Privacy Policy

1. Data controller details

Company name: Gambastar, S.L.

Tax identification number (NIF): B09417932

Address: Avda. Madrid 4 – Pol. Ind. Montenuevo, 09320 Valdorros (Burgos)

Website: www.gambafresh.com

2. Applicable legislation

Our Privacy Policy has been drawn up in accordance with EU General Data Protection Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC, and with Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and the Guarantee of Digital Rights and its implementing legislation.

The company may amend this Privacy Policy to reflect changes in legislation, case law or the interpretation of the Spanish Data Protection Agency. The Legal Notice, Cookie Policy and any General Terms and Conditions for the sale of certain products or services may supplement this policy where access to those products or services involves specific personal data protection requirements.

3. Purposes of processing personal data

We process your personal data for the following purposes:

1. To process the CV you submit through the relevant form.

2. To receive and handle reports of misconduct, serious or very serious administrative offences, criminal offences or breaches of applicable legislation or of the company's internal rules and commitments relating to its activities.

4. Legal basis for processing the data collected

1. CV submission form: Taking pre-contractual steps or the intention to enter into a contract.

2. Whistleblowing channel: Processing is necessary to comply with a legal obligation applicable to the data controller.

5. How long will we keep your data?

1. CV submission form: We will keep your personal data for this purpose for the duration of the recruitment process. Once it ends, we will need your consent to keep your data.

2. Whistleblowing channel: Data may be kept in the reporting system only for as long as necessary to decide whether to open an investigation into the reported facts. If no investigative action has been initiated within three months of receiving the report, the data will be erased unless they are retained as evidence of the operation of the system.

6. Disclosure

Your data will only be disclosed to comply with legal obligations.

7. International transfers

No international data transfers will take place.

8. Security measures

To protect the security and confidentiality of your personal data, we have adopted the technical and organisational measures necessary to prevent alteration, loss, unauthorised processing or access. These measures take into account the state of technology, the nature of the data stored and the risks to which they are exposed. You should be aware that no security measures on the Internet are impenetrable.

You can obtain more information about our security measures by contacting us through the channels listed in the data controller details at the start of this policy.

9. Data subject rights

You may exercise the following rights by contacting the data controller:

Where processing is based on consent, the right to withdraw it at any time, without affecting processing carried out before withdrawal.
The right to request access to your personal data.
The right to request rectification of inaccurate data or erasure, for example if the data are no longer needed for the purposes for which they were collected.
The right to request restriction of processing when the legal conditions are met. In that case, we will keep the data only for the exercise or defence of legal claims.
The right to object to processing. We will stop processing the data for that purpose unless there are compelling legitimate grounds or the data are needed for the exercise or defence of possible legal claims.
The right to data portability.
The right to lodge a complaint with the Spanish Data Protection Agency, the competent data protection supervisory authority, especially if your request to exercise your rights has not been satisfactorily resolved: www.aepd.es