- PERSONAL DATA PROTECTION POLICY
GOLDMAN SERVICE TRADING S.L. collects personal data through various channels. This gives the organisation significant responsibility for designing and organising procedures that comply with data protection legislation. GOLDMAN SERVICE TRADING S.L. will therefore adopt all security measures necessary to protect the data collected.
In fulfilling these responsibilities, and to establish the general principles governing the processing of personal data within the organisation, GOLDMAN SERVICE TRADING S.L. approves this Personal Data Protection Policy. It communicates the policy and makes it available to all its stakeholders, while also complying with the following legislation:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data (GDPR).
- Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
III. Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).
- SCOPE
This Personal Data Protection Policy applies to GOLDMAN SERVICE TRADING S.L., its governing and management bodies and staff, and all persons who interact with GOLDMAN SERVICE TRADING S.L., expressly including service providers with access to data (“Data Processors”).
The controller of the personal data collected by GOLDMAN SERVICE TRADING S.L. is GOLDMAN SERVICE TRADING S.L., with tax identification number NIF/CIF B72425952, registered in the COMMERCIAL REGISTRY OF, with the following registration details: MÁLAGA, volume 6222; folio 5129, sheet MA 169379, represented by FEDERICO MANZANO ROSALES (hereinafter, the Data Controller). Its contact details are:
Address: C/ La Serna 7, 5ºB
Contact telephone: +34 951 384 006
Contact email: info@goldmanservice.com
Confidential documentation Page 5 of 125
- INFORMATION ABOUT THE DATA CONTROLLER AND PERSONAL DATA PROCESSING AT GOLDMAN SERVICE TRADING S.L.
| BASIC INFORMATION ON DATA PROTECTION | |
| Data Controller | GOLDMAN SERVICE TRADING S.L. |
| Purpose | DATA USED TO MANAGE THE EMPLOYMENT RELATIONSHIP AND COMPLY WITH ITS INHERENT OBLIGATIONS, AS WELL AS TO KEEP WORKING-TIME RECORDS, processed under HUMAN RESOURCES |
| Legal basis | Performance of an employment contract |
| Recipients | Your data may be communicated to third parties No data will be transferred outside the EU. |
| Rights | Access, rectify and delete your personal data, as well as other rights, as explained in the additional information |
| Source of data | The personal data processed by GOLDMAN SERVICE TRADING S.L. comes from: ➢ The data subject or their representative |
| Further information | You can find additional, detailed information on Data Protection at www.goldmanservice.com. |
| ADDITIONAL INFORMATION ON DATA PROTECTION | |
| Who is the controller responsible for processing your data? | |
| Identity: | GOLDMAN SERVICE TRADING S.L. – B72425952 |
| Postal Address: | C/ La Serna 7, 5ºB, 29002 MALAGA MALAGA |
| Telephone: | +34 951 384 006 |
Confidential documentation Page 6 of 125
| E-mail: | info@goldmanservice.com | |
| For what purpose do we process your personal data? | ||
| At GOLDMAN SERVICE TRADING S.L., we use information provided by our stakeholders for the following processing activities: | ||
| Data processing | Purpose of processing | Data retention period |
| HUMAN RESOURCES | ➢ CUSTOMER, ACCOUNTING, TAX AND ADMINISTRATIVE MANAGEMENT No automated decisions shall be made on the basis of that profile. ➢ HUMAN RESOURCES No automated decisions shall be made on the basis of that profile. ➢ PAYROLL MANAGEMENT No automated decisions shall be made on the basis of that profile. | Personal data will be retained for as long as necessary for the purpose of processing and will be erased at the data subject’s request or when processing ends, without prejudice to retention for the periods required by employment legislation to address potential liabilities. |
| What is the legal basis for processing this data? | ||
| The legal bases for the processing of personal data in GOLDMAN SERVICE TRADING S.L. are as follows: | ||
| Data processing | Legal basis for processing | |
| HUMAN RESOURCES | Performance of an employment contract. If you do not provide your data, the agreed service cannot be provided. | |
Confidential documentation Page 7 of 125
| To which recipients will your data be communicated? | ||
| These processing activities may involve linking your data with processing carried out by third parties. The planned disclosures of your data are described below. | ||
| Data processing | Planned disclosures | Transfers international |
| HUMAN RESOURCES | Data will be disclosed to: ORGANISATIONS OR PERSONS DIRECTLY RELATED TO THE DATA CONTROLLER PUBLIC AUTHORITIES WITH JURISDICTION IN THIS MATTER BANKING OR FINANCIAL ENTITIES | No data will be transferred outside the EU. |
| What are your rights when you provide us with your data? | ||
