At Orbyn Valion S.L. we care about privacy and transparency.
Below we describe in detail the personal data processing activities we carry out, as well as all information relating to them.
Processing of job applicants’ data
Basic information on Data Protection
- Controller:
- Orbyn Valion S.L.
- Purpose:
- Carrying out personnel selection processes.
- Legal basis:
- Performance of a contract or pre-contractual measures.
- Recipients:
- No data will be transferred to third parties, except where legally required.
- Rights:
- You have the right to access, rectify and erase your data, as well as other rights indicated in the additional information, which you may exercise by contacting infosec@dposa.eu or CALLE LAGASCA, 120 - PTL DE OFICINAS, 28006, Madrid.
- Source:
- The data subject
Full information on Data Protection
Who is responsible for processing your data?
Orbyn Valion S.L. · B-22645832 · CALLE LAGASCA, 120 - 28006 - Madrid - MADRID · 900055501 · infosec@dposa.eu
Contact details of the Data Protection Officer (DPO):
DPO Security Advisor · CALLE LAGASCA, 120 - PTL DE OFICINAS, 28006, Madrid · infosec@dposa.eu
For what purpose do we process your personal data?
At Orbyn Valion S.L. we process the information provided by data subjects in order to manage the CVs received and carry out personnel selection processes, interviews and other procedures necessary to find the best possible candidate for a given position. If you do not provide your personal data, we will not be able to fulfil the purposes described.
No automated decisions will be made on the basis of the data provided.
How long will we keep your data?
Two years from the last interaction.
What is the legal basis for processing your data?
The legal basis for processing your data is as follows:
- Performance of a contract or pre-contractual measures: Management of the CVs submitted by the candidate in order to carry out personnel selection processes to find the best possible candidate for a given position. (GDPR Art. 6.1.b).
To which recipients will your data be communicated?
No data will be transferred to third parties, except where legally required.
Data transfers to third countries
No data transfers to third countries are planned.
What are your rights when you provide us with your data?
Any person has the right to obtain confirmation as to whether or not Orbyn Valion S.L. is processing personal data concerning them.
Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. They also have the right to data portability.
In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only keep it for the exercise or defence of claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, Orbyn Valion S.L. will stop processing the data, except for compelling legitimate reasons or the exercise or defence of possible claims.
You may exercise your rights as follows: by contacting infosec@dposa.eu or CALLE LAGASCA, 120 - PTL DE OFICINAS, 28006, Madrid.
Where commercial communications are sent using the controller’s legitimate interest as the legal basis, the data subject may object to the processing of their data for that purpose.
If you have given your consent for a specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal.
If you feel that your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in exercising your rights, you may lodge a complaint with the competent Data Protection Supervisory Authority through its website: www.aepd.es .
How did we obtain your data?
The personal data we process at Orbyn Valion S.L. comes from: The data subject.
The categories of data processed are:
- Identification data.
- Postal and email addresses.
Processing of customer data
Basic information on Data Protection
- Controller:
- Orbyn Valion S.L.
- Purpose:
- Providing the requested services and sending promotional communications.
- Legal basis:
- Performance of a contract or pre-contractual measures. Legitimate interest of the Controller.
- Recipients:
- Data disclosures are planned to: the Tax Administration; financial institutions.
- Rights:
- You have the right to access, rectify and erase your data, as well as other rights indicated in the additional information, which you may exercise by contacting infosec@dposa.eu or CALLE LAGASCA, 120 - PTL DE OFICINAS, 28006, Madrid.
- Source:
- The data subject
Full information on Data Protection
Who is responsible for processing your data?
Orbyn Valion S.L. · B-22645832 · CALLE LAGASCA, 120 - 28006 - Madrid - MADRID · 900055501 · infosec@dposa.eu
Contact details of the Data Protection Officer (DPO):
DPO Security Advisor · CALLE LAGASCA, 120 - PTL DE OFICINAS, 28006, Madrid · infosec@dposa.eu
For what purpose do we process your personal data?
