Privacy Policy

Privacy Policy

Identification of the data controller

In accordance with data protection legislation (GDPR / Spanish Organic Act 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights – “LOPDGDD”) and Article 10 of Act 34/2002 on Information Society Services and Electronic Commerce (LSSI), the owner of this site and the controller of the data processed through this website is:

• OCA GLOBAL INVESTMENTS, S.L. - B64690183
• ADDENDIA INVESTMENTS, S.L.U. - B64682214
• OCA GLOBAL CORPORATE SERVICES, S.A.U. - A67263608
• OCA GLOBAL MARKETING SERVICES, S.L.U. - B26851725
• OCA GLOBAL FINANCIAL SERVICES, S.L.U. - B26851709
• OCA GLOBAL PEOPLE SERVICES, S.L.U. - B26851717
• OCA GLOBAL DIGITAL SERVICES, S.L.U. - B10982130
• OCA INSPECCIÓN, CONTROL y PREVENCION, S.A.U. - A40007460
• OCA GLOBAL INSPECCIONES REGLAMENTARIAS, S.A.U. - A64822281
• OCA GLOBAL MARINE AND CARGO SURVEYORS, S.L.U. - B20591194
• OCA GLOBAL PREVENTION SERVICES, S.A.U. - A64682149
• OCA GLOBAL SERVICIOS AUXILIARES, S.L.U. - B86344264
• OCA INTERNATIONAL, INSPECTION & CONTROL SOCIETY, S.A.U. - A65223877
• OCA GLOBAL CONSULTING AND ENGINEERING, S.L. - B21888458
• OCA INSTITUTO DE CERTIFICACIÓN S.L.U. - B65341075
• OCA GLOBAL INNOVACIÓN Y SOSTENIBILIDAD, S.L. - B64822349
• OCA ENERGY CERTIFICATION, S.L. - B24765877
• OCA ENSAYOS Y CALIBRACIONES, S.L.U. - B64822307
• OCA INSPECCIÓN TÉCNICA DE VEHÍCULOS S.A.U. - A50830967
• F3 GLOBAL INVESTMENTS, S.L.U. - A65000945
• VOLTRED SOLUTIONS, S.L. - B19875384
• NASCOR FORMACION, S.L.U. - B65187569
• NASCOR SERVICIOS SOCIALES, S.L.U. - B44620482
• GRADO INFORMÁTICA Y GESTIÓN, S.L.U. - B60301603
• ALMERIMATIK, S.A. - A04015376
• LEDEL SERVICIOS INTEGRALES, S.L.U. - B64822372
• FORMACIO I CONSULTING INFORMATICS, S.L. - B6219894
• PALBEN FORMACIO I CONSULTORIA, S.L. - B66097015
• PALAUSIBARIS, S.L.U. - B65337313
• ORIOR TRAINING CENTER, S.L.U. - B64822315
• CONTENIDOS SCORM, S.L. - B72604796
• DIGITAL ENROLL, S.L. - B75736579
• EEP IGROUP, S.L. - B02948180
• ACCIONES FORMATIVAS DE CALIDAD, S.L. - B02575991
• EDUCACION MADRID 2016, S.L. - B87495198
• ESCUELA PROFESIONAL IEM, S.L. - B88061502
• OCA GLOBAL GERMANY, GMBH - DE452657678
• ANDOCA INSPECCIÓ I CONTROL, S.L. - L-710605-S
• OCA Arabia for Inspection LLC - 310874953100003
• OCA GLOBAL BRASIL LTDA - 51.024.754/0001-12
• OCA ENSAYOS, INSPECCIONES Y CERTIFICACIONES CHILE, S.A. - RUT 76390033-9
• OCA GLOBAL SERVICIOS GENERALES, S.A. - RUT 76479482-6
• OCA GLOBAL SERVICIOS TECNICOS CHILE, S.A. - RUT 77851467-2
• OCA GLOBAL INVESTMENTS CHILE, S.A. - RUT 77912698-6
• OCA GLOBAL COLOMBIA, S.A.S - NIT 901288398 0
• OCA QUALITY CONTROL COMPANY, S.A.E. - 629 035 105
• OCA GLOBAL, TESTING, INSPECTION & CERTIFICATION, LLC - 101-2021-100077971
• OCA GLOBAL INSPECTION INDIA PRIVATE LIMITED - 27AADCO7337E1ZF
• OCA GLOBAL ITALIA, S.R.L. - IT13107300967
• OCA GLOBAL TESTING & INSPECTION MAROC, SARL - 20761758
• OCA ENSAYOS, INSPECCION Y CERTIFICACIONES MEXICO, S.A. DE C.V. - OEI1411147K3
• OCA GLOBAL MEXICO VERIFICACIÓN Y CERTIFICACIÓN, S.A. DE C.V. - OGM200305FL0
• OCA GLOBAL PANAMA, S.A. - RUC 155738990-2-2023 DV 82
• OCA CALIDAD, MEDIOAMBIENTE Y SEGURIDAD DEL PERU, S.A.C. - RUC 20602485332
• OCA GLOBAL PORTUGAL, UNIPESSOAL LDA - PAF957308
• OCA GLOBAL ROMANIA, S.R.L. - 47522256
• COMP CONTROL ING SRL - 10144097
• OCA Testing Inspection and Certification South Africa (Pty) Ltd - 9581146173
• OCA NDT Solutions SA (Pty) Ltd - 9290354258
• OCA GLOBAL UKRAINE, LLC - 43552318

