Skip to main content

Privacy Policy

At XERIDIA UK LTD, we place great emphasis on privacy and transparency.

We detail below the types of personal data processing we are engaged in, and give full information about this.

Processing of Professional Data and Images of the staff with promotional purpose

Basic data protection information
Data controller: XERIDIA UK LTD
Purpose: Collection and processing of professional data and imaging and/or video with promotional purpose
Legal basis: Consent of the interested party.
Recipients: Data transfers are planned to: Internet (social networks, video platforms and websites), entity’s web page and other media. Data transfers are planned to third countries.
Rights: You have the right to access, rectify or delete the data, as well as other right, written in additional information, that you can exercise by e-mailing  rgpd@xeridia.com
Source: The interested party

1. Who is the controller of your data?

XERIDIA UK LTD.

COMPANY NUMBER 9624769

10 PHILPOT LANE, LONDON, ENGLAND, EC3M, 8AA

Phone: +44 (0) 2037 576 359

Email: rgpd@xeridia.com

2. Why do we process your personal data?

At XERIDIA UK LTD we process the information provided to us by those interested in order to carry out the capture, broadcast and transfer of professional data and image and/or video of the staff for promotional purposes for its publication on the Internet (social networks, video platforms and websites), in the publications of the entity and other media. In case you do not provide your personal data, we will not be able to comply with the purposes described.

No automated decisions will be made based on to the data provided.

3. For how long do we retain your data?

The data will be kept as long as the interested party does not request their deletion.

4. What is the legal basis for processing your data?

Our legal basis for your data treatment:

  • Consent of the interested party: capture, broadcast and transfer of professional data and image and/or video for promotional purposes for its publication in social networks, video platforms and websites, and the publications of the firm and other media (GDPR art. 6.1a)

5. To which recipients are your data communicated?

Your data will be shared with:

  • Internet (social networks, video platforms, and websites), entity’s webpage and other media, with the purpose of transfer and publication of personal data and images and/or video of staff with promotional purposes.

6. Transfers of data to third countries

We foresee the following data transfers to third countries:

Social networks, and promotional media, with the purpose of carrying out advertising promotion of the entity’s services. The guarantee of the transfer has been granted by: Explicit consent of the interested party. You may consult additional information in: Entity’s Privacy Policy.

7. What are your rights when you facilitate your data to us?

Any person is entitled to obtain confirmation from XERIDIA UK LTD as to whether we are processing personal data concerning them.

Data subjects have the right to access their personal data, as well as to request rectification of incorrect data or, where applicable, request their erasure when, for instance, the data are no longer necessary for the purpose for which they were gathered. You likewise have the right to data portability.

In certain circumstances, data subjects may request the restriction of processing for their data, in which case we will retain them solely for the purpose of exercising or defending against legal claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, XERIDIA UK LTD will desist from processing the data, except for overriding legal reasons, or to exercise or defend against legal claims.

You can exercise your rights by writing to: rgpd@xeridia.com.

When commercial communications are sent where the legal grounds are the legitimate interest of the data controller, the data subject may object to the processing of their data for this purpose.

If they have given their consent for some specific purpose, they are entitled to withdraw that consent at any moment, without this affecting the legitimacy of the processing based on the consent previously furnished.

In the event that they believe their rights in relation to personal data protection have been breached, and in particular if they have not obtained satisfaction in exercising their rights, they can lodge a complaint with the competent Data Protection Supervisory Authority using its website: www.aepd.es.

8.How did we obtain your data?

The personal data processed by XERIDIA UK LTD came from: The Interested Party.

Processing of job applicant data

Basic data protection information
Data controller: XERIDIA UK LTD
Purpose: To carry out personnel selection processes.
Legal basis: Performance of a contract.
Recipients: Data shall not be transferred to third parties except where required by law.
Rights: You have the right to access, rectify and erase your data, in addition to other rights set out in the additional information, and you can exercise these by writing to: rgpd@xeridia.com
Source: The data subject himself/herself.

1. Who is the controller of your data?

XERIDIA UK LTD.

COMPANY NUMBER 9624769

10 PHILPOT LANE, LONDON, ENGLAND, EC3M, 8AA

Phone: +44 (0) 2037 576 359

Email: rgpd@xeridia.com

2. Why do we process your personal data?

At XERIDIA UK LTD we process the information facilitated by those interested so as to manage the curricula received and conduct personnel selection processes. In the event you do not facilitate your personal data, we will not be able to accomplish these purposes.

