PRIVACY POLICY

GLOBAL PRIVACY POLICY

Further to the provisions established in Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 and Fundamental Act 3/2018 of 5 December, on Personal Data Protection and to guarantee digital rights. This Privacy Policy must be obligatorily included on a website if any personal data of users are involved.

PERSONAL DATA PROTECTION

Grupo Aldesa, S.A. hereby informs its website users (www.aldesa.es) through this Privacy Policy about how it processes and safeguards the personal data of its users, which may be gathered from their browsing or the on-line procurement of services. A user’s utilisation of this website constitutes its acceptance of this Privacy Policy.

Grupo Aldesa, S.A. has adopted the necessary measures to guarantee data security, integrity and confidentiality pursuant to what is established in Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons, and Fundamental Act 3/2018, of 5 December, on Personal Data Protection and to guarantee digital rights, regarding the processing of personal data and the free movement of such data, as well as in Act 34/2002, of 11 July, on Information Society Services and Electronic Commerce.

Through the enrolment forms downloaded from this website, or by e-mail, each user’s personal data are gathered and processed. Such data processing is governed by this Privacy Policy. These data are necessary to manage and maintain some of the services provided by Grupo Aldesa, S.A.

PERSONAL DATA CONTROLLER

The controller in charge of processing any personal data provided by each user when entering and using the website is Grupo Aldesa, S.A. a construction group registered at the Commercial Registry of Madrid, Tome 25112, section 8, Companies Book, folio 1, sheet M-452290, holding fiscal identification number (CIF) A-85289155, domiciled in Calle Bahía de Pollensa 13 and 17, 28042 – Madrid, Spain. Should you wish to get in touch, please use the following telephone +34 913819220 and e-mail dpd@aldesa.es.

Data Protection Officer details: dpd@gesprodat.net.

Grupo Aldesa, S.A. undertakes to apply the computerised security measures foreseen in the foregoing regulations, in order to prevent unauthorised access or misuse of these data, their manipulation, impairment or loss. LENGTH OF THE DATA STORAGE Grupo Aldesa, S.A., as the data controller, undertakes to store and manage all personal data and information gathered through this website with the utmost confidentiality, whilst professional relations are ongoing and the data subject does not apply for an erasure; in any case, data will be stored for a maximum period of 5 years following the end of the professional relationship established between the user and Grupo Aldesa, S.A. Nevertheless, the data controller may keep such data, duly blocked, to handle any possible administrative or judicial claims.

PURPOSES OF THE DATA PROCESSING

All transactions, steps and technical procedures, both automated and not automated, enabling the collection, storage, alteration, transfer and other actions taken with personal data, will constitute personal data processing.

At Grupo Aldesa, S.A. we process any personal data provided by our users through www.aldesa.es in order to include then in our contact list, to handle any notice requests and/or any other service or information requested, thus using this information as a means to contact the company. Furthermore, the processing of these collected data also entails handling the delivery of any information requested and being able to respond to any user consultations or issues, forwarded through the website, in turn providing the data subjects with a range of services that may be of interest.

The registration fields must be obligatorily completed to enable Grupo Aldesa, S.A. to achieve the aforementioned purposes.

All users may object to our delivery of marketing correspondence at any time, by sending an e-mail to the above address.

LAWFULNESS OF THIS DATA PROCESSING

The processing of our users’ personal data is lawful on the following legal grounds:

• The procurement of services from Grupo Aldesa, S.A. and execution of the professional task commissioned, the terms and conditions of which will be made available to the user before any possible contract is signed. In order to be able to carry out this professional relationship requested, each data subject must provide its data.
• Your free, specific, informed and unequivocal consent. Following a reading of this Privacy Policy, all users are informed and, if in agreement, may accept it through a statement or clear affirmative action, such as checking the box provided.

If a data subject does not provide such data, or such data are mistaken or inaccurate, we will not be able to handle your request, as it will be impossible to provide you with the information requested or to handle the procurement of your services. Consequently, the data controller, Grupo Aldesa, S.A., will be released from any liability that may arise from failing to execute the professional task commissioned, or the consequences of such inaccurate or mistaken information.

DATA COMMUNICATION

In general, Grupo Aldesa, S.A. will not disclose these personal data to third parties, unless the provision of a service requires a contractual relationship with a data processor and this is strictly necessary in order to handle and maintain relations between the user and such company. This will only be carried out for the time necessary to facilitate performance of the contractual order, in the same conditions and with the same obligations that are binding on the controller. Once the order is completed, the data processor will return all personal data to the controller and will erase any copy it may have.

In turn, access to such personal data will only be allowed to third parties with whom Grupo Aldesa, S.A. has a legal or contractual obligation to provide such data. This includes, for example, the Ombudsman and any Judges and Tribunals examining proceedings related to ongoing claims.

DATA SUBJECT RIGHTS

In the terms established in current laws, all users are entitled to at any time exercise their rights of access, rectification or data erasure, to request a limitation on this processing, to raise an objection, to request their data portability, and to revoke their consent. All these rights are recognised in such EU Regulation. Such rights may be exercised by the user itself by sending a request to the following e-mail: ARCOPOL@aldesa.es.

To enable the effective exercise of these rights, all users will ascertain their identity by providing their full name, a photocopy of their identity card (DNI) or equivalent identification, through a request describing the request, means of communication (postal address or e-mail) for notification purposes, signed and dated by the applicant.

Furthermore, all users may bring a claim before the Spanish Data Protection Agency (the competent supervisory authority in the matter), particularly if no satisfactory response is obtained upon exercise of their rights, by sending a letter to the following Agency address: calle Jorge Juan, nº 6, 28001 - Madrid, or on-line, at: https://www.aepd.es/es.