The purpose of this Privacy Policy is to publicize the way in which we collect, treat, and protect the personal data that is provided through our website or blog (hereinafter Website) and freely decide if you want us to process them.

1. DATA OF THE RESPONSIBLE/SERVICE PROVIDER OF THE INFORMATION SOCIETY

2. PROCESSING OF PERSONAL DATA

The personal data that you have provided us will be treated confidentially and will be incorporated into the corresponding treatment activity owned by our entity. We request those essential data to meet your request, invoice if you make a purchase or contract, or maintain the relationship with your person if you request it or when we are obliged to be able to provide you services and/or attend to your purchases on this website.

3. PURPOSE

Your personal data will be processed for the sole purpose of meeting your requests, whether you are a client, supplier, user of our website, or job applicant. We do not send advertising without the prior consent of the user.

4. LEGITIMIZATION

The treatment of your data is carried out on the following bases:

• The request for information, job application, and/or hiring of our services and/or purchase of products.
  Free, specific, informed, and unequivocal consent since we inform you of this privacy policy, which after reading it and agreeing with it, you can accept by checking the boxes provided for this purpose.
• You can change your mind at any time and withdraw your consent.
• Our entity does not process data of minors.
• In the event that the user is under 14 years of age or disabled, it will be necessary to have the consent of the parents, guardians, or legal representative.

5. SECURITY MEASURES

Our entity has implemented all the technical and organizational measures necessary to protect the personal data processed, avoiding its loss, theft, or unauthorized use. These measures are periodically verified in our compliance controls with specific regulations.

6. DATA RETENTION

The personal data provided will be kept for the time necessary to fulfill the purpose for which they are collected and to determine the possible responsibilities that may arise from the purpose.

In the case of job applications, they will be kept for a maximum period of 1 year or until the interested party requests us to delete their data.

7. RIGHTS OF THE INTERESTED PARTIES

You have the right to know if our entity is treating your personal data; therefore, you have the right to access your data, rectify it if it is inaccurate, or request its deletion when the data is no longer necessary.

8. PROFILING

We do not create profiles using your personal data, but in the case of doing so, you will be informed and request permission to do so.

Similarly, you have the right to object to this type of treatment at any time.

9. TRANSFER OF DATA

Your personal data will not be transferred to other countries or to third parties except in cases where there is a legal obligation.

In the event of purchasing products or contracting services, your personal data may be transferred to those entities necessary to deliver the products purchased or provide you with our services.

Our bank will know your data for the management of the collection of products or services, as well as those in charge of the treatment necessary for the execution of contracts and/or purchases.

In case of assignments to other entities or to other countries, we will inform you and request your prior consent.

Corporate Data Protection Commitment

1. AREA OF APPLICATION

This Commitment will be mandatory for all departments, employees of our entity, and those who act on our behalf.

2. OBJECT

We have established protocols of action for the processing of personal data, in accordance with the provisions of Spanish and European data protection regulations, so that the security and confidentiality of these are guaranteed at all times.

3. BEGINNING

Legality, Loyalty, Transparency, Minimization of data, Accuracy, Limitation of the conservation period, Integrity, Confidentiality and Active responsibility.

4. SPECIAL CATEGORY OF DATA

The processing of personal data that reveals the ethnic or racial origin, political opinions, religious or philosophical convictions, union affiliation, the processing of genetic or biometric data, data related to health, or data related to sexual orientation, is prohibited. Except in the legally authorized exceptions and with the prior consent of the interested party.

5. RIGHTS OF THE INTERESTED PARTIES

The interested parties will have the right of access to their personal data, as well as to rectify them when they are inaccurate, delete them when they are no longer necessary or their treatment is not desired, limit them to certain treatments, have the possibility of receiving their data easily and in formats structured and commonly used by the person in charge, as well as their data being used for profiling and opposing treatment at any time.

6. ACTIVITY REGISTER, IMPACT ASSESSMENT, AND SECURITY MEASURES

Our entity will carry out a record of the treatment activities and will analyze the purposes of the treatment, categories of the interested parties and data, recipients, international transfers, conservation periods, etc., to evaluate the risks of the treatment and implement security measures necessary to safeguard personal data under the principles of confidentiality and secrecy. Likewise, we have analyzed the need to designate a Data Protection Delegate, establishing, if necessary, that the person designated for this position will comply with sufficient knowledge and experience in compliance with current regulations.

7. CONTROL

We have hired the services of an external consultant to carry out a periodic audit to assess compliance with this commitment and all legal obligations in this matter.