Automated decisions based upon the data furnished are not going to be taken.

3. For how long do we retain your data?

For two years after the last interaction.

4. What is the legal basis for processing your data?

Our legal basis for processing your data is as follows:

  • Performance of a contract: Management of the Curriculum Vitae submitted by candidates and used during personnel selection processes to search for the best possible candidate for a particular job.

5. To which recipients are your data communicated?

Data shall not be transferred to third parties except where required by law.

6. Transfers of data to third countries

No transfers of data to third countries are envisaged.

7. What are your rights when you facilitate your data to us?

Any person is entitled to obtain confirmation from XERIDIA UK LTD as to whether we are processing personal data concerning them.

Data subjects have the right to access their personal data, as well as to request rectification of incorrect data or, where applicable, request their erasure when, for instance, the data are no longer necessary for the purpose for which they were gathered. You likewise have the right to data portability.

In certain circumstances, data subjects may request the restriction of processing for their data, in which case we will retain them solely for the purpose of exercising or defending against legal claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, XERIDIA UK LTD will desist from processing the data, except for overriding legal reasons, or to exercise or defend against legal claims.

You can exercise your rights by writing to: rgpd@xeridia.com.

When commercial communications are sent where the legal grounds are the legitimate interest of the data controller, the data subject may object to the processing of their data for this purpose.

If they have given their consent for some specific purpose, they are entitled to withdraw that consent at any moment, without this affecting the legitimacy of the processing based on the consent previously furnished.

In the event that they believe their rights in relation to personal data protection have been breached, and in particular if they have not obtained satisfaction in exercising their rights, they can lodge a complaint with the competent Data Protection Supervisory Authority using its website: www.aepd.es.

8.How did we obtain your data?

The personal data processed by XERIDIA UK LTD came from: The data subject himself/herself.

Processing of customer data

Basic data protection information
Data controller: XERIDIA UK LTD
Purpose: To provide the services requested and send commercial communications by electronic means.
Legal grounds:

Execution of a contract.

Legitimate interest of the Data Controller.

Recipients: Your data will be transferred to the following recipients: The tax authorities; Financial entities.
Rights: You have the right to access, rectify and erase your data, in addition to other rights set out in the additional information, and you can exercise these by writing to rgpd@xeridia.com
Source: The data subject himself/herself.

1. Who is the controller of your data?

XERIDIA UK LTD.

COMPANY NUMBER 9624769

10 PHILPOT LANE, LONDON, ENGLAND, EC3M, 8AA

Phone: +44 (0) 2037 576 359

Email: rgpd@xeridia.com

2. Why do we process your personal data?

At XERIDIA UK LTD, we process the information facilitated to us by persons interested so as to carry out the administrative, accounting and tax management of the services requested, as well as to sent commercial information about our products and services. In the event you do not facilitate your personal data, we will not be able to accomplish these purposes.

Automated decisions based upon the data furnished are not going to be taken.

3. For how long do we retain your data?

The data will be retained until such time as the data subject should request erasure and, where applicable, for the period necessary to comply with the legal obligations.

4. What are the legal ground for the processing?

The legal ground for the processing of your data are:

  • Performance of a contract: Fiscal, accounting and administrative management of customers (GDPR Article 6.1.b).
  • Legitimate interest of the Data Controller: Sending of commercial communications, including by electronic means (GDPR Recital 47).

5. To which recipients are your data communicated?

The data will be communicated to the following recipients:

  • The tax authorities, to comply with legal obligation (this is required by law).
  • Financial entities, to issue the appropiate bulls (contractual obligationl).

6. Transfers of data to third countries

The following data transfers to third countries are envisaged:

XERIDIA, SL, for the purposes of providing the services of acquiring commercial customers, negotiating commercial contracts, invoicing end customers and collecting payment from them; providing IT resources, both human and technological; day-to-day administrative management (customer and supplier relations, calendar management, and other related tasks). The guarantee for this transfer has been established through: Standard data protection clauses. Further information is available at: Link to Standard Contractual Clauses document.

7. What are your rights when your facilitate your data to us?

Any person is entitled to obtain confirmation from XERIDIA UK LTD as to whether we are processing personal data concerning them.

Data subjects have the right to access their personal data, as well as to request rectification of incorrect data or, where applicable, request their erasure when, for instance, the data are no longer necessary for the purpose for which they were gathered. You likewise have the right to data portability.

