Privacy Policy

What is the purpose of this Personal Data Protection Policy?

This personal data protection policy (“Personal Data Protection Policy”) aims to explain how we obtain, process and protect the personal data you provide or collect via our website www.creamadridnuevonorte.com (the “Website”) using forms and/or cookies so that you can freely and voluntarily decide whether we will process them. The Website is owned by CREA MADRID NUEVO NORTE, S.A. (“CreaMNN”), which acts as Data Controller. For more information on CreaMNN  and the Website, please see the Legal Notice When you contact CreaMNN and provide your data, they will be processed in accordance with the provisions in the corresponding document. This document informs you of the processing of the personal data that CreaMNN obtains via the Website, but it is not applicable to personal data that may be obtained by third parties on other websites, even if they are linked to from the Website. We remind you of the importance of reading this Personal Data Protection Policy every time you use the Website, as it may be modified.

Who is the Data Controller?

CREA MADRID NUEVO NORTE, S.A. (“CreaMNN”), with registered address in Madrid, Paseo de la Castellana 216, planta 15.

How can you contact the CreaMNN Data Protection Officer?

You can contact the CreaMNN Data Protection Officer at the following email address: protectiondedatos@creamnn.com.

What is the purpose and legal basis of our use of your personal data?

1. To improve the quality of our services, to ensure the technical operation of both the Website and the transactions performed, to measure the website audience, and to develop new and better features, in accordance with the Cookies Policy that you can see here.

• The legal basis to carry out this processing is your own consent and our legitimate interest.

2. To manage the job selection processes for CreaMNN vacancies.

• The legal basis for processing is your consent expressed through your application or candidacy.

3. Any personal data you provide during your contractual, professional or commercial relationship with CreaMNN will be processed for the purpose of maintaining those relationships, as well as for sending communications that may be of interest to you.

• The legal basis to process your data in this case is the Data Subject’s consent expressed when providing us with the contact data.

4. When organising and managing draws, contests, events, working groups, incentives and promotional events, the interested party who wishes to participate will voluntarily register through the procedures available to CreaMNN  for this purpose and we will process the data to manage the interested party’s participation, the delivery of the award or incentive, where applicable, and the advertising linked to the corresponding action.

• Processing will only be performed if CreaMNN has your consent, which is expressed through your participation in the action.

5. For the purposes and on the legal basis specified in each of the Website’s personal data collection forms.

• The legal basis for the processing is your consent, by sending the relevant communication or information. For example, the Contact Form aims, as its name indicates, to provide a channel to provide more information on any project issues.

6. In the case of data provided by registering as a platform User, for the purpose of managing, processing and responding to User requests, incidents or queries.

• The legal basis to do so us is your consent through registration as a User and our legitimate interest in offering you a safe browsing environment on the platform, providing you with the services you require.

7. With regard to the data provided through the enabled form for sending newsletter communications. If you so authorise by ticking the corresponding box, we will send you commercial correspondence by electronic and/or conventional means regarding our activity.

• The legal basis to do so is your consent through your request to send it via the enabled form.

If the User provides third-party personal data, such as photographs of minors or contact details of collaborators, they declare to have the consent of that third party, as well as, in the case of minors, their consent or of their parents or legal guardians, where applicable, and agree to transfer the information contained in the Privacy Policy to them, exempting the Data Controller from any liability in this regard. However, the Data Controller may perform periodic verifications to verify this fact, taking the corresponding diligence measures in accordance with data protection regulations. All consents obtained for the aforementioned purposes are independent and the User may revoke only one of them without affecting the others. In addition to the above, in processing based on our legitimate interest, users may oppose the processing of personal data, as well as exercise any of their rights recognised by the current legal framework, as detailed in the section of this policy dedicated to users’ rights. Finally, CreaMNN, in its capacity as Data Controller, either directly or through a Data Processor, will perform any actions to monitor and control the use of the website in order to prevent and detect any fraudulent use (such as technical manipulation, code changes, etc.), in order to avoid, prevent and/or detect any unauthorised access, alteration or loss of information relating to third parties other than the user that may generate civil, criminal and/or administrative liability for the Data Controller. In this case, our legal basis is the legitimate interest of the Data Controller in ensuring secure browsing by Users in the web environment.

Which personal data do we process?

The personal data we process are those that you have provided us, such as your surname, email address, phone and your CV; the data that is derived from your communications with us, those corresponding to your own browsing on the Website, including the IP address or the information derived from cookies or similar devices (about which you can obtain more details in the Cookies Policy). In the event of draws, contests and events, CreaMNN  may take images of the data subject in order to disseminate them publicly, and the data subject will be informed so that they may either decline to take part in the draw or competition, attend the event, or exercise their rights.

Will CreaMNN  send you communications?

Through the data collection forms, CreaMNN could request your consent to contact you by ordinary post, email, SMS, or any other equivalent electronic means of communication to send you communications on its activities; information about its activities that it believes you might find of interest, as well as announcements of various events or other requests related to and identified in the form. If at a given time you no longer wish to receive communications of this nature, you may revoke your consent by writing to the address protectiondedatos address@creamnn.com, providing a copy of a document that certifies your identity, or using the link enabled for this purpose in the commercial communications you receive. Your email address and other contact details provided during the selection or application processes will be used to communicate with you, and you hereby expressly authorise us to send you electronic communications for the purposes related to those processes.

