PrivacyPolicy

The purpose of this Policy is to inform data subjects about the various processing carried out by this organization through the website and affecting their personal data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights.

1. IDENTIFICATION AND CONTACT DETAILS OF THE PERSON RESPONSIBLE

GRUPO GRECO GRES INTERNACIONAL S.L., with Tax Identification Number B45883949, domiciled at Paseo de la Finca 34, Pozuelo de Alarcón -28223 (Madrid), contact telephone number +34 925 500 054 and e-mail lopd@grecogres.com.

You may consult the identity and contact details of GRUPO GRECO GRES companies acting as Joint Data Processors, by requesting information through the e-mail address indicated above.

2. PURPOSES OF THE PROCESSING OF YOUR PERSONAL DATA

Users/navigators of the website of the responsible party

We will process the personal data provided to:

Attend to requests, complaints and incidents transferred through our contact channels incorporated in the website.
Understand the behavior of the surfer within the web in order to detect possible computer attacks on our website.
Comply with the legal obligations that are directly applicable to us and regulate our activity.
Protect and exercise our rights or respond to claims of any kind.
Where appropriate, send commercial communications relating to goods or services that make up our business and/or news or newsletters related to our industry. Your refusal to provide us with authorization will imply the impossibility of sending you information from the entity.
Where appropriate, manage their participation in contests and promotions conducted by the entity. Your refusal to provide us with your authorization will make it impossible for you to participate.
If applicable, to send satisfaction and/or quality surveys. Your refusal to provide authorization will make it impossible to evaluate the service provided.
Manage your registration on the entity’s web platform and generate a username and password. Your refusal to provide us with authorization will make it impossible to register on the platform.

Customers
In addition to the purposes indicated in the section “users/navigators of the website”, we will process your personal data provided for:

Manage the commercial relationship.
Facilitate the requested budget.
Manage your appointments.
Manage the purchase, shipment and reception of the purchased product.
Carry out administrative, accounting and tax formalities.

Candidates for job offers or job applicants
In addition to the purposes indicated in the section “users/navigators of the website”, we will process your personal data provided in order to:

Manage your application in the selection process and inform you about it.
Where appropriate, for the transfer of your data to entities that make up GRUPO GRECO GRES. Your refusal to provide us with the authorization will imply the impossibility of sending you information about vacancies/selection processes of other entities that make up the group.

Employees/business representatives
In addition to the purposes indicated in the section “users/users of the website”, we will process your personal data provided for the following purposes:

Management of the private area.

3. LEGAL BASIS FOR PROCESSING

Users/navigators of the website of the responsible party

In the consent you have given us to process your data for the purposes indicated. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
To comply with the legal obligations that apply to us. In this case, the data subject may not refuse the processing of personal data.
In our legitimate interest to protect our image, business and track record by preventing attacks on our website. In this case, the data subject may not refuse the processing of personal data, although he/she may exercise, where appropriate, the rights recognized in the “rights” section of this Policy.

Customers

Execution of a contract to which you are a party or application of pre-contractual measures. The refusal to provide your personal data will result in the impossibility of processing your data for the aforementioned purposes.
In the consent you have given us to process your data for purposes unrelated to the development or execution of the existing contract. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
To comply with the legal obligations that apply to us. In this case, the data subject may not refuse the processing of personal data.
In our legitimate interest to protect our image, business and track record by preventing attacks on our website. In this case, the data subject may not refuse the processing of personal data, although he/she may exercise, where appropriate, the rights recognized in the “rights” section of this Policy.

Candidates for job offers or job applicants

In the consent you have given us to process your data for the purposes indicated. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
To comply with the legal obligations that apply to us. In this case, the data subject may not refuse the processing of personal data.
In our legitimate interest to protect our image, business and track record by preventing attacks on our website. In this case, the data subject may not refuse the processing of personal data, although he/she may exercise, where appropriate, the rights recognized in the “rights” section of this Policy.

Employees/business representatives

In the consent you have given us to process your data for the purposes indicated. Refusal to provide your personal data will result in the impossibility to process your data for the aforementioned purposes.
Execution of a contract to which you are a party or application of pre-contractual measures. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
To comply with the legal obligations that apply to us. In this case, the data subject may not refuse the processing of personal data.
In our legitimate interest to protect our image, business and track record by preventing attacks on our website. In this case, the data subject may not refuse the processing of personal data, although he/she may exercise, where appropriate, the rights recognized in the “rights” section of this Policy.

4. WEBSITE ADD-ONS AND TOOLS

You can access our Cookies Policy to learn about the full set of cookies and tools used on our website.

5. DATA RETENTION PERIODS OR CRITERIA

The personal data provided will be kept for the time necessary to fulfill the purposes for which they were initially collected.

Once the data are no longer necessary for the treatment in question, they will be kept duly blocked in order to, if necessary, make them available to the competent Public Administrations and Bodies, Judges and Courts or the Public Prosecutor’s Office, during the period of limitation of the actions that may arise from the relationship maintained with the client and/or the legally stipulated retention periods.

