Privacy Policy

1. USER INFORMATION
REMACHES TUDELA, S.L. provides you with this privacy policy to inform you, in detail, about how we treat your personal data and protect your privacy and the information you provide us, by any means (website, email, telephone, in person, online or paper forms, etc.).
In the event of future modifications to the same, we will inform you through the web page or other means, so that you may be aware of the new privacy conditions introduced.
In compliance with Regulation (EU) 2016/679, General Data Protection and Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights we inform you of the following:
Responsibility of the user / interested part
By providing us with your data, you warrant that you are at least 18 years of age and that the data provided to REMACHES TUDELA, S.L. are true, accurate, complete and up to date. To this effect, the user confirms that he/she is responsible for the veracity of the data communicated and that he/she will keep such information conveniently updated, so that it corresponds to his/her real situation, being responsible for any false or inaccurate data that he/she may provide, as well as for any damages, direct or indirect, that may result therefrom.

 

2. RESPONSIBLE FOR THE TREATMENT
Identity: REMACHES TUDELA, S.L.
CIF: B71052435
Registered address: Pol. Ind. Las Labradas – C/ Cantabria, Naves, 14.8-14.9 – 31500 Tudela (Navarra)
Postal address: Apartado de correos nº 31 – 31500 Tudela (Navarra)
Phone number: 948827121
E-mail: info@remachestudela.com/old-site

 

3. PURPOSES, STORAGE PERIODS AND LEGITIMACY OF THE PROCESSING OPERATIONS

REMACHES TUDELA, S.L., as Responsible for the treatment of the personal data that the Part provides, as well as those that may be provided in the future, informs you that these data will be treated in accordance with the provisions of current regulations on the protection of personal data, so it is provided the following information about the treatments:

PROFORMA INVOICES / QUOTATIONS

Purpose of treatment: the preparation and delivery of pro forma invoices and/or estimates requested by the Interested Parties, as well as to be able to follow up on them by telephone, telematically or in person.

Data retention criteria: data will be retained for the time necessary to process and respond to the query.

Legitimation for data processing: RGPD: 6.1.f) the legal basis for the processing of data is based on the legitimate interest of the Data Controller to attend and respond to communications or requests received.

CUSTOMERS

Purpose of treatment: management and contracting of products and services offered by our company, customer management, maintenance of contractual and/or commercial relationships with them, as well as administrative management (billing, collections, etc.), accounting and tax management of the company and for compliance with the legal obligations that all this implies. Includes contact details of individuals providing services to a legal entity, including sole practitioners.

Data retention criteria: data will be retained for as long as the contractual and/or commercial relations between both parties are maintained and their deletion is not requested and, in the event of doing so, for the time provided for by the regulations in force (tax, commercial, etc.) regarding the prescription of responsibilities.

Legitimation for data processing: RGPD: 6.1.b) the legal basis for data processing is the execution and maintenance of contractual and/or commercial relations between both parties, as well as compliance with legal obligations (tax, commercial, etc.) that all this implies.

SENDING COMMERCIAL COMMUNICATIONS

Purpose of processing: to send information by any means, postal or electronic, about events, activities, offers, products, services and other information of the Data Controller, which may be of interest to the Data Subject.

Data retention criteria: data will be kept in the system indefinitely as long as the data subject does not request its deletion.

Legitimation for data processing: RGPD: 6.1.f) the sending of commercial information to customers is based on the legitimate interest of the Data Controller to send them commercial communications about products or services similar to those contracted and thus achieve their loyalty.
RGPD: 6.1.a) The basis for sending commercial communications to non-customer users is the consent provided by the Interested Party at the time of collecting the data.
However, in either case, the data subject has the right to object to this processing, and may do so by any of the means described in this document.
The withdrawal of such consent shall in no case affect the maintenance of business relations, but the processing of data for this purpose previously carried out shall not lose its lawfulness because the consent has been withdrawn.