In certain circumstances, data subjects may request the restriction of processing for their data, in which case we will retain them solely for the purpose of exercising or defending against legal claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, XERIDIA UK LTD will desist from processing the data, except for overriding legal reasons, or to exercise or defend against legal claims.

You can exercise your rights by writing to: rgpd@xeridia.com.

When commercial communications are sent where the legal grounds are the legitimate interest of the data controller, the data subject may object to the processing of their data for this purpose.

If they have given their consent for some specific purpose, they are entitled to withdraw that consent at any moment, without this affecting the legitimacy of the processing based on the consent previously furnished.

In the event that they believe their rights in relation to personal data protection have been breached, and in particular if they have not obtained satisfaction in exercising their rights, they can lodge a complaint with the competent Data Protection Supervisory Authority using its website: www.aepd.es.

8. How did we obtain your data?

The personal data processed by XERIDIA UK LTD came from: The data subject himself/herself.

Data Processing of implied parties in the Internal Complaints Channel

Basic data protection information
Data controller: XERIDIA UK LTD
Purpose: Management of the Internal Complaints Channel.
Legal basis:
  • Public Interest mission.
  • Legal obligation.
  • Consent of the interested party.
Recipients: Data transfers are planned to: State Security Forces; Jurisdictional Bodies; Fiscal Ministry.
Rights: You have the right to access, rectify or delete the data, as well as other rights, written in additional information, that you may exercise by e-mailing rgpd@xeridia.com
Source: Of the complaint presented by the interested subjects who maintain a labor, commercial and service-provision relationship with the entity.

1. Who is the controller of your data?

XERIDIA UK LTD.


COMPANY NUMBER 9624769


10 PHILPOT LANE, LONDON, ENGLAND, EC3M, 8AA

Phone: +44 (0) 2037 576 359

Email: rgpd@xeridia.com

2. Why do we process your personal data?

At XERIDIA UK LTD we process the information provided to us by those interested in order to manage the Internal Complaint Channel in order to inform the person responsible of the acts or conducts, that have occurred in the entity or that have been caused by a third party that contracts with it, and that might be contrary to the general or sectoral regulations that are applicable to it. In case you do not provide your personal data, we will not be able to comply with the purposes described.

No automated decisions will be made based on to the data provided.

3. For how long do we retain your data?

The data will be retained for the imperative time that takes to decide the source to investigate the reported facts. The maximum period will be three months from its entry into the system, unless the purpose of its conservation serves as evidence of the operation of the prevention model, in this case, the data will be kept anonymous. (LOPDGDD art 24.4)

4. What are the legal ground for the processing?

Our legal grounds for your data processing:

  • Public Interest Mission: Non-compliance risk control within the organization; (Organic Law 3/201, 5th of December. Of Personal data Protection and Digital Right Guaranty)
  • Legal obligation: Directive (EU) 2019/1937 of the European Parliament and Council of 23rd of October of 2019 in relation to the people’s protection that inform about infringements of the Union right (art. 8, duty of establishment of internal complaints channels.
  • Consent of the interested parties: for the conversation or registration of complaints made through the telephone line and voice messaging systems with recording.

5. To which recipients are your data communicated?

Your data will be shared with: State security forces; Jurisdictional Bodies and fiscal ministry, with the purpose of reporting to the commission of a possible crime (legal requirement).

6. Transfers of data to third countries

Data transfer to other countries are not foreseen.

7. What are your rights when your facilitate your data to us?

Any person is entitled to obtain confirmation from XERIDIA UK LTD as to whether we are processing personal data concerning them.

Data subjects have the right to access their personal data, as well as to request rectification of incorrect data or, where applicable, request their erasure when, for instance, the data are no longer necessary for the purpose for which they were gathered. You likewise have the right to data portability.

In certain circumstances, data subjects may request the restriction of processing for their data, in which case we will retain them solely for the purpose of exercising or defending against legal claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, XERIDIA UK LTD will desist from processing the data, except for overriding legal reasons, or to exercise or defend against legal claims.

You can exercise your rights by writing to: rgpd@xeridia.com.

When commercial communications are sent where the legal grounds are the legitimate interest of the data controller, the data subject may object to the processing of their data for this purpose.

If they have given their consent for some specific purpose, they are entitled to withdraw that consent at any moment, without this affecting the legitimacy of the processing based on the consent previously furnished.