In the event that you have provided us with your curriculum, we will keep your data for a maximum period of two years from the receipt of the same, at which time we will proceed to its deletion, unless you have proceeded to update your data or have authorized us to keep them for a longer period of conservation than indicated. For appropriate purposes, we inform you that you may revoke your consent at any time.

Period of data blocking:

CIVIL CODE. Between 1 and 5 years depending on the case, in accordance with the provisions of articles 1964.2 and 1968.2 of the aforementioned body of law.
THE COMMERCIAL CODE. For 6 years, in accordance with the provisions of article 30 of the aforementioned legal body. It applies with respect to commercial information related to invoices issued and received, receipts, rectifying invoices, bank documents, etc.
THE GENERAL TAX LAW. For 4 years in accordance with the provisions of articles 66 to 70 of the aforementioned legal body. It applies to information related to tax obligations.

6. AUTOMATED DECISIONS AND PROFILING

The website does not make automated decisions nor does it create profiles.

7. RECIPIENTS

For the duration of the processing of your personal data, the organization may transfer your data to the following recipients:

Judges and Courts.
State Security Forces and Corps.
Other authorities or competent public bodies, when the responsible has the legal obligation to provide personal data.
Where appropriate, to those Data Processors who provide us with services.
Banks and Financial Institutions.
Likewise, your data may be shared with GRUPO GRECO GRES companies for the correct administrative management of the same.

8. INTERNATIONAL DATA TRANSFERS

The organization does not carry out any International Data Transfer. In the event that it is subsequently necessary to make international data transfers, the degree of protection of the destination country shall be verified and the guarantees required by the regulations shall be adopted.

9. SOCIAL NETWORKS

In order to make you a participant of our activity, and so that you can be aware of our news, we inform you that we have created a profile in the social networks.

All users have the opportunity to join our social networks or groups. However, you should be aware that, unless we request your data directly (for example, through marketing actions, contests, promotions, or any other valid way), your data will belong to the corresponding social network, so we recommend that you carefully read their terms of use and Privacy Policies, as well as, make sure to configure your preferences regarding the processing of data.

Below, we detail the link to the Privacy Policy to the various social networks in which we have presence, so you can access at all times to Privacy Policies and configure your profile to ensure your privacy:

10. PRIVACY POLICY REGARDING VISITORS

In accordance with the provisions of the RGPD and the LOPDGDD, we inform you that the data collected prior to access to our facilities, meet the purpose of controlling such access by interested parties, as well as to ensure the safety of the facilities and the people who are in them, based on our legitimate interest.

The data provided will not be transferred to third countries or transferred to any third party, except by legal obligation, and will be retained for a maximum period of one month, counting from the collection thereof.

Additionally, we inform you that the facilities are equipped with a video surveillance system, which complies with the requirements of current regulations. The purpose of this security system is to preserve the safety of people and property, as well as its facilities, equipment and materials.

The data collected through the CCTV shall be deleted within a maximum period of one month from its capture, except when they have to be kept to prove the commission of acts that threaten the integrity of persons, goods or facilities. In this case, the images will be made available to the competent authority.

For more information about the processing of your data and to exercise your rights, please refer to the following section.

11. RIGHTS

Interested parties may request more information about the processing of their personal data as well as exercise at any time and free of charge, the rights of access, rectification and deletion, as well as request to limit the processing of their personal data, oppose to it, request the portability of these (whenever technically possible) or withdraw the consent given and, where appropriate, not to be subject to a decision based solely on automated processing, including profiling.

To do so, you may use the forms provided by the organization, or send a letter to the postal address or e-mail address referred to in the heading. For the appropriate purposes, we inform you that you may be asked for your ID card or any other similar document, in order to prove your identity, provided that this cannot be done by other less intrusive means.

In case you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Control Authority (Spanish Data Protection Agency), through its website www.aepd.es.

In compliance with the provisions of Article 21 of Law 34/2002 of services of the information society and electronic commerce, if you do not wish to receive more information about our services, you can unsubscribe by sending an email to the address lopd@grecogres.com, with subject “UNSUBSCRIBE”.

12. VERACITY OF THE DATA

The interested party guarantees that the data provided are true, accurate, complete and up to date; undertaking to inform of any change with respect to the data provided, through the channels provided for this purpose and indicated in point one of this Policy. The user will be responsible for any damage or harm, both direct and indirect, that may be caused as a result of non-compliance with this obligation.

In the event that the user provides data of third parties, he/she declares that he/she has the consent of the interested parties and undertakes to transfer the information contained in this clause, exempting the organization from any liability arising from failure to comply with this obligation.

13. MODIFICATIONS AND UPDATING

This Privacy Policy may be modified/updated according to the established legal requirements or with the purpose of adapting said Policy to the instructions issued by the Spanish Data Protection Agency, or as a result of changes in our website. For this reason, we advise users to periodically visit our Privacy Policy.

If you have any questions about this Policy, you can contact us through the forms provided by the organization, or send a letter to the postal address or email address referenced in the heading.