PRIVACY POLICY

INTRODUCTION

Your privacy is important to us, so through this document we explain what data we collect from users, how we use it and for what purpose, among other information.

For your information, we will never request more information than we actually need for the required services; we will never share it with third parties, except by legal obligation or with your prior authorization; and we will never use your data for any purpose other than those previously indicated.

As a User, you must read this Privacy Policy carefully on a regular basis and whenever you provide your personal data, as it may be modified. The provider has the authority to make changes to the information contained on the website in order to comply with regulations or to update this Policy. The provider is not obliged to notify Users in advance of the changes made, publication on the website being sufficient.

DATA CONTROLLER

Identity: BANDALUX INDUSTRIAL, SA (also the provider)
NIF: A08999161
Postal address: Avda. Sant Julià nº 235, 08403, Granollers, Barcelona
Email: rgpd@bandalux.es

BANDALUX INDUSTRIAL, SA, as the controller of the website, in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and the free movement of such data and other current regulations on personal data protection, as well as Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE), informs you that it has implemented the necessary security measures, both technical and organizational, to guarantee and protect the confidentiality, integrity and availability of the data entered.

BANDALUX INDUSTRIAL, SA will also act as Data Processor when providing internal services (marketing, customer service, order management and IT services) to the companies that make up BANDALUX.

METHODS OF DATA COLLECTION, DATA WE COLLECT AND PURPOSE

The data we collect, the way we obtain it and the purpose of the processing are as follows:

1. Video surveillance: Security of certain premises

• Required data: image
• Purpose: security of people, property and facilities (detailed information in the “video surveillance” section within this privacy policy)
• Legal basis: legitimate interest of the provider

2. Newsletter subscription form

• Required data: name, surname, email, telephone, company name, city, postal code, country
• Purpose: to send the User commercial information of interest regarding our products and/or services via email, SMS, social communities or any other electronic or physical means, if the User has expressly consented
• Legal basis: User consent

3. Contact form and/or request for information

• Required data: name, surname, email, telephone, company name, city, postal code, country
• Purpose: to respond to queries and/or provide information requested by the User
• Legal basis: User consent

4. Downloading content as a member

• Required data: name, surname, email, telephone, company name, city, postal code, country
• Purpose: to update and send content as a subscriber
• Legal basis: User consent

5. WhatsApp: the use of WhatsApp is detailed in the WhatsApp section of this privacy policy.
6. Carrying out the contractual relationship and administrative, tax and accounting procedures required by current legislation

• Required data: name and surname, telephone, address, ID number, email, signature
• Purpose: to carry out internal commercial, tax and administrative management
• Legal basis: consent of the data subject and contractual relationship

7. Trade fairs/events

• Required data: name, surname, email, telephone and company name
• Purpose: to maintain contact and inform you about our new products/services
• Legal basis: User consent

You may revoke your consent at any time by sending an email with the subject “Unsubscribe” to the email address indicated above.

In accordance with the LSSICE, BANDALUX INDUSTRIAL, SA does not carry out SPAM practices; therefore it does not send commercial communications by email that have not been previously requested or authorized by the User. Consequently, in all communications received from the provider, the User has the possibility of revoking their express consent to receive our communications.

We will not process your personal data for any purpose other than those described above, except by legal obligation or judicial requirement.

Your personal data will not be used for automated decision-making.

Failure to provide the requested personal data or to accept this privacy policy will make it impossible to achieve the purposes described above.

Where there is a prior contractual relationship between the parties, the legal basis for the administrative, tax and accounting obligations required under current legislation will be the prior commercial relationship established between the parties.

DATA RETENTION PERIOD

Your data will be kept for as long as the purpose for which it was collected remains in force, by legal obligation or judicial requirement, and as long as you do not withdraw your consent or exercise your right of deletion, opposition or restriction of processing.

However, we will retain your data within the legally established periods set out in applicable provisions.

RECIPIENTS OF DISCLOSURES OR TRANSFERS

BANDALUX INDUSTRIAL, SA will provide information to law enforcement authorities under a court order or by legal obligation. The information provided will only be that which the provider has available at that time. BANDALUX INDUSTRIAL, SA will carry out international data transfers when using the following tools necessary for the development of its activity, which may store your data:

• Mailing via MAILCHIMP, whose servers are located in the United States.

The information you provide through this website or through the application will be hosted on servers contracted by BANDALUX INDUSTRIAL, SA from the company that provides the website hosting service.

The processing of data by the aforementioned entities, as well as any other tools used by the provider, is regulated through a data processing agreement between the provider and these companies.

The controllers that form part of BANDALUX may rely on the transmission of personal data for internal administrative purposes among them, based on legitimate interest, in accordance with Recital 48 of the GDPR.

RIGHTS OF DATA SUBJECTS

As a User/Data Subject, you may request the exercise of the following rights before BANDALUX INDUSTRIAL, SA by sending a written request to the postal address indicated above or by email to rgpd@bandalux.es, indicating the subject: “DATA PROTECTION: RIGHTS OF DATA SUBJECTS”

Rights:

• Right of access: allows the data subject to obtain information about their personal data being processed.
• Right of rectification: allows errors to be corrected and inaccurate or incomplete data to be modified.
• Right of erasure: allows deletion of data that is inappropriate or excessive.
• Right to object: right of the data subject to prevent the processing of their personal data or to stop it.
• Restriction of processing: involves marking stored personal data in order to limit future processing for the exercise or defense of claims.
• Data portability: allows the data subject to receive the processed data and transfer it to another controller.
• Right not to be subject to automated individual decisions (including profiling): right not to be subject to a decision based solely on automated processing that produces legal effects or significantly affects the individual.

As a User, you also have the right to withdraw consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

You also have the right to file a complaint with the supervisory authority if you consider that your rights regarding the protection of your data may have been violated (aepd.es).