SUPPLIERS

Purpose of treatment: management of suppliers, maintenance of contractual and/or commercial relations with them, as well as the administrative (invoicing, collections, etc.), accounting and fiscal management of the company and for the fulfillment of the legal obligations that all this implies. Includes contact details of individuals providing services to a legal entity, including sole practitioners.

Data retention criteria: data will be retained for as long as the contractual and/or commercial relations between both parties are maintained and their deletion is not requested and, in the event of doing so, for the time provided for by the regulations in force (tax, commercial, etc.) regarding the prescription of responsibilities.

Legitimation for data processing: RGPD: 6.1.b) the legal basis for data processing is the execution and maintenance of contractual and/or commercial relations between both parties, as well as compliance with legal obligations (tax, commercial, etc.) that all this implies.

VIDEO SURVEILLANCE

Purpose of processing: temporary storage of images captured by video surveillance cameras in order to preserve the security of persons, goods, facilities and merchandise.

Data retention criteria: will be kept for a maximum period of 30 DAYS, except when they have to be kept to prove the commission of acts that threaten the integrity of persons, property or facilities, or are provided to the courts and the State Security Forces and Corps.

Legitimation for data processing: GDPR: 6.1.e) the processing is necessary for the performance of a task carried out in the public interest, ensuring the security of persons, property and premises.

Communication of data: data will not be communicated to third parties, except to the Security Forces and Corps, Courts and Tribunals, or by a legal obligation.

4. DATA COMMUNICATION

In general, personal data will not be communicated to third parties, except in cases where there is a legal obligation or where it is necessary for the provision of services or for the maintenance and development of relations, such as, but not limited to:

  • Public Administrations, Judges and Courts, for the fulfillment of legal obligations and for the attention of possible liabilities arising from the treatment of applicable regulations.
  • Financial/banking entities, for the management of collections and payments.

Although it is not a transfer of data, for the performance of any of the treatments indicated or to provide a service, it may be that third party companies, acting as Data Processor (our suppliers), access your information to carry out the aforementioned treatment or service. These persons in charge access your data following our instructions and without being able to use them for a different purpose and maintaining the strictest confidentiality.

International transfers
REMACHES TUDELA, S.L. does not intend to make international transfers of your data to countries outside the European Economic Area (EEA). Where necessary, only to recipients who are located in a country, territory or specific sector(s) of that country or international organization that has been declared adequate level of protection by the European Commission; or are under the Privacy Shield agreement; or are covered by one of the appropriate safeguards provided for in Article 46(2) of Regulation (EU) 2016/679.

5. RIGHTS OF INTERESTED PARTIES

Any person has the right to obtain confirmation as to whether or not the Data Controller is processing personal data concerning him/her, as well as to withdraw, at any time, any consent he/she may have given for any specific purpose, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
Data protection regulations allow you to exercise your rights of access, rectification, deletion and portability of data and opposition and limitation to their processing, as well as not to be subject to decisions based solely on the automated processing of your data, where appropriate.
These rights are characterized by the following:

  • -They are free of charge, except in the case of manifestly unfounded or excessive requests (e.g. repetitive nature), in which case the Data Controller may charge a fee proportional to the administrative costs incurred or refuse to act.
  • You may exercise your rights directly or through your legal representative or volunteer.
  • We must respond to your request within one month, although, taking into account the complexity and number of requests, the deadline may be extended by an additional two months.
  • We have the obligation to inform you about the means to exercise these rights, which must be accessible and without being able to deny you the exercise of the right for the sole reason of choosing another means. If the request is submitted electronically, the information will be provided electronically whenever possible, unless you ask us to do otherwise..
  • If the Data Controller does not comply with the request, he/she will inform you, within one month at the latest, of the reasons for his/her inaction and the possibility to complain to a Control Authority.

How to exercise these rights?

