PRIVACY AND DATA PROTECTION POLICY

Through this website (www.industriasoriol.com), personal data necessary for the management and maintenance of some of our services is collected.

We inform you that THE WEBSITE OWNER (Data Controller) complies with Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (hereinafter, LOPDGDD), EU Regulation 2016/679 on Data Protection (hereinafter, GDPR) and other applicable regulations in force at any given time, ensuring the correct use and processing of the user’s personal data.

In accordance with Article 13 of the GDPR and Article 11 of the LOPDGDD, this Privacy Policy applies to the processing of personal data that INDUSTRIAS ORIOL 1942, SLU carries out as Data Controller, in relation to data that users and/or clients (natural persons) provide as a result of requesting information and/or contracting the services and/or products that it provides and markets through its website, or collected in any of the sections of the website.

IDENTITY OF THE DATA CONTROLLER OF YOUR PERSONAL DATA

  • Data Controller: INDUSTRIAS ORIOL 1942, SLU
  • Address: C/ CIUDAD DE ASUNCION, 56 – 08030 BARCELONA
  • Tax ID: B66324880
  • Email: quality@eurostil.com

PURPOSES OF PROCESSING YOUR PERSONAL DATA

Your personal data will be used for the general purpose of managing and controlling the established commercial relationship and, specifically for:

  • Managing full access and correct use of the services and/or products by users.
  • To communicate with users in response to incidents, requests, comments and questions submitted to us through the services and/or products, as well as through the contact forms on our website (including emails and/or telephone calls).
  • To provide, update, maintain and protect the services and/or products and activities.
  • To offer new services and/or products, special offers or updates.
  • Where applicable, to manage personnel selection processes in recruitment procedures for employees and/or collaborators.
  • Communications: We may send you emails, messages and other types of communication regarding the services and/or products, technical matters and changes to them. These communications are considered part of the services and/or products and you cannot opt out of them.
  • Where applicable, commercial communications (Marketing): We may use your data to contact you, both electronically and non-electronically, to conduct surveys, obtain your opinion on the service provided, and occasionally to notify you of changes, important developments in the services and/or products, offers and/or promotions of our services and/or products or those of third-party companies related to us. These commercial offers will, in all cases, be expressly and separately authorized by the user, who may revoke their consent to receive these notifications at any time using the mechanism implemented for this purpose, or from the customer account preferences.

We will not process your personal data for any purpose other than those described above unless required by law or there is a judicial requirement.

RETENTION PERIOD

The personal data provided will be retained and processed as long as the service and/or product provision relationship is maintained, without prejudice to the possibility of exercising your rights regarding data protection (access, rectification, deletion, objection, limitation, portability and not to be subject to automated individual decisions).

The personal data of persons interested in receiving information about the services and/or products will be kept in the system indefinitely until the interested party requests its deletion.

LEGAL BASIS FOR PROCESSING

INDUSTRIAS ORIOL 1942, SLU processes your personal data according to the following two (2) legal bases: Consent of the data subject (1) and legitimate interest (2).

  1. Consent of the data subject provided for the purposes described above, which will be requested:
  • Before proceeding to process your data,
  • During the customer registration process or,
  • At the time of sending communications from INDUSTRIAS ORIOL 1942, SL.

Information requests submitted to us require the interested party to voluntarily provide us with the necessary data to attend to them or provide the services and/or products. However, the interested party may freely refuse to provide us with such data or subsequently revoke the consent previously granted to process their data, although such refusal will make it impossible for us to attend to their request.

  1. Legitimate interest of INDUSTRIAS ORIOL 1942, SLU in maintaining and retaining its clients and/or users and better meeting their previously expressed expectations or interests, e.g.: improving products, managing requests, inquiries or complaints, offering products similar to those contracted, informing about promotions, etc., without prejudice to INDUSTRIAS ORIOL 1942, SL’s compliance with other obligations relating to the sending of commercial communications electronically.

INDUSTRIAS ORIOL 1942, SLU understands that, by providing us with such data, the interested party guarantees and is responsible for the truthfulness, accuracy and completeness of the data and expressly accepts and consents to its processing for the purposes described above.

RECIPIENTS OF DISCLOSURES OR TRANSFERS.

In general, INDUSTRIAS ORIOL 1942, SLU will not transfer your personal data to third parties unless we are legally obliged to do so or you have expressly authorized us to do so when using our services and/or products.

INDUSTRIAS ORIOL 1942, SLU will not carry out international transfers of personal data collected through this website, except in the following cases:

  • When the international data transfer is necessary for the performance of a contract or pre-contractual measures in which the data subject is a party.
  • When the international data transfer is necessary by application of current legislation.
  • When the international data transfer takes place with the express consent of the data subject.
  • When the international data transfer takes place because the website is hosted on servers located outside the European Economic Area.

