DATA Privacy NOTICE

1.- DATA CONTROLLER

1.1.- Who is responsible for the processing of your data?

Identity: Brass & Fittings S.L (hereinafter, the Controller or the Data Controller).

Address: Zaragoza (Aragon, Spain) Polígono Cogullada, Alcalde Caballero 16.

2.- PURPOSE.

2.1.- What will the Data Controller use my data for?

The data you provide us with may be used by the Data Controller for one or more of the purposes that we will indicate below. Below, we set out the processing referred to in this privacy notice, without prejudice to the fact that there may be others for which you are informed or the appropriate authorisation is requested:

User registration.

To provide and manage your registration as a user, as well as to attend to those requests that you may make to us from the private area, including the preparation of budgets and offers that you request from us, whether or not they are a consequence of the extension of any service that we may be providing you at present.
Send you commercial communications related to the activities and services that we offer and that fall within your reasonable expectation in relation to the services previously contracted. This processing may cease if you object to it.
Administrative management of the relationship, including the management and processing of the collection of our services. Management may also include the communication and/or transfer of your data to one or more of the companies that are or may be part of our business group, all motivated by internal administrative management based on legitimate interest, which implies that your data will not be used by the rest of the group for any purpose other than that expressed herein, unless expressly consented to by you.
Processing derived from regulatory compliance: in the relationship with you, regulations may become applicable that oblige us or enable us to relate certain processing of your data, always for the purpose of complying with said regulations (or in exercise of the rights that they may grant us).

Requests for information.

When you contact us, for example, through the contact form on the website, by telephone, fax, e-mail, messaging services, social networks, or even in person, to ask us for information or consultation on a topic, make a suggestion, complaint or claim, we will process your data in order to respond to the request for information and/or query that you have made to us with the management and scope that it requires. This operation may include the use of the data received for the preparation of proposals for services and/or collaboration, in the event that this is indeed the request.

Commercial communications.

In the event that you authorise us to send you commercial communications (newsletters/offers, etc.), for example, by means of the contact form or by requesting it by email, we will process your data for the management and sending of the aforementioned newsletter, as well as commercial communications related to our activities, services and products, including electronically. You may withdraw consent at any time and terminate the processing set out above.

In the event that you have agreed to receive cookies when you start visiting this website, the website’s cookie notice will apply to you. We recommend that you visit the aforementioned notice where you can find out, among other things, the cookies used, their purpose and configuration options that you can adopt on your devices when viewing the page for example, deleting them.

2.2.- How long will you keep my data?

The retention periods of the data you provide us with are closely linked to the processing.

In this regard, we would like to inform you that in general we will process the data for as long as the legal relationship that takes place is maintained or you do not object to the processing.
Once the period indicated above has expired, we will keep your data on the one hand, as long as the regulations impose it on us and on the other hand, until the complete prescription of actions that may occur has been exhausted. These deadlines may be conditioned, among other factors, by the law applicable to the relationship between the parties.

2.2.1.- Deadlines related to treatments

– Processing related to information requests. We will process your data for as long as necessary to attend to and manage your request for information.

– Processing related to commercial communications. As long as you are a client and have not objected to the processing or in the event that you have expressly requested us to receive the communications, as long as you wish to continue receiving them and have not objected.

– Cookies. According to the type of cookies, expressed in the corresponding notice.

3.- LEGAL BASIS OF THE PROCESSING.
3.1.- Why can the Data Controller process my data? What legitimises it?
Depending on the relationship that is entered into and therefore the purpose of the processing, the legal basis of the same may be different. Below, we explain the different situations that may arise and what legal basis is applicable depending on the processing:

REGISTRATION

To provide and manage your registration as a user: We are entitled to carry out this processing by virtue of the pre-contractual or contractual relationship that binds us to you.
Administrative management and compliance with legal obligations: At the accounting and administrative level we need to process your data to comply with the obligations imposed by, among others, commercial, tax, money laundering regulations, so we are entitled to such processing by legal imperative.

ATTENTION TO REQUESTS FOR INFORMATION

Responding to requests for information: This processing is legitimised by virtue of the consent given by you at the time of sending your request for information and/or assistance.

COMMERCIAL COMMUNICATIONS

Newsletters and commercial communications: We will only send you commercial communications if you have previously and expressly consented to receive them. The lack of consent for the processing of your data for the purpose of sending you commercial communications will not affect in any case the processing of your query, assistance or request.
Related commercial communications: In accordance with the regulations currently in force and having weighed up our interests and your rights, we indicate that we have a legitimate interest in processing your data in order to send you commercial communications related to the services contracted by you with us (without prejudice to the fact that you may object to this processing at any time)

We are entitled to this processing by the consent given by you at the beginning of browsing our website.

3.2.- Consequences of withdrawing consent or opposition to the processing of your data. Mandatory and optional fields.

In the event that you are asked at any time to authorise the processing of a purpose that requires consent, its non-granting (or its eventual withdrawal subsequently) will not have consequences for you in any case.

