PRIVACY POLICY
This Privacy Policy applies to the processing of personal data by ALTAQUIMICA SA (hereinafter, the “Company”) within its websites, apps and any other electronic medium or digital platform on which the Company processes personal data.
1.- Data Controller
ALTAQUIMICA SA, with Tax ID (CIF) A58415712, registered office at C/ Casp 86, 08010 Barcelona, and email altaquimica@altaquimica.com, is the controller of the data provided. We inform you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights.
2.- Legal Basis for Processing
The legal basis for processing your data is the consent obtained from the user. Users, by checking the corresponding box, expressly and freely and unequivocally accept that their data is necessary to handle their request by the provider. The user guarantees that the personal data provided is true and is responsible for communicating any change to it.
All data requested through the web service is mandatory, as it is necessary for the provision of the service. If not all data is provided, it is not guaranteed that the information and service provided will fully meet your needs.
The legal basis for the processing of data under European Regulation 2016/679 of the European Parliament and of the Council:
- Obtaining data through the website’s contact forms; Art. 6.1 a) the data subject has given consent to the processing of their personal data for one or more specific purposes.
- Receipt of commercial communications for having checked the box for that purpose or subscribing to the newsletter; Art. 6.1 a) the data subject has given consent to the processing of their personal data for one or more specific purposes.
- Performance of a contract between the client and the Data Controller for the sale of products or provision of a service; Art. 6.1 b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
- Invoicing of the products sold or the service provided to the client; Art. 6.1 c) processing is necessary for compliance with a legal obligation to which the controller is subject.
3.- Purpose of Processing
The purpose is to maintain a commercial relationship with the user of the Company’s websites, apps and any other electronic medium or digital platform. To carry out the processing, the planned operations are:
- Processing orders, requests or any type of petition made by the user through any of the contact methods made available to them.
- Sending advertising commercial communications related to our products and services by any electronic or physical means, present or future, that makes it possible to carry out commercial communications, when the user has given consent to do so.
- If you provide us with your CV data or send us your CV, we will use your data for the management of the contact and of the selection processes we carry out.
4.- Data Retention
Data will be kept as long as there is a mutual interest in maintaining the purpose of the processing. When it is no longer necessary for that purpose, it will be deleted with appropriate security measures to guarantee its total destruction. The personal data provided by the data subject will be kept, even when its deletion has been requested by the data subject, limiting its processing solely for compliance with legal obligations and/or the exercise or defense of claims.
5.- Your rights when you provide us with your data
The user is entitled to the rights of:
- Right of Access, Article 15 of the GDPR.
- Right to Rectification, Article 16 of the GDPR.
- Right to Erasure (Right to be Forgotten), Article 17 of the GDPR.
- Right to Restriction of Processing, Article 18 of the GDPR.
- Right to Data Portability, Article 20 of the GDPR.
- Right to Object, Article 21 of the GDPR.
These rights are:
- To know whether or not we process your data.
- To access the personal data of yours that we hold.
- To rectify your data that is incorrect.
- To request the deletion of your data or to withdraw the consent given.
- To request the restriction of the processing of your data, in which case it will only be kept in accordance with the regulations in force.
- Portability of your data: it will be provided to you in a structured, commonly used format. We can also send it to the new controller you indicate. This is only valid in certain cases.
You are also entitled to file a complaint with the supervisory authority, www.aepd.es, if you consider that the processing does not comply with the regulations in force.
To exercise your rights, the user must send a photocopy of their ID card or passport to: ALTAQUIMICA SA, with Tax ID (CIF) A58415712, registered office at C/ Casp 86, 08010 Barcelona, and email altaquimica@altaquimica.com.
6.- To which recipients will your data be communicated
The Company expressly informs and guarantees users that their personal data will under no circumstances be transferred to third parties, except in cases where there is a legal obligation or if it is necessary for the development and execution of the purposes of the Processing.
The data provided to our service providers (accountancy firm, etc.) is carried out under the signing of the Data Processor contract required by the regulations in force on Data Protection.
If any type of transfer of personal data were to be carried out, the express, informed and unequivocal consent of the users will be requested beforehand.
7.- Minors
If you are a minor user, you must have the prior consent of your parents or guardians before proceeding to include your personal data on our website. The “Company” is exempt from any liability for non-compliance with this requirement.
8.- Security Measures
In accordance with the provisions of the regulations in force on the protection of personal data, the provider is complying with all the provisions of the regulations for the processing of personal data and the principles described in Article 5 of the GDPR.
It is guaranteed that appropriate technical and organizational policies have been implemented to apply the security measures established by the GDPR and the LOPDGDD, in order to protect the rights and freedoms of users, and they have been provided with adequate information so that they can exercise them.
9.- International Data Transfers
The data we collect is stored within the European Economic Area. In the event that it can be transferred and processed in a country outside the European Economic Area, an adequate level of protection of personal data is guaranteed.