Welcome to the Privacy Policy of GRUPO DEIMOS. In this document you will find information of your interest in relation to how GRUPO DEIMOS treats your personal data and your rights under the current regulations on the Protection of Personal Data.

The DEIMOS GROUP is made up of the following organisations, which are equally affected by this Privacy Policy:

You can contact GRUPO DEIMOS at the postal addresses indicated above, through the contact form on its website, on Tel.: 918 063 450 / 983 549 620 or at the e-mail address: gdpr@deimosgroup.net.

II. Information on the processing operations carried out, their purpose and legal basis

GRUPO DEIMOS has a Register of Processing Activities which details each of the processing operations carried out in its capacity as data controller, among them:
RECRUITMENT: CV management, evaluation of the applications received and personnel selection for the DEIMOS GROUP. The legal basis that legitimises the processing is the consent of the interested parties themselves.

CUSTOMERS & PERSONAL CONTACTS. GRUPO DEIMOS customer management. This includes the list of contacts for the execution of projects, as well as the management of requests and queries made through the contact form on the website. The legal basis that legitimizes the processing of personal data is the consent of the data subject in relation to requests and queries made through forms, the existence of a contractual relationship and the legitimate interest of the Data Controller, with respect to the management of customers and contacts for the implementation of projects.

PROVIDERS & SUBCONTRACTORS: Accounting processing of suppliers and management of subcontractors. The legal basis that legitimises the processing is the existence of a contractual relationship and legitimate interest with respect to suppliers and the contractual relationship and compliance with legal obligations in relation to the coordination of business activities for the processing of personal data of subcontractors.

VIDEO RECORD: Security of DEIMOS GROUP facilities and people based on the organisation’s legitimate interest in maintaining security.
VISITS RECORD: Security control of the facilities and control of people visiting any of the buildings and offices of GRUPO DEIMOS based on the legitimate interest of the organisation.

WISTLEBLOWING: Processing and management of complaints through the ethics channel. The legal basis that legitimises the processing of the data is the legitimate interest of GRUPO DEIMOS in the prevention and discovery of possible conduct that contravenes both current legal regulations and the Group’s internal code.

Various purposes in relation to human resources that are not detailed in this privacy policy.

III. Accuracy of the user’s data and mandatory nature of the information provided

The interested party guarantees the authenticity of all the data provided and will keep the information provided to GRUPO DEIMOS updated, so that it corresponds, at all times, to their real situation, being the only party responsible for any false or inaccurate statements made and for the damages caused by this to GRUPO DEIMOS or to third parties.
The fields marked as compulsory in the contact form on the website to be filled in by the interested party, as well as any other form to be filled in by the interested party, are strictly necessary in order to deal with your request.

IV. Addressees

We may share your data between group companies (Deimos Space, S.L.U., Deimos Engineering and Systems, S.L.U., Deimos Engenharía S.A., Deimos Space UK Ldt, Deimos Space, S.R.L.) as well as to associated companies and to the parent company Elecnor S.A.
Additionally we may share your data with third party service providers who process data on behalf of GRUPO DEIMOS with whom we have established the conditions and requirements for using personal data in a contract and with Public Administrations and Courts and Tribunals, in order to comply with legal obligations affecting certain processing.

Otherwise, we will not share data with third parties unless we are legally obliged to do so or have your consent.

V. International transfers

In the case of the use of third party providers who process your personal data outside the European Economic Area, an international transfer will take place and will always be carried out on the basis of a Commission adequacy decision, standard data protection clauses, an approved code of conduct or another transfer mechanism provided for by data protection law.

We inform you that one of the companies of the DEIMOS GROUP (DEIMOS SPACE UK LTD) is not part of the European Economic Area, so the communication of personal data to this entity will constitute an international transfer of data. However, we inform you that the international transfer of data has all the guarantees since the United Kingdom has been declared by the European Commission as a declared recipient of appropriate level (article 45.1 RGPD).

VI. Rights of the data subject

a. Right of access to your personal data in order to know which personal data are being processed and the processing operations carried out on them;
b. The right to rectify any inaccurate personal data;
c. The right to erasure of your personal data, where this is possible;
d. Right to object to the processing of your personal data. The materialisation of the right of opposition entails the deletion of your data unless DEIMOS has a compelling legitimate interest or for the formulation, exercise or defence of claims.
e. The right to request the restriction of the processing of your personal data where the accuracy, lawfulness or necessity of the data processing is in doubt, in which case we may retain the data for the purpose of pursuing or defending claims. 
f. The right to request the portability of your data, provided that the lawful basis for processing is the existence of a contractual relationship or your consent. 
The right to the portability of your data, provided that the legal basis for us to process it is the existence of a contractual relationship or your consent. 
g. The right to revoke the consent given to us to 
process your personal data.
 The right to revoke the consent given to GRUPO DEIMOS.

The interested party may exercise their rights at any time by sending an e-mail to gdpr@deimosgroup.net or by written communication with acknowledgement of receipt to: Ronda de Poniente, 19, Tres Cantos (Madrid), C.P.: 28760. To do so, the interested party must attach to the request a copy of his/her ID card, passport or other valid document that allows the User to be identified.

In addition, you may contact the Spanish Data Protection Agency http://www.aepd.es if you do not agree with the attention received with respect to your rights, in the case of subsidiaries in Spain, or the competent authority in this area for each of the countries in which Deimos has a presence.

VII. Security

GRUPO DEIMOS, as part of its commitment to the security and confidentiality of information, has adopted the necessary technical, legal and organisational measures to prevent the accidental or illicit destruction or accidental loss, alteration, unauthorised disclosure or access of personal data.

VIII. Data retention

The personal data that you may provide to us will be kept for the time necessary to fulfil the purpose for which they are collected and, in cases where there are other possible liabilities, will be kept for the time strictly necessary according to the basis that legitimises such processing and in any case for the time strictly necessary to comply with applicable laws.

Likewise, the data subject may exercise his/her rights in accordance with section V of the Privacy Policy.

IX. Modification of this Privacy Policy

This Privacy Policy may need to be updated; it is therefore advisable that you review it periodically, and if possible each time you access the Website in order to be properly informed about the type of information collected and its processing. Notwithstanding the foregoing, we will notify you of any changes to this Privacy Policy that specifically affect the processing of your personal data.