Who will we transfer your data to?

CreaMNN may transfer your data to its service suppliers in their capacity as data processors. We will not transfer your personal data to third parties unless we are required by a law, or you authorise it. When your consent is necessary to transfer your personal data to third parties, the data collection forms will inform you of the purpose of the processing, the data being transfers, as well as the identity or activity sectors of the potential recipients of your personal data. Likewise, you can view the third parties that receive personal data from the cookies based on this Website in the Cookies Policy. The Data Controller agrees to select suppliers that comply with the current regulatory framework on personal data protection in the European Economic Area. Any information that you publicly disclose, for example, through social media, may be collected and used by others, as well as indexed by search engines and it may not be possible to delete it. Please be careful when you disclose your personal information in these public areas.

International data transfers

The User is hereby informed that the Data Controller may engage technological services with entities whose headquarters are located outside the European Economic Area. However, the Data Controller will only engage with entities that comply with current data protection regulations in the European Economic Area, as they are the most demanding regulatory framework in the market. We use standard contractual clauses approved by the European Commission and follow the European Commission’s adequacy decisions on certain countries, as applicable.

How long will we keep your data?

Cookies are stored for the periods indicated in Section 2 of the Cookies Policy, which you can see here. Information related to the selection or application processes for vacancies generated by CreaMNN will be stored for one year, unless you have given us your consent to retain them for longer periods. The personal data you have provided us during the contractual, professional or commercial relationship with CreaMNN will be stored for as long as these relationships are maintained, and you do not oppose their processing for this purpose or request their deletion. In such cases, they will be destroyed, without prejudice to the portability right that you may exercise, or any legal provision that requires the preservation of certain data or the data being useful for the potential claims for liability arising from the processing and only for their limitation period. In other cases, for as long as specified in the form that, where applicable, we will send you to provide your personal data to CreaMNN. We store your data until they are no longer necessary to provide our services. The need for the data is determined on a case-by-case basis and is due to factors such as the nature of the data, the reason for the collection and processing, and the applicable operational or legal storage needs. For example, if you send a copy of your identity document to exercise any of your data protection rights, we will delete that information once the request has been correctly processed. In this regard, once it is determined that your data are not necessary and/or once you request the deletion of the data, we will keep your personal data blocked during the limitation period for actions that may derive from the relationship with you or for the compliance with public authorities’ requirements. With this blocking, the Data Controller will not have access to its data and will only process them to make them available to the competent Public Administrations and the corresponding Judicial Authorities to establish potential data processing liabilities. We will keep your data blocked during the periods envisaged in the applicable provisions, proceeding to erase your data once those deadlines have elapsed.

Does CreaMNN use cookies on the Website?

En nuestro Sitio Web utilizamos procedimientos automáticos de recogida mediante la tecnología denominada “cookies”. Para información detallada sobre cómo utiliza CreaMNN  las cookies consulta la Política de Cookies aquí.

Does CreaMNN  use links to other websites?

The Website may contain links to other websites. Please note that CreaMNN is not responsible for the privacy and processing of personal data on other websites. This Personal Data Protection Policy document applies exclusively to the information requested on the Website by CreaMNN. We recommend that you read the personal data processing policies of other websites linked from our website or viewed in any other way. You can also find out more about our link policy in our Legal Notice here.

What are your rights when you provide us with your data?

En cualquier momento, podrás ejercitar una serie de derechos respecto al tratamiento de tus datos personales. A continuación, te los enumeramos y explicamos en qué consiste cada uno de ellos:

To exercise your rights, you can contact the CreaMNN Data Protection Officer at Paseo de la Castellana 216, planta 15, 28046 Madrid, or send an email to protecciondedatos@creamnn.com, attaching a copy of your national identification document or equivalent document, specifying “Data Protection” as the subject. You can also withdraw your consent at any time without this affecting the lawfulness of the processing already performed, by sending your request to the address stated in the previous paragraph. In this case, it is also necessary to attach a copy of your ID or equivalent document proving your identity. If you believe that we have processed your data inappropriately or not in accordance with personal data processing regulations or disagree with how we have managed the exercise of your rights, you can file a claim before the Spanish Data Protection Agency (www.aepd.es).   The exercise of these rights is free.

How do we protect and guarantee the confidentiality and security of your data at CreaMNN?

CreaMNN, in response to the trust placed in us and taking into account the importance of the protection and confidentiality of your personal data, informs you that it has implemented the necessary technical and organisational measures to ensure the confidentiality, availability, integrity and resilience of its processing systems and services, taking into account the state of the art, the nature of the data processed, and the risks to which they are exposed. However, as a user you must be aware that security measures on the Internet are not impenetrable… This privacy policy was updated in March 2022. CreaMNN reserves the right to modify its data protection policy in the event of a change in current law, case law or based on own business criteria. If any changes are made to this policy, the new text will be published at this same address.