Privacy Policy


Who is the data controller?
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (GDPR), and with the rest of the legislation applicable in Spain regarding the protection of personal data, we hereby inform you that the personal data provided when completing and sending the forms published on this website will be processed by TOLSA, SA (hereinafter, TOLSA), with registered office at Calle Nuñez de Balboa nº 51, 28001, Madrid (Spain)
Madrid, as the party responsible for the processing of the personal data provided.

For what purpose and on what basis do we process the data obtained through this website?
– To respond to queries for information about TOLSA. Legal basis of legitimacy: the express consent given by ticking the acceptance checkbox (Art.6.1 a) RGPD).
– For the management of CVs. Legal basis of legitimacy: consent of the data subject. (Art.6.1 a) RGPD).

To whom will we communicate your personal data?
– To maintenance services, IT services, administrative, commercial, human resources and technical services of TOLSA, S.A..
– Those third parties, public bodies and institutions to whom it is legally obligatory to provide them, as well as the State Security Forces and Bodies and jurisdictional bodies.

How long will we keep your data for?
The personal data obtained through the contact or information request form will only be kept for the time necessary to deal with and follow up your request.
The personal data of our clients will be kept for the duration of the contract and thereafter until the prescription of possible responsibilities.
Personal data relating to job candidates will be kept for a period of one year from the end of the selection process.

How can you exercise your rights in relation to your personal data?
To revoke the consents granted, as well as to exercise the rights of access, rectification, cancellation, suppression, opposition, limitation, portability and not being subject to automated decisions, you can send a written request to the following e-mail address or to the address Calle de Nuñez de Balboa nº 51, 28001, Madrid (Spain).

The request must include: name and surname(s) of the interested party; copy of their National Identity Document, passport or other valid identification document of the interested party and, where appropriate, of their representative, as well as proof of representation; address for the purpose of notifications and specification of the purpose of the request.
In the event that the interested party considers that the aforementioned rights have not been complied with in accordance with current legislation, he/she may file the corresponding claim for the protection of rights before the Spanish Data Protection Agency