Interested parties may exercise their rights by sending a written communication to the postal or e-mail address of the Data Controller, indicating in the reference “EXERCISE OF DPA RIGHTS”, including: the request in which the request is made, address for notification purposes, date and signature. You may also exercise your rights through legal representation, in which case, in addition to the ID of the interested party, you must provide ID and proof of representation of the third party.
You must prove your identity by attaching a photocopy or, where appropriate, a scanned copy of your ID card or equivalent document in order to verify that we are only responding to the interested party or his legal representative, in which case you must provide proof of representation.
Upon request, we will provide you with the forms to exercise these rights, indicating which right you wish to exercise.
Likewise, and especially if you consider that you have not obtained full satisfaction in the exercise of your rights, we inform you that you may file a complaint with the National Control Authority by contacting the Spanish Data Protection Agency, C/ Jorge Juan, 6 – 28001 Madrid.

 

6. SOCIAL NETWORKS

REMACHES TUDELA, S.L. uses social networks and this is another way to reach you. The information collected through the messages and communications you post may contain personal information that is available online and accessible to the public. These social networks have their own privacy policies, which explain how they use and share your information, so we recommend that you consult them before using them to confirm that you agree with the way in which your information is collected, treated and shared.
The processing of the data of persons who become followers and/or make any link or connection action through the social networks of the official pages of the Data Controller shall be governed by this privacy policy and by the privacy policies of the social networks themselves.
The Data Controller will process your data for the purposes of properly managing your presence in the relevant social network, send personal and individual messages through the channels of the social network, inform you of activities, products and / or services of the Data Controller, or third parties that may be related to our activity, as well as any other treatment that the regulations of social networks may allow.

 

7. COOKIES

In general, if you browse the Internet you can accept or reject cookies from the configuration options of your browser.
This website may use cookies and other similar technologies such as local shared objects, flash cookies or pixels, which are small files that some platforms, such as web pages, can install on the user’s equipment (computer, tablet, smartphone, etc.).

Their functions can be very varied: storing browsing preferences, collecting statistical information, enabling certain technical functionalities, storing information about the user’s browsing habits or their equipment, etc.
Cookies are useful for several reasons. From a technical point of view, they allow web pages to work in a more agile way and adapted to the user’s preferences, such as storing the user’s language or the country’s currency, etc. In addition, they help the Controllers of the websites to improve their services and to make more efficient the advertising displayed on them, thanks to the statistical information or habits that they collect through them.
For the installation and use of certain cookies it is necessary to obtain the informed consent of the users. The cookies that require the user’s consent are, among others, analytical, advertising and affiliation cookies, with the exception of those of a technical nature and those necessary for the operation of the website or the provision of services expressly requested by the user.
The user has the possibility to configure his browser to be alerted of the reception of cookies and to prevent their installation on his computer. Please refer to your browser instructions for more information. For more information about cookies see our Cookies Policy.

 

8. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

The Interested Party, by checking the corresponding boxes and entering data in the fields marked as mandatory in the various forms, expressly and freely and unequivocally accept that their data are necessary to meet their request by the Data Controller, being voluntary the inclusion of information in the remaining fields.
If not all data is provided, it is not guaranteed that the information and services requested will be completely tailored to your needs.

 

9. SECURITY MEASURES

REMACHES TUDELA, S.L. is committed to protect your personal information: Using physical, organizational and technological measures, controls and procedures, reasonably reliable and effective, aimed at preserving the integrity and security of your data and ensuring your privacy.
In addition, all personnel with access to personal data have been trained and are aware of their obligations in relation to the processing of their personal data.
In the case of the contracts we sign with suppliers, we include clauses requiring them to maintain the duty of secrecy regarding the personal data to which they have had access by virtue of the assignment, as well as to implement the necessary technical and organizational security measures to guarantee the confidentiality, integrity, availability and permanent resilience of the systems and services for the processing of personal data.
All these security measures are reviewed periodically to ensure their adequacy and effectiveness.
However, absolute security cannot be guaranteed and no security system is impenetrable, so in the event that any information under our control and under our control is compromised as a result of a security breach, we will take appropriate steps to investigate the incident, notify the Control Authority and, where appropriate, those users who may have been affected to take appropriate action.