Privacy policy

PROCESSING OF PERSONAL DATA

At ALCOR S.L. we care about the personal data that we process and about accurately observing the rules in force on protection of personal data, inter alia, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC and Organic Law 3/2018, of 5 December, on Protection of Personal Data and Safeguarding of Digital Rights.

In accordance with the aforementioned, information is provided on the following issues related to the way in which we process personal data at ALCOR S.L.:

Who is the controller of your personal data?

ALCOR S.L.
C/ Arriurdina, 11
01015 Vitoria-Gasteiz
(Álava, Spain)

info@alcorgrupo.com
+34 945 12 31 62

 

Registration data: ALCOR S.L. is registered in the Commercial Registry of Álava, in Volume 1.672, Folio 34, Section 8, Sheet VI-19.332.

Principles of processing

Personal data are processed by the aforementioned in compliance with the principles established in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter, GDPR):

  • Principle of lawfulness, fairness and transparency: the data that we collect are processed lawfully, fairly and transparently, with prior consent being given by the data subjects when necessary or, where appropriate, for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, or if processing is necessary for compliance with an applicable legal obligation or for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
  • Purpose limitation principle: the personal data that we process are used for the purposes stated in the section “For what purpose do we use your personal data?”.
  • Data minimisation principle: in accordance with this principle, the only personal data that we collect from users are those which are strictly necessary in order to manage the contractual relationship or to be able to attend to any enquiries or requests that they make to us.
  • Accuracy principle: the personal data that we collect shall remain accurate and, where necessary, kept up to date. To this end, in the event that any change is made to their personal data, the user must inform us of this so that we can make take appropriate steps to update these data.
  • Storage limitation principle: the personal data that we process shall be stored for the periods stated in the section “How long will we keep your personal data?”.
  • Integrity and confidentiality principle: in order to fulfil this principle, personal data shall be processed in a manner that ensures appropriate security of the aforementioned, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical and organisational measures for this.

What categories of personal data do we process?

The categories of data that we process via this website are as follows:

  • Data collected via the contact form: name, e-mail address and comment or message sent by the user.

All personal data that are requested in the contact form are mandatory, therefore if the user fails to provide all of these, we shall not be able to attend to any enquiry or request that they make.

In turn, information is collected via cookies about the way in which users use the website, pages visited, origin, geographical location and IP addresses. However, this information shall be collected in an aggregate way, in other words, without identifying users. Please consult the Cookies policy for information about the cookies used.

For what purpose do we use your personal data?

We use the personal data that users provide us with via the contact form to manage and respond to any enquiries or requests that they make.

What is the legitimation for processing your personal data?

The legal basis that legitimises the processing of personal data that we are provided with by data subjects upon completing the contact form is their need for the legal relationship to be fulfilled (handling of the enquiry or request made) which is established when contacting us via the aforementioned.

How have we obtained your personal data?

All the personal data that we process at ALCOR S.L. are provided to us by the data subjects themselves or their legal representatives.

The personal data that we collect via this website have been collected by means of the enabled contact form or by means of the e-mail address provided to communicate with us.

To whom will your personal data be disclosed?

The personal data of users who communicate with us via the contact form shall not be disclosed unless this is necessary to manage any enquiries or requests that they make to us or for legal obligations to be fulfilled.

Nonetheless, for some other issues we use third party services. These third parties act as processors and we have signed the appropriate data processing contract with them pursuant to Article 28(3) of the GDPR.

International transfers of data

We do not make international transfers of data unless this is necessary for the performance of a contract to which the data subject is party or for legal obligations to be fulfilled.

However, since we use Google Analytics analytics cookies, this implies that there are international transfers of data. Please consult our Cookies policy for information in this regard.

How long will we keep your personal data?

The personal data that users provide us with by filling in the contact form shall only be stored while the enquiries or requests that they make to us are being managed. Thus, once the aforementioned have been handled, their data shall be erased.

What are your rights when you provide us with your personal data?

  • Right to request access to your personal data: in order to know and verify the lawfulness of processing, you may request confirmation from us at any time that ALCOR S.L. is processing your personal data and, in any case, we shall inform you, inter alia, about the data that we are processing, their purpose, origin of the data, envisaged period for which the data will be stored and, where appropriate, recipients or categories of recipients.
  • Right to request their rectification: you may request that we rectify any personal data that are inaccurate or that we complete any which are incomplete, including by means of a supplementary statement. In this case, in your request you must indicate the data that you are referring to and the correction that must be made. This must be accompanied, where appropriate, by supporting documents that provide evidence of the inaccuracy or incomplete nature of the data subject to processing.
  • Right to request their erasure (“right to be forgotten”): you may request that we erase your personal data and stop processing them if they are no longer necessary for the purposes for which they were collected or otherwise processed, you withdraw your consent, the personal data have been unlawfully processed or have to be erased for compliance with a legal obligation.
  • Right to request the restriction of processing of your personal data: in this case ALCOR S.L. shall only store your personal data for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest.
  • Right to portability of your personal data: you may request that we deliver your personal data to you or to another controller whom you have indicated to us, in a structured, commonly used and machine-readable format.
  • Right to object to processing: ALCOR S.L. shall no longer process your personal data as you have indicated, unless we must continue processing these due to compelling legitimate grounds or for the establishment, exercise or defence of possible legal claims.

How to exercise your data protection rights: to exercise your rights you must send us a request in writing addressed to ALCOR S.L. at Polígono Industrial Júndiz – calle Arriurdina, no. 11 C.P. 01015 in Vitoria (Álava) or send an e-mail to info@alcorgrupo.com. Where necessary, we may ask for a copy of your National Identification Card (D.N.I.) in order to verify your identity.

ALCOR S.L. shall respond to all requests within the periods and in accordance with the requirements stipulated by the rules in force on protection of personal data.

How to lodge a complaint with the Spanish Data Protection Agency: if you consider that we have not appropriately processed your personal data or that we have not duly handled the exercise of your data protection rights, you may lodge a complaint with the Spanish Data Protection Agency, either on its website or at its registered office, at calle Jorge Juan, no. 6, C.P. 28001 in Madrid.

Please go to www.aepd.es for more information on data protection rights and complaints with the Supervisory authority.

Security

In accordance with the provisions of Article 32 of the GDPR, ALCOR S.L. has taken the appropriate technical and organisational measures to ensure a level of security appropriate to the risk.

In order to assess the appropriate level of security, account has been taken in particular of the risks that are presented by processing, in particular from accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to personal data transmitted, stored or otherwise processed.

Duty of secrecy

ALCOR S.L. has taken measures to guarantee that any person acting under its respective authority who has access to the personal data with which we are provided by users may only process them following instructions of the company, and must also safeguard the appropriate professional secrecy of the aforementioned, which shall have an unlimited duration.

To this end, our employees have signed a confidentiality and duty of secrecy document with regard to the information and personal data that they process on the occasion of the employment relationship with the company.

Use of the website by children

We ask users to read the policies on use of the website by children that we have published in the “Legal notice” of our website.

Cookies

Cookies are small text files which are stored in the hard disk or in the memory of the computer that accesses or visits the pages of certain websites, so that the preferences of the user may be known when they connect again. The cookies stored in the hard disk of the user may not read the data contained in it, access personal information or read the cookies created by other providers.

Please go to the “Cookies policy” section for information about the cookies used on this website.

Text dated: 7 March 2023