| Anyone has the right to obtain confirmation as to whether or not GOLDMAN SERVICE TRADING S.L. is processing personal data that concerns them. Data subjects have the right to access their personal data and to request correction of inaccurate data or, where appropriate, erasure when, among other reasons, the data is no longer needed for the purposes for which it was collected. In certain circumstances, data subjects may request restriction of processing, in which case we will retain the data only to establish, exercise or defend claims. In certain circumstances, and for reasons relating to their particular situation, data subjects may object to processing. GOLDMAN SERVICE TRADING S.L. will stop processing the data unless there are compelling legitimate grounds, or for the establishment, exercise or defence of possible claims. In certain circumstances, where technically possible, data subjects also have the right to request that their personal data be transferred directly to another controller. In order to exercise these rights, you must contact us by writing to: ➢ GOLDMAN SERVICE TRADING S.L., C/ La Serna 7, 5ºB, 29002 MALAGA MALAGA, or by email to info@goldmanservice.com, enclosing a copy of your national identity document (DNI). You may also contact the Spanish Data Protection Agency | ||
Confidential documentation Page 8 of 125
| to lodge a complaint, particularly if we have not satisfactorily addressed the exercise of your rights. |
| BASIC INFORMATION ON DATA PROTECTION | |
| Data Controller | GOLDMAN SERVICE TRADING S.L. |
| Purpose | DATA USED TO MANAGE VIDEO SURVEILLANCE OF THE PREMISES THROUGH CONTINUOUS RECORDING AND FOR WORKPLACE MONITORING, processed under VIDEO SURVEILLANCE |
| Legal basis | Public interest: video surveillance |
| Recipients | Your data may be communicated to third parties No data will be transferred outside the EU. |
| Rights | Access, rectify and delete your personal data, as well as other rights, as explained in the additional information |
| Source of data | The personal data processed by GOLDMAN SERVICE TRADING S.L. comes from: ➢ The data subject or their representative |
| Further information | You can find additional, detailed information on Data Protection at www.goldmanservice.com. |
| ADDITIONAL INFORMATION ON DATA PROTECTION | |
| Who is the controller responsible for processing your data? | |
| Identity: | GOLDMAN SERVICE TRADING S.L. – B72425952 |
| Postal Address: | C/ La Serna 7, 5ºB, 29002 MALAGA MALAGA |
| Telephone: | +34 951 384 006 |
Confidential documentation Page 9 of 125
| E-mail: | info@goldmanservice.com | |
| For what purpose do we process your personal data? | ||
| At GOLDMAN SERVICE TRADING S.L., we use information provided by our stakeholders for the following processing activities: | ||
| Data processing | Purpose of processing | Data retention period |
| VIDEO SURVEILLANCE | ➢ CUSTOMER, ACCOUNTING, TAX AND ADMINISTRATIVE MANAGEMENT No automated decisions shall be made on the basis of that profile. ➢ VIDEO SURVEILLANCE No automated decisions shall be made on the basis of that profile. | Personal data will be retained for as long as necessary for the purpose of processing and will be erased at the data subject’s request or when processing ends, without prejudice to retention for the periods required by private security regulations to address potential liabilities. |
| What is the legal basis for processing this data? | ||
| The legal bases for the processing of personal data in GOLDMAN SERVICE TRADING S.L. are as follows: | ||
| Data processing | Legal basis for processing | |
| VIDEO SURVEILLANCE | Public interest: video surveillance. | |
| To which recipients will your data be communicated? | ||
| These processing activities may involve linking your data with processing carried out by third parties. The planned disclosures of your data are described below. | ||
| Data processing | Planned disclosures | Transfers international |
Confidential documentation Page 10 of 125
| VIDEO SURVEILLANCE | Data will be disclosed to: ORGANISATIONS OR PERSONS DIRECTLY RELATED TO THE DATA CONTROLLER | No data will be transferred outside the EU. |
| What are your rights when you provide us with your data? | ||
