PRIVACY POLICY
This Privacy Policy applies to RAILSIDER LOGÍSTICA FERROVIARIA, S.A. (hereinafter referred to as RAILSIDER) as the owner and legal controller of this Website, in accordance with the Legal Notice.
In compliance with the provisions of the European General Data Protection Regulation (EU) 2016/679 (GDPR), RAILSIDER acknowledges itself as the data controller for all personal data—whether on paper or digital—and undertakes to process such data in accordance with legal requirements and with due regard to the risks identified prior to processing.
Simply visiting this Website does not involve the processing of personal data, as no data capable of identifying the User is automatically recorded.
The services on this Website that involve personal data processing are the following:
• Contact us
• Job opportunities
The User guarantees the truthfulness, accuracy, and authenticity of all information provided and undertakes to keep it up to date. The User accepts responsibility for any false or inaccurate information supplied and for any damages that may result to RAILSIDER or to third parties.
To ensure proper data management, all RAILSIDER personnel involved in data processing are aware of and comply with the company’s data protection policies, ensuring the confidentiality, integrity, availability, and resilience of personal data, as well as the ability to restore such data promptly in the event of an incident.
1. Purpose and duration of data processing
Whenever RAILSIDER requests personal data from the User, the specific purpose of the processing will be clearly stated at the time of collection.
As a general rule, personal data will be retained indefinitely, unless otherwise specified by RAILSIDER or until the User exercises their right to erasure, in which case the data will be deleted, except for those required to be retained under legal obligation for the period established by law.
2. Legal basis for processing
The legal basis that authorizes the processing of personal data is the User’s explicit consent given for each of the Website’s services that involve data collection.
RAILSIDER will always inform the User clearly and transparently about the purpose of each processing activity.
If the User does not provide such consent, RAILSIDER will be unable to provide the requested service.
3. Recipients of personal data
Except where required by law, RAILSIDER will not disclose personal data to third parties, except in the following cases:
• Legal obligation.
• Communication to RAILSIDER group companies in order to fulfil the purpose for which the User has given consent. These companies are:
Entity Tax ID / VAT Number
RAILSIDER ATLANTICO, S.A. A20602611
RAILSIDER MEDITERRÁNEO, S.A. A81808966
RAILSIDER FERROCARRIL, S.L. B20853974
RAILSIDER TERMINALES FERROVIARIAS, S.L. B20893848
RAILSIDER SERVICIOS EXTERNOS, S.L. B55353916
RAILSIDER FRANCE FR68324745769
LOGIFER FR53507902716
• Engagement of service providers who may have access to personal data as part of their contractual duties, under the terms set out in Articles 28 and 29 of the GDPR.
In such cases, RAILSIDER will enter into a data processing agreement that sets out both parties’ confidentiality and security obligations.
If a data processor is located outside the European Economic Area, RAILSIDER will only work with entities that, according to the Spanish Data Protection Agency (AEPD), provide an adequate level of protection, as demonstrated by one of the following:
• The company is located in a country recognized as having an adequate level of protection by the European Union.
• The international data transfer has been expressly authorized by the AEPD.
• The company operates under Binding Corporate Rules, Standard Contractual Clauses, or certified codes of conduct approved by the European Commission ensuring adequate safeguards.
Any other transfer of personal data will require the User’s prior and explicit consent, with full disclosure of the recipients or categories of recipients.
4. User rights regarding data processing
In accordance with Articles 15 to 22 of the GDPR, the User, as the data subject, may exercise the following rights at any time:
access, rectification, erasure, restriction, objection, and data portability.
To exercise these rights, the User may contact RAILSIDER via any of the following:
Email: lopd@railsider.com
Postal address: RAILSIDER, S.A. – Carretera del Molino, 8 – 20303 Irún (Gipuzkoa), Spain
Telephone: +34 943 639 744
The User must provide sufficient identification to verify ownership of the personal data. RAILSIDER will act on such requests as soon as possible and without undue delay.
If the User believes their request has not been properly addressed, they may file a complaint with the competent supervisory authority:
Spanish Data Protection Agency (AEPD)
C/ Jorge Juan, 6
28001 Madrid
www.agpd.es
Tel.: +34 901 100 099 / +34 912 663 517
5. Source of data
Personal data processed by RAILSIDER originate from the data subject, their legal representative, or a person expressly authorized by them.
The categories of data processed will always be identification, financial, commercial, academic, and/or professional data, and never special categories of personal data (sensitive data).
RAILSIDER reserves the right to modify this Privacy Policy to reflect legal, jurisprudential, or market developments.
Such modifications will be communicated to the User in advance and within a reasonable timeframe to ensure awareness before they take effect.
