| WHO ARE WE? | We are Minas de Aguas Teñidas S.A.U. (“Sandfire MATSA”) and we process your personal data as the data controllers. This means that we are responsible for collecting your data, using it for the purposes indicated below and protecting it. |
| DATA THAT IS PROCESSED | Basic data about browsing on the website, and personal details provided on completing any of the forms on the website. |
| WHAT DO WE USE YOUR DATA FOR? | Mainly to manage the web site, obtain statistics about visitors, and to process requests and queries sent via the available forms. |
| HOW LONG DO WE KEEP YOUR DATA FOR? | As a general rule, we only keep your data for the minimum time possible, that is, while it continues to be relevant to the purposes for which it was collected. |
| WHO DO WE SHARE IT WITH? | Data is sent to third parties for the purposes described in this privacy policy, including the providers of the Sandfire MATSA website services. |
| WHAT ARE YOUR RIGHTS? | You have the right to confirmation about whether Sandfire MATSA is processing personal data that concerns you. If this is the case, you have the right to access your personal data, and to request the rectification of inaccurate data or, where applicable, request its cancellation when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, you may oppose the processing of your data or request its limitation. You also have the right to the portability of your data, not being a decision based solely on the automated processing, to withdraw your consent, and to submit a claim to the control authority. Forms are available for the exercise of all of the above rights. |
CONTROLLER
Who is responsible for processing your data?
- Name / address: Minas de Aguas Teñidas S.A.U. / CIF A81336877
- Postal address: Carretera HU-7104 Km 12, 21330 Almonaster la Real (Huelva)
- Tel: 959 05 40 12
- E-mail: dpto.comunicacion@matsamining.com
- Web page: www.sandfirematsa.es
DETAILS
How and when do we collect your data?
Your privacy is our priority. This is why at Sandfire MATSA we process and protect your personal data in strict compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and the of the Council, of 27 April 2016 (the General Data Protection Regulation” or “RGPD”) and Organic Law 3/2018, of 5 December, on Personal Data Protection and the Guarantee of Digital Rights (“LOPDGDD”).
We seek to be transparent in the use we make of your personal data. Therefore, not only do we permanently provide this Privacy Policy on our web site, but also, each time we collect your data, we specifically indicate the purposes for which we are going to use it, your rights and any other relevant information.
You should be aware that we collect and process your personal data, always with your knowledge, each time that you use our services, and particularly on the following occasions: (i) when you complete and send the form requesting to work with us; (ii) when you browse our website; (iii) when you interact with us via our social media profiles; and (iv) when you write to us by e-mail or ordinary mail, or when you answer our messages using any other channel.
What type of personal data do we collect?
Essentially, we collect two types of personal data, depending on whether we have obtained the data directly from you, or it is automatically generated information —for example, via cookies— based on the use you make of our platform.
Essentially, we collect two types of personal data, depending on whether we have obtained the data directly from you, or it is automatically generated information —for example, via cookies— based on the use you make of our platform.
If you are a supplier, you should know that we use and store your personal data or that of people from your organisation to manage the reception of the services that you provide as supplier. In addition, we keep your financial data in order to make the corresponding payments for the services provided. We consider that all these activities are necessary in the framework of our legitimate interests as a beneficiary of your services.
If you are between 16 and 18 years old, before giving us your personal information you must have the consent of your parents, guardian, legal representative for your personal data to be processed automatically.
PURPOSE AND STORAGE
Why do we process your personal data?
At Sandfire MATSA we process your personal data for different purposes depending on the functions you use. In any case, if you provided your data through any of the forms enabled on our web page, the purpose of the processing will be as indicated in the form.