| Anyone has the right to obtain confirmation as to whether or not GOLDMAN SERVICE TRADING S.L. is processing personal data that concerns them. Data subjects have the right to access their personal data and to request correction of inaccurate data or, where appropriate, erasure when, among other reasons, the data is no longer needed for the purposes for which it was collected. In certain circumstances, data subjects may request restriction of processing, in which case we will retain the data only to establish, exercise or defend claims. In certain circumstances, and for reasons relating to their particular situation, data subjects may object to processing. GOLDMAN SERVICE TRADING S.L. will stop processing the data unless there are compelling legitimate grounds, or for the establishment, exercise or defence of possible claims. In certain circumstances, where technically possible, data subjects also have the right to request that their personal data be transferred directly to another controller. In order to exercise these rights, you must contact us by writing to: ➢ GOLDMAN SERVICE TRADING S.L., C/ La Serna 7, 5ºB, 29002 MALAGA MALAGA, or by email to info@goldmanservice.com, enclosing a copy of your national identity document (DNI). You may also contact the Spanish Data Protection Agency to lodge a complaint, particularly if we have not satisfactorily addressed the exercise of your rights. | ||
| BASIC INFORMATION ON DATA PROTECTION | |
| Data Controller | GOLDMAN SERVICE TRADING S.L. |
| Purpose | DATA USED TO MANAGE CUSTOMER RELATIONSHIPS, ORDERS AND QUOTATIONS FOR PROSPECTIVE CUSTOMERS, AS WELL AS |
Confidential documentation Page 11 of 125
| INVOICING, ACCOUNTING AND OTHER RELATED LEGAL OBLIGATIONS, processed under CUSTOMERS | |
| Legal basis | Performance of a contract: sale / provision of a service |
| Recipients | Your data may be communicated to third parties No data will be transferred outside the EU. |
| Rights | Access, rectify and delete your personal data, as well as other rights, as explained in the additional information |
| Source of data | The personal data processed by GOLDMAN SERVICE TRADING S.L. comes from: ➢ The data subject or their representative |
| Further information | You can find additional, detailed information on Data Protection at www.goldmanservice.com. |
| ADDITIONAL INFORMATION ON DATA PROTECTION | ||
| Who is the controller responsible for processing your data? | ||
| Identity: | GOLDMAN SERVICE TRADING S.L. – B72425952 | |
| Postal Address: | C/ La Serna 7, 5ºB, 29002 MALAGA MALAGA | |
| Telephone: | +34 951 384 006 | |
| E-mail: | info@goldmanservice.com | |
| For what purpose do we process your personal data? | ||
| At GOLDMAN SERVICE TRADING S.L., we use information provided by our stakeholders for the following processing activities: | ||
| Data processing | Purpose of processing | Data retention period |
Confidential documentation Page 12 of 125
| CUSTOMERS | ➢ CUSTOMER, ACCOUNTING, TAX AND ADMINISTRATIVE MANAGEMENT No automated decisions shall be made on the basis of that profile. | Personal data will be retained for as long as necessary for the purpose of processing and will be erased at the data subject’s request or when processing ends, without prejudice to retention for the periods required by tax legislation to address potential liabilities. |
| What is the legal basis for processing this data? | ||
| The legal bases for the processing of personal data in GOLDMAN SERVICE TRADING S.L. are as follows: | ||
| Data processing | Legal basis for processing | |
| CUSTOMERS | Performance of a contract: sale / provision of a service. If you do not provide your data, the agreed service cannot be provided. | |
| To which recipients will your data be communicated? | ||
| These processing activities may involve linking your data with processing carried out by third parties. The planned disclosures of your data are described below. | ||
| Data processing | Planned disclosures | Transfers international |
| CUSTOMERS | Data will be disclosed to: ORGANISATIONS OR PERSONS DIRECTLY RELATED TO THE DATA CONTROLLER PUBLIC AUTHORITIES WITH JURISDICTION IN THIS MATTER BANKING OR FINANCIAL ENTITIES | No data will be transferred outside the EU. |
| What are your rights when you provide us with your data? | ||
Confidential documentation Page 13 of 125
| Anyone has the right to obtain confirmation as to whether or not GOLDMAN SERVICE TRADING S.L. is processing personal data that concerns them. Data subjects have the right to access their personal data and to request correction of inaccurate data or, where appropriate, erasure when, among other reasons, the data is no longer needed for the purposes for which it was collected. In certain circumstances, data subjects may request restriction of processing, in which case we will retain the data only to establish, exercise or defend claims. In certain circumstances, and for reasons relating to their particular situation, data subjects may object to processing. GOLDMAN SERVICE TRADING S.L. will stop processing the data unless there are compelling legitimate grounds, or for the establishment, exercise or defence of possible claims. In certain circumstances, where technically possible, data subjects also have the right to request that their personal data be transferred directly to another controller. In order to exercise these rights, you must contact us by writing to: ➢ GOLDMAN SERVICE TRADING S.L., C/ La Serna 7, 5ºB, 29002 MALAGA MALAGA, or by email to info@goldmanservice.com, enclosing a copy of your national identity document (DNI). You may also contact the Spanish Data Protection Agency to lodge a complaint, particularly if we have not satisfactorily addressed the exercise of your rights. |
