Privacy policy

We comply with the obligations set out in Article 22(2) of Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (hereinafter, LSSI), in relation to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Data Protection Regulation (hereinafter, GDPR), and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter, LOPDGDD).

This privacy policy of UNION DE EMPRESAS ABADES, S.L. (hereinafter, the Provider) explains how we process the personal data that users provide, or may provide, while browsing, and the data protection policy that will apply to such data, so that users can decide freely and voluntarily whether they wish to provide it by continuing to browse.

1. WHO IS THE CONTROLLER OF YOUR DATA?

The data controller is the company UNION DE EMPRESAS ABADES, S.L., tax ID (CIF) B19510510, registered in the Granada Commercial Register, Volume 1477, Book 0, Folio 196, Sheet GR-42477, Entry 1.

Unión de Empresas Abades SL may act as sole controller or as joint controller together with any of the companies of the Grupo Abades listed below:

Grupo Abades domains and companies

Contact details for data protection purposes:

2. FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS DO WE PROCESS YOUR PERSONAL DATA?

Your data is processed for the following purposes, each with its corresponding legal basis as set out below.

(*) Where making a request requires you to complete a form and click the submit button, doing so will necessarily imply that you have been informed and have expressly given your consent to and acceptance of the privacy policy.

All our forms include checkboxes that must be ticked in order to access the services offered.

1. Provision, development and performance of the service.

Purpose:

We process your personal data in order to (i) manage the service requested; and (ii) follow up on it and send you information by electronic means relating to your request.

Legal basis:

The legal basis is the provision of a service under a contract or pre-contractual arrangement (provision of services that binds us to you).

2. Website contact.

Purpose:

To send you the information requested and answer any queries you make through the contact section(s) available on the Website.

Please note that your phone calls may be recorded to improve the quality of our customer service and for the purpose of contracting our services. If so, you will be informed in advance.

Legal basis:

The legal basis is the consent given and legitimate interest.

3. Marketing

Purpose:

Sending communications, news or initiatives that may be of interest to you and that you request from us. As this is a purpose ancillary to the main one, you must tick the box provided for this purpose.

For example, when you agree to receive personalised information through various channels.

In order to offer you products and services better suited to your needs, we may inform you of offers and promotions of interest to you through commercial and advertising communications by email or any other electronic or physical means, present or future, that allows such communications. These will be sent by us and will always relate to our services or those of the Grupo Abades companies.

If you subscribe to any of our information newsletters, present or future, you will need to provide an email address to which information related to our activity will be sent, as described; you therefore consent to the use of your personal data for sending advertising or carrying out other marketing activities. This data will be stored and used on an ongoing basis for these purposes, such as sending the aforementioned newsletters and news, through communication channels such as email, SMS, WhatsApp, post or any other channel you authorise. We may use your data to create and keep your user profile up to date so that we can send you personalised information about advertising campaigns or promotions. We may also use the data you provide to analyse and improve the effectiveness of our Website’s products/services, advertising, marketing, market research and sales activities.

To achieve this objective, we will create a commercial profile based on the information provided, but we will not make automated decisions based on that profile.

Legal basis:

The legal basis for processing your data for marketing purposes is the consent you give us.

4. Job offers / CV submission

Purpose:

To take part in any recruitment processes we may carry out.

We will include the CVs we receive in our staff recruitment processes. If you send us your CV to cv@abades.com or via the CV and human resources form provided for this purpose, you authorise us to review the documents you send in order to assess your application and, where appropriate, offer you a position in any of the companies that make up the Grupo Abades.

If you are not selected, we may keep your CV for future vacancies for a maximum of one year, unless you tell us otherwise.

Legal basis:

Your express consent when sending us your CV. To this end, you must accept the privacy policy information applicable to CVs shown at the end of the form before submitting it.

5. Use of cookies

Purpose:

When you browse our website, we may collect information through the cookies it uses. The purpose is to understand how users use our website so that we can improve it and/or carry out performance analytics. This data is stored by means of cookies and is subject to the right to object to its processing, as detailed in the Cookie Policy. You can consult the Cookie Policy in the corresponding section of our website.