At Orbyn Valion S.L. we process the information provided by data subjects in order to carry out the administrative, accounting and tax management of the requested services, as well as to send promotional communications about our products and services. If you do not provide your personal data, we will not be able to fulfil the purposes described.
No automated decisions will be made on the basis of the data provided.
How long will we keep your data?
The data will be kept as long as the data subject does not request its erasure and, where applicable, for the years necessary to comply with legal obligations.
What is the legal basis for processing your data?
The legal basis for processing your data is as follows:
- Performance of a contract or pre-contractual measures: Tax, accounting and administrative management of customers. (GDPR Art. 6.1.b).
- Legitimate interest of the Controller: Sending promotional communications, including by electronic means. (GDPR Recital 47, Spanish LSSICE Art. 21.2).
To which recipients will your data be communicated?
The data will be communicated to the following recipients:
- The Tax Administration, for the purpose of complying with legal obligations (legal requirement).
- Financial institutions, for the purpose of issuing the corresponding payment orders (contractual requirement).
Data transfers to third countries
No data transfers to third countries are planned.
What are your rights when you provide us with your data?
Any person has the right to obtain confirmation as to whether or not Orbyn Valion S.L. is processing personal data concerning them.
Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. They also have the right to data portability.
In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only keep it for the exercise or defence of claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, Orbyn Valion S.L. will stop processing the data, except for compelling legitimate reasons or the exercise or defence of possible claims.
You may exercise your rights as follows: by contacting infosec@dposa.eu or CALLE LAGASCA, 120 - PTL DE OFICINAS, 28006, Madrid.
Where commercial communications are sent using the controller’s legitimate interest as the legal basis, the data subject may object to the processing of their data for that purpose.
If you have given your consent for a specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal.
If you feel that your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in exercising your rights, you may lodge a complaint with the competent Data Protection Supervisory Authority through its website: www.aepd.es .
How did we obtain your data?
The personal data we process at Orbyn Valion S.L. comes from: The data subject.
The categories of data processed are:
- Identification data.
- Postal and email addresses.
- Commercial information.
- Economic data.
Processing of data of parties involved in the internal Whistleblowing Channel
Basic information on Data Protection
- Controller:
- Orbyn Valion S.L.
- Purpose:
- Management of the internal Whistleblowing Channel
- Legal basis:
- Task carried out in the public interest. Compliance with a legal obligation. Consent of the data subject.
- Recipients:
- Data disclosures are planned to: State security forces; judicial bodies; the Public Prosecutor’s Office.
- Rights:
- You have the right to access, rectify and erase your data, as well as other rights indicated in the additional information, which you may exercise by contacting infosec@dposa.eu or CALLE LAGASCA, 120 - PTL DE OFICINAS, 28006, Madrid.
- Source:
- From the report submitted by data subjects who have an employment, commercial or service-provision relationship with the entity.
Full information on Data Protection
Who is responsible for processing your data?
Orbyn Valion S.L. · B-22645832 · CALLE LAGASCA, 120 - 28006 - Madrid - MADRID · 900055501 · infosec@dposa.eu
Contact details of the Data Protection Officer (DPO):
DPO Security Advisor · CALLE LAGASCA, 120 - PTL DE OFICINAS, 28006, Madrid · infosec@dposa.eu
For what purpose do we process your personal data?
At Orbyn Valion S.L. we process the information provided by data subjects in order to manage the internal whistleblowing channel and protect persons who report regulatory breaches and corruption, with the purpose of informing the controller of acts or conduct occurring within the entity or caused by third parties contracting with it that may be contrary to the general or sector-specific regulations applicable to it. If you do not provide your personal data, we will not be able to fulfil the purposes described.
No automated decisions will be made on the basis of the data provided.
How long will we keep your data?