| BASIC INFORMATION ON DATA PROTECTION | |
| Data Controller | GOLDMAN SERVICE TRADING S.L. |
| Purpose | DATA USED TO MANAGE SUPPLIER RELATIONSHIPS, INVOICING, ACCOUNTING AND OTHER RELATED LEGAL OBLIGATIONS, processed under SUPPLIERS |
| Legal basis | Performance of a contract: sale / provision of a service |
| Recipients | Your data may be communicated to third parties No data will be transferred outside the EU. |
Confidential documentation Page 14 of 125
| Rights | Access, rectify and delete your personal data, as well as other rights, as explained in the additional information |
| Source of data | The personal data processed by GOLDMAN SERVICE TRADING S.L. comes from: ➢ The data subject or their representative |
| Further information | You can find additional, detailed information on Data Protection at www.goldmanservice.com. |
| ADDITIONAL INFORMATION ON DATA PROTECTION | ||
| Who is the controller responsible for processing your data? | ||
| Identity: | GOLDMAN SERVICE TRADING S.L. – B72425952 | |
| Postal Address: | C/ La Serna 7, 5ºB, 29002 MALAGA MALAGA | |
| Telephone: | +34 951 384 006 | |
| E-mail: | info@goldmanservice.com | |
| For what purpose do we process your personal data? | ||
| At GOLDMAN SERVICE TRADING S.L., we use information provided by our stakeholders for the following processing activities: | ||
| Data processing | Purpose of processing | Data retention period |
| SUPPLIERS | ➢ CUSTOMER, ACCOUNTING, TAX AND ADMINISTRATIVE MANAGEMENT No automated decisions shall be made on the basis of that profile. | Personal data will be retained for as long as necessary for the purpose of processing and will be erased at the data subject’s request or when processing ends, |
Confidential documentation Page 15 of 125
| without prejudice to retention for the periods required by tax legislation to address potential liabilities. | ||
| What is the legal basis for processing this data? | ||
| The legal bases for the processing of personal data in GOLDMAN SERVICE TRADING S.L. are as follows: | ||
| Data processing | Legal basis for processing | |
| SUPPLIERS | Performance of a contract: sale / provision of a service. If you do not provide your data, the agreed service cannot be provided. | |
| To which recipients will your data be communicated? | ||
| These processing activities may involve linking your data with processing carried out by third parties. The planned disclosures of your data are described below. | ||
| Data processing | Planned disclosures | Transfers international |
| SUPPLIERS | Data will be disclosed to: ORGANISATIONS OR PERSONS DIRECTLY RELATED TO THE DATA CONTROLLER PUBLIC AUTHORITIES WITH JURISDICTION IN THIS MATTER BANKING OR FINANCIAL ENTITIES | No data will be transferred outside the EU. |
| What are your rights when you provide us with your data? | ||
| Anyone has the right to obtain confirmation as to whether or not GOLDMAN SERVICE TRADING S.L. is processing personal data that concerns them. Data subjects have the right to access their personal data and to request correction of inaccurate data or, where appropriate, erasure when, among other reasons, the data is no longer needed for the purposes for which it was collected. In certain circumstances, data subjects may request restriction of the processing of | ||
Confidential documentation Page 16 of 125
| their data, in which case we will retain it only to establish, exercise or defend claims. In certain circumstances, and for reasons relating to their particular situation, data subjects may object to processing. GOLDMAN SERVICE TRADING S.L. will stop processing the data unless there are compelling legitimate grounds, or for the establishment, exercise or defence of possible claims. In certain circumstances, where technically possible, data subjects also have the right to request that their personal data be transferred directly to another controller. In order to exercise these rights, you must contact us by writing to: ➢ GOLDMAN SERVICE TRADING S.L., C/ La Serna 7, 5ºB, 29002 MALAGA MALAGA, or by email to info@goldmanservice.com, enclosing a copy of your national identity document (DNI). You may also contact the Spanish Data Protection Agency to lodge a complaint, particularly if we have not satisfactorily addressed the exercise of your rights. |
| BASIC INFORMATION ON DATA PROTECTION | |
| Data Controller | GOLDMAN SERVICE TRADING S.L. |