In the event that they believe their rights in relation to personal data protection have been breached, and in particular if they have not obtained satisfaction in exercising their rights, they can lodge a complaint with the competent Data Protection Supervisory Authority using its website: www.aepd.es.

8. How did we obtain your data?

The personal data processed by XERIDIA UK LTD came from: Of the complaint presented by the subjects who maintain a labor commercial and service-provision relationship with the entity.

The categories of data that are processed are:

  • Identification data
  • Commercial information
  • Economic data

The following special categories of special data are processed: data relating to health.

Data Processing of implied parties in the Protocol of Prevention of sexual or gender-based harassment

Basic data protection information
Data controller: XERIDIA UK LTD
Purpose: Management of the protocol of prevention of sexual or gender-based harassment.
Legal basis: Compliance of a legal obligation
Recipients: Data transfers are planned to: State Security Forces; Jurisdictional Bodies; Fiscal Ministry.
Rights: You have the right to access, rectify or delete the data, as well as other rights, written in additional information, that you may exercise by e-mailing rgpd@xeridia.com
Source: Of the complaint presented by the interested subjects who maintain a labor, commercial and service-provision relationship with the entity.

1. Who is the controller of your data?

XERIDIA UK LTD.


COMPANY NUMBER 9624769


10 PHILPOT LANE, LONDON, ENGLAND, EC3M, 8AA

Phone: +44 (0) 2037 576 359

Email: rgpd@xeridia.com

2. Why do we process your personal data?

At XERIDIA UK LTD we process the information provided to us by those interested in order to manage the Internal Complaint Channel in order to inform the person responsible of the acts or conducts, that have occurred in the entity or that have been caused by a third party that contracts with it, and that might be contrary to the general or sectoral regulations that are applicable to it. In case you do not provide your personal data, we will not be able to comply with the purposes described.

No automated decisions will be made based on to the data provided.

3. For how long do we retain your data?

The data will be erased after two years, unless its retainment is necessary to determine the possible responsibilities that could be derived from the possible claims made by those affected.

4. What are the legal ground for the processing?

Our legal grounds for your data processing:

  • Compliance with a legal obligation: Organic Law 3/2007, 22nd of March, for the effective equality of women and men (art. 48); Royal Decree901/2020, 13th of October; Law 31/1995, 8th of November, of Health and Safety.

5. To which recipients are your data communicated?

Your data will be shared with: State security forces; Jurisdictional Bodies and fiscal ministry, with the purpose of reporting to the commission of a possible crime (legal requirement).

6. Transfers of data to third countries

Data transfer to other countries are not foreseen.

7. What are your rights when your facilitate your data to us?

Any person is entitled to obtain confirmation from XERIDIA UK LTD as to whether we are processing personal data concerning them.

Data subjects have the right to access their personal data, as well as to request rectification of incorrect data or, where applicable, request their erasure when, for instance, the data are no longer necessary for the purpose for which they were gathered. You likewise have the right to data portability.

In certain circumstances, data subjects may request the restriction of processing for their data, in which case we will retain them solely for the purpose of exercising or defending against legal claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, XERIDIA UK LTD will desist from processing the data, except for overriding legal reasons, or to exercise or defend against legal claims.

You can exercise your rights by writing to: rgpd@xeridia.com.

When commercial communications are sent where the legal grounds are the legitimate interest of the data controller, the data subject may object to the processing of their data for this purpose.

If they have given their consent for some specific purpose, they are entitled to withdraw that consent at any moment, without this affecting the legitimacy of the processing based on the consent previously furnished.

In the event that they believe their rights in relation to personal data protection have been breached, and in particular if they have not obtained satisfaction in exercising their rights, they can lodge a complaint with the competent Data Protection Supervisory Authority using its website: www.aepd.es.

8. How did we obtain your data?

The personal data processed by XERIDIA UK LTD came from: Of the complaint presented by the subjects who maintain a labor commercial and service-provision relationship with the entity.

The categories of data that are processed are:

  • Identification data

The following special categories of special data are processed: data relating to health.

Processing of the data of potential customers and web contacts

Basic data protection information
Data controller: XERIDIA UK LTD
Purpose: To deal with your request and send you commercial communications.
Legal basis: Execution of a contract. Consent by the data subject. Legitimate interest of the Data Controller.
Recipients: Data shall not be transferred to third parties except where required by law.
Rights: You have the right to access, rectify and erase your data, in addition to other rights set out in the additional information, and you can exercise these by writing to rgpd@xeridia.com
Source: The data subject himself/herself.

