No items found.

Evolution and performance

Purpose

Management and control of the various actions carried out by the entity for the performance evaluation of employees and talent management through Business Partner (coaching actions, improvement and incentivization, evaluations and objective controls, etc.).


Entity in charge


The legal bases for processing are:

  • Article 6(1)(b) of GDPR: Processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract.
  • Article 6(1)(f) of GDPR: Processing is based on the legitimate interests pursued by the controller.

Data retention periods

Data will be stored for four years or for the time necessary to comply with the purpose for which they were collected and to determine the possible liabilities that could derive from that purpose and data processing. The provisions of the file and documentation regulations applicable to Navantia will apply.


Affected groups

Employees of Navantia.


Data type - Infringement

Not processed.

Data types - Special categories

Not processed.

Data type - Identification data

  • Name and surname
  • NIF (NIE, Passport or Residence card number)
  • Postal address
  • Telephone
  • Email
  • Image

Data type - Other

  • Personal, academic, and professional characteristics
  • Employment details and/or job performance
  • Preferences
  • Physical or virtual location data
  • Online identity
  • Web browsing
  • Electronic communications metadata

Security measures

The security measures applied correspond to those provided in Annex II (Security Measures) of Royal Decree 311/2022, of May 3, which regulates the National Security Scheme in the field of Electronic Administration and are described in the documents forming part of Navantia’s Data Protection and Information Security Policy. Security measures corresponding to Annex A of UNE-EN/IEC 27001 - Information Security Management Systems.

Additionally, security measures are adopted on paper documentation based on the risks to which they are exposed to ensure the confidentiality of the data processed.


Communication

Not foreseen.


International transfers

Not foreseen.