Notwithstanding the foregoing, for the purposes of the general management of this corporate website ([URL]), the main controller of users’ personal data is OCA GLOBAL INVESTMENTS, S.L., with registered office at Sant Cugat del Vallès, Avinguda Can Fatjó dels Aurons number 1 (08173), entered in the Barcelona Commercial Register at Volume 44,391, Folio 156, Sheet B-359855, without prejudice to the fact that certain sections or forms may be managed by other entities of the OCA Global Group, which will be identified, where applicable, in the relevant form or section.

Purpose of the data collected and legal basis

The data we request in the various forms on our website is adequate, relevant and strictly necessary in order to:

• Manage and respond to requests, enquiries and/or complaints.
• Manage quotation requests.
• Respond, via WhatsApp, to the enquiries, requests for information and quotation requests you send us through this channel, as well as to follow up on the matter initiated and on the services contracted.
• Register you in our candidate database so that you can take part in our recruitment processes, and so that OCA can inform you of job offers or vacancies that may be of interest to you.
• Send you commercial communications and information about our services by email, SMS or instant messaging services such as WhatsApp, solely where you have previously given your specific consent for the sending of commercial communications via these channels

We may process your personal data when you contact us through the chatbot on our website.

We also process cookies and usage data. This usage data may include information such as your computer’s internet protocol address (for example, the IP address), browser type, browser version, the pages of our service that you visit, the time and date of your visit, the time spent on those pages, device identifiers and other diagnostic data. You may consult the cookie policy.

What is the legal basis for processing your data?

The processing of your data is based on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR): the processing of contact data in order to send communications is based on the express consent you give us when contacting us, for the purposes of receiving commercial and/or advertising communications, managing a quotation request, and registering in our candidate database. For the processing of data through the chatbot, in the case of website users and prospective clients, we also rely on your consent. Likewise, the processing of data by means of certain cookies requires your consent.
• Consent for commercial communications via WhatsApp (Art. 6(1)(a) GDPR and Art. 21 of Act 34/2002, LSSI): sending campaigns, promotions, newsletters or any other commercial communication via WhatsApp requires your prior, specific, informed and unambiguous consent, obtained by means of a separate tick box, independent of acceptance of the privacy policy. We keep evidence of such consent (date, time, channel, form and the text of the box accepted). You may withdraw it at any time, without retroactive effect, by writing UNSUBSCRIBE in the WhatsApp conversation itself or by contacting rgpd@ocaglobal.com.
• Performance of a contract or application of pre-contractual measures (Art. 6(1)(b) GDPR): when you start a conversation with us on WhatsApp, or provide us with your mobile telephone number in a form, in order to request information, a quotation or follow-up on a service, we process your number and the content of the messages for the purpose of dealing with that specific request. This operational communication does not constitute a commercial communication and does not require additional consent; failing that, the processing is based on our legitimate interest in responding to the communication you yourself initiated (Art. 6(1)(f) GDPR).
• Legitimate interest (Art. 6(1)(f) GDPR): in the case of certain cookies, we may process data without needing to request your consent, on the basis of our legitimate interest in the proper functioning of our website.
• For clients using the chatbot, the legal basis for processing their data is the performance of the contract (Art. 6(1)(b) GDPR).

The fields that are mandatory are indicated in the forms themselves, and your refusal to provide them will mean that we are unable to handle your request. You also warrant that all data provided is true, accurate and relevant to the purpose for which we request it. So that we can keep your personal data up to date, it is important that you inform us whenever there is any change to it. Otherwise, we accept no responsibility for its accuracy.

Recipients

The data we process for the purposes indicated above may be disclosed to the companies forming part of the OCA Global business group, as well as to other service providers with whom we have previously entered into a data processing agreement in accordance with Article 28 GDPR. In addition to the above disclosures, the data subject’s data may also be disclosed to public authorities or other organisations in order to comply with legal obligations. The following data disclosures are hereby notified:

• TEAMTAILOR: OCA Global uses this provider for recruitment management https://www.teamtailor.com/es/privacy-policy/
• FEDACOVA: OCA Global may share data with Fedacova in accordance with the policies and agreements in place.
• WHATSAPP / META: OCA Global provides a contact channel via WhatsApp. When you use this channel, the data subject’s personal data may be processed by WhatsApp Ireland Limited, part of the Meta Platforms group, in accordance with its privacy policy. https://www.whatsapp.com/legal/privacy-policy-eea

Social media

OCA Global maintains profiles on the following leading social media platforms (LinkedIn, Facebook, Twitter and YouTube) and acknowledges that it acts as controller of the data of its users, followers, or persons posting comments through them. It also disclaims any liability arising from comments made by users and followers on its social media profiles.

