Skip to main content

You are browsing in Orona INTERNATIONAL (EN) Change

Privacy policy

In accordance with applicable data protection legislation we inform you that the personal data you have provided will be processed on the terms indicated below

1. DATA CONTROLLER

The data controller’s contact data are as follows:

  • Corporate Name: Orona S. Coop., company in the Orona Group (“Orona” or the “Company”).
  • Postal address: Polígono Lastaola, 20120, Hernani, Gipuzkoa, Spain
  • Telephone no.: +34 943 33 66 00
  • GDPR contact: gdpr@orona-group.com

2. PURPOSES AND LEGAL BASIS OF THE PROCESSING

Orona may process your personal data on the legal basis and for the purposes indicated below:

Processing of data of Orona’s customers

  • Management, execution, performance and control of the contractual relationship between you and Orona, based on the existence of such relationship. Said purpose will also include the necessary processing to provide the technical support services, organization of possible training, necessary activities to collect debts, respond to complaints, incidents and claims, and for Orona to analyze the quality of the services provided.
  • Recording of calls in the context of any emergencies that may arise inside the elevators, on the basis of Orona’s legitimate interest in ensuring compliance with the contractual relationship entered into with the clients.
  • Orona, also based on its legitimate interest in offering you a more complete service and to increase your satisfaction, may send you commercial communications and/or invitations to events related to the products and services that you have purchased. Orona, based on its legitimate interest to promote its events, may obtain images at those events and include them in publications in this regard.

In all cases you may exercise your right to object on the terms established in this clause.

Processing of data of Orona’s suppliers

  • Management of any pre-contractual diligence and regulatory risk and compliance evaluation checks where necessary based on Orona’s legitimate interest in meeting our corporate risk, and security obligations or compliance with legal obligations applicable in this regard.
  • Management, execution, performance and control of the contractual relationship between you and Orona, based on the existence of such relationship.
  • In addition, Orona, based on its legitimate interest to secure the loyalty of its suppliers, may send you invitations to events related to Orona’s products and services. Orona, based on its legitimate interest to promote its events, may obtain images at those events and include them in publications in this regard. 

You may exercise your right to object on the terms established in this clause where permitted under applicable legislation.

Visitors contacts

Management of the contractual and/or commercial relationship with Orona, based on its legitimate interest in effectively managing such relationship.

Video surveillance and access control

To carry out the necessary processing to control access to Orona’s facilities, and to capture images by installing video surveillance cameras at access points, for the sole purpose and based on the legitimate interest of Orona to safeguard the security of the persons, assets and materials at its facilities.

3. STORAGE OF PERSONAL DATA

Orona shall store the data for the duration of the contractual relationship with you or for the time needed to carry out the processing in question, and during the mandatory time limit or statute of limitations period established in applicable legislation.

The recordings and information regarding access to the facilities will be stored for a period of one month from the time they are collected, following which they will be erased, unless they have to be stored to evidence conduct that violates the integrity of individuals, goods or facilities.

4. RECIPIENTS OF THE DATA AND INTERNATIONAL TRANSFERS

Your data may be disclosed to other companies in the corporate group of which Orona forms part, based on the existence of a legitimate interest, due to the need that companies have to interact and communicate with each other for the successful outcome of their activities (internal advertising purposes), and to the relevant public bodies if established in a legal obligation.

In addition, other group companies to centralize the management of the contractual relationship and providers of IT and/or technology services, security companies, call centers, legal advisors and companies that organize events, may have access to your personal data as data processors.

Orona may perform international transfers of your personal data to Group companies and/or service providers located outside the European Economic Area. Where they have not stated that they have a level of protection equivalent to that of Europe, Orona will adopt the corresponding safeguards by means of standard contractual clauses or require adherence to Privacy Shield.

For further information please send an email to gdpr@orona-group.com.

5. RIGHTS

You may exercise the following rights:

  • Right of access to your personal data to know which data are being processed and the processing operations that are being performed with that data;
  • Right to rectify any inaccurate data.
  • Right to erasure of your personal data.
  • Right to object, i.e., to request that your personal data not be processed, for reasons related to your personal situation.
  • Right to request restrictions on the processing of your personal data in certain circumstances (i.e., if you challenge the accuracy of your data while the challenge is being verified).
  • Right to data portability, i.e., to receive the personal data that you have provided in a commonly used and machine-readable format and to transmit those data to another controller.

In order to exercise these rights please send an email to gdpr@orona-group.com. Once the request has been received you will be informed of any further information or documentation that needs to be provided to exercise those rights to the extent necessary for responding to your request.

You may also lodge a complaint with the competent data protection supervisory authority especially if you have not obtained satisfaction in exercising your rights.

Back to top