Information about your browsing may be stored through Google Analytics, so we refer you to Google’s Privacy Policy, as Google collects and processes this information: http://www.google.com/intl/en/policies/privacy

Likewise, our website may offer Google Maps functionality, which could access your location if you allow it, in order to give you more precise information about the distance and/or routes to our establishments. In this regard, we refer you to the privacy policy used by Google Maps to learn how such data is used and processed: http://www.google.com/intl/en/policies/privacy/

Legal basis:

The legal basis for processing the data is (i) our legitimate interest in understanding how our users browse in order to adapt to their interests and improve our relationship with them; and (ii) your consent when browsing our website and accepting the terms of use of cookies.

6. Social media/blog contacts.

Purpose:

The Website may host blogs and other social media applications or services in order to facilitate the sharing of content. Any personal information provided by the user may be shared with other users of that service, over whom we have no control.

We process your personal data in order to (i) answer your queries and requests, and (ii) manage the service requested, interact with you and build a community of followers.

The website may offer features for sharing content through third-party applications such as Facebook, Twitter, LinkedIn, Instagram, WhatsApp, etc. These applications may collect and process information related to the user’s browsing on different websites. Any personal information collected through these applications may be used by third-party users of them. Your interactions are subject to the privacy policies of the companies providing the applications.

Legal basis:

The legal basis for processing your data is your acceptance of the contractual relationship with the relevant social network provider, expressed when signing up to its application and in accordance with its privacy policies, which are external to us and over which we have no control.

7. Exercise of data protection rights or complaints

Purpose:

Where your query relates to the exercise of the data protection rights described below, or to complaints about our products or services, the purpose is to handle the user’s request or complaint. In fulfilling these obligations, we may disclose your data to public authorities and courts, provided that such information is required in accordance with established legal procedures.

Legal basis:

The legal basis for processing your data is our compliance with legal obligations.

Finally, any services or applications will contain their own specific conditions with particular provisions on personal data protection. These must be read and accepted before requesting the service in question.

9. Sending invoices:

Purpose:

Once you have completed the form provided for this purpose, to send you the invoice(s) requested.

Legal basis:

Compliance with a legal obligation.

3. WHAT TYPES OF DATA DO WE PROCESS AND HOW DO WE OBTAIN THEM?

For the purposes set out in the previous section, we process a set of personal data that can be grouped by the following sources:

  • Data provided directly by the user:

When submitted through the various forms on the website or any other means available to you.

The user guarantees that the data provided for the services requested truthfully reflects their actual situation and that they will report any change affecting it. Consequently, the user shall be liable to the Provider for any damage or harm caused as a result of failure to comply with the obligations assumed in this clause.

  • Data collected indirectly:

All data that, where you have given your consent, the Provider collects from external sources.

  • Data derived from the provision of the service itself.

All data collected while the service is being provided.

4. HOW LONG WILL WE KEEP YOUR DATA?

Your personal data will be kept for as long as necessary for the contractual relationship. After this period, the data will be erased in accordance with data protection legislation, which means it will be blocked and made available only at the request of judges and courts, the Public Prosecutor’s Office or the competent public authorities – in particular the Data Protection Authority – for the limitation period of any actions that may arise, after which it will be deleted.

Limitation periods vary depending on the type of service; by way of example, the general limitation period for most personal civil actions is 5 years.

In addition to the general treatment described above, the following specific data retention rules apply:

  • Customer data: retained for 4 years (Art. 66 et seq. of the Spanish General Tax Act) and for 6 years in the case of accounting books and invoices (Art. 30 of the Spanish Commercial Code). Customer service: we will process your data for as long as necessary to handle your request.
  • Data contained in CVs: a maximum of 1 year for future recruitment processes, unless you tell us otherwise.
  • Data provided in order to receive commercial communications and information of interest: from when the User gives consent until it is withdrawn.

5. WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?

Data protection legislation grants you a number of rights in relation to the data processing involved in our services, which can be summarised as follows:

  • Right of access: to know what type of data we are processing and the characteristics of the processing we carry out.
  • Right to rectification: to request that your data be corrected if it is inaccurate or untrue.
  • Right to data portability: to obtain a copy, in an interoperable format, of the data being processed.
  • Right to restriction of processing, in the cases provided for by law.
  • Right to erasure: to request that your data be deleted when processing is no longer necessary.
  • Right to object: to request that we stop sending commercial communications, under the terms indicated.
  • Right to withdraw the consent given.

To exercise these rights, you must send an express request, together with a copy of your national ID card or equivalent identity document, through the means indicated below. If you do not receive a timely and proper response to your request, or are not satisfied with it, please note that the competent supervisory authority is the Spanish Data Protection Agency (www.aepd.es).

You must send this email from the email address you entered in the form(s). Otherwise, your data will not be shown to you, as your identity will not be considered sufficiently proven.

On the website of the Spanish Data Protection Agency (AEPD) you will find a number of templates to help you exercise your rights.

5. RECIPIENTS

Users are expressly informed that their personal data will under no circumstances be disclosed to third parties, except where required by law or in the cases described below. Any exception to this rule will require your prior express, informed and unequivocal consent.

  • In fulfilling our obligations, we may disclose your data to:

Public authorities and courts, and law enforcement agencies, provided that such information is required in accordance with established legal procedures.

  • In connection with a purchase, your data may be disclosed to the following recipients:

Banks, for payment of purchases by card.

The Consumer Affairs Office, in the event of a complaint.

Carriers that may be responsible for delivering the relevant orders to customers.

  • Social media:

If you contact us through any of our corporate social media profiles made available to users, you will be able to learn about our activities and opinions and access photos and videos. In addition to giving us the data you provide, you will also be giving it to the entities responsible for that social network. To find out how these entities use and process your data, we recommend that you read carefully the privacy policies of the social networks you use.

6. SECURITY MEASURES

In accordance with current personal data protection legislation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights), we comply with all provisions governing the processing of personal data for which we are responsible, and in particular with the principles set out in Article 5 of the GDPR, under which data is processed lawfully, fairly and transparently in relation to the data subject, and is adequate, relevant and limited to what is necessary for the purposes for which it is processed.

The Website uses HTTPS (secure connection). This is a security protocol that ensures your data travels intact and securely; in other words, the transmission of data between a server and a web user, in both directions, is fully encrypted.

We guarantee that we have implemented appropriate technical and organisational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect your rights and freedoms, providing you with all the information you need to exercise your rights. We have put in place all the technical means and measures available to us to prevent the loss, misuse, alteration, unauthorised access and theft of the personal data you provide. However, you should be aware that security measures on the Internet are not impregnable.

7. MINORS

Minors (under 14) may not use the services available through the Website without the prior authorisation of their parents, guardians or legal representatives, who will be solely responsible for all acts carried out through the Website by the minors in their care, including completing forms with the minors’ personal data and ticking any accompanying boxes. We accept no responsibility for the truthfulness and accuracy of the data entered.

The processing of a minor’s personal data may only be based on their own consent when they are over fourteen years of age.

This excludes cases in which the law requires the assistance of those holding parental authority or guardianship for the act or legal transaction in the context of which consent to processing is obtained.

The processing of data of children under fourteen, based on consent, shall only be lawful if the consent of the holder of parental authority or guardianship has been obtained, to the extent determined by them.

8. DURATION AND AMENDMENT OF THE PRIVACY POLICY

We reserve the right to amend this Privacy Policy, in whole or in part, by publishing the changes on the Website. We may also change, remove or add, without prior notice, both the content and services provided and the way in which they are presented. Consequently, the general terms/policies published at the time you access the Website shall be deemed to be in force, so you should read them periodically.

Notwithstanding the above, we may terminate, suspend or interrupt access to the content of the Website at any time without prior notice, and the User shall not be entitled to claim any compensation.