The Iberpapel Group assures that your personal data are always protected and are not used inappropriately. On providing us with your personal data, we understand that you have read and understood the terms of the personal data protection information set out below.
The Iberpapel Group, upon defining the personal data processing and privacy policy centrally, and each of the Group companies, as a Data Controller for data supplied to them, are liable for complying with national and European data protection legislation (including, in particular, the General Data Protection Regulation, Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights) and aim to process the data in a manner that is lawful, fair and transparent.
Who is responsible for processing your data?
The following companies currently form the Iberpapel Group:
Business name: IBERPAPEL GESTIÓN, S.A.
Registered office: AVDA. SANCHO EL SABIO, 2 -1º20010-SAN SEBASTIAN (GUIPUZCOA).
Address: AVDA. SANCHO EL SABIO, 2 -1º20010-SAN SEBASTIAN (GUIPUZCOA).
Tel.: 91 564 07 20.
Email: protecciondatos@Iberpapel.es
Business name: IBERPAPEL ON LINE, S.L.U.
Registered office: AVDA. SANCHO EL SABIO, 2 -1º20010-SAN SEBASTIAN (GUIPUZCOA).
Address: AVDA. SANCHO EL SABIO, 2 -1º20010-SAN SEBASTIAN (GUIPUZCOA).
Tel.: 943 46 26 00.
Email: protecciondatos@Iberpapel.es
Business name: DISTRIBUIDORA PAPELERA, S.A.U.
Registered office: C/ VELAZQUEZ, 105, 28006 – MADRID.
Address: C/ VELAZQUEZ, 105, 28006 – MADRID.
Tel.: 91 564 87 16.
Email: protecciondatos@Iberpapel.es
Business name: MOLINER DOMINGUEZ Y CIA, S.A.U.
Registered office: C/ FRANCESC LAYRET, 52 PORTAL 3 PL. 1ª, 08912, BADALONA – BARCELONA.
Address: C/ FRANCESC LAYRET, 52 PORTAL 3 PL. 1ª, 08912, BADALONA – BARCELONA.
Tel.: 93 462 04 36.
Email: protecciondatos@Iberpapel.es
Business name: IBEREUCALIPTOS, S.A.U.
Registered office: C/ REAL, 14, 21700 – 21700 – LA PALMA DEL CONDADO (HUELVA).
Address: C/ REAL, 14, 21700 – 21700 – LA PALMA DEL CONDADO (HUELVA).
Tel.: 959 40 22 85.
Email: protecciondatos@Iberpapel.es
Business name: CENTRAL DE SUMINISTROS DE ARTES GRÁFICAS PAPEL, S.A.U.
Registered office: C/ VELAZQUEZ, 105, 28006 – MADRID.
Address: C/ VELAZQUEZ, 105, 28006 – MADRID.
Tel.: 91 564 11 66.
Email: protecciondatos@Iberpapel.es
Business name: IBERBARNA PAPEL, S.A.U.
Registered office: C/ FRANCESC LAYRET, 52 PORTAL 3 PL. 1ª, 08912, BADALONA – BARCELONA.
Address: C/ FRANCESC LAYRET, 52 PORTAL 3 PL. 1ª, 08912, BADALONA – BARCELONA.
Tel.: 93 462 04 36.
Email: protecciondatos@Iberpapel.es
Business name: COPAIMEX, S.A.U.
Registered office: AVDA. SANCHO EL SABIO, 2, 1º – 20010-SAN SEBASTIAN.
Address: AVDA. SANCHO EL SABIO, 2, 1º – 20010-SAN SEBASTIAN.
Tel.: 943 46 26 00.
Email: protecciondatos@Iberpapel.es
Business name: PAPELERA GUIPUZCOANA DE ZICUÑAGA, S.A.U.
Registered office: BARRIO DE ZICUÑAGA S/N, 20120-HERNANI.
Address: APDO. CORREOS 226 (SS)/Bº ZICUÑAGA S/N – 20120-HERNANI.
Tel.: 943 55 11 00.
Email: protecciondatos@Iberpapel.es
Business name: ZICUPAP, S.A.U.
Registered office: AVDA. SANCHO EL SABIO, 2, 1º – 20010-SAN SEBASTIAN.
Address: AVDA. SANCHO EL SABIO, 2, 1º – 20010-SAN SEBASTIAN.
Tel.: 943 46 26 00.
Email: protecciondatos@Iberpapel.es
When you provide your personal data to an Iberpapel Group company, this company becomes the Data Controller and will therefore guarantee that the data, freedoms and rights of the data subjects are secure and assured.
What is the purpose of personal data processing?
In view of the different activities carried on by the Iberpapel Group companies and the type of relationships established with data subjects, data are processed for a variety of reasons:
- Processing of customers’ personal data:
- Contractual purposes: contracting, maintenance and performance of paper sale and purchase agreements through Iberpapel Online and any other agreements for services that may be entered into with a Group company.
