Purpose: Contact interested parties to inform them of the products, services and activities that O2O organizes or takes part in either directly or indirectly, including by electronic means.
Lawful basis: Our data processing is based on the consent given by the persons concerned or, otherwise, on our legitimate interest.
Data categories: Identification data, contact data and professional data.
Disclosure and transfer of data: Data are not disclosed to third parties.
Storage: Data will be stored for as long as contact is maintained with the interested parties and will be erased within a maximum period of six (6) years dating from the last contact.
Purpose: The purpose of this data processing is to manage our pre-contractual and contractual relationship with our clients, providers and with other persons and entities with which we reach collaboration agreements.
Lawful basis: The legal grounds for data processing for this activity is based on the contract, on the complementary consent of the persons concerned where appropriate and our legitimate interest in maintaining the business relationship.
Data categories: We process identification and contact data, financial and bank data, commercial information, data on transactions of goods and services and professional data.
Disclosure and transfer of data: Tax authorities, banks and data processors that provide their services to O2O.
Storage: We store the data that we use for this activity for a maximum period of six (6) years after the termination of the corresponding contracts and collaboration agreements.
Purpose: In our human resources activity we use the data for the purposes of personnel selection, management and training, processing social benefits, promotion and management of employment and workplace monitoring.
Lawful basis: The legal grounds for the data processing for this activity are based on the work contract, on employment law and Social Security regulations, on the complementary consent of the persons concerned whenever the data provided are not strictly necessary to maintain the labour relationship and, finally, on our legitimate interest in issues of regulatory compliance and internal monitoring.
Data categories: We process identification and contact data, financial and bank data, commercial information, data on transactions of goods and services, professional data and data on training and employment.
Disclosure and transfer of data: Social Security Bodies, Mutual Provident Societies, Tax Authorities, Insurance companies, banks and any entities responsible for processing that provide services to O2O.
Storage: We store any data we use for this activity for a maximum period of five (5) years after the termination of the work contracts. CVs of candidates are destroyed after the respective selection process, unless the candidate is hired by O2O.
Purpose: We have a video surveillance system that we use for security and monitoring purposes.
Lawful basis: This is based on our legitimate security and monitoring interests.
Data categories: Identification data (image and voice)
Disclosure and transfer of data: Data transfers are not provided for, except where appropriate to State security bodies and forces, the Public Prosecutor’s Office and the Courts and Tribunals of Justice.
Storage: We store the recordings for a maximum period of one (1) month.
Purpose: Publication on the webpage of the company, in O2O’s advertising and promotional material and/or dissemination on social media, including newspapers, magazines, television and Internet.
Lawful basis: This is based on the consent given by the persons concerned.
Data categories: Identification data.
Disclosure and transfer of data: Public dissemination.
Storage: The images will be stored for an indefinite period.
Purpose: Management of internal queries and reports system on the alleged committal of unlawful acts inside the company or against the same and alleged violations of our ethical code and other internal regulations.
Lawful basis: This is based on our legitimate interest for internal monitoring.
Data categories: We process identification and contact data, and the data used to formulate the corresponding queries and internal reports.
Disclosure and transfer of data: The data processed in the ethical channel may be disclosed to the State security bodies and forces, the Public Prosecutor’s Office and the Courts and Tribunals of Justice.
Storage: The data from the ethical channel will be stored for a maximum period of three (3) months.
At O2O we use the appropriate technologies and procedures to protect your data from accidental loss and unauthorised access, use, destruction or publication. We perform data backup in order to be able to recover information if an incident occurs. And we also implement the appropriate physical and technological measures to store and transfer your data securely.