1. Who is the controller of your data?

XERIDIA UK LTD.


COMPANY NUMBER 9624769


10 PHILPOT LANE, LONDON, ENGLAND, EC3M, 8AA

Phone: +44 (0) 2037 576 359

Email: rgpd@xeridia.com

2. Why do we process your personal data?

XERIDIA UK LTD processes the information provided by interested parties to manage potential customers who have expressed an interest in our products and/or services, to manage other commercial contacts and, where appropriate, to send commercial communications, including by electronic means.

In the event you do not facilitate your personal data, we will not be able to accomplish these purposes.

Automated decisions based upon the data furnished are not going to be taken.

3. For how long do we retain your data?

The data will be retained until the data subject requests theis erasure.

4. What are the legal ground for the processing?

The legal grounds for the processing of your data are:

  • Performance of a contract: Management of potential customers who have shown an interest in our products and/or services (GDPR Article 6.1.b).
  • Consent of the interested party: To send commercial communications, including by electronic means (GDPR Article 6.1.a).
  • Legitimate interest of the Data Controller: Management of professional contact details (GDPR Article 6.1.f).

5. To which recipients are your data communicated?

Data shall not be transferred to third parties except where required by law.

6. Transfers of data to third countries

The following data transfers to third countries are envisaged:

XERIDIA, SL, for the purposes of providing the services of acquiring commercial customers, negotiating commercial contracts, invoicing end customers and collecting payment from them; providing IT resources, both human and technological; day-to-day administrative management (customer and supplier relations, calendar management, and other related tasks). The guarantee for this transfer has been established through: Standard data protection clauses. Further information is available at: Link to Standard Contractual Clauses document.

7. What are your rights when your facilitate your data to us?

Any person is entitled to obtain confirmation from XERIDIA UK LTD as to whether we are processing personal data concerning them.

Data subjects have the right to access their personal data, as well as to request rectification of incorrect data or, where applicable, request their erasure when, for instance, the data are no longer necessary for the purpose for which they were gathered. You likewise have the right to data portability.

In certain circumstances, data subjects may request the restriction of processing for their data, in which case we will retain them solely for the purpose of exercising or defending against legal claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, XERIDIA UK LTD will desist from processing the data, except for overriding legal reasons, or to exercise or defend against legal claims.

You can exercise your rights by writing to: rgpd@xeridia.com.

When commercial communications are sent where the legal grounds are the legitimate interest of the data controller, the data subject may object to the processing of their data for this purpose.

If they have given their consent for some specific purpose, they are entitled to withdraw that consent at any moment, without this affecting the legitimacy of the processing based on the consent previously furnished.

In the event that they believe their rights in relation to personal data protection have been breached, and in particular if they have not obtained satisfaction in exercising their rights, they can lodge a complaint with the competent Data Protection Supervisory Authority using its website: www.aepd.es.

8. How did we obtain your data?

The personal data processed by XERIDIA UK LTD came from: The data subject himself/herself.

Processing of provider data

Basic data protection information
Data controller: XERIDIA UK LTD
Purpose: To manage the provision of the services engaged.
Legal basis: Execution of a contract. Legitimate interest of the Data Controller.
Recipients: Your data willbe transferred to the following recipients: The tax authorities; Financial entities.
Rights: You have the right to access, rectify and erase your data, in addition to other rights set out in the additional information, and you can exercise these by writting to rgpd@xeridia.com
Source: The data subject himself/herself.

1. Who is the controller of your data?

XERIDIA UK LTD.


COMPANY NUMBER 9624769


10 PHILPOT LANE, LONDON, ENGLAND, EC3M, 8AA

Phone: +44 (0) 2037 576 359

Email: rgpd@xeridia.com

2. Why do we process your personal data?

At XERIDIA UK LTD we process the information provided by interested parties to manage suppliers’ tax, accounting and administrative matters and to manage professional contact details.

In the event you do not facilitate your personal data, we will not be able to accomplish these purposes.

Automated decisions based upon the data furnished are not going to be taken.

3. For how long do we retain your data?

The data will be retained until such time as the data subject should request erasure and, where applicable, for the period necessary to comply with the legal obligations.

4. What are the legal grounds for the processing?

The legal grounds for the processing of your data are:

  • Execution of a contract: To conduct the administrative, accounting and tax management of the services engaged, as well as details of the contact persons.
  • Legitimate interest of the Data Controller: Management of professional contact details (GDPR Article 6.1.f).