The data will be kept for the time strictly necessary to decide whether to open an investigation into the reported facts. The maximum period will be three months from its entry into the system, unless its retention serves as evidence of the functioning of the prevention model, in which case the data will be kept anonymised. (Spanish LOPDGDD Art. 24.4)
What is the legal basis for processing your data?
The legal basis for processing your data is as follows:
- Task carried out in the public interest: Control of non-compliance risks within the organisation (Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights [Preamble V]). Processing of special categories of data contained in the information on the breach (Spanish Law 2/2023, of 20 February, on the protection of persons who report regulatory breaches and the fight against corruption, Art. 30, and GDPR Art. 9.2.g).
- Compliance with a legal obligation: Directive (EU) 2019/1937 of the European Parliament and of the Council of 23 October 2019 on the protection of persons who report breaches of Union law (Art. 8; obligation to establish internal reporting channels). Spanish Law 2/2023, of 20 February, on the protection of persons who report regulatory breaches and the fight against corruption.
- Consent of the data subject: For the retention and recording of reports made by telephone or voice messaging systems with recording, as well as for the recording of in-person meetings requested with the entity for the purpose of reporting. (Directive (EU) 2019/1937, Art. 18.2 and 4)
To which recipients will your data be communicated?
The data will be communicated to the following recipients:
- State security forces; judicial bodies; the Public Prosecutor’s Office, for the purpose of reporting the commission of a possible offence (legal requirement).
Data transfers to third countries
No data transfers to third countries are planned.
What are your rights when you provide us with your data?
Any person has the right to obtain confirmation as to whether or not Orbyn Valion S.L. is processing personal data concerning them.
Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. They also have the right to data portability.
In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only keep it for the exercise or defence of claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, Orbyn Valion S.L. will stop processing the data, except for compelling legitimate reasons or the exercise or defence of possible claims.
You may exercise your rights as follows: by contacting infosec@dposa.eu or CALLE LAGASCA, 120 - PTL DE OFICINAS, 28006, Madrid.
Where commercial communications are sent using the controller’s legitimate interest as the legal basis, the data subject may object to the processing of their data for that purpose.
If you have given your consent for a specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal.
If you feel that your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in exercising your rights, you may lodge a complaint with the competent Data Protection Supervisory Authority through its website: www.aepd.es .
How did we obtain your data?
The personal data we process at Orbyn Valion S.L. comes from: From the report submitted by data subjects who have an employment, commercial or service-provision relationship with the entity.
The categories of data processed are:
- Identification data.
- Commercial information.
- Economic data.
No special categories of personal data are processed (data revealing ethnic or racial origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data intended to uniquely identify a natural person, health data, or data concerning a natural person’s sex life or sexual orientation).
Processing of data of parties involved in the protocol for the prevention of sexual or gender-based harassment
Basic information on Data Protection
- Controller:
- Orbyn Valion S.L.
- Purpose:
- Managing the protocol for the prevention of sexual or gender-based harassment
- Legal basis:
- Compliance with a legal obligation.
- Recipients:
- Data disclosures are planned to: State security forces; judicial bodies; the Public Prosecutor’s Office.
- Rights:
- You have the right to access, rectify and erase your data, as well as other rights indicated in the additional information, which you may exercise by contacting infosec@dposa.eu or CALLE LAGASCA, 120 - PTL DE OFICINAS, 28006, Madrid.
- Source:
- From the report submitted by the person who has suffered the harassment or by other persons.
Full information on Data Protection
Who is responsible for processing your data?
Orbyn Valion S.L. · B-22645832 · CALLE LAGASCA, 120 - 28006 - Madrid - MADRID · 900055501 · infosec@dposa.eu
Contact details of the Data Protection Officer (DPO):
DPO Security Advisor · CALLE LAGASCA, 120 - PTL DE OFICINAS, 28006, Madrid · infosec@dposa.eu
For what purpose do we process your personal data?
At Orbyn Valion S.L. we process the information provided by data subjects for the purpose of managing the protocol for the prevention of sexual or gender-based harassment: regulation of the procedure, management of the report, collection of personal data and interviews with the affected parties. If you do not provide your personal data, we will not be able to fulfil the purposes described.