The reasons for processing your personal data, where applicable, are as indicated below:
| Origin of the data | Purpose(s) |
| Data obtained through the “Work with us’’ form | We process your data to handle your job application and, where applicable, to formalise the corresponding employment contract. In the event that you are not offered a contract no, we will use your data to contact you for future selection processes that may fit your professional profile. |
| User data obtained through cookies | We process the information we obtain through the cookies to permit browsing on our web site, to measure the number of visits received, to analyse the use made of the portal and all its functions, to improve our content and the user experience, and to compile anonymous statistical reports and analyse the access habits and the activity made by users of our website. For further information on how we use the data collected from cookies, please see our Cookies Policy. |
| Data obtained from communications and interactions via social media | We process the personal data provided through communications or interactions with us via our profiles on social media (LinkedIn and Facebook) to manage and respond to your requests, comments or queries. If you have decided to follow us or interact us with on our social media, content or information relating to our services may appear on your wall or profile, due to the algorithms used by the social media. |
How long do we keep your data for?
The length of time for which we keep your data may vary depending on the type of data and the purposes of the processing. Disaggregated or anonymized data will be kept indefinitely, as no personal data is involved. As a general rule, we keep personal data for as long as strictly necessary to fulfil the corresponding purpose, that is, as long as the data is relevant to the purposes for which it was collected, as indicated below:
| Data / Processing | Conservation time |
| The data you provide as part of a selection process for collaborators or, at your own initiative, with the aim of putting yourself forward as a collaborator with us, now or in the future, including the details on your CV. | If we sign a collaboration agreement with you, the above conservation period will be applicable (effective collaboration period), and if the collaboration does not take place, your data will only be kept for 2 years. |
Once the above purposes have been fulfilled, we keep the data, duly blocked, for the time required in each case to comply with our legal obligations, and in particular for the applicable legal statutes of limitation, such as the following:
| Legal standard | Conservation time |
| Legislation on Infringements and Penalties in the Social Legal Order, art. 4.2 (e.g., obligations regarding affiliations, registrations, de-registrations, contributions, payment of wages, etc.) | 4 years |
| General Tax Law, art. 66 and following (e.g., accounts) | |
| Civil Code, art. 1964.2 (personal actions with no special time limitation) | 5 years |
| Code of Commerce, art. 30 (e.g., documentation, accounts, invoices, supporting documents, etc.) | 6 years |
| Law on the Prevention of Money Laundering and the Financing of Terrorism, art. 25 | 10 years |
In the above cases, the data is only processed for the purposes of accrediting compliance with our legal obligations. Therefore, Sandfire MATSA will not process data unless necessary for the formulation, exercise or defence of claims or when required to provide the Public Administration, Judges and Courts with such information during the stature of limitations of the legal obligations and rights. At the end of these periods, the data will be eliminated or, alternatively, anonymized.
LEGITIMACY
What is the legitimacy or legal basis for processing your data?
On each form via which we collect your personal data, we will indicate the legal basis that permits us to process the data. We will inform you whether the communication of your data to Sandfire MATSA is a legal or contractual requirement, and whether it is obligatory or optional to report this data in order to fulfil the corresponding purposes.
The legal basis which permits us to process your data in each type of processing is indicated below:
| Processing and purposes | Legal basis |
| Answer queries, messages or requests for information sent via our contact forms or routes, whether using electronic means (website, mobile applications, social media, etc.) or analogue means. | Consent |
| To administer a request for professional collaboration, both as part of a selection process opened by Sandfire MATSA or at the initiative of the candidate. | Consent Implementation of pre-contract measures |
| To manage the personal data collected by cookies for analytic purposes (use of web site, preparation of anonymous statistical reports, visits received, access habits, etc.) to improve the safety, content and operation of the web site. | Consent Legitimate interest |
| To manage personal data collected by the cookies to permit access to and browsing of our web site | Legitimate interes |
Are you obliged to provide the data we request?
When the legal basis that authorises us to process your data is your consent, as a general rule you are not obliged to provide your personal data. Nevertheless, you should be aware that we can only provide the services requested or give access to certain functions if you provide us with certain data that we consider necessary for such purposes, and that you can clearly identify on our forms. If you do not provide the required data, we will probably not be able to provide you with the services requested or we will have to provide them incomplete.
