Privacy policy
Last updated: 22 September 2026. In case of discrepancy, the Spanish version prevails.
Data controller
- Crisol Obras y Servicios, S.L. (COS), tax ID B12753422.
- Address: C/ Puig Roda 20, 12003 Castellón de la Plana, Spain.
- Phone: +34 964 22 89 15.
- Data protection contact: RGPD@cosconstruccion.com.
What data we process and why
We only process the data you give us yourself, through the website forms or by email:
- Contact form: your name, email, profile, area of interest and message, to reply to you and, if you ask us to, prepare a proposal.
- Job applications: first name, surname, email, phone, years of experience, cover letter and CV, to assess you for the vacancy you apply for or, for open applications, in the selection processes we run.
- Clients and suppliers: the data needed to manage the contractual relationship and meet our administrative, accounting and tax obligations.
Please do not include special categories of data in your CV, such as health, beliefs or religion, unless they are needed for the job. We do not make automated decisions or build profiles with your data, and we will not send you advertising unless you ask for it.
Legal basis
- Contact and applications: your consent, given when you send the form (art. 6.1.a GDPR), and steps taken at your request before entering into a contract (art. 6.1.b).
- Clients and suppliers: performance of the contract (art. 6.1.b) and compliance with legal obligations (art. 6.1.c).
You can withdraw your consent at any time, without affecting the processing carried out until then.
How long we keep your data
- Contact: as long as needed to answer your enquiry and, if a business relationship follows, for as long as it lasts.
- Applications: for the duration of the selection process and then for up to one year, so we can consider you for other vacancies, unless you ask us to delete it sooner. After that, it is deleted together with the CV.
- Clients and suppliers: for as long as the relationship lasts and then for the periods required by commercial and tax law.
Who we share it with
We do not share your data with third parties unless required by law. The providers that give us hosting, website maintenance and email services only access it to provide that service, as data processors bound by a contract that obliges them to protect it (art. 28 GDPR).
If any of those providers processes data outside the European Economic Area, it does so with the safeguards required by the GDPR, such as an adequacy decision or standard contractual clauses.
Your rights
You can ask us at any time to:
- Access your data.
- Correct it if it is inaccurate, or erase it.
- Restrict or object to its processing.
- Receive it in a structured format to take it to another controller (portability).
- Withdraw your consent.
Write to RGPD@cosconstruccion.com or by post to C/ Puig Roda 20, 12003 Castellón de la Plana, Spain, stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask you to prove it. If you are not satisfied with our reply, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Security
We apply appropriate technical and organisational measures to protect your data. The website and its forms run over an encrypted connection (HTTPS), and only authorised COS staff can access applications and CVs.
Changes to this policy
We may update this policy when the website or the law changes. The date of the last update appears at the top.