PRIVACY POLICY
The purpose of this policy is to inform data subjects about how this organization processes personal data through its website, in accordance with the provisions of Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights, and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR).
1. IDENTIFICATION AND CONTACT DETAILS OF THE CONTROLLER
The data controller is FABRIENVAF NUCA SL, located at C/ Guadaira No. 12, Polígono Industrial Carretera de la Isla, 41703 Dos Hermanas, Seville, Spain.
Tax ID (N.I.F.): B41998220
Phone: +34 683 382 563
Email: rgpd@nucamaxelmilagrito.com
2. PURPOSES OF DATA PROCESSING
● WEBSITE USERS/VISITORS
We process your personal data submitted through our website forms for the following purposes:
To respond to inquiries, complaints, or incidents communicated via our contact channels.
To understand user behavior on the website and detect potential cyber-attacks.
To comply with legal obligations directly applicable to our business activities.
To protect and enforce our legal rights and respond to legal claims.
If applicable, to send commercial communications related to our products or services, and/or industry news and newsletters.
To manage your participation in our blog or forum, where applicable.
● CUSTOMERS
We process your personal data submitted via our website forms for the following purposes:
To manage the business relationship.
To deliver services you have contracted with us.
To manage shipping, delivery, and receipt of products purchased through our website.
For administrative, accounting, and tax-related purposes.
To respond to inquiries, complaints, or incidents.
To detect potential cyber-attacks through website usage analysis.
If applicable, to send commercial communications about our products or services, and/or sector-related news and updates.
To comply with legal obligations.
To protect and enforce our legal rights and respond to legal claims.
3. LEGAL BASIS FOR PROCESSING
● USERS/VISITORS
Consent: Provided voluntarily to process your data for the purposes described above. Refusal to provide data may make it impossible to fulfill those purposes.
Legal obligation: Processing is necessary to comply with applicable legal obligations. In this case, data subjects cannot object.
Legitimate interest: To protect our website, business, and reputation from cyber-attacks. Data subjects cannot object to this processing, although they may exercise their rights as outlined in section 8.
● CUSTOMERS
Performance of a contract or pre-contractual measures: Required to fulfill the agreement. Refusal to provide data will prevent us from fulfilling our contractual obligations.
Consent: Provided for purposes not strictly necessary to the performance of the contract. Refusal to provide data may limit our ability to provide those additional services.
Legal obligation: To comply with relevant laws.
Legitimate interest: To protect our systems and business reputation.
● JOB APPLICANTS
Consent: Required to process application data. Refusal will prevent us from evaluating the application.
Legal obligation: To comply with relevant regulations.
Legitimate interest: To protect our digital infrastructure. Data subjects may exercise their rights as detailed in section 8.
4. DATA RETENTION PERIODS
Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected.
Once no longer needed, data will be securely blocked and retained solely to comply with potential legal obligations or to respond to requests from public authorities, courts, or law enforcement, for the duration of any applicable statute of limitations.
Job applicants’ data: Will be retained for a maximum of one year unless authorized for a longer period.
Applicable data retention periods:
- Spanish Civil Code: 5 to 15 years, based on Article 1964.2.
- Spanish Commercial Code: 6 years for commercial information (invoices, receipts, bank documents, etc.) under Article 30.
- Spanish General Tax Law: 4 years, as per Articles 66 to 70, for data related to tax obligations.
5. AUTOMATED DECISION-MAKING AND PROFILING
This website does not engage in automated decision-making or user profiling.
6. RECIPIENTS
During the data processing period, your data may be shared with:
- Courts and Tribunals.
- Law enforcement authorities.
- Other competent public agencies, as legally required.
- Banks and financial institutions, where applicable to fulfill a service or purchase.
7. INTERNATIONAL DATA TRANSFERS
The organization does not carry out any international transfers of personal data.
8. DATA SUBJECT RIGHTS
You may exercise your rights at any time, free of charge:
Right of access, rectification, and erasure of personal data.
Right to restrict or object to processing.
Right to data portability (where technically feasible).
Right to withdraw consent at any time.
Right not to be subject to automated decision-making, including profiling.
To exercise these rights, you may use our available forms or send a written request to the postal or email address listed above. All requests must be accompanied by a copy of your ID or equivalent document to verify your identity.
If you believe your rights have been violated, especially if you did not receive a satisfactory response, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) via their website: www.agpd.es
Pursuant to Article 21 of Law 34/2002 on Information Society Services and E-Commerce, if you no longer wish to receive information about our services, you may unsubscribe by sending an email to rgpd@nucamaxelmilagrito.com with the subject line “UNSUBSCRIBE”.
9. DATA ACCURACY
You guarantee that all data provided is true, accurate, complete, and up to date, and you agree to promptly report any changes using the contact channels listed in section 1 of this policy. You are solely responsible for any damage or loss—direct or indirect—that may result from a breach of this obligation.
If you provide data from third parties, you confirm that you have obtained their consent and will inform them of the terms in this clause, exempting the organization from liability in case of noncompliance.
10. SOCIAL MEDIA
Social media is an integral part of how many users interact online. FABRIENVAF NUCA SL has created profiles on various platforms.
If you interact with us via social media, please note that unless we specifically request your personal data (e.g., for marketing, promotions, contests, etc.), your data will be subject to the privacy policies of the respective platforms. We encourage you to read their terms of use and privacy policies and adjust your settings accordingly.
11. CHANGES TO THIS POLICY
This privacy policy may be updated to reflect legal requirements or changes in our website functionality, or at the instruction of the Spanish Data Protection Agency.
We recommend reviewing this policy periodically to stay informed.
For any questions or concerns regarding this policy, you may contact us at: rgpd@nucamaxelmilagrito.com