We always ask for your consent with maximum transparency, and therefore on the corresponding forms you will see a summary with the basic information regarding the processing in question, a link to this Privacy Policy and a box that you must expressly tick to consent to said processing. We recommend that you read all this information before giving your consent to any type of processing. We keep a record of all the consents you have provided in this respect.
Is it possible to withdraw your consent?
Of course. In those cases where you have authorised us to process your personal data, you can withdraw your consent at any moment by contacting us and specifically indicating for which processes or purposes you wish to withdraw your consent. You may do so by writing to us at our postal address, via the contact form on our web site or via e-mail at pdp@matsamining.com. We will request a photocopy of your ID or equivalent document to confirm your identity. Remember that the withdrawal of your consent does not affect the legality of the data processing subject to your consent that we have carried out prior to said withdrawal, nor to the processing of data that we may carry out on other legal bases, as for example a legitimate interest, the performance of a contract or compliance with a legal obligation.
RECIPIENTS
Who do we disclose your data to?
All the data you have provided is disclosed to third parties for the purposes described in this privacy policy, including the providers of the Sandfire MATSA website services.
RIGHTS
What are your rights when you provide your data?
First, you have the right to confirmation about whether Sandfire MATSA is processing personal data that concerns you. In the event that we are processing your personal data, you have the following rights:
- Right to access: : You have the right to access your personal data. In the event that we are processing your data, you may request the following information from us: which data is involved; what is the purpose of the processing; possible disclosure, surrender or transfer of your data to third parties; expected conservation period; your right to request the rectification or elimination of your personal data or the limitation of its processing, or to oppose said processing; the right to submit a claim to the control authority; in the event that we did not obtain the personal data directly from you, any available information regarding the origin; the existence of automated decisions, including the elaboration of profiles, and significant information about the logic applied, and the importance and expected consequences of this processing for you.
- Right to rectification: You have the right to have inexact or incomplete personal data that concerns you rectified, for example, in the event of errors, spelling mistakes, changes in the data collected, etc. If we have shared your personal data with third parties, we will urge them to rectify your data in the manner you have indicated, unless this is impossible or supposes disproportionate effort. Where applicable, we will advise you as to which third parties we have provided your inexact or incomplete personal data.
- Right of elimination (“right to be forgotten”): In certain circumstances, you have the right to request that we delete or eliminate your personal data definitively when, for example, this data is no longer relevant or necessary for the purposes for which it was collected or otherwise processed, when you withdraw the consent on which the processing of your data was based (unless another legal basis exists for its processing), when you have opposed the processing of your data and no other legitimate reasons prevail for its processing, etc.
- Right to opposition: At any moment, for reasons related to your particular situation, you may oppose the processing of your personal data based on the satisfaction of our legitimate interests. In these cases, we will address your request for opposition and we will stop processing your personal data, unless there are compelling legitimate grounds for the processing to prevail over the rights and freedoms you have invoked, or for the formulation, exercise or defence of claims.
- Right not to be the object of automated individual decisions: You have the right not to be the object of a decision based solely on automated processing, including the elaboration of profiles, which has legal effects on you or significantly affects you in a similar manner. This right will be excluded in the event that you have given your explicit consent or that this decision is necessary for the signing or performance of a contract with you.
- Right to the portability of your data: This is an advanced form of the right to access and means that you can ask us to send you a copy of your data in a machine-readable, common and structured format (for example, a CD with data). You may exercise this right in three cases: (i) When the processing is carried out using automated means, that is, with no human intervention; (ii) When the processing is based on your prior consent or on a contract; (iii) When you so request with respect to the data you have provided and that concerns you, including the data derived from your activity. The right to portability also implies that you can ask us to send your personal data to another data controller on your behalf, without the need to send the data previously to you, provided that this is technically possible.