No automated decisions will be made on the basis of the data provided.
How long will we keep your data?
The data will be erased after two years, unless its retention is necessary to determine any liabilities that may arise from claims made by the affected parties.
What is the legal basis for processing your data?
The legal basis for processing your data is as follows:
- Compliance with a legal obligation: Spanish Organic Law 3/2007, of 22 March, on the effective equality of women and men (Art. 48); Royal Decree 901/2020, of 13 October; Spanish Law 31/1995, of 8 November, on the prevention of occupational risks (Art. 14).
To which recipients will your data be communicated?
The data will be communicated to the following recipients:
- State security forces; judicial bodies; the Public Prosecutor’s Office, for the purpose of reporting the commission of a possible offence (legal requirement).
Data transfers to third countries
No data transfers to third countries are planned.
What are your rights when you provide us with your data?
Any person has the right to obtain confirmation as to whether or not Orbyn Valion S.L. is processing personal data concerning them.
Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. They also have the right to data portability.
In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only keep it for the exercise or defence of claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, Orbyn Valion S.L. will stop processing the data, except for compelling legitimate reasons or the exercise or defence of possible claims.
You may exercise your rights as follows: by contacting infosec@dposa.eu or CALLE LAGASCA, 120 - PTL DE OFICINAS, 28006, Madrid.
Where commercial communications are sent using the controller’s legitimate interest as the legal basis, the data subject may object to the processing of their data for that purpose.
If you have given your consent for a specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal.
If you feel that your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in exercising your rights, you may lodge a complaint with the competent Data Protection Supervisory Authority through its website: www.aepd.es .
How did we obtain your data?
The personal data we process at Orbyn Valion S.L. comes from: From the report submitted by the person who has suffered the harassment or by other persons.
The categories of data processed are:
- Identification data.
- Postal and email addresses.
No special categories of personal data are processed (data revealing ethnic or racial origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data intended to uniquely identify a natural person, health data, or data concerning a natural person’s sex life or sexual orientation).
Processing of data of potential customers and contacts
Basic information on Data Protection
- Controller:
- Orbyn Valion S.L.
- Purpose:
- Handling your request and sending you promotional communications
- Legal basis:
- Performance of a contract or pre-contractual measures. Consent of the data subject. Legitimate interest of the Controller.
- Recipients:
- No data will be transferred to third parties, except where legally required.
- Rights:
- You have the right to access, rectify and erase your data, as well as other rights indicated in the additional information, which you may exercise by contacting infosec@dposa.eu or CALLE LAGASCA, 120 - PTL DE OFICINAS, 28006, Madrid.
- Source:
- The data subject
Full information on Data Protection
Who is responsible for processing your data?
Orbyn Valion S.L. · B-22645832 · CALLE LAGASCA, 120 - 28006 - Madrid - MADRID · 900055501 · infosec@dposa.eu
Contact details of the Data Protection Officer (DPO):
DPO Security Advisor · CALLE LAGASCA, 120 - PTL DE OFICINAS, 28006, Madrid · infosec@dposa.eu
For what purpose do we process your personal data?
At Orbyn Valion S.L. we process the information provided by data subjects in order to manage potential customers who have shown interest in our products and/or services, as well as other commercial contacts, and to send, where applicable, promotional communications, including by electronic means. If you do not provide your personal data, we will not be able to fulfil the purposes described.
No automated decisions will be made on the basis of the data provided.
How long will we keep your data?
The data will be kept as long as the data subject does not request its erasure.
What is the legal basis for processing your data?
The legal basis for processing your data is as follows:
- Performance of a contract or pre-contractual measures: Management of potential customers who have shown interest in our products and/or services. (GDPR, Art. 6.1.b).
- Consent of the data subject: Sending promotional communications, including by electronic means. (GDPR, Art. 6.1.a, Spanish LSSICE Art. 21).
