Privacy policy<\/h1>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t

\n\t\t\t\t\t\t

\n\t\t\t\t

\n\t\t\t\t\t\t\t

\n

\n

\n

Personal data protection policy<\/p>\n

AQUALAND MIJAS S.A. (hereinafter AQUAMIJAS or the “Company”) is an organisation in which personal data processing activities take place, which gives it an important responsibility in the design and organisation of procedures so that they are in line with legal compliance in this matter.<\/p>\n

In the exercise of these responsibilities and in order to establish the general principles that must govern the processing of personal data in the Company, this Personal Data Protection Policy is approved, its Employees are notified hereof and it is made available to others concerned.<\/p>\n

---

\n

1. Purpose<\/h2>\n

The Personal Data Protection Policy is a measure of proactive responsibility that aims to ensure compliance with the applicable legislation in this area and, as such, respects the right of privacy in the processing of personal data of all individuals related to the Company.<\/p>\n

In development of the provisions of this Personal Data Protection Policy, the Principles governing data processing in the organisation are established and, consequently, the procedures, organisational and security measures, shall be implemented by those who are affected by this Policy, in their area of responsibility. To this end, management shall assign responsibilities to staff involved in data processing operations.<\/p>\n

---

\n

2. Scope of application<\/h2>\n

This Personal Data Protection Policy shall apply to the Company, its directors, officers and employees, as well as to all persons who deal with the Company, expressly including service providers with access to data (“Data Processors”).<\/p>\n

---

\n

3. Personal data processing principles<\/h2>\n

As a general principle, The Company shall scrupulously comply with the personal data protection legislation and must be able to demonstrate this (Principle of “proactive responsibility”), paying special attention to those data processing operations that may pose a greater risk to the rights of those affected (Principle of “risk approach”).<\/p>\n

In relation to the above, AQUAMIJAS shall ensure compliance with the following Principles:<\/p>\n

\u2794 Lawfulness, fairness, transparency and purpose limitation. The subject of data processing shall always be informed, by means of clauses and other procedures; and shall only be considered legitimate if consent for the processing of data has been given (with special attention to that provided by minors), or has another valid legitimation and the purpose of the same is in accordance with the Regulations.<\/p>\n

\u2794 Data minimisation. The data processed shall be adequate, relevant and limited to what is necessary in relation to the purposes of the processing.<\/p>\n

\u2794 Accuracy. The data must be accurate and, where necessary, kept up to date. In this respect, the necessary steps shall be taken to ensure that personal data which are inaccurate in relation to the purposes of the processing are erased or rectified without delay.<\/p>\n

\u2794 Limitation of the retention period. Data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes of the processing.<\/p>\n

\u2794 Integrity and Confidentiality. Data shall be processed in such a way as to ensure appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, by implementing appropriate technical or organisational measures.<\/p>\n

\u2794 Transfer of data. It is forbidden to purchase or obtain personal data from illegitimate sources or in those cases in which such data have been collected or transferred in contravention of the law or where their legitimate origin is not sufficiently guaranteed.<\/p>\n

\u2794 Hiring of suppliers with access to data. Only suppliers that offer sufficient guarantees for the application of appropriate technical and security measures in the processing of data shall be selected for contracting. An appropriate agreement shall be documented with these third parties in this respect.<\/p>\n

\u2794 International data transfers. Any processing of personal data subject to European Union regulations involving the transfer of data outside the European Economic Area shall be carried out in strict compliance with the requirements of the applicable law.<\/p>\n

\u2794 Rights of data subjects. The Company will facilitate the right of access, rectification, erasure, limitation of processing, objection and portability for data subjects, establishing for this purpose the necessary and appropriate internal procedures, and in particular the models for the exercise thereof, which must at least meet the legal requirements applicable in each case.<\/p>\n

The Company shall ensure that the principles set out in this Personal Data Protection Policy are taken into account (i) in the design and implementation of all work procedures, (ii) in the products and services offered, (iii) in all contracts and obligations formalised or assumed, and (iv) in the implementation of all systems and platforms that allow access by employees or third parties and\/or the collection or processing of personal data.<\/p>\n

---

\n

4. Employee commitment<\/h2>\n

Employees are informed of this Policy and declare that they are aware that personal information is an asset of the Company, and in this respect, adhere to it, committing themselves to the following:<\/p>\n

\n
• Undertake the data protection awareness training that the Company makes available to them.<\/li>\n
• To apply the security measures at user level that apply to their job, without prejudice to the responsibilities in their design and implementation that may be attributed to them depending on their role within AQUAMIJAS.<\/li>\n
• Use the formats established for the exercise of rights by those affected and inform the company immediately so that the response can be effective.<\/li>\n
• To inform the Company, as soon as they become aware of deviations from the provisions of this Policy, in particular “Personal Data Security Breaches”, using the format established for this purpose.<\/li>\n<\/ul>\n

  ---

  \n

  5. Monitoring and evaluation<\/h2>\n

  The effectiveness of the technical and organisational measures to ensure the security of the processing shall be verified, evaluated and assessed annually, or whenever there are significant changes in the data processing.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

  Privacy policy Personal data protection policy AQUALAND MIJAS S.A. (hereinafter AQUAMIJAS or the “Company”) is an organisation in which personal data processing activities take place, which gives it an important responsibility in the design and organisation of procedures so that they are in line with legal compliance in this matter. In the exercise of these […]<\/p>\n","protected":false},"author":20,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"footnotes":""},"yoast_head":"\n