- Purposes based on the fulfilment of a legal obligation: fulfilment of legal obligations.
- Processing of suppliers’ personal data:
- Contractual purposes: contracting, maintenance and performance of agreements for services entered into with the aforementioned entity.
- Purposes based on the fulfilment of a legal obligation: fulfilment of legal obligations that may arise from agreements entered into with persons or entities providing services or supplying goods to Group companies.
- Processing of candidates’ personal data: personal data processing for inclusion in personnel selection and related recruitment processes.
- Processing of employees’ personal data: we process our employees’ personal data during their employment relationship with the Group company that hires them so they may receive the consideration agreed individually or collectively. To this end, we will also process personal data provided by our employees on their families or dependent persons under their charge.
- Processing of shareholders’ personal data: the data of our shareholders and their legal representatives are processed in order to provide them with appropriate information on the Group’s performance and share value, as well as to manage returns on capital investments and fulfil Iberpapel’s obligations as a listed group.
- Personal data processing due to being a listed group: in order to fulfil the information and transparency obligations imposed by the stock market regulator (Spanish National Securities Market Commission or CNMV), the Iberpapel Group will process the data of people related to information on our listed shares, on our majority shareholders, directors, chief executive officers, analysts and committee members.
The data processed will be kept while there is a mutual interest in the purpose of the processing or until the data subject exercises the right of erasure, cancellation or objection, provided they need not be kept to fulfil legal obligations and notwithstanding the obligation to observe legally stipulated limitation periods in relationships with data subjects.
What is our legal standing for data processing?
When processing is performed by any of the Iberpapel Group companies due to the provision of a good or service, or the performance of any kind of contractual agreement, our legal standing will be the performance of the contract to which the data subject is party or steps taken at the request of the data subject prior to entering into the contract (Article 6.1.b) GDPR).
The lawfulness of the processing carried out by all the Group companies on occasions will likewise be always related to compliance with legal obligations applicable to the Group or to any of the Group companies individually (Article 6.1.c) GDPR).
Where lawfulness is based on the data subject’s consent (Article 6.1.a) GDPR), consent will be requested and the data subject will be informed of the means to withdraw it should he or she decide to do so.
The refusal to supply personal data deemed mandatory may entail the restriction of the provision of services offered with due precision and timeliness or, in certain cases, may preclude the provision thereof.
Which recipients will be provided with the data?
We will assign the data following your instructions or when required by competent public bodies such as the tax authorities, social security authorities, judges and courts, and the Spanish National Securities Market Commission, among others, and whenever we are legally required to do so. Personal data obtained may also be communicated between companies of the Iberpapel Group so as to centralise administrative and IT processes.
The above notwithstanding, in some cases Iberpapel Group companies contract the provision of services with different companies that may have access to personal data, such as IT services, courier services, document management services and tax and accounting advisory services. We continue to apply strict criteria when selecting service providers in order to fulfil our data protection obligations and we pledge to enter into a data-processing agreement with each supplier.
What are the data subject’s rights when we are provided with data?
Data subjects may exercise the following rights:
- Access to their personal data.
- Rectification of inaccurate data.
- Erasure when the data are no longer required, among other reasons.
- Objection, in which case we will stop processing the data, save for pressing, legitimate reasons or to initiate or defend against possible claims.
- Restriction of processing, on certain occasions, in which case we will only keep the data to initiate or defend against claims.
- Revocation or withdrawal of consent given at any time, without affecting the lawfulness of processing based on consent prior to withdrawal.
- Not to be subject to automated decisions.
- Portability of data to other data controllers, in which case we will keep them to initiate or defend against possible claims.
In accordance with prevailing legislation, these rights may be exercised by sending an email or letter to the address first above written. A data subject wishing to exercise any of his or her rights must attach a copy of his or her national identity card or document.
A response must be given to the exercise of these rights within one month as from receipt of the message.
Further information on these rights may also be obtained or a claim may be brought (particularly when the data subject considers that his or her rights have not been observed) at the Spanish Data Protection Agency. The necessary information may be found at www.aepd.es
How did we obtain the data?
The personal data that we process are compiled using the information provided to us when an agreement is reached with us or when we are contacted (including the “Contact” form on the Website), although we receive data from third parties on occasions. Where any personal data is sent to us by a third party, we will fulfil our obligation to notify the data subject how the data will be processed and their rights may be exercised with the Group’s Data Controllers.
The following data categories are processed:
- Identification data.
- Personal characteristics.
- Social circumstances.
- Academic and professional data.
- Employment data.
- Commercial information.
- Postal or electronic addresses.
- Economic, financial and insurance data.
- Transaction data.
- Health data (as part of data processing related to our employees).
Where can I find additional information?
Additional information may be obtained at protecciondatos@iberpapel.es.