4.- RECIPIENTS

4.1.- Will my data be transferred to third parties?

In the event that you contact us to request information about any of our products, the Data Controller will transfer your data to an official distributor to be in charge of attending to you, based on a criterion of proximity, availability, efficiency or internal organization.

In any case, some communications and/or transfers of data to third parties may be imposed by certain regulations, for example, tax (the communication of your data to the Tax Authorities). Other communications and/or transfers will be a necessary consequence of the provision of the service. As the Controller is part of a corporate group, we inform you that your data may be transmitted between the organisations of the group. In this regard, we inform you that none of the companies in the group are located in territories that do not offer adequate guarantees in terms of data protection. Such communication and/or transfer only responds to administrative and management purposes based on legitimate interest, which implies that your data will not be used by the rest of the group for any purpose other than that expressed herein, unless expressly consented to by you

4.2.-Providers of services related to the website and the e-mail service.

Hosting: the Controller’s website is hosted by the provider in arsys.es

5.- YOUR RIGHTS

5.1.- What rights do I have in terms of data protection? Overview.

With regard to the personal data collected for processing, you have the possibility of exercising your rights of access, rectification, deletion and portability. Likewise, we inform you that in certain circumstances you will have the right to request the limitation or opposition of the processing of your data, in which case the Data Controller will cease processing them and will only keep them in the event that there is a regulatory obligation that imposes it or until the statute of limitations of the actions that may occur.

If you want more information about the aforementioned rights, we invite you to continue reading or visit the infographic prepared by the Spanish Data Protection Agency accessible through the following hyperlink.

5.2.- What do these rights consist of?

Right of access: This right allows the data subject to obtain confirmation from the Data Controller as to whether or not personal data concerning him or her is being processed and, if so, the right of access to the personal data as well as to the following additional information: a) the purposes of the processing; (b) the categories of personal data concerned; (c) the addressees or categories of addressees; (d) the expected retention period or the criteria used to determine that period; e) the existence of the right to request from the controller the rectification or erasure of personal data or the restriction of the processing of personal data relating to the data subject, or to object to such processing; (f) the right to lodge a complaint with a supervisory authority; (g) available information on the origin of the data; (h) the existence of automated decisions.

Right to rectification: This right entitles the data subject to urge the Data Controller to rectify or complete inaccurate personal data without delay. It is important that the data contained in the databases are up to date and in this regard we are at your disposal to rectify any error or inaccuracy that may exist in them.

Right to erasure: At any time you have the right to request that we delete your personal data, a request that will be dealt with without delay, unless any of the circumstances provided for in the General Data Protection Regulation occur, including that we must keep your data to comply with a legal obligation or to be able to defend ourselves against a claim.

Right to data portability: In the case of automated data processing based on consent, you may ask us to send the personal data about you that you have provided to us to another data controller in a structured, commonly used and machine-readable format.

Right to object: Through this right, the interested party opposes the processing of their data by the controller. This right is not absolute, which means that the controller may continue to process the data provided that it can prove legitimate reasons that prevail over the interests and rights of the data subject or for the formulation, exercise and defence of claims.

Right to restriction of processing: This right confers on you, under certain circumstances indicated below, the right to request the controller to restrict the processing of your personal data. In the event that this right is exercised, the controller may only process the data with the consent of the interested party. The circumstances under which this right can be exercised are the following:

(I) the data subject contests the accuracy of the personal data, for a period of time that allows the controller to verify the accuracy of the personal data;

(II) the processing carried out by the controller is unlawful and the data subject opposes the erasure of the personal data and instead requests the restriction of its use;

(III) the data controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the establishment, exercise or defence of legal claims;

(IV) the data subject has objected to the processing, while it is verified whether the legitimate reasons of the controller prevail over those of the data subject.

5.3.- How and where can I exercise them?

We will be glad to answer any questions or complaints you may have regarding data protection. Likewise, you may address your complaint or exercise your rights through any of the contact methods indicated in the heading of this data privacy notice.

You can also contact the supervisory authority you consider appropriate to lodge your complaint (for example, in the country where you have your habitual residence, place of work or where you consider that the alleged infringement has occurred). For the appropriate purposes, we inform you that in Spain the Supervisory Authority is the Spanish Data Protection Agency, and you can exercise your rights through the forms that this entity has enabled for this purpose and that are available on its electronic headquarters.

5.4.- How long can it take to process my request to exercise rights?

The reference period is one month from receipt of your application. Notwithstanding the foregoing, this period may be extended by a further two months if necessary, taking into account the complexity and number of applications. The Data Controller will inform the interested party of any of these extensions within one month of receipt of the request, indicating the reasons for the delay.

5.5.- Will the exercise of these rights entail an expense for me?

The exercise of rights will not entail an expense, except in cases where manifestly unfounded or excessive requests are made, especially because they are repetitive, the Controller may charge a fee to compensate for the administrative costs of responding to the request or refuse to act (the fee may not imply additional income for the Controller, but must actually correspond to the true cost of processing the application).