Privacy policy

Information provided in accordance with Articles 13-14 of the GDPR (General Data Protection Regulation) No. 2016/679 (hereinafter "Regulation")

0. FOREWORD
The purpose of this page is to inform users about the policies observed by SAEXPA Industria de Expositores y Parrillas, S.A., headquartered at C/ Can Gurri, ship 9-10 Pol. Industrial El Pla 08185 Lliçà de Vall Barcelona España, regarding the collection, storage, use and possible disclosure of any personal information of users assumed as part of the use of the services offered in the saexpa.com website. This privacy policy is subject to updates and changes. Such eventualities will be communicated via newsletter or will be highlighted in the appropriate sections of the site. In any case, we recommend that you check this privacy policy periodically. SAEXPA Industria de Expositores y Parrillas, S.A. guarantees compliance with the aforementioned regulations, inviting users to carefully read this Privacy Policy before sending any personal information, specifying that this notice is made only for this site. The management and ownership of the www.saexpa.com website belongs exclusively to SAEXPA Industria de Expositores y Parrillas, S.A.

1. DATA CONTROLLER AND DATA PROTECTION OFFICER
The holder of the data processing is SAEXPA Industria de Expositores y Parrillas, S.A., Listed on the Companies' Register Barcelona,tom 6612, llibre 5894, secció 2a, foli 132, fulla 77911, inscripció 1era, with registered office at C/ Can Gurri, ship 9-10 Pol. Industrial El Pla 08185 Lliçà de Vall Barcelona - España. SAEXPA has appointed a Data Protection Officer or "DPO" whom you can contact at: saexpa@saexpa.com for any information pertaining to SAEXPA's processing of personal data, including the list of data processors.

2. TYPES OF DATA COLLECTED
The Data Controller, informs that, for the normal operation of the site, will process data that by their nature can be defined as personal data. Personal data means any information relating to a natural person, identified or identifiable, even indirectly, by reference to any other information, including a personal identification number. The personal data processed through the site are as follows:

a) Browsing Data
During the normal operation of the site, computer systems and software procedures acquire some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.

b) Common personal data
To access certain services on the site, you may be required to provide common personal data. Such personal data could be, but are not limited to: first name, last name, e-mail address, telephone number, etc.

c) Cookies
See the cookie policy at the following link.

3. PURPOSES OF PROCESSING
The data you provide, including data of a personal and possibly particular nature, will be processed for the following purposes:
a. to respond to any contact requests received by e-mail;
b. to carry out administrative-accounting activities in general. For the purposes of the application of the provisions on the protection of personal data, processing carried out for administrative-accounting purposes are those related to the performance of activities of an organizational, administrative, financial and accounting nature, regardless of the nature of the data processed. In particular, internal organizational activities, those functional to the fulfillment of contractual and pre-contractual obligations and information activities pursue these purposes.

4. METHODS OF PROCESSING
The processing will be carried out in paper and/or computerized form, but in any case with appropriate measures to ensure maximum security, by specially trained and appointed individuals. The data collected for the purposes referred to in sect. 3(a,b) will be kept for the time strictly necessary for the fulfillment of these purposes. More information regarding the data retention period and the criteria used to determine this period may be requested by writing to SAEXPA Industria de Expositores y Parrillas, S.A. at the following address: saexpa@saexpa.com

5. LEGAL BASIS AND MANDATORY OR OPTIONAL NATURE OF THE PROCESSING
The legal basis for the processing of personal data for the purposes referred to in Section 3 (a) is Article 6(1)(b) of the Regulations as the processing is necessary for the provision of services or for the response to requests from the data subject.

6. RECIPIENTS OF PERSONAL DATA
Your personal data may be shared, for the purposes set out in section 3, with:
a. subjects acting as data processors i.e.: subjects with whom it is necessary to interact for the provision of services (e.g. hosting providers), or subjects delegated to carry out technical maintenance activities;
b. subjects, entities or authorities to whom it is mandatory to communicate your personal data by virtue of legal provisions or orders of the authorities;
c. persons authorized by SAEXPA Industria de Expositores y Parrillas, S.A. to process personal data necessary to carry out activities strictly related to the provision of services, who have committed to confidentiality (e.g., employees of SAEXPA Industria de Expositores y Parrillas, S.A.).

7. RIGHTS OF DATA SUBJECTS
The data subject is granted specific rights:

1. the interested party has the right to obtain confirmation of the existence or non-existence of personal data concerning him/her, even if not yet registered, and their communication in intelligible form;

2. the interested party also has the right to obtain information on: the origin of personal data; the purposes and methods of processing; the logic applied in case of processing carried out with the aid of electronic instruments; the identification details of the owner, managers and designated representative and their contact details; the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them as designated representative in the territory of the State, managers or agents.

3. the data subject also has the right to obtain: the legitimate interests pursued by the data controller or third parties; the recipients or categories of recipients of the personal data, if any; the intention of the data controller to transfer the personal data to a third country or international organization and the existence or absence of a Commission adequacy decision; the data retention period or, if this is not possible, the criteria used to determine this period; the existence of an automated decision-making process; the right to lodge a complaint with the supervisory authority; the right to be informed if the disclosure of the data constitutes a legal or contractual obligation or a necessary requirement for the conclusion of the contract.

4. the interested party also has the right to obtain:
a) the updating, rectification or, when interested, the integration of data;
b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed;
c) certification that the operations referred to in letters a) and b) of this paragraph have been brought to their attention, including their content; the names of those to whom the data were communicated or disseminated, except where this proves impossible or involves a manifestly disproportionate to the protected right.

5. finally, the data subject has the right to object, in whole or in part:
a) on legitimate grounds, to the processing of personal data concerning him/her, even if pertinent to the purpose of collection;
b) to the processing of personal data concerning him/her for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.

The data subject may exercise the rights listed above by contacting the Data Protection Officer at the following address: saexpa@saexpa.com.

SAEXPA Industria de Expositores y Parrillas, S.A., will provide appropriate feedback without delay, and in any case within a period not exceeding 1 month. In the case of particular complexity, the deadline for the response, in accordance with the Regulations, may be 3 months. In any case, the data controller will inform the data subject within 1 month of the request, also to communicate the denial in the cases specifically contemplated in the provisions in force.

8. RIGHTS TO COMPLAIN TO THE SUPERVISORY AUTHORITY
We also inform you that pursuant to Articles 77 et seq. of EU Reg. 2016/679, should you consider your rights to have been infringed, you may appeal to the Data Protection Authority as well as to the ordinary judicial authority.

9. LANGUAGE
Any translation of this document into languages other than Spanish is provided for informational purposes only. In case of discrepancies, the only legally valid and binding version is the Spanish version of this document.

SAEXPA Industria de Expositores y Parrillas, S.A.
C/ Can Gurri, nave 9-10 Pol. Industrial El Pla 08185 Lliçà de Vall
Barcelona España
NIF A-58047150
Inscrita en el Registro Mercantil de Barcelona, tomo 6612, libro 5894, sección 2ª, folio 132, hoja 77911, inscripción 1ª