Privacy Policy

Privacy Policy

Confidentiality and security are fundamental values of LERRASA HIDRAULICA, S.A (LEHISA) and therefore we are always committed to ensuring the privacy of personal data of our customers and not to collect unnecessary information.

Next, we provide you with all the necessary information about our Privacy Policy in relation to the personal data we collect, explaining:

• Who is the controller of the processing of your personal data
• For what purposes we ask for the information we ask for.
• What is the lawfulness of processing.
• How long we keep them.
• To which recipients their information is communicated.
• What are your rights?

Who is the controller of the processing of your personal data?

Business name: LERRASA HIDRAULICA, S.A.

VAT Number: A08779563

Address: C/ Balmes 14, 08291 Ripollet (BCN)

Contact: rosaleon@lehisa.com

Who are the data subjects?

The personal data processed are those of:

• People who have given us their information in the different forms of the web to make inquiries or obtain information about our services and activities.
• People who apply to job selection processes.
• People who have requested to receive communications about news, services, and / or promotions of LEHISA.
• Users who visit the website.

For what purposes and lawfulness do we process personal data?

In LEHISA we process personal data to respond to your information queries or requests.

These personal data will be treated for the legitimate purposes indicated below

• Answer information or contact requests

In LEHISA we use the contact information you give us to respond to your requests and queries regarding our products and services, whether made through the forms available on the website or directed to the contact email addresses that have been published.

Lawfulness of processing:

• Processing is necessary for the purposes of the legitimate interests pursued by LEHISA, taking into account the reasonable expectations of those interested in receiving a response to their requests.
• Freely given consent given by the data subject who sends its data through a form provided for such specific purpose.

Data processed:

• Identification data: Name and surname
• Professional identification data: Company, position
• Contact details: Email address and if provided contact telephone number

• Processing applications for job offers 

We process personal data of people who applies to job offers published by LEHISA, and they will be processed in order to validate the candidacies to the positions to which they apply.

Lawfulness of processing:

• Processing is necessary for the purposes of the legitimate interests pursued by LEHISA, taking into account the reasonable expectations of those applying to the job offers.
• Processing is necessary in order to take steps at the request of the data subject prior to entering into a contract.
• Freely given consent given by the data subject who sends its data through a form provided for such specific purpose.

Data processed:

• Position you opt for
• Identification data: Name and surname
• Contact details: Email address and if provided contact telephone number.
• Resume and cover letter.

• Website Analytics

LEHISA makes use of various techniques to collect information that can be used to obtain analytical data of visits and navigation through the pages of our websites. In order to,

• Page-by-page audience measurement
• The list of pages from which a link has been followed to request the current page (sometimes called a “referrer”), whether internal or external to the site, by page and aggregated daily.
• Determination of the type of device, browser and screen size of visitors, per page and aggregated daily; and
• Statistics on page load time, per page and aggregated on an hourly basis.
• Statistics on time spent per page, bounce rate, scroll depth, per page and aggregated on a daily basis.
• Statistics on user actions (clicks, selections), per page and aggregated on a daily basis.
• Statistics on the geographical area of origin of the requests, per page and aggregated daily.

These analytics are based on the use of external services that have their own privacy policy:

• • Google Analytics (https://policies.google.com/technologies/partner-sites)

It is important to note that, as indicated by their privacy policies, these companies can cross navigation data with their internal records in order to use them for the personalization of ads, even if you do not have a registered account for their services.

Data processed:

• • Online identifiers, including identification cookies
  • Internet Protocol (IP) addresses  and device identifiers
  • client identifiers
  • Information contained in the HTTP headers of requests sent over the Internet such as the type of device, operating system and browser from which the pages are visited.
  • Information provided by the browser such as preferred language, time zone and others.
  • Geographic information derived from the IP address
  • Navigation data on the website: pages visited

More information at:

• https://policies.google.com/technologies/partner-sites

Legitimation:

• • Legitimate interest of LEHISA to obtain analytical information on the use of the website by visitors.

In addition to the foregoing, LEHISA may carry out other processing of personal data. In this case, the data subject will receive the necessary information in relation to these treatments and LEHISA will request its consent if it is necessary.

How long will LEHISA keep the data?

As a rule, data will be kept for as long as necessary to fulfill the purpose for which they were requested and to determine the possible responsibilities that may arise from this purpose and the processing of these data.

Among others, implies that LEHISA will keep the personal data of the data subjects for the duration of the relationship with us and, where appropriate, during the period that is necessary for the formulation, exercise or defense of potential claims, or for comply with the legal obligations determined by the applicable legislation.

