Privacy Policy

Additional information on the processing of personal data

Applicable legal framework

This Privacy Policy has been prepared to inform users and visitors in accordance with the principles of lawfulness and fairness governing the processing of personal data under Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights.

Scope of this Privacy Policy

This policy explains and provides information about the personal-data processing carried out through this website, including data collected through forms, cookies or email. In some cases, it may also explain how offline processing is performed.

Who is the data controller?

Company: INDUPANEL, S.L.
Tax identification number (CIF): B15747868
Registered in the Commercial Registry of A Coruña, volume 2375, folio 214, sheet C 25068
Postal address: Polígono Industrial O Acevedo, Cerceda, 15185, A Coruña, Spain
Telephone: +34 981 68 55 67
Email: web@indupanel.es

For what purposes do we process your data?

We collect different types of personal data for separate processing activities, each with a specific purpose.

Data collected through the contact link or contact form on our website is processed to respond to your enquiry.

Data collected through cookies is processed as described in our Cookie Policy. This website uses cookies that are exempt from consent.

When emails are exchanged, any data contained in those messages, including attachments, may be incorporated into processing activities in order to respond to the relevant enquiry or request and, where applicable, added to the customer record. The information exchanged is confidential and may not be disclosed to unauthorised persons.

Data contained in customer records is processed to manage the contracted service and issue the corresponding invoices.

Where data is obtained from business contacts, it is processed to keep them informed about our products and services.

What is the legal basis for processing your data?

Processing through contact links or forms is based on the data subject’s consent (Article 6(1)(a) GDPR).

Customer-data processing is necessary for the performance of a contract (Article 6(1)(b) GDPR).

Commercial-data processing is based on the controller’s legitimate interests (Article 6(1)(f) GDPR).

Data collected through technical cookies is processed on the basis of the controller’s legitimate interests (Article 6(1)(f) GDPR); data relating to non-technical cookies is processed on the basis of the data subject’s consent (Article 6(1)(a) GDPR).

How long do we retain your data?

Data collected through the contact link will not be retained for longer than twelve months.

Customer-record data will be retained until the data subject requests its deletion. Billing data will be retained for at least five years.

Data exchanged by email will be retained for at least five years and will be deleted after that period.

Commercial contact data will be retained until the data subject objects to its processing.

Who receives your data?

Data collected through the website contact link is received through an email service managed from the website back office, which is hosted within the European Union.

International data transfers

No data is transferred to third countries.

Your rights

You have the right to access, rectify and erase your personal data. Where applicable, you may also request data portability, object to all or part of the processing, and request restriction of processing.

You may withdraw any consent you have given at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, contact INDUPANEL at web@indupanel.es. If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), C/ Jorge Juan 6, 28001 Madrid, Spain.