5. To which recipients are your data communicated?

The data will be communicated to the following recipients:

  • The tax authorities, to comply with legal obligations (this is required by law).
  • Financial entities, to make the appropiate payments (contractual obligation).

6. Transfers of data to third countries

The following data transfers to third countries are envisaged:

XERIDIA, SL, for the purposes of providing the services of acquiring commercial customers, negotiating commercial contracts, invoicing end customers and collecting payment from them; providing IT resources, both human and technological; day-to-day administrative management (customer and supplier relations, calendar management, and other related tasks). The guarantee for this transfer has been established through: Standard data protection clauses. Further information is available at: Link to Standard Contractual Clauses document.

7. What are your rights when your facilitate your data to us?

Any person is entitled to obtain confirmation from XERIDIA UK LTD as to whether we are processing personal data concerning them.

Data subjects have the right to access their personal data, as well as to request rectification of incorrect data or, where applicable, request their erasure when, for instance, the data are no longer necessary for the purpose for which they were gathered. You likewise have the right to data portability.

In certain circumstances, data subjects may request the restriction of processing for their data, in which case we will retain them solely for the purpose of exercising or defending against legal claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, XERIDIA UK LTD will desist from processing the data, except for overriding legal reasons, or to exercise or defend against legal claims.

You can exercise your rights by writing to: rgpd@xeridia.com.

When commercial communications are sent where the legal grounds are the legitimate interest of the data controller, the data subject may object to the processing of their data for this purpose.

If they have given their consent for some specific purpose, they are entitled to withdraw that consent at any moment, without this affecting the legitimacy of the processing based on the consent previously furnished.

In the event that they believe their rights in relation to personal data protection have been breached, and in particular if they have not obtained satisfaction in exercising their rights, they can lodge a complaint with the competent Data Protection Supervisory Authority using its website: www.aepd.es.

8. How did we obtain your data?

The personal data processed by XERIDIA UK LTD came from: The data subject himself/herself.

Processing of personnal data

Basic data protection information
Data controller: XERIDIA UK LTD
Purpose: To manage the employment relationship.
Legal grounds: Execution of a contract.
Compliance with a legal obligation.
Recipients: Your data will be transferred to the following recipients: The tax and social security authorities and mutual insurer. Banks and financial entities. The State Foundation for Employment Training (“Fundae”).

Rights:

You have the right to access, rectify and erase your data, in addition to other rights set out in the additional information, and you can exercise these by writing to  rgpd@xeridia.com.

Source:

The data subject himself/herself.

1. Who is the controller of your data?

XERIDIA UK LTD.


COMPANY NUMBER 9624769


10 PHILPOT LANE, LONDON, ENGLAND, EC3M, 8AA

Phone: +44 (0) 2037 576 359

Email: rgpd@xeridia.com

2. Why do we process your personal data?

At XERIDIA UK LTD, we process the information facilitated to us by persons interested so as to manage personnel; training; occupational health and safety and health surveillance; preparation of payroll, social security and contributions. In the event you do not facilitate your personal data, we will not be able to accomplish these purposes.

Automated decisions based upon the data furnished are not going to be taken.

3. For how long do we retain your data?

While the employment relationship with the entity endures and subsequently for the period necessary to comply with legal obligations.

4. What are the legal grounds for the processing?

The legal grounds for the processing of your data are:

  • Legitimate interest of the Data Controller: Management of professional contact details (GDPR Article 6.1.f).
  • Compliance with a legal obligation: Prevention of work-related risks and monitoring employees’ health; preparation of payroll, social security and other contributions; recording of working hours; management of work-related accidents, where appropriate (Employment law; GDPR Articles 6.1.c and 9.2.b).

5. To which recipients are your data communicated?

The data will be communicated to the following recipients:

  • The tax and social security authorities and mutual insurer, to comply with legal obligations (legal requirement).
  • Banks and financial entities, to pay salaries (contractual requirement).
  •  

6.Transfers of data to third countries

The following data transfers to third countries are envisaged:

XERIDIA, SL, for the purposes of providing the services of acquiring commercial customers, negotiating commercial contracts, invoicing end customers and collecting payment from them; providing IT resources, both human and technological; day-to-day administrative management (customer and supplier relations, calendar management, and other related tasks). The guarantee for this transfer has been established through: Standard data protection clauses. Further information is available at: Link to Standard Contractual Clauses document.