ADDITIONAL INFORMATION

SECURITY MEASURES

The data you provide will be treated confidentially. The provider has adopted all necessary technical and organizational measures and protection levels to guarantee the security of data processing and prevent alteration, loss, theft, unauthorized processing or access, in accordance with the state of technology and the nature of the stored data.

It is also guaranteed that the processing and recording in files, programs, systems or equipment, premises and centers comply with the integrity and security requirements established in current regulations.

LANGUAGE

The applicable language for this privacy policy is Spanish. Therefore, in the event of any contradiction between versions provided in other languages, the Spanish version shall prevail.

SOCIAL NETWORKS

We inform you that BANDALUX INDUSTRIAL, SA may have a presence on social networks. The processing of data carried out on individuals who become followers on social networks (and/or perform any connection action through them) of the official pages of BANDALUX INDUSTRIAL, SA will be governed by this section, as well as by the terms of use, privacy policies and access regulations belonging to the corresponding social network and previously accepted by the user.

BANDALUX INDUSTRIAL, SA will process your data in order to properly manage its presence on the social network, informing about activities, products or services of the provider, as well as for any other purpose permitted by social network regulations.

The publication of content is prohibited that:

• Is allegedly unlawful under national, EU or international regulations
• Violates fundamental rights of individuals
• Lacks courtesy online or generates negative opinions among users or third parties
• Or is considered inappropriate by BANDALUX INDUSTRIAL, SA

In general, content that violates the principles of legality, honesty, responsibility, protection of human dignity, protection of minors, public order, privacy, consumer protection and intellectual and industrial property rights is prohibited.

BANDALUX INDUSTRIAL, SA reserves the right to remove content considered inappropriate without prior notice.

If personal information is sent through a social network, BANDALUX INDUSTRIAL, SA will not be responsible for the security measures applicable to that platform; users must consult the specific conditions of the relevant network.

REMARKETING AND RETARGETING

Remarketing is a system that allows the creation of advertisements adapted or personalized for users who have previously visited a website, in this case ours. It is a solution associated with Google AdWords aimed at achieving a better return on investment (ROI). Remarketing inserts a cookie on the user’s computer and banners of the provider are displayed on websites affiliated with Google Adsense.

Retargeting is a technique used to display graphic ads on other websites through a tracking system to users who have left our website without completing a desired action (registration, purchase, request, etc.).

The information collected through these functions is gathered through cookies from:

• Meta
• “X”
• Doubleclick
• Google AdWords

If you do not want this information to be collected, you can disable Google cookies through Google Ads settings or disable third-party cookies through the Network Advertising Initiative opt-out page.

META ADS

The provider’s website uses Meta Ads, Meta’s advertising platform. It allows campaigns and ads to be created with segmentation based on:

• Location
• Demographic data (age, gender, etc.)
• Interests (activities, hobbies, etc.)
• Purchasing behavior online and through other channels

From the moment the user provides their data in the subscription form, the data obtained through Meta Ads is subject to this privacy policy.

“X” ADS

The provider’s website uses “X” Ads, the advertising platform of “X”. It allows campaigns and ads to be created with segmentation based on:

• Location
• Demographic data
• Interests
• Purchasing behavior

The data obtained through “X” Ads is also subject to this privacy policy.

GOOGLE ADWORDS

AdWords is a Google platform for advertisers who want to advertise on Google. The provider uses Google AdWords to create campaigns and ads that can be displayed on other websites.

Ads may be segmented by:

• Location
• Demographic data
• Interests
• Purchasing behavior

Any data obtained through Google AdWords is subject to this privacy policy.

The provider may select and publish customer testimonials, which may include identifying information such as name or city. If you wish your testimonial to be removed, you must contact the provider using the contact details above.

GOOGLE SIGNALS

Google Signals is a remarketing feature developed by Google that connects with Google Analytics. It associates website visit information with users who have logged in and explicitly consented to this functionality in order to personalize advertising.

This feature allows:

• Identification of users
• Recording of search and browsing history within the website
• Detection of whether the user has accessed the YouTube platform

It also provides aggregated and anonymized statistics on user behavior across devices and helps deliver relevant advertising.

WHATSAPP

Data processing carried out for individuals who make inquiries via WhatsApp to BANDALUX INDUSTRIAL, SA will be governed by this section and by the terms and privacy policies of the application accepted by the user.

The purpose of processing is to manage user inquiries and administrative management of the service.

Data is shared with:

• WhatsApp Ireland Limited
• WhatsApp LLC (USA), adhered to the EU-US Data Privacy Framework

No additional transfers are expected except legal obligations.

Data will be stored while necessary for the purpose and subsequently blocked and retained for legally required periods.

The use of the company WhatsApp account for sending illegal or inappropriate content is prohibited.

VIDEO SURVEILLANCE

Images are captured to preserve the security of people, property and facilities.

Users are informed through visible signage indicating that the premises are under video surveillance.

No transfers are expected except to law enforcement authorities.

Images will be stored for a maximum period of 30 days from capture, after which they will be deleted according to legal regulations.

CHANGES TO THIS PRIVACY POLICY

BANDALUX INDUSTRIAL, SA reserves the right to modify this policy to adapt it to legislative or case-law developments.

REVOCABILITY

Consent given for data processing or transfer may be revoked at any time by notifying BANDALUX INDUSTRIAL, SA under the conditions established in this Policy. Revocation will not have retroactive effect.

LEGISLATION

In general, relations between BANDALUX INDUSTRIAL, SA and Users of the telematic services present on this website are governed by Spanish legislation and jurisdiction, and the parties expressly submit to the Courts and Tribunals of Barcelona for the resolution of any conflicts arising from their use.