| Purpose | DATA USED TO MANAGE ENQUIRIES SUBMITTED THROUGH THE WEBSITE, processed under WEB FORM |
| Legal basis | Legitimate interest: consent of the data subject |
| Recipients | Your data may be communicated to third parties No data will be transferred outside the EU. |
| Rights | Access, rectify and delete your personal data, as well as other rights, as explained in the additional information |
| Source of data | The personal data processed by GOLDMAN SERVICE TRADING S.L. comes from: ➢ The data subject or their representative |
Confidential documentation Page 17 of 125
| Further information | You can find additional, detailed information on Data Protection at www.goldmanservice.com. |
| ADDITIONAL INFORMATION ON DATA PROTECTION | ||
| Who is the controller responsible for processing your data? | ||
| Identity: | GOLDMAN SERVICE TRADING S.L. – B72425952 | |
| Postal Address: | C/ La Serna 7, 5ºB, 29002 MALAGA MALAGA | |
| Telephone: | +34 951 384 006 | |
| E-mail: | info@goldmanservice.com | |
| For what purpose do we process your personal data? | ||
| At GOLDMAN SERVICE TRADING S.L., we use information provided by our stakeholders for the following processing activities: | ||
| Data processing | Purpose of processing | Data retention period |
| WEB FORM | ➢ CUSTOMER, ACCOUNTING, TAX AND ADMINISTRATIVE MANAGEMENT No automated decisions shall be made on the basis of that profile. ➢ PROFESSIONAL CONTACT No automated decisions shall be made on the basis of that profile. | Personal data will be retained for as long as necessary for the purpose of processing and will be erased at the data subject’s request or when processing ends, without prejudice to retention for the periods required by applicable regulations to address potential liabilities. |
| What is the legal basis for processing this data? | ||
Confidential documentation Page 18 of 125
| The legal bases for the processing of personal data in GOLDMAN SERVICE TRADING S.L. are as follows: | ||
| Data processing | Legal basis for processing | |
| WEB FORM | Legitimate interest: consent of the data subject. | |
| To which recipients will your data be communicated? | ||
| These processing activities may involve linking your data with processing carried out by third parties. The planned disclosures of your data are described below. | ||
| Data processing | Planned disclosures | Transfers international |
| WEB FORM | Data will be disclosed to: ORGANISATIONS OR PERSONS DIRECTLY RELATED TO THE DATA CONTROLLER | No data will be transferred outside the EU. |
| What are your rights when you provide us with your data? | ||
| Anyone has the right to obtain confirmation as to whether or not GOLDMAN SERVICE TRADING S.L. is processing personal data that concerns them. Data subjects have the right to access their personal data and to request correction of inaccurate data or, where appropriate, erasure when, among other reasons, the data is no longer needed for the purposes for which it was collected. In certain circumstances, data subjects may request restriction of processing, in which case we will retain the data only to establish, exercise or defend claims. In certain circumstances, and for reasons relating to their particular situation, data subjects may object to processing. GOLDMAN SERVICE TRADING S.L. will stop processing the data unless there are compelling legitimate grounds, or for the establishment, exercise or defence of possible claims. In certain circumstances, where technically possible, data subjects also have the right to request that their personal data be transferred directly to another controller. In order to exercise these rights, you must contact us by writing to: ➢ GOLDMAN SERVICE TRADING S.L., C/ La Serna 7, 5ºB, 29002 MALAGA MALAGA, or by email | ||
Confidential documentation Page 19 of 125
| to info@goldmanservice.com, enclosing a copy of your national identity document (DNI). You may also contact the Spanish Data Protection Agency to lodge a complaint, particularly if we have not satisfactorily addressed the exercise of your rights. |
- PRINCIPLES APPLICABLE TO PERSONAL DATA PROCESSING
The Personal Data Protection Policy is a measure of proactive accountability, aimed at ensuring compliance with applicable legislation and respect for the right to honour and privacy when processing the personal data of all persons who interact with GOLDMAN SERVICE TRADING S.L.
This Policy establishes the principles governing data processing within the organisation and, consequently, the procedures and organisational and security measures that those covered by it undertake to implement within their areas of responsibility.
In relation to the above, GOLDMAN SERVICE TRADING S.L. shall ensure compliance with the following Principles:
- Lawfulness, fairness, transparency and purpose limitation.