7. What are your rights when you facilitate your data to us?

Any person is entitled to obtain confirmation from XERIDIA UK LTD as to whether we are processing personal data concerning them.

Data subjects have the right to access their personal data, as well as to request rectification of incorrect data or, where applicable, request their erasure when, for instance, the data are no longer necessary for the purpose for which they were gathered. You likewise have the right to data portability.

In certain circumstances, data subjects may request the restriction of processing for their data, in which case we will retain them solely for the purpose of exercising or defending against legal claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, XERIDIA UK LTD will desist from processing the data, except for overriding legal reasons, or to exercise or defend against legal claims.

You can exercise your rights by writing to: rgpd@xeridia.com.

When commercial communications are sent where the legal grounds are the legitimate interest of the data controller, the data subject may object to the processing of their data for this purpose.

If they have given their consent for some specific purpose, they are entitled to withdraw that consent at any moment, without this affecting the legitimacy of the processing based on the consent previously furnished.

In the event that they believe their rights in relation to personal data protection have been breached, and in particular if they have not obtained satisfaction in exercising their rights, they can lodge a complaint with the competent Data Protection Supervisory Authority using its website: www.aepd.es.

8. How did we obtain your data?

The personal data processed by XERIDIA UK LTD came from: The data subject himself/herself.

Data Processing of implied parties in the Protocol of Prevention of sexual or gender-based harassment

Basic data protection information
Data controller: XERIDIA UK LTD
Purpose: Management of the protocol of prevention of sexual or gender-based harassment.
Legal grounds: Compliance of a legal obligation
Recipients: Data transfers are planned to: Control authorities, Public Administration bodies and the Ombudsman, if applicable.

Rights:

You have the right to access, rectify or delete the data, as well as other rights, written in additional information, that you may exercise by e-mailing rgpd@xeridia.com.

Source:

The interested party

1. Who is the controller of your data?

XERIDIA UK LTD.


COMPANY NUMBER 9624769


10 PHILPOT LANE, LONDON, ENGLAND, EC3M, 8AA

Phone: +44 (0) 2037 576 359

Email: rgpd@xeridia.com

2. Why do we process your personal data?

At XERIDIA UK LTD, we process the information facilitated to us by persons interested so as to manage personnel; training; occupational health and safety and health surveillance; preparation of payroll, social security and contributions. In the event you do not facilitate your personal data, we will not be able to accomplish these purposes.

No automated decisions will be made based on to the data provided.

3. For how long do we retain your data?

The data will be kept the necessary time to be able to solve the requests and at least for three years to be able to respond to potential claims.

4. What are the legal grounds for the processing?

Our legal grounds for your data processing:

  • Compliance with a legal obligation: to manage and attend to the requests of the interested parties in the exercise of the rights stablished in the data protection regulations (GDPR, art 6.1b)

5. To which recipients are your data communicated?

Your data will be shared with:

  • Control Authorities, Public Administration bodies, and the Ombudsman, if applicable, for the purpose of managing and attending to requests and possible complaints (legal requirement). .

6.Transfers of data to third countries

Data transfer to other countries are not foreseen.

7. What are your rights when you facilitate your data to us?

Any person is entitled to obtain confirmation from XERIDIA UK LTD as to whether we are processing personal data concerning them.

Data subjects have the right to access their personal data, as well as to request rectification of incorrect data or, where applicable, request their erasure when, for instance, the data are no longer necessary for the purpose for which they were gathered. You likewise have the right to data portability.

In certain circumstances, data subjects may request the restriction of processing for their data, in which case we will retain them solely for the purpose of exercising or defending against legal claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, XERIDIA UK LTD will desist from processing the data, except for overriding legal reasons, or to exercise or defend against legal claims.

You can exercise your rights by writing to: rgpd@xeridia.com.

When commercial communications are sent where the legal grounds are the legitimate interest of the data controller, the data subject may object to the processing of their data for this purpose.

If they have given their consent for some specific purpose, they are entitled to withdraw that consent at any moment, without this affecting the legitimacy of the processing based on the consent previously furnished.

In the event that they believe their rights in relation to personal data protection have been breached, and in particular if they have not obtained satisfaction in exercising their rights, they can lodge a complaint with the competent Data Protection Supervisory Authority using its website: www.aepd.es.

8. How did we obtain your data?

The personal data processed by XERIDIA UK LTD came from: The interested party himself/herself.