1. Data controller
In accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), we inform you that the personal data provided through this website will be processed by:
- Controller: [TO BE COMPLETED: name or company name]
- Tax ID: [TO BE COMPLETED]
- Address: [TO BE COMPLETED: full address]
- Phone: +34 664 738 666
- Email: [TO BE COMPLETED: contact email]
- Data Protection Officer (DPO): [TO BE COMPLETED if applicable, or state “not applicable”]
2. Purpose of processing
We process the information provided by data subjects for the following purposes:
- To handle requests for information, quotes and enquiries made through the contact form or other channels.
- To manage the business relationship and the provision of the contracted services.
- To send commercial communications about our products and services, only where the user has given express consent.
No automated decisions will be made and no profiles will be created based on the data provided.
3. Legal basis
The legal basis for processing the data is:
- The consent of the data subject (art. 6.1.a GDPR) when submitting their data through the website’s forms.
- The performance of a contract or pre-contractual measures (art. 6.1.b GDPR) when requesting a quote or service.
- The fulfilment of legal obligations (art. 6.1.c GDPR) applicable to the controller.
4. Retention period
Personal data will be kept for as long as the business relationship is maintained, for the time necessary to fulfil the purposes for which it was collected and, subsequently, for the periods legally required to address any potential liabilities. [TO BE COMPLETED if specific periods are to be stated].
5. Recipients
Data will not be transferred to third parties, except where legally required. Where applicable, service providers acting as data processors (for example, web hosting, accounting services or communication tools) may have access to the data, under the corresponding data processing agreements. [TO BE COMPLETED: list of processors if details are to be provided].
6. Rights of data subjects
Any person has the right to obtain confirmation as to whether we are processing personal data concerning them. Data subjects may exercise the following rights:
- Access to their personal data.
- Rectification of inaccurate data.
- Erasure of data when it is no longer necessary.
- Restriction of or objection to processing.
- Data portability.
- Withdrawal of consent given, without affecting the lawfulness of prior processing.
These rights may be exercised by writing to [TO BE COMPLETED: email or address for exercising rights], enclosing a copy of a document proving your identity. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe the processing does not comply with current regulations.
7. Security measures
The controller adopts the technical and organisational measures necessary to guarantee the security of personal data and to prevent its alteration, loss, unauthorised processing or access, in line with the current state of technology.
8. Accuracy of data
The user guarantees that the data provided is accurate and undertakes to notify any changes to it. The user will be liable for any false or inaccurate information provided.
Last updated: [TO BE COMPLETED: date].