Privacy policy

1. Data controller details

Company name: DGH ROBOTICA, AUTOMATIZACION Y MANTENIMIENTO INDUSTRIAL, S.A.U. (DGH)
Address: Parque Tecnológico de Boecillo. C/ Jerónimo Muñoz, 9. – 47151 BOECILLO
Telephone: 983217446
E-mail: dgh@grupodgh.es 
Protection Officer contac details: PRODACYL S.L.
Data Protection Officer e-amil adress: rgpd@grupodgh.es

2. Processing of data collected via the website

The data that DGH may collect through the use, navigation of the website, through our forms, via email or as a result of the contractual relationship that binds you to DGH are personal data. When filling in each of the forms on our website there will be a series of mandatory data, whose fields are marked with the symbol *. If these fields are not filled in, the stated purposes of each of the forms cannot be carried out. In some cases, please be informed that by simply using and browsing our website, DGH will store data relating to:

• IP address
• Browser version
• Operating system
• Duration of visit or browsing on the website

This information may be stored by Google Analytics, and we therefore refer you to Google’s Privacy Policy, as Google collects and processes this information.

Similarly, the Website facilitates the use of Google Maps, which may have access to your location, if you allow it to do so, in order to provide you with greater specificity about the distance and/or routes to our headquarters. We refer you to the Privacy Policy used by Google Maps, in order to know the use and processing of such data.

DGH reserves the right to modify or adapt this Privacy Policy at any time. Therefore, we recommend that you review it each time you access the Website. If you have registered on the website and access your account or profile, you will be informed when you access your account or profile if there have been substantial changes in relation to the processing of your personal data.

1. Contact forms.

• Purpose. The purpose of this form is to respond to your request for information made through the contact forms.
• Legal grounds. The consent of the data subject.
• Recipients. The recipients of your data will be the different areas of our company, as well as third parties to whom we transfer your data, where lawful in accordance with the provisions of current legislation on data protection.

2. Information provided through the emails made available on the website.

• Purpose. Respond to your request for information.
• Legal grounds. The consent given by you at the time you send us the request via email.
• Recipients. The recipients of your data will be the different departments of our company, as well as third parties to whom we transfer your data, where lawful in accordance with the provisions of current legislation on data protection.

3. Work with us form and unsolicited applications.

• Purpose. Involve you in the recruitment processes carried out by DGH.
• Legal grounds. Enforcement of a contract to which the data subject is a party or for the application of pre-contractual measures at his request. 
• Recipients. The recipients of your data will be the different departments of our company, as well as third parties to whom we transfer your data, where lawful in accordance with the provisions of current legislation on data protection. Your data will be transferred to the entities that make up the DGH group.

4. User registration form.

• Purpose.
  • Manage your registration on our website
  • Manage job offers in which you are registered
  • Provide you with information about the processing and status of the selection processes in which you are participating.
  • Therefore, please note that you may receive communications via email and/or telephone in order to inform you of possible incidents, errors, problems and/or the status of the job applications in which you are participating as a candidate.
  • Your personal data may be provided to third parties in order to carry out certain procedures and/or services requested by the user:
    • DGH Group companies
    • Possible intermediaries
    • Website maintenance company

• Legal grounds. The enforcement of a contract and the consent of the data subject.
• Recipients. The recipients of your data will be the different departments of our company, as well as third parties to whom we transfer your data, where lawful in accordance with the provisions of current legislation on data protection.

5. Exercise your GDPR rights

• Purpose. Responding to data protection requests from data subjects and/or affected users.
• Legal grounds. Processing necessary for compliance with a legal obligation applicable to the General Data Protection Regulation.
• Recipients. The recipients of your data will be the IT department, the Data Protection Officer, the entity’s management or administration, and the different departments of our entity depending on the request, as well as the third parties to whom your data is transferred, provided that the applicable data protection requirements are met.

6. Data breach

• Purpose: Manage and resolve the data protection security breach, as well as the possible communication to those affected.
• Legal grounds: Processing necessary for compliance with a legal obligation applicable to the General Data Protection Regulation.
• Recipients: The recipients of your data will be the IT department, the Data Protection Officer, the entity’s management or administration, and the different departments of our entity, as well as the third parties to whom your data is transferred, provided that the applicable data protection requirements are met.