In any case, in situations where international data transfers may take place, INDUSTRIAS ORIOL 1942, SLU will verify that the data importing country guarantees an adequate level of protection in accordance with current regulations.

RIGHTS OF DATA SUBJECTS.

Data protection regulations allow you to exercise your rights of access, rectification, objection, deletion (“right to be forgotten”), limitation of processing, portability and not to be subject to individualized decisions before the data controller:

  • Right of access: Allows the data subject to know and obtain information about their personal data undergoing processing.
  • Right of rectification: Allows correction of errors, modification of data that is inaccurate or incomplete and ensures the accuracy of your personal data.
  • Right of deletion: Allows you to request the deletion of your personal data when it is no longer necessary for the execution or provision of the service.
  • Right of objection: Allows the data subject to request that the processing of their personal data not be carried out or cease, except for legitimate reasons or for the exercise or defense of possible claims, in which case we will keep them blocked for the corresponding period.
  • Right to object to receiving advertising: Data subjects may object to receiving commercial communications. In that case, you may revoke your consent to receive these notifications at any time.
  • Limitation of processing: In certain circumstances, data subjects may request the limitation of processing of their data, in which case they will only be retained for the exercise or defense of claims.
  • Data portability: Data subjects may request to receive the data concerning them that they have provided to us or that—whenever technically possible—we send it to another data controller of their choice, in a structured, commonly used and machine-readable format.
  • Right not to be subject to automated individual decisions (including profiling): Data subjects have the right not to be subject to a decision based on automated processing that produces legal effects or significantly affects them.
  • Possibility of withdrawing consent: The data subject has the right to withdraw consent at any time, without affecting the lawfulness of processing based on the consent provided at the time of providing us with their data.

If you wish to exercise any of the rights set out above, please contact us using the contact details appearing in “Identification of the Data Controller of personal data,” including the following information: Name and surname, ID number, postal and email address, indicating the type of right and specifying the conditions thereof.

Possibility of filing a complaint with the Supervisory Authority: INDUSTRIAS ORIOL 1942, SLU also informs you of your right to file a complaint with the Spanish Data Protection Agency (www.agpd.es) if you consider that the processing does not comply with current regulations.

ADDITIONAL INFORMATION

Retention of certain data

INDUSTRIAS ORIOL 1942, SLU informs that, in compliance with the provisions of Law 25/2007, of October 18, on the retention of data relating to electronic communications and public communications networks, it must proceed to retain and preserve certain traffic data generated during the development of communications for the purpose of transferring them to authorized authorities when the legal circumstances provided therein occur.

Registered data

Our servers automatically collect information when the user uses the website services. This log data may include the IP address, device identification from which the products are accessed, the operating system, device configuration.

Security measures

In addition, you are informed that THE WEBSITE OWNER (Data Controller) has implemented the necessary technical and organizational security measures to guarantee the security of your personal data and prevent its alteration, loss and unauthorized processing and/or access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed, whether arising from human action or the physical or natural environment. Likewise, additional measures have been established to strengthen the confidentiality and integrity of information in the organization. Continuously maintaining supervision, control and evaluation of processes to ensure respect for data privacy.

PRIVACY POLICY FOR SOCIAL NETWORKS

This Social Network Privacy Policy of THE WEBSITE OWNER (Data Controller) applies to the personal data of users when registering through the profile and/or browsing with their social network user account. By registering with their social network ID, the user grants express consent for the processing of their personal data in accordance with this Privacy Policy.

Users who provide their personal data with the information available through their account and/or user profile on social networks are informed that the social network is responsible for the processing of personal data carried out, unless other conditions are expressly reported for a specific processing.

In accordance with applicable data protection legislation, THE WEBSITE OWNER/SOCIAL NETWORKS respects user privacy and the confidentiality and security of personal data, adopting the necessary legal, technical and organizational measures to prevent loss, misuse, alteration, unauthorized access and theft of the personal data provided, taking into account the state of technology, the nature of the data and the risks to which they are exposed.

Users’ personal data will only be obtained for processing when they are adequate, relevant and not excessive in relation to the scope and purposes for which they have been collected. Therefore, their processing will be limited to those purposes that have been indicated to Users in each case.

When personal data is collected, the user will be informed in advance clearly and unequivocally of the circumstances relating to the processing of their data, in accordance with the requirements of data protection regulations in force at any given time. Likewise, the personal data provided will be retained as long as the data subject does not request its deletion or rectification, does not object to their data continuing to be processed or, in those processing operations that require authorization, does not withdraw consent.

MINORS

Access and registration on the website or through social networks is prohibited for minors under 14 years of age. In the event that a minor or incapacitated person wishes to register, the intervention of the holder of parental authority or guardianship of the user or their legal representative will be necessary through a valid document proving the legal representation of the incapacitated user for access.

THE WEBSITE OWNER/SOCIAL NETWORKS will be expressly exempt from any liability that may arise from the use of social networks by minors or incapacitated persons.