- Right to limitation of the processing: You can ask us not to apply the processing operations applicable in each case to your personal data. In other words, we may only store your data, but we may not carry out any type of processing until certain circumstances are met. By way of example, you may request the limitation of your data when you have exercised the rights to rectification or opposition (while we are confirming the accuracy of your data or our legitimate reasons for processing it), or where the deletion of your data is appropriate, but you prefer us to limit the processing instead of completely deleting the data. When the processing of your personal data has been limited, we can only process it (unless it is for its conservation), with your prior consent or for the formulation, exercise or defence of claims.
- Right to withdraw the consent given: In the event that you have given your consent for a specific purpose, you have the right to withdraw said consent at any moment, without this affecting the legality of the processing based on the consent prior to its withdrawal.
- Right to claim before the Control Authority: If you consider that your rights have been infringed and that the processing of your personal data is contrary to that set out in the General Data Protection Regulation, you have the right to submit a claim to the control authority in your country, without prejudice to any other administrative appeal or legal action that you may lodge. In Spain, you may exercise this right by contacting the following control authority:
- Name: Spanish Data Protection Agency
- Postal address: C/ Jorge Juan, 6. 28001, Madrid (Spain)
- Telephone: +34 901 100 099 / +34 912 663 517
- Web page: www.agpd.es
If you live outside Spain, you may also address the competent data protection agency in your country.
How can you exercise your rights?
We have forms available for you to exercise all the above-mentioned rights, quickly, free of charge and easily. Just ask us for the relevant form and send it back to us completed, using any of the means indicated below:
- By e-mail: write to us at the address pdp@matsamining.com, attaching a copy of your national identity document or equivalent.
- By postal mail: write to us at the address Carretera HU-7104 Km 12, 21330 Almonaster la Real (Huelva), enclosing a copy of your national identity document or equivalent in the envelope.
Once we have received your request, you will obtain our reply within a maximum of one month.
SECURITY MEASURES
How do we protect your personal data?
At Sandfire MATSA we take the safety and confidentiality of your personal data very seriously. This is why we have introduced all the security measures necessary to ensure the integrity of the personal information you provide us, to enable its recovery in the event of incidents and to avoid undue use, losses or unauthorised access.
The security measures may vary according to the characteristics of the processing, the type of data processed or the technology available at any moment. We apply appropriate technical and organisational measures to guarantee a level of security appropriate to the risk, taking into consideration the risks posed by the processing of data as a consequence of the possible accidental or illegal alteration, loss or destruction of personal data sent, stored or processed in another way, or the disclosure or unauthorised access of said data.
Our web page is stored on safe servers protected against the most common types of attack. Notwithstanding the above, technical security in a medium such as the Internet is not impregnable and there may be malicious attacks by third parties, even though Sandfire MATSA uses all the means at their disposal o prevent such actions.
If you suspect that there may be undue use of your personal data or unauthorised access to the same, please advise us immediately so that we take the relevant measures. You can write to us at the e-mail address pdp@matsamining.com.
COOKIES POLICY
This web page uses cookies. The cookies from this web site are used to personalise content and advertisement, offer social media functions and analyse traffic. In addition, we share information about the use made of the site with our partners from social media, advertising and web analysis, who may combine it with other information provided to them or that they have collected based on the use made of their services.
Cookies are small text files that web pages may use to make the user experience more efficient.
The law states that we can store cookies on your device if they are strictly necessary for the operation of this page. For all other types of cookies, we require your permission.
This page uses different types of cookies. Some cookies are inserted by third party services that appear on our pages.
You may change or withdraw your consent at any moment from the Cookies Policy Statement on our web site.
You can obtain further information about who we are, how you can contact us or how we process your personal data in our Privacy Policy.
When contacting us with respect to your consent, please provide your ID and the date of your consent.
Your consent applies to the following domains: www.sandfirematsa.es.