At VITA SURFBOARDS we care about privacy and transparency in the handling of your personal data. The company adopts the necessary security measures to ensure the safety of information in accordance with the type of data it handles, the purpose for which it is used, and the processing applied. To this end, technical, technological, and legal procedures and systems are established to prevent any compromise to the integrity of that information.
VITA is equally committed to safeguarding, in accordance with the strictest standards of security and confidentiality, any information our users entrust to us. The collection and use of user information is limited to the minimum necessary to provide a quality service. The company commits to not disclosing user information to any other organization without informing them and obtaining their prior consent.
IS YOUR DATA SHARED WITH THIRD PARTIES?
Yes. Your data may be shared with third parties in order to carry out the processing described here. Access must be granted to companies within the G. Junquera Marítima business group (as defined under Article 42 of the Spanish Commercial Code) and to third parties providing essential support linked to the Services, including:
- Technology service providers
- Advertising and marketing service providers and collaborators
- The Tax Agency and other public authorities for the fulfillment of tax obligations
- Public authorities competent in traffic matters
- Other public authorities, where required by law
- Insurance companies: for claims or accident management
- Credit institutions: for the management of payments and collections
- Google: for cookie collection through the website
WHAT RIGHTS DO YOU HAVE AFTER PROVIDING YOUR DATA?
We guarantee the confidentiality of your data through techniques and processes adapted to today’s technological reality. We also guarantee the exercise of the rights granted to you under current applicable personal data protection legislation. You may exercise these rights free of charge by contacting us directly at: juridico@gjunquera.com. Official forms from the Spanish Data Protection Agency (AEPD) will be provided for each right you wish to exercise.
You have the right to:
- Access the data we hold about you.
- Request any rectification of your data. When providing your data, you guarantee that: you are of legal age; you will notify us of any changes; and the data provided is true, accurate and complete.
- Request the erasure of your data, provided it is no longer needed for the purpose for which it was collected or we lack a legitimate basis to retain it.
- Request the restriction of processing of your data, which may result in a temporary suspension of the service.
- Exercise your right to data portability, to transfer your data to another data controller in a structured, commonly used, machine-readable format, where technically feasible.
- Object, at any time, to the processing of your data, including profiling, where processing is based on legitimate interest.
- Not be subject to automated decision-making, including profiling, that produces legal or similarly significant effects.
You may also file a complaint with the Spanish Data Protection Agency (AEPD) at: https://www.aepd.es, especially if the company has not acted diligently in responding to your rights.
DATA PROCESSING ACTIVITIES
1. CUSTOMERS AND USERS
| Controller | Astur Sercomar, S.L.U. |
| Purpose | Providing requested services and sending commercial communications |
| Legal basis | User consent [GDPR, art. 6.1.a)] / Contract performance [GDPR, art. 6.1.b)] |
| Recipients | Data transfers are foreseen |
| Rights | Access, Rectification, Erasure, and other ARCO rights |
| Source | The data subject themselves |
Purpose: Managing the provision of requested services, sending commercial communications, user identification, billing, fraud prevention, and handling complaints. No automated decisions will be made based on the data provided.
Retention: Data will be kept until the user requests erasure and, where applicable, for the years required to comply with legal obligations.
Recipients: Financial institutions, public authorities, and G. Junquera Marítima, S.L. for invoice management. No transfers to third countries are foreseen.
2. SUPPLIERS
| Controller | Astur Sercomar, S.L.U. |
| Purpose | Managing contracted services |
| Legal basis | Contract performance [GDPR, art. 6.1.b)] / Legitimate interest [GDPR, art. 6.1.f)] |
| Recipients | Data transfers are foreseen |
| Rights | Access, Rectification, Erasure, and other ARCO rights |
| Source | The data subject themselves |
Purpose: Administrative, accounting, and tax management of contracted services. No automated decisions will be made.
Retention: Until erasure is requested and, where required, for the period necessary to meet legal obligations.
Recipients: G. Junquera Marítima S.L., financial institutions, and the Tax Authority. No transfers to third countries are foreseen.
3. EMPLOYEES
| Controller | Astur Sercomar, S.L.U. |
| Purpose | Managing the employment relationship with workers |
| Legal basis | Contract performance [GDPR, art. 6.1.b)] / Legal obligation [GDPR, art. 6.1.c) and 9.2.b)] |
| Recipients | Data transfers are foreseen |
| Rights | Access, Rectification, Erasure, and other ARCO rights |
| Source | The data subject themselves |
Purpose: HR management, training, occupational health and safety, payroll, social security contributions, working time records, workplace accidents, etc. No automated decisions will be made.