3. Other data processing

7. Exclusively for professional contacts.

At DGH we process your personal data to maintain the professional relationship that we have between us.

• Purpose. At DGH we process your personal data to maintain the professional relationship that we have between us.
• Legal grounds. The legitimate interest pursued by the controller in maintaining relations of any kind with the legal entity in which the data subject provides his or her services, provided that the interest or fundamental rights and freedoms of the data subject do not prevail.
• Recipients. The recipients of your data will be the different departments of our company, as well as third parties to whom we transfer your data, where lawful in accordance with the provisions of current legislation on data protection.

8. Exclusively for social media contacts

• Purpose. DGH processes your personal data for the following purposes:
  • To answer queries, requests or requests.
  • To manage the requested service, answer the request, or process a request.
  • To establish a user-responsible relationship, and to create a community of followers.
• Legal grounds. The legitimate interest of the data controller, as well as the acceptance of a contractual relationship in the relevant social network environment.
• Recipients. The recipients of your data will be the different departments of our company, as well as third parties to whom we transfer your data, where lawful in accordance with the provisions of current legislation on data protection. However, we recommend reviewing the privacy policy of the social networks that we mainly use as the social networks, being of American origin, may transfer data to the United States.

9. Exclusively for customers.

• Purpose:
  • Invoices, delivery notes, quotations and contracts. DGH processes your personal data to manage the services derived from the contractual relationship, as well as the commitments derived from the contract.
  • Advertising. DGH processes your data to offer you our products and services/courses, activities and workshops/our activity.
• Legal grounds:
  • Invoices, delivery notes, quotations and contracts. The enforcement of a contract to which the data subject is a party or for the application of pre-contractual measures at the request of the data subject, the performance of the service contract itself and the fulfilment of the following legal obligations that apply to us:
    • Data retention periods after termination of the contractual relationship are based on compliance with the provisions of the Commercial Code.
    • Communication of your data when requested by the Tax Inspectorate is covered by Law 58/2003, of 17 December, General Taxation.
  • Advertising The legitimacy for the processing of your data is the consent of the data subject.
• Recipients:
  • Invoices, delivery notes, quotations and contracts. The recipients of your data will be the different departments of our company, as well as third parties to whom we transfer your data, where lawful in accordance with the provisions of current legislation on data protection. Where necessary, customer data may be transferred to the following organisations, in compliance with a legal obligation:
    • Data necessary to comply with the legal obligation may be transferred to the Spanish Tax Agency.
    • To the corresponding banking institutions, to keep up to date with payments.
    • If requested, your data will be transferred to the Labour Inspectorate.
  • Advertising. The recipients of your data will be the different departments of our company, as well as third parties to whom we transfer your data, where lawful in accordance with the provisions of current legislation on data protection.

10. Exclusive whistleblowing channel

• Purpose: Manage and process the corresponding reports of non-compliance or irregularities or acts contrary to ethics, legality or the corporate rules and policies of DGH.Carry out the necessary actions for the investigation of the reported facts. Provide information on the outcome of the investigation, including, where appropriate, the adoption of the corresponding disciplinary or legal measures. The personal data will not be used for subsequent purposes incompatible with the initial ones indicated.
• Legal grounds: Personal data processing is necessary for compliance with a legal obligation applicable to the controller:
  • Law 2/2023, of 20 February, regulating the protection of persons who report regulatory infringements and the fight against corruption.
• Recipients: The recipients of your data will be the management, the head of the quality area, the data protection officer and the corresponding internal areas to fulfil the initial purpose, as well as the third parties to whom we transfer your data, when it is lawful in accordance with the provisions of the current regulations on data protection.