In the case of the data of the candidates who apply to job offers, the data of those candidates who pass the initial selection process will be kept 3 months in our database of candidates or until the interested party asks for its elimination. opposition to their treatment.

In the case of data collected by third parties such as Google, they will be governed by the terms established by them in their respective privacy policies and the persistence of cookies reported in our Cookies Policy.

Once this period has expired, LEHISA undertakes to cease processing all personal data, destroy them, block them or anonymize them as far as possible for the purpose for which they are kept.

To which third parties will the data be communicated?

As a rule, personal data will not be transferred to third parties, unless it is necessary to respond to the request, we are bound by law or the interested party has given us his or her consent.

In the case of applications for job offers, the data will be communicated to companies that may be interested in hiring candidates, either from the presentation of applications to specific open positions, or applications proposed by initiative from our consultants.

The fact of entering the data through the forms made available to the candidate implies the express acceptance of this data communication, which is essential for LEHISA to provide the services that are requested.

We might also communicate data to companies that provide us with services related to the ordinary and administrative activity of the company acting as processors, national or international, within the framework of the provision of services such as, among others, service providers of email, hosting web services, server hosting, management application services in SaaS mode, file archiving in the cloud and others.

The provision of these services may involve the processing of personal data by companies located in countries outside the European Economic Area (international data transfers). However, it will only be carried out with countries that offer an adequate level of protection or that have made available to us Standard Contractual Clauses (SCC) in accordance with the decision of the European Commission for data transfers from controllers in the EU to processors established outside the EU.

For entities in the US, we ensure that they are covered by the EU-US Data Privacy framework. Commission Decision (EU) 2016/679 of 10 July 2023, you can consult the companies covered in the following link:

https://www.dataprivacyframework.gov/s/participant-search

The following are the service providers linked to the LEHISA website:

What are the rights of the data subjects when they provide us with their data?

Gladly we will inform you whether and which of your personal data is processed by us and for what purposes. Furthermore, given the respective legal conditions, you have to the right to rectification, the right to restrict processing, the right to erasure, the right to object and the right to data portability.

These rights may be exercised free of charge by the data subject and, if applicable, by his/her representative, by means of a written and signed request, accompanied by a copy of his/her ID or equivalent document proving his/her identity, addressed to:

• By email: rosaleon@lehisa.com

In the case of representation, you must prove by means of a written document and attaching a copy of the DNI or equivalent document that proves your representation.

In addition to the foregoing rights, the interested party shall have the right to withdraw the consent granted at any time through the procedure described above, without this withdrawal of consent affecting the lawfulness of the treatment prior to the withdrawal of this consent. LEHISA may continue to treat the personal data of the interested party to the extent that the applicable law permits or persist any other legitimation that justifies it persists.

Irrespective of these rights and the possibility of asserting another administrative or legal redress, you also have the possibility at any time of asserting your right to complain to a supervisory authority, in particular, in the member state of your place of domicile, of your place of work or of the location of the alleged infringement if you are of the view that the processing of personal data affecting you infringes legal data protection regulations.

LEHISA reminds the data subject that he/she has the right to lodge a complaint with the relevant supervisory authority (Spanish Data Protection Officer).

Update of your data

It is important that in order for us to keep your personal information updated, you inform us whenever there has been any change in them. Otherwise, we do not respond to the veracity of these and the implications it may have on treatment.

Security in the processing and custody of data

LEHISA declares that it has applied the appropriate technical and organizational measures to guarantee and be able to demonstrate that the treatment is in accordance with current legislation and that the protection of the rights of the interested parties is guaranteed.

For this purpose, it has implemented a Personal Data Protection Management System to determine and apply the technical and organizational means at its disposal to prevent the loss, misuse, alteration, unauthorized access and theft of data provided by users, without prejudice to inform that security measures on the Internet are not impregnable.

LEHISA  has also implemented internal controls in order to verify, evaluate and assess, on a regular basis, the effectiveness of the technical and organisational measures implemented to ensure the security of the processing.

Use of cookies

This website, like most websites on the Internet, uses cookies to improve the user experience. In our Cookies Policy you will find information about what cookies are, what kind of cookies this website uses, how you can disable cookies in your browser and how to specifically disable the installation of third-party cookies.

Please read our Cookies Policy carefully before continuing to browse our website.

Modification of the Privacy Policy

LEHISA can modify its Privacy Policy in accordance with the applicable legislation at all times. In any case, any modification of the Privacy Policy will be duly notified so that you are informed of the changes made in the processing of your personal data and, if the applicable regulations so require, the interested party can confirm their consent.