Back Privacy policy Privacy Policy This policy has been issued by the TÉCNICAS REUNIDAS group on its own behalf and on behalf of its affiliates and subsidiaries. It is addressed to individuals with whom we interact and whose data we process as Data Controllers, including visitors to our websites, clients, prospective clients, client and prospective client personnel, suppliers, partners, shareholders, as well as any other recipients of our services. This policy excludes the processing of personal data relating to TÉCNICAS REUNIDAS employees and job applicants; such processing is governed by separate policies. The TÉCNICAS REUNIDAS group provides this Privacy Policy to inform you about how we process your Personal Data and how we protect privacy and personal information. In this policy, “Personal Data” means any information that can identify you or that can be linked to you as an identified individual. This policy may be amended or updated from time to time to reflect changes in our practices regarding the processing of your personal data or changes in applicable law. 1. Who are the data controller? TÉCNICAS REUNIDAS is a company established in Spain with its registered office at Avda. de Burgos, 89 – Adequa – Building 6, 28050, Madrid, Spain. When this Policy refers to “TÉCNICAS REUNIDAS” or “we,” it refers to the different subsidiaries of TÉCNICAS REUNIDAS responsible for the use of your personal data. You can find more information about TÉCNICAS REUNIDAS entities and their locations at the following link: https://www.tecnicasreunidas.es/es/contacto/ To ensure appropriate processing of your personal data, we have appointed a Data Protection Officer (DPO), who may be contacted regarding any query related to personal data processing at: privacy@tecnicasreunidas.es 2. For which purposes do we process your personal data? At the time of collection, TÉCNICAS REUNIDAS will provide you with clear information regarding the purposes of processing, the legal bases for such processing, and the rights of data subjects. The general purposes and the corresponding legal bases are: Purpose Legal Basis Managing specific requests (e.g., inquiries, feedback) submitted via the website’s Contact section or through other communication channels (e.g., email, phone) Legitimate interest Processing contact details of prospective clients to send marketing communications (including newsletters, news, promotions, etc.) Consent, which may be withdrawn at any time (see Section 8) Processing contact and professional data for the registration and attendance management of events organized by TÉCNICAS REUNIDAS Consent, which may be withdrawn at any time (see Section 8) For the purpose of sharing and managing on social media information related to events organized by TÉCNICAS REUNIDAS, we may process information such as photographs or videos in which you appear, taken during such events Consent, which may be withdrawn at any time (see Section 8) In the case of existing clients, we process your contact or professional details for commercial purposes, such as the promotion of our services that may be considered of interest to you based on services you previously contracted. We may also process your data (e.g., through satisfaction surveys) to extend or improve our existing services or to develop new services Legitimate interest To manage contractual (and pre-contractual) relationships with our clients, suppliers, partners, and shareholders, and to comply with the obligations arising from such contracts and to administer those relationships, we will process your personal data (contact details, professional data, qualifications, etc.), or those of your representatives and employees in the case of legal entities Legitimate interest To comply with legal obligations applicable to TÉCNICAS REUNIDAS, such as the obligation to establish and maintain a whistleblowing channel, to maintain commercial records, as well as any other obligation arising from other applicable laws, we may process any of your personal data indicated in Section 3. Likewise, such data may be processed to comply with lawful requests from governmental agencies and public authorities Legal Obligation To take appropriate measures for fraud prevention, manage the security of our assets and facilities, ensure the integrity of our systems and networks, we may process different types of personal data such as identification data, images (photos, video recordings), browsing data, credentials, etc Legitimate interest To carry out due diligence processes implemented by TÉCNICAS REUNIDAS in its relations with third parties, we may process personal data (such as name, professional position, PEP status, identification document, international sanctions…) Legitimate interest We may process your personal data in order to carry out corporate transactions (mergers, demergers, restructuring, etc.) Legitimate interest To manage shareholder relations (for example, convening General Meetings, recording minutes, providing relevant information to shareholders…) Legal Obligation 3. What personal data do we process and how is the information obtained? We collect personal data from the following sources: When you provide it to us (for example, when contacting us via email or telephone, or through any other means, such as entering your personal information in forms on our websites). In the normal course of our relationship with you. Through your system/device and the use of our Services. Our servers, logs, and other technologies may automatically collect certain information from or about you, your systems, and devices (e.g., IP address, user ID, etc.), as well as usage information to help us administer, protect (i.e., detect and prevent fraud and security threats), and improve our Services. Through cookies and similar technologies. Please see our Cookies Policy. When provided by third parties where a legitimate basis for such disclosure exists. The categories of personal data we process are as follows: Contact details: such as name, address, telephone number, and email. Identification documentation: such as copies of identification documents (and the data contained therein) issued by authorized bodies. Professional data: such as company you work for, job title, profession, role. Qualification data: such as information regarding training, technical skills, specialization. Data contained in complaints or communications: any personal data that may be included in complaints submitted or communications carried out with you through different channels such as email, telephone, or other means. Video recordings and photographs: our facilities have CCTV systems recording access to them and therefore may capture your image if you visit our facilities. In addition, during some events, courses, or seminars organized by TÉCNICAS REUNIDAS, video recordings may be made or photographs taken. Information collected during KYC and due diligence processes: TÉCNICAS REUNIDAS collects information from our clients, suppliers, and partners, their