11. Exclusive processing of images from video surveillance cameras.

• Purpose: Our facilities are equipped with permanent video surveillance systems for security reasons.
• Legal grounds: The legitimate interest pursued as a legal obligation pursued by the DGH, for the security of its facilities, property and persons, provided that the interest or fundamental rights and freedoms of the data subject do not prevail. Likewise, the public interest based on providing sufficient guarantees and protection of the security of goods, facilities and persons whose personal data are processed through the video surveillance system in charge and on behalf of DGH.
• Recipients: The recipients of your data will be the different departments of our company, as well as third parties to whom we transfer your data, where lawful in accordance with the provisions of current legislation on data protection.

4. Retention periods

Data processing collected via the website

Contact forms	Your personal data will be processed for the time strictly necessary to deal with your request
Information provided via e-mails made available on the website	Once we have responded to your request for information, the data will be stored for a maximum of 6 months as proof of possible further claims
Work with us and unsolicited applications	According to DGH‘s retention policy, your personal data will be kept for a maximum period of ONE YEAR from the receipt of your curriculum vitae
User registration	Your personal data will be kept until you cancel your user account  The history of your participation in job offers will be stored until you cancel your user account After termination of the user account, the data will remain blocked in our databases, but will be retained until the statute of limitations for possible legal liability has expired
Exercise of GDPR rights	For the time necessary to resolve the complaint and, thereafter, duly minimised and blocked until the legal obligations regarding data protection have been met
Management of data security breaches	For as long as necessary to manage and resolve the breach and thereafter duly minimised and blocked until compliance with legal data protection obligations

Other data processing

Exclusively for business contacts	Until the end of our business relationship or until you decide to cancel or object to the processing of your contact data
Exclusively for social media contacts	Your personal data will be kept for the time necessary to fulfil the purpose for which they were collected
Exclusively for customers Invoices, delivery notes, quotations and contracts	Your personal data will be processed until the end of the contractual relationship. Once the contractual relationship has ended, and for commercial purposes, your data will be kept for a period of 6 years in compliance with the provisions of the Commercial Code. For tax purposes, your data will be kept for a period of 4 years in compliance with the provisions of the General Tax Law
Exclusively for customers Advertising	Your personal data will be processed until you revoke your consent
Exclusive whistleblowing channel	Your personal data will be processed for the time necessary to fulfil their management and to carry out the necessary procedures to process the complaint  The personal data relating to the complaint will not be kept, in any case, for a period of time exceeding ten years from the receipt of the communication by the entity. Failing this, personal data may be kept for a further period, exclusively in the event that the purpose of their conservation is to leave evidence of the operation of the system, in which case the content of the communications shall be recorded in an anonymous form.
Exclusive Video surveillance systems	The recordings will be kept for a maximum period of one month from their capture in accordance with article 22 of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights

5. International transfers.

DGH does not plan to carry out international data transfers. Where necessary, they will only be made to entities that have demonstrated that they comply with the level of protection and guarantees in accordance with the parameters and requirements set out in current legislation on data protection, such as the European Regulation, or when there is legal authorisation to carry out the international transfer, such as the consent of the data subject. In any case, the data subject shall be provided with the corresponding information.

6 What are your rights in relation to data processing?

As the data subject, you have the right to obtain confirmation of the existence of the processing of your data, to access your personal data, to request the rectification of data that is inaccurate or, where appropriate, to request deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected or you as the data subject withdraw the consent given. DGH will process and store your data in accordance with the applicable regulations, without prejudice to the fact that you, as a data subject, may request, in any case, the limitation of the processing of your data. In certain cases, you may exercise your right to data portability, which will be provided in a structured, commonly used or machine-readable format to you or to the newly appointed data controller. You have the right to withdraw your consent at any time for any of the processing operations for which you have given it. To exercise your rights, please contact us via the e-mail address rgpd@grupodgh.es. We have forms available for exercising all the aforementioned rights; however, you may also use the forms drafted by the Spanish Data Protection Agency. You will have the right to lodge a complaint with the Spanish Data Protection Agency in the event that you consider that the exercise of your rights has not been adequately dealt with. The maximum period for a decision to be taken shall be one month from the date of receipt of your request. Should your data be modified in any way, please inform us in writing so that we can keep your data up to date

                                                                              
  Last version: 9.03.2023