DATA PROTECTION INFORMATION

In accordance with applicable data protection law, we inform you that personal data contained in the CV provided and/or form completed and any additional data you provide to us or through a third party, as the case may be, during the recruitment process, will be processed on the terms indicated below.

Under applicable data protection legislation, the recruiting local Orona Group company (“ORONA”, "we", "us" or the “Company”) with whom you engage is the data controller. This means that ORONA is responsible for deciding how we hold and use personal data about you. The exhaustive identification of the Orona Group companies is included in the website (www.orona-group.com ).

This notice applies to all applicants or candidates (including those that may be unsuccessful in the application process) and third parties whose information you provide to us in connection with any application whether via ORONA directly or indirectly.

Orona Corporación

Orona Ideo

Jauregi bidea s/n, 20120 Hernani (Gipuzkoa) Spain

+34 943336600

gdpr@orona-group.com

 

PURPOSES AND LEGAL BASIS OF THE PROCESSING

The Company may process your personal data in order to manage the recruitment process at ORONA, based on its legitimate interest in performing activities regarding the recruitment of personnel.

Based on its legitimate interest in the effective management of the recruitment process, ORONA will use a candidate's personal data to assess its suitability for the position. Automated decisions based on the personal data provided will not be taken.

In all cases you may exercise your right to object on the terms set out in this clause.

STORAGE OF PERSONAL DATA

ORONA will store your data while the recruitment process is underway and once it has ended, for an additional maximum period of up to 2 years. This may be so that we can resolve any questions or issues arising from your application, where we consider you for other employment opportunities or to the extent otherwise permitted under applicable law. In the case of successful applicants we may retain certain data relevant to the employment contract for the duration of employment with the Company,

 

RECIPIENTS OF THE DATA AND INTERNATIONAL TRANSFERS

Where necessary in ORONA’s legitimate interest, your personal data may be disclosed to other Orona Group companies (www.orona-group.com), to help manage  the recruitment process and take hiring decisions, where necessary.

IT and/or technology service providers and/or recruitment companies may also access your personal data as data processors.

The Company may transfer your personal data to service providers or other Orona Group companies located outside the European Economic Area. When we do this, your personal data may be stored by us or service providers we engage, outside the EEA. Third parties we work with will only process your personal data in accordance with our instructions, for the purposes of the recruitment process only and according to appropriate data transfer safeguards such as the standard contractual clauses (see ec.europa.eu/justice/dataprotection/internationaltransfers).

For further information please send an email to gdpr@orona-group.com.

RIGHTS

You may exercise the following rights:

  • Right to request access to your personal data and be provided with a copy of your personal data held by us;
  • Right to request the correction or erasure of your personal data held by us;
  • Right to object to the further processing of your personal data;
  • Right to request restrictions on the processing of your personal data in certain circumstances (i.e., if you challenge the accuracy of your data, while the challenge is being verified);
  • Right to withdraw consent, where applicable; and
  • Right to data portability, i.e., to receive the personal data that you have provided to the Company in a commonly used and machine-readable format and to transmit those data to another controller.

In order to exercise these rights please send an email to gdpr@orona-group.com. Once the request has been received you will be informed of the documentation that needs to be completed to exercise those rights and you will be provided with the necessary forms in each case.

You may also lodge a complaint with the competent data protection supervisory authority especially if you have not obtained satisfaction in exercising your rights.