criteria | Retained for no longer than necessary to fulfill the purpose of the processing or for as long as there are legal requirements mandating their retention |
| Treatment System | Partially Automated |
| Data Categories | |
| Identifying Information | ID number/Tax ID number/Foreign Resident ID number/Passport number, First and last names, Mailing address or email address, Phone number |
| Special or criminal data categories | None |
| Other Types of Data | Personal characteristics, Academic and professional background, Employment details, Business information |
| Recipient Categories | |
| Disclosures | Organizations or individuals directly related to the data controller · Public and private entities involved and/or with jurisdiction · Companies belonging to the corporate group |
| International Transfers | USA |
Social Media Presence
If the User chooses to follow or interact with GRUPO ALAVA’s official profiles on platforms such as Facebook, Twitter, LinkedIn, or YouTube, the data will be processed solely within those platforms to manage the list of followers and subscribers, based on the consent provided when interacting with our pages. Communications received will be limited to each platform and will comply with its terms of use.
| Treatment | |
|---|---|
| Description | Communication, information, and management regarding products and services. Includes website and social media contacts |
| Purposes | Training, Event Management, Advertising and Business Development, End-User Data Management, Service Provision |
| Legal Basis | Consent of the data subject for specific purposes (Article 6.1.a of the GDPR) |
| Source of the data | Publicly available sources, private entity, the data subject or their legal representative |
| Categories of Data Subjects | Contacts, Customers and Users, Users, Applicants, Participants |
| Retention Criteria | Retained for no longer than necessary to fulfill the purpose of the processing or for as long as there are legal requirements mandating their retention |
| Treatment System | Partially Automated |
| Data Categories | |
| Identifying Information | ID number/Tax ID number/Foreign Resident ID number/Passport number, First and last names, Mailing address or email address, Phone number |
| Special or criminal data categories | None |
| Other Types of Data | Personal characteristics, Academic and professional background, Employment details, Business information |
| Recipient Categories | |
| Disclosures | Organizations or individuals directly related to the data controller · Public and private entities involved and/or with jurisdiction · Companies belonging to the corporate group |
| International Transfers | USA |
To whom can we disclose the data?
In general, the Joint Controllers will not share personal data with third parties, except in the following cases:
- Suppliers located both within and outside the EEA
- Companies in the Business Group
In the context of the processing of personal data, the data subject is hereby informed that their data may be subject to international transfers to countries outside the European Economic Area (EEA), in compliance with the provisions set forth in Regulation (EU) 2016/679. These transfers are carried out only when strictly necessary, and adequate safeguards are in place to ensure a level of protection equivalent to that established by European regulations.
1. Transfers within the corporate group
Some entities that are part of the business group and are located outside the EEA are involved in centralized processing, administrative management, or the provision of internal services that require access to or processing of personal data.
These transfers are legitimized by the signing of Standard Contractual Clauses (SCCs) approved by the European Commission, in accordance with Article 46(2)(c) of the GDPR. The STCs ensure that data recipients provide an adequate level of protection, even in countries for which the European Commission has not issued an adequacy decision.
2. Transfers to suppliers located outside the EEA
Furthermore, in certain cases, in order to properly provide the services necessary for the operation of our business, it may be necessary to transfer personal data to service providers located in third countries.
These international transfers will always be carried out in accordance with appropriate measures and safeguards, such as:
- Equivalence Decision issued by the European Commission
- Binding Corporate Rules
- Standard Contractual Clauses
3. Safety Measures
In all cases, GRUPO ALAVA guarantees that appropriate technical and organizational measures have been implemented, in accordance with the provisions of the GDPR, to protect the confidentiality, integrity, and availability of personal data. It also ensures that third parties to whom personal data is disclosed comply with the security and confidentiality standards required by current regulations.
Rights of Data Subjects
In compliance with current regulations on the protection of personal data, data subjects are hereby informed that they have the right to access their personal data, as well as to request the correction of any inaccurate data or, where applicable, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
Furthermore, under certain circumstances, data subjects may request that the processing of their data be restricted, object to such processing on grounds related to their particular situation, or request that their data be transferred to another data controller, provided that this is technically feasible.
Similarly, in cases where processing is based on consent, the data subject has the right to withdraw consent at any time, without this affecting the lawfulness of the processing based on consent prior to its withdrawal.
To exercise these rights, the data subject may submit a written request, accompanied by a copy of their identification document or equivalent proof of identity, via email to: protecciondedatos@grupoalava.com.
Whether the information provided by the user is mandatory or optional
By checking the appropriate boxes and entering data in the fields marked with an asterisk (*) on the contact form or in download forms, you expressly, freely, and unequivocally acknowledge that the data is necessary for the service provider to respond to your request; the inclusion of data in the remaining fields is voluntary. The User guarantees that the personal data provided to GRUPO ALAVA is accurate and is responsible for notifying the provider of any changes to such data.
GRUPO ALAVA hereby informs you that all data requested through the website is required, as it is necessary to provide optimal service to the User. If not all data is provided, there is no guarantee that the information and services provided by GRUPO ALAVA will fully meet your needs.
Safety Measures
In accordance with the provisions of current personal data protection regulations, GRUPO ALAVA complies with all provisions of the GDPR and LOPDGDD regarding the processing of personal data under its responsibility, and explicitly adheres to the principles described in Article 5 of the GDPR, according to which such data is processed lawfully, fairly, and transparently in relation to the data subject, and is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.
GRUPO ALAVA guarantees that it has implemented appropriate technical and organizational policies to enforce the security measures established by the GDPR and the LOPDGDD in order to protect Users’ rights and freedoms, and has provided Users with the necessary information so they can exercise those rights. For more information on privacy safeguards, data subjects may contact GRUPO ALAVA via email at protecciondedatos@grupoalava.com.
