Data Processing Policy in Relations with Suppliers
1.Data Protection Commitment
Simoldes – Plasticos, S.A, hereinafter referred to as Simoldes, legal person with NIPC 501220267, complies with the applicable Community and national legal rules regarding the protection of personal data, privacy and information security of data subjects, within the scope of data processing operations carried out in the relationship with suppliers – whether the data subjects are the suppliers themselves as natural persons, or the data subjects are the suppliers’ employees – in accordance with
– the general terms of the Data Protection and Privacy Policy, which can be accessed at www.simoldes.com or at any of the service points, and
– the special terms of this Policy on the Processing of Personal Data in Relations with Suppliers.
2.Personal Data
Simoldes collects and processes the following categories of personal data from suppliers or suppliers’ employees:
– identification data
– contact details
– professional data and certifications;
– traffic data and access control on the premises.
3.Data Sources
Simoldes collects personal data from suppliers or suppliers’ employees by collecting it directly from them or indirectly from their employer, by filling in information registration forms.
4.Purpose of processing
Simoldes processes the personal data of suppliers or suppliers’ employees exclusively for the purposes of verifying the legitimacy of legal representatives, access control, safety, hygiene and occupational health and the provision of contracted services in the exercise of economic activity.
5.Legitimacy of processing
Simoldes bases the legitimacy of the processing of the personal data of suppliers or suppliers’ collaborators on the specific processing activity carried out, either on the basis of the management of the contractual relationship, the fulfillment of legal obligations or the legitimate interests of pursuing economic activity.
6.Data Retention Period
Simoldes will keep the data for the period necessary to achieve the purposes of the processing, complying with the applicable legal deadlines, with the candidate being able to request, at any time, the respective deletion or exercise any other right, with the conditions and limitations provided for by law, and with a default period of one year for the retention of personal data of suppliers or employees of suppliers.
7.Communication of Personal Data
The personal data of suppliers or suppliers’ employees is processed exclusively by Simoldes’s contracting and procurement, human resources management and occupational health and safety services, and no data is communicated to third parties, with the exception of situations legally provided for the mandatory communication of personal data to third parties.
8.Data Processing Information Sheets
In accordance with the principle of loyalty and transparency and to ensure compliance with the duty to provide information, Simoldes delivers directly or makes publicly available to all data subjects, depending on how their personal data is collected, information sheets on the data processing operations carried out, which are available for consultation at any service point or on request from the Data Protection Officer.
The Information Sheet on Data Processing in Relations with Suppliers is available at www.dataprotectionofficer.help/simoldes/information.
9.Rights of suppliers or their employees
Simoldes facilitates the exercise of the rights of suppliers or their employees regarding the protection of personal data.
In addition to always being able to lodge a complaint with the respective supervisory authority, for the exercise of any type of data protection rights, namely the rights of withdrawal of consent, information, access, rectification, opposition, limitation of processing or erasure, suppliers or their employees can contact Simoldes’s Data Protection Officer by email at dataprotection@simoldes.com, describing the subject of the request and indicating an email address, a telephone contact address or a correspondence address for reply.
A Form for Exercising the Rights of Data Subjects is available at www.dataprotectionofficer.help/simoldes/forms or at any Simoldes service point.
10.Reporting Data Breach Incidents
Simoldes has implemented a data protection and information security incident management system.
If any Simoldes Supplier or Employee of a Simoldes Supplier wishes to report a personal data breach that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed, he or she may contact Simoldes’s Data Protection Officer or use Simoldes’s general contact details.
A Personal Data Breach Incident Report Form is available at www.dataprotectionofficer.help/simoldes/forms or at any Simoldes service point, and can also be sent by email by requesting it from the Data Protection Officer.
11.Permanent Security Contact Point
Simoldes has implemented a Permanent Contact Point for the management of information security and cybersecurity incidents.
If any Supplier or Supplier Employee wishes to report an information security incident or a cybersecurity incident, they can contact Simoldes’s Permanent Contact Point via the communication channels available at www.dataprotectionofficer.help/simoldes/security .
An Information Security or Cyberspace Security Incident Reporting Form can be found at www.dataprotectionofficer.help/simoldes/forms or at any Simoldes service point and can also be sent by email on request to the Permanent Contact Point.
12.Whistleblower Protection
Simoldes has implemented a Whistleblowing Channel, in accordance with the legal regulations in force, guaranteeing the protection of the personal data of data subjects, under the terms of the Whistleblower Protection Policy accessible at www.dataprotectionofficer.help/simoldes/whistleblowing.
The Whistleblower Officer at Simoldes can be contacted via the contact details available at www.dataprotectionofficer.help/simoldes/whistleblowing.
Simoldes’s Whistleblowing Platform is accessible via the link available at https://simoldes.protecaodedenunciantes.com.
A Whistleblowing Form can be found at www.dataprotectionofficer.help/simoldes/forms or at any Simoldes service point, and can also be sent by email on request to the Whistleblower Officer.
13.Corruption Prevention
Simoldes has implemented a Regulatory Compliance Program within the scope of the Prevention of Corruption, in accordance with the legal regulations in force, guaranteeing the protection of the personal data of the holders, under the terms of the Corruption Prevention Policy accessible at www.simoldes.com.
For the purposes of submitting complaints within the scope of the corruption prevention regime, any interested party may use,
– Simoldes’s Whistleblowing Platform, accessible via the link available at https://simoldes.protecaodedenunciantes.com or
– the Whistleblowing Form, accessible at www.dataprotectionofficer.help/simoldes/forms or at any Simoldes service point.
14.Data Protection Policies
The Personal Data Processing Policy for Suppliers or Employees of a Simoldes Supplier is supplemented by Simoldes’s General Data Protection Policy, which can be found at www.simoldes.com. You can also consult the other specific Data Protection and Privacy Policies,
– either by contacting the Data Protection Officer at dataprotection@simoldes.com;
– or by contacting any service point in person.
15.Versions of the Policy
This version of the Supplier Management Data Processing Policy has been published under the reference Version 202306.
In order to ensure its updating, development and continuous improvement, Simoldes may, at any time, make any changes deemed appropriate or necessary to the Data Protection Policies, and its publication in the different channels is ensured to guarantee transparency and information to Users, Service Recipients, Customers, Employees, Candidates or Suppliers.
To consult previous versions of the Data Protection and Privacy Policy, please send a request by email to dataprotection@simoldes.com.
