Privacy policy
Your privacy and trust are important to us. This Privacy Policy provides essential information about how we process your personal data in compliance with current data protection laws. We recommend reading this information carefully. If you have any questions after reading it, feel free to contact us via the channels listed below.
1- Data Controller
The data controller of your personal data and the owner of this website is FERSA BEARINGS, S.A. (hereinafter "FERSA"), a corporation registered in the Commercial Registry of Zaragoza, Volume 2885, Folio 7, Page Z-16480, with VAT No. A-50643469 and registered office at Calle Bari nº 18, 50197, Zaragoza (Spain).
The following companies within the FERSA GROUP may also act as data controllers based on their professional collaboration and business management requirements:
- A&S Fersa Bearings Europe S.L. (B-99102410)
- Fersa Innova S.L.U. (B-99298937)
- Fersa Bearings Distribución Iberia S.L.U. (B-99361966)
To contact us:
- Contact form
- Phone: +34 976 333 850
- Email: [email protected]
2- Types, Purpose, and Legal Basis for Data Processing
We collect personal data from:
- Employees: For managing employment, payroll, working hours, and legal obligations. Data includes personal identifiers, sensitive data (health/disability), academic and employment details, and financial info. Legal basis: employment relationship, legal obligations, and consent. Retention: 5 years post-employment; payroll/TC1/TC2 documents retained for 10 years.
- Job Applicants: For recruitment processes. Data includes identifiers, academic and employment details. Legal basis: pre-contractual relationship and consent. Retention: 6 months post-process.
- Suppliers: For managing contracts. Data includes identifiers, financial/tax data, insurance certificates. Legal basis: contract execution. Retention: 5 years after the relationship ends.
- Clients: For commercial contracts and services. Data includes identifiers, ownership data, and financial data. Legal basis: legitimate interest and contract. Retention: 5 years after the commercial relationship ends.
- Shareholders: For internal company management. Legal basis: contractual relationship.
- Data Subject Rights Requests: For handling data protection rights. Legal basis: compliance with legal obligations. Data is minimized and retained as required by law.
- Video Surveillance: For facility security. Legal basis: public interest. Retention: maximum 30 days.
- Contact through the Website: Contact details such as email, phone, or address and any freely submitted info. Purpose: respond to inquiries and data rights. Legal basis: consent and legitimate interest. Retention: 2 years.
- Cookies: Processed as described in the Cookie Policy. Legal basis: consent.
- Whistleblowing Channel: For handling reports of violations of internal policies or regulations. Legal basis: legitimate interest. Retention: 7 days unless further investigation is required.
3- Data Retention Period
Personal data is retained for the duration of the relationship, legal retention periods, or until deletion is requested. In general, data is retained for 5 years post-relationship and securely destroyed thereafter.
4- Data Sharing with Third Parties
Data is shared with third parties to provide services or when legally required:
- Service Providers: For internal operations, software/platform support, cloud hosting, and communications. FERSA ensures confidentiality agreements and security measures are in place.
- Legal Obligations: Data may be shared with authorities (e.g., AEAT, TGSS) or during mergers, acquisitions, or legal investigations.
- FERSA Group Companies: For business management purposes.
5- International Data Transfers
Some third-party tools/services may involve international transfers. FERSA prioritizes secure tools with servers in the EU or with legal safeguards (e.g., European Commission adequacy decisions).
Specifically, FERSA may transfer data to group companies in the United States or to IT providers located there. Such transfers are considered safe under frameworks like Safe Harbor.
6- Exercising Your Rights & Complaints
Users may withdraw consent or exercise their rights to access, rectify, erase, limit, object to, or port their data by contacting:
- Email: [email protected]
- Mail: FERSA, Polígono Calle Bari nº 18, 50197 Zaragoza (Spain)
Include a copy of your ID or electronic identification.
If your rights are not respected, you can file a complaint with the Spanish Data Protection Agency (AEPD).
7- Your Responsibility: Accuracy of the Data Provided
You declare that all data submitted to FERSA is accurate. You are solely responsible for any harm caused by providing false data or data of third parties without consent.
Please notify us of any changes to keep your data up to date.
8- Consent from Minors
Users under the age of 14 are prohibited from submitting data through this site. If FERSA detects minors, their data will not be processed.
FERSA reserves the right to request proof of age if there is suspicion of underage use.
9- Security Measures
FERSA and its processors apply technical and organizational measures to ensure the confidentiality, integrity, availability, and resilience of data, considering risk and processing context.
Security policies are regularly reviewed and updated.
10- Applicable Law and Jurisdiction
FERSA is based in Spain. This policy is governed by Spanish law and EU regulations. Any disputes related to this policy or website use will be handled by the courts of Zaragoza. For professionals and legal entities, jurisdiction will also be Zaragoza.
If accessing from outside Spain, you are responsible for compliance with local and international laws.