Privacy Policy

Privacy Policy

 1.       Object

The purpose of this Privacy Policy is to explain how we collect, process and protect the personal data that you as a User have provided to us through our website or blog (hereinafter Website) and freely decide whether you want us to process it.  

 It also aims to comply with the General Personal Data Protection Regulation 2016/679 (hereinafter GDPR) and the Organic Law 3/2018 on the protection of personal data and guarantee of digital rights (hereinafter LOPDGDD).

2.      Identification of the Responsible Party / Information Society Service Provider

3.       Processing of personal data

The personal identification, contact, credit card and other data that you have provided us with through our purchase, registration, subscription, contact, e-mail, etc. forms will be treated confidentially and only by personnel authorised by our company.

All categories and types of personal data processed will be duly identified in the corresponding processing activities owned by our entity.

4.       Purpose

If you are a customer or supplier, your personal data will be processed for the sole purpose of maintaining the pre- and post-contractual, business or commercial relationship, whether for the sale of products, for accounting and billing management, or other purposes to which we are obliged to comply with that relationship.

We only send advertising with your express consent and only about products or services related to those already purchased or provided.

If you are a potential customer or an information seeker, we will process your data exclusively to deal with your requests, including in our reply commercial information only related to your request.

If you are a job applicant, we will process your data to include you in our selection processes and job vacancies.

The purposes for which personal data are processed will be duly identified in the corresponding processing activities owned by our entity.

5.       Legitimation

The processing of your personal data by our company is carried out on the following legitimate bases:

• Express, free, informed and unequivocal consent, since we inform you of this privacy policy, which after reading it and if you agree, you can voluntarily accept by ticking the boxes provided for this purpose.

• The request made voluntarily by you for information, employment, contracting our services, or purchasing our products.

• For the performance of the contractual, business or commercial relationship with you.

• For the defence of our interests.

• To attend to the exercise of your rights regarding the protection of personal data.

• For the fulfilment of other legal obligations.

For the fulfilment of other legal obligations.

In the event that the applicant for information is under 14 years of age, it will be necessary to have the consent of the parents, guardians or legal representative in order to process their data.

The user is solely responsible for the veracity of the data he/she sends us.

6.        Data retention

The personal data provided will be kept for the time necessary to fulfil the purpose for which they are collected, for the time required by law and for as long as it is necessary to determine possible liabilities arising from the processing mentioned in the purposes.

In the case of job applications, they will be kept for a maximum period of 1 year or until the data subject asks us to delete his or her data.

7.       Profiling

We do not create profiles using your personal data, but if we do, we will inform you and ask for your prior permission to do so.

 You also have the right to object to such processing at any time.

8.       Transfer of data

If you are an enquirer or user of our website, your data will not be passed on to third parties, unless we are legally obliged to do so.

 If you are a job applicant, your data will not be passed on to other companies.

 If you are a customer, your personal data may be disclosed to third parties as required by law (e.g. tax authorities), or in those cases and entities necessary to pay for the delivery of the purchased products (e.g. transport companies).

If you are a supplier, your personal data may be disclosed to third parties for legal obligations (e.g. tax authorities), or for the payment of invoices (e.g. banks).

 Your personal data as a customer or supplier may also be processed by certain suppliers to whom we delegate some of our obligations (e.g. accountants). All of them have undertaken, by means of a data processor contract, to comply with the same security measures implemented by our company, as well as to submit to the duty of secrecy and confidentiality of the personal data processed.

 In the case of transfers to other entities or to other countries outside the EEA, we will inform you and ask for your prior express consent.

9.      Safety measures

Our company has implemented all the necessary technical and organisational measures to protect the personal data processed, preventing their loss, theft or unauthorised use.

 These measures have been created on the basis of the type of data processed and the purposes for which it is processed. They are regularly verified in our internal controls of compliance with personal data protection regulations and by means of external audits.

10.   Rights of data subjects

You have the right to know whether your personal data is being processed by our entity; therefore, you have the right to access your data, rectify it if it is inaccurate or request its deletion when the data is no longer necessary, provided that this is legally possible.

You may also exercise your right to opposition, limitation or portability if you deem it appropriate, and to do so you may do so in writing by e-mail to info@businessadapter.es, attaching a copy of your ID card to provide us with your identification.

If you wish to make a suggestion, complaint or query about the processing of your personal data by our organisation, please contact us at info@arc-warm.com

 If the person wishing to exercise their rights is under 14 years of age, they may do so through their parents, guardians or legal representative.

If you wish to make a complaint on the grounds that your rights have been infringed, you can do so at the Spanish Data Protection Agency, C/ Jorge Juan, 6, 28001 Madrid or at www.aepd.es.

11.   Commitment to Personal Data Protection

 Scope of application

Our commitment to the protection of personal data shall be binding on all departments, employees of our organisation and those acting on our behalf.

 Object

We have established protocols for the processing of personal data, in accordance with the provisions of European and Spanish data protection regulations.

 Principles

Lawfulness, Fairness, Transparency, Data minimisation, Accuracy, Retention period limitation, Integrity, Confidentiality and Active Liability.

Special category of data

The processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, the processing of genetic or biometric data, data concerning health or data concerning sexual orientation is prohibited, except in legally authorised exceptions and with the prior consent of the data subject.

Rights of data subjects

Data subjects shall have the right of access to their personal data, as well as the right to have them rectified if inaccurate, erased if no longer necessary or if processing is no longer desired, to limit certain processing, to have the possibility to receive their data easily and in structured and commonly used formats from the controller, to have their data used for profiling purposes and to object to the processing at any time.

Registration of Activities, Impact Assessment and Security Measures

We will keep a record of processing activities and analyse the purposes of processing, categories of data subjects and data, recipients, international transfers, retention periods, etc., in order to assess the risks of processing and implement the necessary security measures to ensure the confidentiality, integrity and availability of personal data.

We have also analysed the need to draw up an Impact Assessment and appoint a Data Protection Officer, establishing, if necessary, that the person appointed to this post has sufficient knowledge and experience in accordance with current legislation.

 Control

We also have external consultants who monitor any publication made by the competent control bodies and other European and Spanish entities related to data protection regulations, in order to comply with these regulations at all times.   

 12.   Updating this Policy

We reserve the right to modify this policy without prior notice. We therefore recommend that you consult it each time you visit our website.

 The Management

Updated on 28 February 2022