In compliance with personal data protection legislation and the Information Society Services and Electronic Commerce Act, we inform you that the personal data you provide to us through the website www.marcialguijuelo.es/ will be treated confidentially and will become part of the processing activities for which MARCIAL CASTRO S.L.U is the controller (hereinafter, MARCIAL CASTRO).
1. Data controller
Identity: MARCIAL CASTRO S.L.U
Tax ID (CIF): B37066800
Address: Polígono Industrial, 1-2 Calle 1, 37770 Guijuelo, Salamanca (Spain)
Telephone: 923581023
Email: marcialguijuelo@marcialguijuelo.es
2. Personal data collected
MARCIAL CASTRO may collect various categories of personal data necessary for its operations, including:
Identification and contact data: full name, email address, telephone number and postal address.
Billing data: NIF/CIF, tax address and data required for administrative and accounting management.
Commercial data: information relating to orders, purchase history and commercial preferences.
Browsing data: information collected through cookies and similar technologies (further information is available in the Cookie Policy).
Recruitment data: information contained in a curriculum vitae in connection with staff recruitment processes.
This data will be collected in accordance with the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability, in accordance with the GDPR and the LOPDGDD.
3. Purposes and legal bases for data processing
Personal data collected by MARCIAL CASTRO will be used solely for the legitimate and specific purposes described below, including:
Management of the contractual and commercial relationship:
Your personal data will be processed in order to manage the contractual relationship arising from the purchase of products, including order processing, invoicing, payment collection, domestic and international shipping, incident management, returns and after-sales service. In the context of this relationship, communications may also be maintained with the customer through the channels provided, including electronic means such as email or instant messaging applications such as WhatsApp, where the data subject has expressly consented. That consent may be withdrawn at any time. Please note that the use of WhatsApp may allow third-party technology providers to access data and may involve international data transfers in accordance with their own privacy policies.
Legal basis: performance of a contract (Article 6(1)(b) GDPR) and, where applicable, the data subject’s consent to the use of messaging channels (Article 6(1)(a) GDPR), as well as compliance with legal obligations (Article 6(1)(c) GDPR).
Customer service and request management
Your personal data will be processed to respond to and manage enquiries, requests for information, complaints or incidents submitted through the available channels, including the contact form on the website, and to maintain any communications required in connection with your request.
Legal basis: taking pre-contractual measures at the data subject’s request or performance of a contract (Article 6(1)(b) GDPR), where the enquiry or request relates to a potential contract or an existing contractual relationship. In all other cases, where the enquiry is not contractual or pre-contractual in nature, processing will be based on the data subject’s consent (Article 6(1)(a) GDPR), expressed by voluntarily submitting the enquiry.
Sending commercial communications
If you consent, your data will be processed for the purpose of sending commercial communications relating to the company’s products by electronic or non-electronic means. Existing customers may receive communications concerning similar products and may object at any time.
Legal basis: the data subject’s consent (Article 6(1)(a) GDPR) and, where applicable, legitimate interests pursuant to Article 21(2) of the Information Society Services and Electronic Commerce Act.
Staff recruitment processes:
If you send us your curriculum vitae, your personal data will be processed to manage your participation in current or future staff recruitment processes, assess your application and, where appropriate, contact you.
Candidates are advised not to include personal data in their curriculum vitae that is unnecessary for the stated purpose, particularly sensitive data such as information concerning health, ideology, religion, trade-union membership or any other specially protected data.
Legal basis: the data subject’s consent (Article 6(1)(a) GDPR), given by voluntarily submitting a curriculum vitae in order to participate in recruitment processes.
Analysis of preferences and behaviour:
Data obtained through cookies and similar technologies may be processed to analyse use of and browsing on the website, obtain statistical information and improve its content and services.
Legal basis: the data subject’s consent (Article 6(1)(a) GDPR), given through the cookie management system.
Compliance with legal obligations:
Personal data will be processed in order to comply with legal obligations applicable to MARCIAL CASTRO as a result of its relationship with you as a customer and the processing of your personal data in accordance with European Union law and/or the applicable domestic legal framework (legal obligations imposed by tax law, personal data protection law, commercial law, consumer and user protection law, information society services and electronic commerce law, civil law, accounting regulations, etc.).
Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR), namely compliance with legal obligations applicable to MARCIAL CASTRO under European Union law and/or the applicable domestic legal framework. Without your personal data, MARCIAL CASTRO would be unable to comply properly with those legal obligations or address potential legal liabilities arising from its relationship with you or from the processing of your personal data.
Where the requested data is necessary to respond to a request or manage a contractual relationship, failure to provide that data, or providing inaccurate or incomplete data, may prevent us from responding to the request or entering into the relevant contract or providing the relevant service.
4. Recipients
MARCIAL CASTRO S.L.U does not sell, transfer or lease personal data to third parties. However, your data may be disclosed to third parties where necessary for the proper provision of the service or compliance with legal obligations, particularly to public authorities, financial institutions and service providers acting as processors, such as transport and logistics companies, technology providers, web-hosting services or communications-management providers. In addition, technology tools and communication platforms provided by third parties may be used in the context of the customer relationship. This may give those providers access to personal data in their capacity as processors.
In all cases, these third parties have been selected in accordance with regulatory-compliance criteria and have entered into the corresponding data-processing agreements, undertaking to ensure the confidentiality, security and integrity of personal data.
5. International transfers
MARCIAL CASTRO does not generally carry out international data transfers as a structural part of its business. However, certain technology providers used to supply services, as well as communication or management tools, may involve the processing of personal data outside the European Economic Area (EEA). In the context of international commercial relationships and export operations, certain data may also be processed in or accessed from third countries where necessary for the performance of the contract.