OCA Global may use the profiles described above to inform its clients and other interested parties about matters it considers to be of interest to them.

Communications via WhatsApp

OCA Global makes one or more WhatsApp numbers available to users as an additional contact channel. You may access this channel by starting the conversation yourself from the button or link provided on our website, or by giving us your mobile telephone number in one of our contact or quotation request forms, in which case we may contact you by this means in order to deal with your request.

Data processed: your telephone number, the name and, where applicable, the image associated with your WhatsApp profile, the content of the messages and files you send us, and the technical data associated with the communication (date, time and sending, delivery or read status).

Purposes and legal basis: responding to your enquiries, requests for information and quotation requests, and following up on the services contracted, is based on the performance of a contract or on the application of pre-contractual measures requested by you (Art. 6(1)(b) GDPR) and, failing that, on our legitimate interest in responding to the communication you yourself initiated (Art. 6(1)(f) GDPR); this operational communication does not require specific commercial consent. By contrast, sending campaigns, promotions or any other commercial communication via WhatsApp is based exclusively on your prior, express and traceable consent (Art. 6(1)(a) GDPR and Art. 21 LSSI), obtained by means of a specific, independent tick box and revocable at any time.

We recommend that you do not provide data belonging to special categories (for example, health data) or confidential documentation via WhatsApp. Should the matter require this type of information, we will indicate an alternative secure channel.

Service providers: messaging is provided through the infrastructure of WhatsApp Ireland Limited (Meta Platforms group), with which we have entered into the corresponding data processing agreement in accordance with Article 28 GDPR. These providers may process data outside the European Economic Area; such transfers are covered by the safeguards set out in the “International data transfers” section of this policy, in particular the standard contractual clauses approved by the European Commission. Furthermore, WhatsApp processes, as an independent controller and in accordance with its own privacy policy, the data and metadata arising from the use of its application, over which OCA Global has no control.

Retention: we retain the content of conversations for as long as necessary to deal with your request and, thereafter, for the limitation periods applicable to any liabilities arising from the relationship. If you have given us your consent to receive commercial communications through this channel, we will retain your telephone number and the evidence of consent until you withdraw it.

Unsubscribing and exercising your rights: you may stop receiving commercial communications via WhatsApp by writing the word UNSUBSCRIBE in the conversation itself, by blocking the number, or by contacting rgpd@ocaglobal.com. The rights described in the “Data subjects’ rights” section may likewise be exercised in respect of data processed through this channel.

International data transfers

The personal data we process in the context of our processing systems and websites may be stored in countries outside the European Economic Area (EEA).

Whenever we transfer your personal data outside the European Economic Area, we will comply with the relevant data protection legislation. The following are some of the mechanisms we may use when making an international transfer:

• Your personal data is transferred to a country that the European Commission officially considers to ensure an adequate level of protection for personal data.
• We reserve the right to use specific contracts approved by the European Commission which afford personal data the same protection it enjoys in Europe (the so-called EU standard contractual clauses).

Data retention

The personal data provided will be retained for as long as necessary to fulfil the purposes for which it was collected. Once that period has elapsed, we will delete it from our systems, without prejudice to the possibility of retaining it, with processing restricted to the exercise and defence of claims, on the terms provided for by applicable legislation.

Data subjects’ rights

Under data protection legislation, you may request the following:

• Right of access: you may request information about the personal data we hold about you.
• Right to rectification: you may notify us of any change to your personal data. However, wherever possible, you may update your personal data directly from the settings section of your account.
• Right to erasure and to be forgotten: you may request the deletion, following blocking, of your personal data.
• Right to restriction of processing: this entails limiting the processing of your personal data.
• Right to object: you may withdraw your consent to processing, objecting to any further processing of your data.
• Right to data portability: in certain cases, you may request a copy of your personal data in a structured, commonly used and machine-readable format so that it can be transmitted to another controller.
• Right not to be subject to individual automated decision-making: you may request that no decisions be taken based solely on automated processing, including profiling, which produce legal effects concerning you or significantly affect you.

In some cases, the request may be refused if you ask for the deletion of data that is necessary for compliance with legal obligations. Likewise, if you have any complaint about the processing of your data, you may lodge a complaint with the data protection supervisory authority.

The data subject may exercise their rights:

By writing to OCA GLOBAL, Avinguda Can Fatjó dels Aurons, 1, 08173, Sant Cugat del Vallès (Spain), marked “Data Protection”, or by email to rgpd@ocaglobal.com with “Data Protection” in the subject line.

Enclosing with the request a copy of your national identity document (DNI) or equivalent identification document.

Security measures applied to the processing of your data

We apply security measures to ensure the confidentiality, availability and resilience of our personal data processing systems. We also carry out processes to verify and evaluate the technical and organisational measures implemented, in order to guarantee the security of personal data at all times.

Amendments to the privacy policy

This privacy policy may be amended. We recommend that you review it periodically.