Data subjects must always be informed of processing through established clauses and procedures. Processing will be considered lawful only where consent has been given (with particular attention to consent by minors), or where another valid legal basis exists, and its purpose complies with applicable regulations.
- Data minimization.
The processed data shall be adequate, relevant and limited to what is necessary in relation to the different purposes of the processing.
- Accuracy.
The data shall be accurate and, if necessary, updated. In this regard, the necessary measures shall be taken to ensure that personal data which are inaccurate with regard to the purposes of processing are deleted or rectified without delay.
- Storage limitation.
The data shall be kept in such a way as to allow identification of the persons concerned for no longer than is necessary for the purpose of the processing in question.
- Integrity and Confidentiality.
Confidential documentation Page 20 of 125
Personal data shall be processed in such a way as to ensure adequate security, including protection against unauthorized or unlawful processing, and against accidental loss, destruction or damage, by applying appropriate technical or organisational measures.
- Data disclosures.
It is prohibited to purchase or obtain personal data, the source of which is from illegitimate sources, or in those cases where such data has been collected or transferred contrary to the law or their legitimate provenance is not sufficiently guaranteed.
- Engaging suppliers with access to data.
Only suppliers providing sufficient guarantees that they will apply appropriate technical and security measures when processing data will be engaged. The appropriate agreement will be documented with them.
- International data transfers.
Any processing of personal data subject to European Union rules involving a transfer of data outside the European Economic Area shall be carried out in strict compliance with the requirements set out in the applicable law.
- Rights of affected users.
The Company will facilitate the exercise of data subjects’ rights of access, rectification, erasure, restriction of processing, objection and portability. It will establish the necessary internal procedures and, in particular, the forms required for exercising these rights, which must meet at least the legal requirements applicable in each case.
GOLDMAN SERVICE TRADING S.L. will promote that the principles contained in this Personal Data Protection Policy be taken into account:
- In the design and implementation of all working procedures
- In the products and services offered
- In all contracts and obligations they formalise or assume and
- When implementing systems and platforms that allow access by employees or third parties and/or the collection or processing of personal data.
- PERSONAL DATA OF MINORS
Respecting the provisions of Articles 8 of the GDPR and 7 of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights, only those over 14 years of age may consent to the processing of their personal data in a lawful manner by GOLDMAN SERVICE TRADING S.L.. In the case of a child under 14 years of age, the consent of the parents or guardians for the processing will be necessary, and this will only be considered lawful to the extent that they have authorized it.
Confidential documentation Page 21 of 125
- CONFIDENTIALITY AND SECURITY OF PERSONAL DATA
The Website has an SSL (Secure Socket Layer) certificate, ensuring that personal data is transmitted securely and confidentially through fully encrypted communication between the server and the User.
However, as GOLDMAN SERVICE TRADING S.L. cannot guarantee complete internet security or the absence of hackers or others fraudulently accessing personal data, the Data Controller undertakes to notify the User without undue delay if a personal data breach occurs that is likely to pose a high risk to their rights and freedoms. Under Article 4 of the GDPR, a personal data breach means a security breach leading to the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorised disclosure of or access to that data.
The Data Controller will treat personal data as confidential and undertakes to inform its employees, associates and anyone given access to the information of this obligation, and to ensure through a legal or contractual obligation that they respect that confidentiality.
- COMMITMENT OF GOLDMAN SERVICE TRADING S.L. STAFF
Accordingly, GOLDMAN SERVICE TRADING S.L. employees have been informed of this Policy and acknowledge that personal information is an asset of GOLDMAN SERVICE TRADING S.L. They adhere to this Policy and undertake to:
- Complete the data protection awareness training provided by GOLDMAN SERVICE TRADING S.L.
- Apply the user-level security measures relevant to their position, without prejudice to any responsibilities for designing and implementing those measures arising from their role within GOLDMAN SERVICE TRADING S.L.
- Use the established forms for data subjects to exercise their rights, and notify GOLDMAN SERVICE TRADING S.L. immediately so that it can respond effectively.
- Notify GOLDMAN SERVICE TRADING S.L. as soon as they become aware of any departure from this Policy, particularly personal data breaches, using the form established for that purpose.
- CONTROL AND ASSESSMENT
Confidential documentation Page 22 of 125
GOLDMAN SERVICE TRADING S.L. will verify, evaluate and assess the effectiveness of its technical and organisational measures for ensuring processing security annually and whenever there are significant changes in data processing.
GOLDMAN SERVICE TRADING S.L. sets out its data protection policy below, together with information about its data processing activities.