Privacy policy

Privacy Policy

Basic information

Additional information

This Privacy Policy governs the processing of personal data provided by the User through the website and the associated services and tools made available to internet users by Suara Serveis SCCL (hereinafter, “Suara”). This Policy forms an integral part of the Legal Notice, which is accessible on the website at all times. The User warrants that the data provided are true, accurate, complete and up to date, and is responsible for any direct or indirect damage or loss arising from a breach of this obligation. Where the data provided concern a third party, the User warrants that they have informed that third party of the matters set out in this document and obtained their authorisation to provide their data to Suara for the stated purposes.

The website may offer features for sharing content through third-party applications, such as LinkedIn, Facebook or Twitter. These applications may collect and process information about the User’s browsing activity on different websites. Personal information collected through these applications may be used by other users of those applications, and interactions with them are subject to the privacy policies of the companies providing the applications.

The website may host blogs, forums and other social media applications or services to facilitate the exchange of knowledge and content. Personal information provided by the User may be shared with other users of these services, over whom Suara has no control.

To provide information or services of interest based on the User’s location, Suara may access geolocation data from the User’s device where the User’s settings permit this.

For technical security and system diagnostics, Suara may record the IP address (the identifier associated with a device’s internet connection, enabling devices, systems and servers to recognise and communicate with one another) in anonymised or aggregated form. This information may also be used to analyse website performance.

Who is responsible for processing the User’s personal data?

Identity: Suara Serveis, SCCL, an entity registered in the Territorial Register of Cooperatives under registration number 7,928.

Registered address: C. Sancho de Ávila, 52–58, 1st floor, Barcelona (08026), Spain.

Data Protection Officer: dpo@suara.coop

For what purposes do we process the User’s personal data?

Suara processes the information provided by the User for different purposes, depending on the nature of their interaction with the website or the services linked to it.

In particular, data may be processed to:

i) Manage and respond to enquiries, requests for information or other requests submitted by the User.

ii) Manage subscriptions to the newsletter or other informational communications requested by the User.

iii) Manage the User’s participation or interactions with Suara’s channels and social networks.

iv) Manage staff recruitment processes.

v) Manage user registration, identification and access to the customer portal.

vi) Manage requests, enquiries or incidents submitted by customers through the ticketing system.

vii) Ensure the security and proper functioning of digital systems and services.

Customer portal registration and ticketing system

When the User registers on the customer portal, Suara may process the information provided during registration, such as their first and last name, corporate email address, contact telephone number, position within the organisation, the company or organisation to which they belong, and its tax identification number (CIF).

These data will be processed to manage the User’s registration and identification, enable access to the portal, administer their account, and manage, process, track and respond to requests or incidents submitted through the ticketing system.

Data collected through this system may be processed using the technological tools employed by Suara to manage requests, including Jira.

The legal basis is the legitimate interest in maintaining and managing the professional relationship with customer organisations and providing a traceable channel through which to handle their requests.

Where requests or tickets contain personal data relating to third parties, such data must only be included when necessary to handle the request and where a lawful basis exists for processing them.

Job vacancies

In the specific case of data provided through the “Job vacancies” section, Suara will use the information provided for the following purposes:

Assessing your suitability for the position for which you apply and for positions that may arise in the future, if you have selected “any vacancy”.
Contacting you by telephone or via WhatsApp solely to arrange job interviews or manage matters relating to the recruitment process.
Performing administrative functions (such as covering expenses associated with an interview).

Requesting information required by law and responding to legal proceedings.

If the User registers on the website using social login, Suara will only access the User’s personal data for which consent was given when configuring access through the relevant social network. Information provided in connection with these social applications may be accessed by members of the relevant social network, and such interactions are governed by the privacy policies of the service providers. Suara has no control over, or responsibility for, these entities or their use of the User’s information.

How long will we retain the User’s personal data?

As a general rule, personal data provided will be retained for as long as necessary to handle the User’s request.

In the specific case of applications for job vacancies, the data will be retained only for the duration of the recruitment process and will be deleted once it has ended, except in the case of successful applicants, whose personal data collected during recruitment will be retained until their employment with the cooperative ends.

Accordingly, if you are not hired, Suara will retain and use your personal data for three (3) months to consider your CV for future vacancies only if you authorise it.

What is the legal basis for processing the User’s personal data?

The legal basis for processing depends on the purpose for which the data are processed.

In particular:

For enquiries or requests submitted voluntarily by the User, processing may be based on their consent or, where the enquiry relates to the contracting or provision of a service, on steps taken before entering into a contract or on performance of a contract.

Subscription to the newsletter or the sending of communications requiring authorisation is based on the User’s consent.

Processing data necessary to manage an application for a job vacancy is based on taking steps at the candidate’s request before entering into a contract. Retaining the application for future vacancies is based on the candidate’s consent.

Processing professional contact details of individuals working for customer companies or organisations, including registration and use of the customer portal and ticketing system, is based on the legitimate interest in managing and maintaining the professional relationship with the organisation to which they belong.

Where processing is based on consent, the User may withdraw it at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To whom will the User’s personal data be disclosed?

In general, access to personal information provided will be limited to individuals within the organisation who need it to handle your request, assess your job application, perform their duties or support staff recruitment activities, and to those to whom disclosure is required by applicable law.

In the specific case of job applications, the following categories of individuals will have access to your personal data:

• Staff in the People department responsible for recruitment.
• The Director or Head of the People department and the head of the department to which the candidate is applying.
• Employees performing administrative and technical support functions.
• Government officials where legally required, authorities responsible for enforcing the law, or private litigants in response to valid legal proceedings (such as a search or seizure warrant, summons or court order).
• A successor to Suara if part of the cooperative is disposed of or sold.

Your data may also be provided to third-sector service organisations with which Suara collaborates in the areas of social services, education and training, personal wellbeing, and employment and work. In all cases, these services must comply with the provisions of this Privacy Policy.

Data may also be disclosed to public authorities and bodies for the provision of services and to comply with obligations directly imposed on Suara.

Are personal data transferred internationally?

No international transfers of data outside the European Economic Area are envisaged.

How does Suara protect personal information?

Suara implements organisational, technical and physical security measures to protect your data, prevent security breaches and ensure the confidentiality, integrity and availability of your data throughout processing.

What rights do you have when you provide us with your personal data?

The User has the right to obtain confirmation as to whether Suara processes personal data concerning them, to access their personal data, to request the rectification of inaccurate data and, where applicable, to request erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, the User may request restriction of processing of their data, in which case the data will be retained only for the establishment, exercise or defence of legal claims. Where processing is based on legitimate interests, Suara will cease processing the data unless it demonstrates compelling legitimate grounds overriding the User’s interests, rights and freedoms, or unless processing is necessary for the establishment, exercise or defence of legal claims.

In certain circumstances, and on grounds relating to their particular situation, the User may object to the processing of their data. Suara will cease processing the data unless there are compelling legitimate grounds for processing or it is necessary for the establishment, exercise or defence of potential legal claims.

Finally, the User may exercise their right to data portability and, where applicable, Suara will process the request.

The User may exercise their rights in accordance with applicable law by contacting the Data Protection Officer by post at Suara Serveis SCCL, C. Sancho de Ávila, 52–58, 1st floor, Barcelona (08026), Spain, or by email at dpo@suara.coop, stating the relevant request and, where necessary, enclosing a copy of their national identity card, passport or another valid identity document.

The User also has the right to lodge a complaint with the competent data protection supervisory authority if they consider that the processing of their personal data does not comply with applicable law., loss, or disclosure.