- Legitimate interest of the Controller: Management of professional contact details (Spanish LOPDGDD Art. 19, GDPR Art. 6.1.f).
To which recipients will your data be communicated?
No data will be transferred to third parties, except where legally required.
Data transfers to third countries
No data transfers to third countries are planned.
What are your rights when you provide us with your data?
Any person has the right to obtain confirmation as to whether or not Orbyn Valion S.L. is processing personal data concerning them.
Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. They also have the right to data portability.
In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only keep it for the exercise or defence of claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, Orbyn Valion S.L. will stop processing the data, except for compelling legitimate reasons or the exercise or defence of possible claims.
You may exercise your rights as follows: by contacting infosec@dposa.eu or CALLE LAGASCA, 120 - PTL DE OFICINAS, 28006, Madrid.
Where commercial communications are sent using the controller’s legitimate interest as the legal basis, the data subject may object to the processing of their data for that purpose.
If you have given your consent for a specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal.
If you feel that your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in exercising your rights, you may lodge a complaint with the competent Data Protection Supervisory Authority through its website: www.aepd.es .
How did we obtain your data?
The personal data we process at Orbyn Valion S.L. comes from: The data subject.
Processing of newsletter subscribers’ data
Basic information on Data Protection
- Controller:
- Orbyn Valion S.L.
- Purpose:
- Sending you our newsletter and other promotional communications of interest
- Legal basis:
- Consent of the data subject.
- Recipients:
- No data will be transferred to third parties, except where legally required.
- Rights:
- You have the right to access, rectify and erase your data, as well as other rights indicated in the additional information, which you may exercise by contacting infosec@dposa.eu or CALLE LAGASCA, 120 - PTL DE OFICINAS, 28006, Madrid.
- Source:
- The data subject
Full information on Data Protection
Who is responsible for processing your data?
Orbyn Valion S.L. · B-22645832 · CALLE LAGASCA, 120 - 28006 - Madrid - MADRID · 900055501 · infosec@dposa.eu
Contact details of the Data Protection Officer (DPO):
DPO Security Advisor · CALLE LAGASCA, 120 - PTL DE OFICINAS, 28006, Madrid · infosec@dposa.eu
For what purpose do we process your personal data?
At Orbyn Valion S.L. we process the information provided by data subjects in order to send our newsletter and other promotional communications of interest to its subscribers. If you do not provide your personal data, we will not be able to fulfil the purposes described.
No automated decisions will be made on the basis of the data provided.
How long will we keep your data?
The data will be kept as long as the data subject does not request its erasure.
What is the legal basis for processing your data?
The legal basis for processing your data is as follows:
- Consent of the data subject: sending our newsletter and other promotional communications of interest to its subscribers (GDPR, Art. 6.1.a, and Spanish LSSICE Art. 21)
To which recipients will your data be communicated?
No data will be transferred to third parties, except where legally required.
Data transfers to third countries
No data transfers to third countries are planned.
What are your rights when you provide us with your data?
Any person has the right to obtain confirmation as to whether or not Orbyn Valion S.L. is processing personal data concerning them.
Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. They also have the right to data portability.
In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only keep it for the exercise or defence of claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, Orbyn Valion S.L. will stop processing the data, except for compelling legitimate reasons or the exercise or defence of possible claims.
You may exercise your rights as follows: by contacting infosec@dposa.eu or CALLE LAGASCA, 120 - PTL DE OFICINAS, 28006, Madrid.
Where commercial communications are sent using the controller’s legitimate interest as the legal basis, the data subject may object to the processing of their data for that purpose.
If you have given your consent for a specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal.
If you feel that your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in exercising your rights, you may lodge a complaint with the competent Data Protection Supervisory Authority through its website: www.aepd.es .
How did we obtain your data?
The personal data we process at Orbyn Valion S.L. comes from: The data subject.
The categories of data processed are:
- Identification data.
- Postal and email addresses.
- Commercial information.
- Economic data.