Retention: For the duration of the employment relationship and for the years required to comply with legal obligations.
Recipients: Financial institutions (payroll), Tax Authority, Social Security, mutual insurance, the State Foundation for Employment Training, and G. Junquera Marítima S.L. No transfers to third countries are foreseen.
4. ARCO RIGHTS REQUESTS
| Controller | Astur Sercomar, S.L.U. |
| Purpose | Managing and responding to data subject rights requests |
| Legal basis | Legal obligation [GDPR, art. 6.1.c)] |
| Recipients | Data transfers are foreseen |
| Rights | Access, Rectification, Erasure, and other ARCO rights |
| Source | The data subject themselves |
Retention: For the time necessary to resolve the claims submitted.
Recipients: Supervisory authorities, public bodies, the Ombudsman, and other entities as required. Also G. Junquera Marítima S.L. No transfers to third countries are foreseen.
5. IMAGE DATA FOR PROMOTIONAL PURPOSES
| Controller | Astur Sercomar, S.L.U. |
| Purpose | Capturing and publishing images for promotional use |
| Legal basis | Consent of the data subject [GDPR, art. 6.1.a)] |
| Recipients | Data transfers are foreseen |
| Rights | Access, Rectification, Erasure, and other ARCO rights |
| Source | The data subject themselves |
Purpose: Capturing, sharing, and publishing personal data, images, and/or videos of individuals for promotional use on the internet (social media, video platforms, websites), company publications, and other media. No automated decisions will be made.
Retention: Until the data subject requests erasure.
Recipients: Internet platforms (social media, video platforms, websites) and G. Junquera Marítima S.L. No transfers to third countries are foreseen.
6. JOB APPLICANTS
| Controller | Astur Sercomar, S.L.U. |
| Purpose | Managing recruitment and selection processes |
| Legal basis | Contract performance [GDPR, art. 6.1.b)] |
| Recipients | No data transfers foreseen |
| Rights | Access, Rectification, Erasure, and other ARCO rights |
| Source | The data subject themselves |
Purpose: Processing CVs and conducting interviews and other steps in the recruitment process. No automated decisions will be made.
Retention: Two years from the last interaction.
Recipients: G. Junquera Marítima S.L. (HR management). No transfers to third countries are foreseen.
7. WEB FORM CONTACTS
| Controller | Astur Sercomar, S.L.U. |
| Purpose | Responding to enquiries and sending commercial communications where applicable |
| Legal basis | Contract performance [GDPR, art. 6.1.b)] / Consent [GDPR, art. 6.1.a)] |
| Recipients | No data transfers foreseen |
| Rights | Access, Rectification, Erasure, and other ARCO rights |
| Source | The data subject themselves |
Purpose: Managing potential customers who have shown interest in our products and/or services, and sending commercial communications including by electronic means. No automated decisions will be made.
Retention: Until the data subject requests erasure.
Recipients: No data will be shared with third parties, except where required by law.
8. SEXUAL HARASSMENT PREVENTION PROTOCOL
| Controller | Astur Sercomar, S.L.U. |
| Purpose | Managing the protocol for the prevention of sexual harassment or gender-based harassment |
| Legal basis | Legal obligation |
| Recipients | Data transfers are foreseen |
| Rights | Access, Rectification, Erasure, and other ARCO rights |
| Source | The complainant or other reporting individuals |
Purpose: Managing complaints, conducting interviews with affected parties, and following the established procedure. No automated decisions will be made.
Retention: Two years, unless retention is necessary to determine potential liabilities arising from claims made by those affected.
Recipients: Law enforcement, judicial bodies, and the Public Prosecutor’s Office. No transfers to third countries are foreseen.
IS YOUR DATA SHARED WITH THIRD PARTIES?
Yes. Your data may be shared with third parties in order to carry out the processing described above. Access to your personal data must be granted to companies within the G. Junquera Marítima, S.L. business group and to third parties providing essential support to VITA’s services, including:
- Technology service providers
- Advertising and marketing service providers and collaborators
- The Tax Agency and other public authorities for the fulfillment of tax obligations
- Other competent public authorities, where required by law
A data processing agreement is in place with G. Junquera Marítima, S.L. (CIF B33600834, C/ Gregorio Marañón Nº 1 Bajo II, CP 33.203 Gijón, Asturias, Spain).
Last updated: November 2023.