In such cases, MARCIAL CASTRO ensures that these transfers are carried out in accordance with the General Data Protection Regulation and that appropriate safeguards are applied, such as standard contractual clauses approved by the European Commission or adequacy decisions, where applicable.
6. Retention
The personal data provided will be retained for as long as necessary to fulfil the purpose for which it was collected and, in particular, while the contractual or commercial relationship with the user remains in force. Once that relationship has ended, the data will be duly blocked for the periods established by law in order to address any liabilities arising from the processing, in accordance with tax and accounting regulations and any other applicable legislation.
Data processed for commercial purposes will be retained until the data subject withdraws consent or objects to the processing. Once the applicable periods have elapsed, the data will be erased using appropriate security measures to ensure its destruction or, where applicable, anonymisation.
Data obtained through cookies and similar technologies will be retained for the periods corresponding to their purpose and configuration, in accordance with the information set out in the Cookie Policy.
7. Rights of data subjects
You may request to exercise these rights by emailing marcialguijuelo@marcialguijuelo.es, enclosing a copy of your identity document and stating your full name, an address for notification purposes and the right you wish to exercise:
Every person has the right to obtain confirmation as to whether or not our company is processing personal data concerning them.
Data subjects have the right to access their personal data and request the rectification of inaccurate data or, where appropriate, its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
Data subjects may request restriction of the processing of their data while a challenge to the accuracy of the data is being verified; where the processing is lawful but they oppose erasure of their data; where the controller no longer needs to process the data but the user requires it for the establishment, exercise or defence of legal claims; or where they have objected to processing based on the controller’s legitimate interests, pending verification of whether the controller’s legitimate grounds override their own. In such cases, we will retain the data solely for the establishment, exercise or defence of legal claims.
In certain circumstances, and on grounds relating to their particular situation, data subjects may object to the processing of their data. Our company will cease processing the data unless there are compelling legitimate grounds for the processing or it is required for the establishment, exercise or defence of potential legal claims.
Data subjects also have the right to data portability where permitted by law.
You may withdraw your consent to one or all purposes at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
You may lodge a complaint with the competent data protection supervisory authority (for example, the AEPD – Spanish Data Protection Agency).
You may exercise these rights by submitting a request to the address indicated above.
8. Use of cookies
MARCIAL CASTRO informs users that this website uses first-party and third-party cookies and similar technologies to ensure that the website functions correctly and, where required, with the user’s prior consent, to analyse use of the website and improve the browsing experience. Cookies and technologies that require consent will be used only after consent has been given. Users may accept, reject or configure their preferences through the cookie settings panel available on the website and may subsequently change or withdraw their consent.
For detailed and up-to-date information about the cookies and technologies used, their providers, types, purposes, duration and management mechanisms, please see our Cookie Policy at the following link: COOKIE POLICY.
9. Accuracy and updating of data
The User guarantees that the Personal Data provided to MARCIAL CASTRO is accurate and undertakes to notify any changes to it. The User shall be solely liable for any direct or indirect damage or loss caused to MARCIAL CASTRO or any third party by completing forms with false, inaccurate, incomplete or outdated data. The User must not include third-party personal data without having obtained the prior informed consent required under this data protection policy, and shall be solely responsible for its inclusion. All data requested through the website is mandatory because it is necessary to provide an optimal service. If all data is not supplied, there is no guarantee that the information and services provided will fully meet the user’s needs. Users must be at least 14 years old to provide us with their personal data.
10. Social media
MARCIAL CASTRO uses social media as a channel for communication and the promotion of its products and services, and to interact with users.
The personal data of users who interact with the company’s official social-media profiles (such as Facebook, Instagram, LinkedIn or YouTube) will be processed in order to manage that interaction, respond to enquiries or requests, and maintain the relationship with followers or users of those profiles.
Personal data will not be used for purposes other than those indicated, unless required by law or with the data subject’s express consent.
Please note that the use of social media is subject to the privacy policies of each platform, which we recommend reviewing in advance. Interaction with these profiles may also involve international transfers of data outside the European Economic Area by the social-media providers themselves.
MARCIAL CASTRO S.L.U is not responsible for content posted by third parties on these profiles, although it may remove content that is contrary to applicable law or its internal policies.
11. Confidentiality and security of your data
MARCIAL CASTRO has adopted the measures necessary to prevent the alteration, loss, unauthorised processing of or access to personal data, taking into account the state of the art at all times. However, Users should be aware that security measures on the Internet are not impregnable.
Data obtained through the website and/or any other means will be processed confidentially by the CONTROLLER, who undertakes to maintain confidentiality in relation to it.
In accordance with applicable personal data protection legislation, the CONTROLLER will process personal data in compliance with the GDPR and the LOPDGDD and, in particular, with the principles laid down in Article 5 of the GDPR and Title II of the LOPDGDD, lawfully, fairly and transparently, and in a manner that is appropriate, relevant and limited to what is necessary in relation to the purposes for which it is processed.
The CONTROLLER has implemented appropriate technical and organisational measures to ensure an adequate level of security and protect Users’ rights and freedoms.
Data protection legislation may be amended, and users are therefore advised to consult this Privacy Policy periodically.
12. Amendments to the Data Protection Policy
MARCIAL CASTRO reserves the right to amend its data protection policy at its discretion or as a result of legislative or case-law developments or changes in business practice. If MARCIAL CASTRO makes any amendment, the new text will be published on this website, where Users can view the data protection policy currently in force for MARCIAL CASTRO. In all cases, the relationship with users will be governed by the rules in force at the precise time they access the website.
13. Other information
For any clarification or comments, please contact MARCIAL CASTRO by email at the address indicated above.