shareholders such as name, professional position, PEP status, identification document, international sanctions. Browsing data: technical data that may constitute personal data: IP addresses (traceable to natural persons), visited domains, connection times, device identifier. Account credentials: such as passwords and other security information for authentication and access 4. Disclosure of personal data to third parties TÉCNICAS REUNIDAS may share your personal data with third parties such as: Other TÉCNICAS REUNIDAS entities for business or administrative purposes. External service providers who may have access to personal data and who will process it on behalf of and under the instructions of TÉCNICAS REUNIDAS in order to provide services. Business partners including subcontractors who perform part of the Services under client service agreements. Public authorities, courts, law enforcement agencies, or other third parties, where required by an applicable law or regulation, for example, in legal proceedings or during an investigation. Furthermore, as TÉCNICAS REUNIDAS is an international corporation with global operations, we may transfer your personal data to countries other than your country of residence, including countries that do not provide the same level of personal data protection as your country of residence, always applying appropriate safeguards and other legal requirements set out in applicable data protection laws, including the Standard Contractual Clauses approved by the European Commission or another supervisory authority where necessary. You may request information on the specific measures we apply when transferring your personal data to third countries by contacting us at: privacy@tecnicasreunidas.es 5. What must you guarantee when providing your personal data? You must guarantee that the personal data provided is true, accurate, complete, and up to date, being responsible for any damage, direct or indirect, caused by failure to comply with this obligation. In the event that you provide personal data of third parties, you guarantee that you have informed such third parties of the content of this policy and obtained their prior consent to provide us with their data for the relevant processing purpose. To provide your personal data, you must be over 18 years of age. Users who provide personal data through our websites declare and warrant that they are over 18, being fully responsible for such declaration. 6. Information Security In response to TÉCNICAS REUNIDAS’ concern to ensure the security and confidentiality of your data, the required security levels for the protection of personal data have been adopted and technical means available have been installed to prevent loss, misuse, alteration, unauthorized access, and theft of the personal data processed. Likewise, we contractually require any third party involved in the processing of your data to guarantee its confidentiality and integrity through secure practices. 7. Retention of personal data Personal data will be retained for as long as necessary to fulfill the purposes for which TÉCNICAS REUNIDAS processes your personal data (for example, during the contractual relationship with a supplier or for as long as we can provide you with customer service) as well as during the legally required retention periods. When we collect your personal data, you will be clearly and specifically informed of the period during which the personal data will be processed, including those cases where such processing is determined by a legal obligation. Furthermore, if you wish to obtain more information on specific personal data retention periods applied by TÉCNICAS REUNIDAS, you may contact our Data Protection Officer at privacy@tecnicasreunidas.es 8. Your legal rights over your personal data TÉCNICAS REUNIDAS informs you that you have the right to obtain confirmation as to whether or not we process your personal data. Likewise, TÉCNICAS REUNIDAS informs you that you have the following rights over your personal data: Right of access: you have the right to access your data to know what personal data we are processing concerning you. Right to rectification or erasure: in certain circumstances, you have the right to rectify any personal data you consider inaccurate concerning you and processed by TÉCNICAS REUNIDAS, as well as the right to request erasure of your data when, among other reasons, the data is no longer necessary for the purposes for which it was collected. Right to restriction of processing: in certain circumstances, you will have the right to request restriction of the processing of your data, in which case we inform you that we will only retain the data for which you have requested restriction for the exercise or defense of claims. Right to data portability: in certain circumstances, you will have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, machine-readable format, as well as to have it transmitted by TÉCNICAS REUNIDAS to another controller. Right to object: in certain circumstances and on grounds relating to your particular situation, you will have the right to object to the processing of your data, in which case we will cease to process them unless we must continue to do so for compelling legitimate grounds or for the exercise or defense of possible claims. Withdrawal of consent: you may withdraw your consent at any time, which shall not affect the lawfulness of processing carried out before such withdrawal. These rights may be exercised in writing, for the attention of the Data Protection Officer, at: TÉCNICAS REUNIDAS, Parque Empresarial Adequa, Building 6, Avenida de Burgos 89, 28050 Madrid – Spain Telephone: +34 91 592 03 00 Email: privacy@tecnicasreunidas.es Finally, we inform you that you may file a complaint with the competent Supervisory Authority in the field of data protection, which in Spain is the Agencia Española de Protección de Datos (AEPD): www.aepd.es. Nonetheless, you may first lodge a complaint with the Data Protection Officer. 9. Cookies A “cookie” is a file installed on your device when you visit websites. This file collects information about your device, browser, preferences, and browsing habits. Please see our Cookies Policy for more information on the cookies we install and how you can manage them. 10. Minors Minors are not allowed to access or use the services offered through the website without the prior authorization of their parents, guardians, or legal representatives. These individuals will be fully responsible for any action taken by the minors under their care when using the site, including the provision of personal data in forms and the selection of corresponding boxes, where applicable. 11. Contact details If you have any comments, questions, or suggestions regarding the information in this Privacy Policy or any other aspect relating to the processing of your data, please contact: TÉCNICAS REUNIDAS Avda. de Burgos, 89 – Adequa – Building 6 28050 – Madrid, Spain Attn. Data Protection Officer Email: privacy@tecnicasreunidas.es
