POLICY ON THE PROTECTION OF A CANDIDATE’S PERSONAL DATA

Dear Candidate In observance of the legal duty of notification laid down in article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – hereinafter GDPR), and the provisions of Spain’s Organic Law 3/2018 on the Protection of Personal Data and the Assurance of Digital Rights, you are hereby provided with the following information regarding the processing of your personal data:

1. IDENTIFICATION

   Holder:

   ERHARDT TRANSITARIOS S.L.

   Registered address:

   C/ Ercilla, 19 5ª (48009 BILBAO)

   Tax/VAT number:

   B38406906

   With a view to guaranteeing the due and proper management of your data processing, ERHARDT TRANSITARIOS S.L. has appointed a Data Protection Officer (hereinafter DPO), who may be contacted at the following address: dpd@ertransit.com.

2. INFORMATION AND CONSENT

   By accepting this Policy, and as the interested party, you are hereby informed and grant your unfettered, informed, specific and full consent regarding the processing of the personal data submitted in your job application.

3. MANDATORY SUBMISSION OF DATA

   The personal data provided on the job application are not mandatory, unless specified otherwise by the required field on the form or by email, or which may subsequently be required for the fulfilment of the purpose in hand.

4. WHAT DO WE USE PERSONAL DATA FOR?

   The personal data provided on the job application are processed for the management of your participation in staff recruitment processes.

5. WHAT PERSONAL DATA DO WE PROCESS?

   The information containing personal data provided and gathered on the job application form that we process is essential for participating in recruitment processes, consisting of the following: personal details (name, family name, and ID or passport number), contact details (phone number, address, and email), academic record and professional background, and as appropriate, your picture (passport-size photograph that appears on your CV), as well as any other data you may provide in the open fields of “comments” or in your CV.

   As the interested party, you are required to provide accurate data and keep them updated. In the event of any modification of your personal data, you are kindly requested to inform us in writing for the sole purpose of updating your job application or CV.

   Whenever you provide data on third parties, you declare that you have their permission and undertake to disclose to them the information contained in this Privacy Policy, releasing the owner of the Website from any liability in this matter. Nonetheless, the owner of the Website may conduct the necessary checks on a regular basis to verify the data, adopting those measures of due diligence as appropriate, pursuant to the regulations on data protection.

6. WHAT IS THE JUSTIFICATION FOR THE PROCESSING OF PERSONAL DATA?

   The processing of your personal data is warranted by your express consent (article 6.1.a) of the GDPR) and the establishment of a pre-contractual relationship (article 6.1.b) of the GDPR).

7. WHAT OTHER PARTIES ARE THE PERSONAL DATA DISCLOSED TO?

   For the purposes specified hereinabove, the personal data gathered may be disclosed to other companies in the business group and to third parties as provided for by law.

8. STORAGE OF PERSONAL DATA

   The information provided shall be processed during the recruitment process and/or during the maximum time that the data may be considered pertinent for considering your suitability for future vacancies (2 years).

   Once this period of time has elapsed, your data will be deleted, unless it is deemed necessary to lock them in order to respond to potential legal contingencies arising from their processing, with no use being made of them other than to keep them available to public authorities and the Legal Administration.

   Should you therefore wish to continue participating in our recruitment processes, you are kindly requested to resubmit your CV.

9. EXERCISING YOUR RIGHTS

   You may write to the postal address indicated in the heading of this Policy, or by sending an email to dpd@ertransit.com attaching a photocopy of your ID document or passport, at any time and without charge, for the following purposes: withdraw any consent granted, receive confirmation on whether we are processing personal data of interest to you, access your personal data, correct inaccurate or incomplete data, request the deletion of your personal data when, for whatsoever reason, the data are no longer required for the purposes for which they were gathered, restrict the processing of the data in the event of the fulfilment of any of the conditions provided for in legislation on data protection, request the portability of the data you have submitted, and lodge an appeal regarding the protection of your personal data with the competent regulatory body.

10. SECURITY MEASURES

    Your data will at all times be treated with absolute confidentiality and upholding the preceptive duty of secrecy thereof, pursuant to the provisions of current legislation of application, adopting accordingly those measures of a technical and organisational nature that guarantee the safeguarding of your data and avoid their alteration, loss, unauthorised processing or access, with due consideration for the state of technology, the nature of the data stored, and the risks to which they are exposed.