Privacy Policy

1. USER INFORMATIONWho is responsible for the processing of your personal data?Pinturas Y Fachadas Escribano SL is responsible for the processing of the user's personal data and informs you that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of April 27 (GDPR) and Organic Law 3/2018 of December 5 (LOPDGDD).

 

What type of data do we request and process from you? Depending on the form or method used to obtain your data, we always request the minimum amount necessary to fulfill the purposes detailed in each case.

 

Why do we process your personal data and why do we do it? Depending on the form where we obtained your personal data, we will treat it confidentially to achieve the purposes: In the Contact form

  • Respond to queries or any type of request made by the user through any of the contact forms made available on the controller's website. (for the controller's legitimate interest, Art. 6.1.f GDPR)
  • Sending commercial advertising communications by email, fax, SMS, MMS, social media, or any other electronic or physical means, present or future, that enables commercial communications. These communications will be made by the controller and will be related to its products and services, or those of its collaborators or suppliers, with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data (with the consent of the data subject, 6.1.a GDPR).
  • Conduct statistical analysis and market research (based on the legitimate interest of the controller, Art. 6.1.f GDPR)

In the Newsletter form

  • Send newsletters, news, offers, and online promotions (with the consent of the interested party, 6.1.a GDPR)

In the Request a Quote form

  • Send commercial quotes for products and services (for the execution of a contract or pre-contract, 6.1.b GDPR)
  • Sending commercial advertising communications by email, fax, SMS, MMS, social media, or any other electronic or physical means, present or future, that enables commercial communications. These communications will be made by the controller and will be related to its products and services, or those of its collaborators or suppliers, with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data (with the consent of the data subject, 6.1.a GDPR).

In the Online Forum form

  • Participate in online forums proposed by the controller (with the data subject's consent, 6.1.a GDPR).

In the Curriculum form

  • Involve the data subject in the personnel selection process and analyze the applicant's profile with the aim of selecting a candidate for the controller's vacant position. (with the data subject's consent, 6.1.a GDPR)

In the Testimony form

  • Moderate and publish user experiences, opinions, and suggestions about a product or service on the website. (with the consent of the data subject, 6.1.a GDPR)

In the Ethics or Complaints Channel form

  • Properly manage the ethics channel, processing the corresponding irregularities reported through it, and deciding whether to initiate an investigation, in order to detect potential crimes and prevent any type of liability, as well as to avoid any type of conduct contrary to the entity's internal or external regulations. (for compliance with a legal obligation, 6.1.c GDPR)

In the User Registration form

  • Manage the user's account to provide personalized access to the website and the interactive services it offers. (with the data subject's consent, 6.1.a GDPR)

In the Member Registration form

  • Manage and process any type of information request, including those for membership.
  • Keeping partners informed about our actions. Disclosure of activities. (for the execution of a contract or pre-contract, 6.1.b GDPR)
  • Sending commercial advertising communications by email, fax, SMS, MMS, social media, or any other electronic or physical means, present or future, that enables commercial communications. These communications will be made by the controller and will be related to its products and services, or those of its collaborators or suppliers, with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data (with the consent of the data subject, 6.1.a GDPR).
  • Conduct statistical analysis and market research (based on the legitimate interest of the controller, Art. 6.1.f GDPR)

In the Appointments form

  • Schedule appointments and meetings with the controller. (for the controller's legitimate interest, Art. 6.1.f GDPR)

In the Social Networks form

  • Contact through Social Media for the purpose of maintaining a relationship between the User and the Controller, which may include the following operations: - Processing requests and inquiries. - Providing information about activities and events. - Providing information about products and/or services. - Interacting through official profiles. The User has a profile on the same social media platform and has decided to join the Controller's social media platform, thereby demonstrating their interest in the information published therein. Therefore, when requesting to follow our official website, they provide their consent for the processing of their data. The User can access the social media platform's privacy policies at any time and configure their profile to guarantee their privacy. Once they become a follower or have joined the Controller's social media platform, they may post comments, links, images, photographs, or any other type of content supported by the platform.
  • In all cases, the User must be the owner of the published content, hold the copyright and intellectual property rights, or have the consent of the affected third parties. - Sending commercial communications related to the activities of Group companies, as well as external companies, with which commercial collaboration or intermediation agreements have been established. (with the consent of the data subject, 6.1.a GDPR)

In the Instant Messaging form

  • Schedule appointments and meetings with the controller (for the legitimate interest of the controller, art. 6.1.f GDPR)
  • Sending commercial advertising communications by email, fax, SMS, MMS, social media or any other electronic or physical means, present or future, to clients, which enables commercial communications regarding products or services that are similar to those initially contracted with the client (art. 21.2 LSSI). (for the legitimate interest of the controller, art. 6.1.f GDPR)
  • Manage, maintain, improve or develop the services provided (for the execution of a contract or pre-contract, 6.1.b GDPR)
  • Manage your online purchase or order, process payment, and proceed with shipping or activation, based on the general contracting conditions (for the execution of a contract or pre-contract, 6.1.b GDPR)
  • Send commercial quotes for products and services (for the execution of a contract or pre-contract, 6.1.b GDPR)
  • Sending commercial advertising communications by email, fax, SMS, MMS, social media, or any other electronic or physical means, present or future, that enables commercial communications. These communications will be made by the controller and will be related to its products and services, or those of its collaborators or suppliers, with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data (with the consent of the data subject, 6.1.a GDPR).
  • Respond to queries or any type of request made by the user through any of the contact forms made available on the controller's website (for the controller's legitimate interest, art. 6.1.f GDPR)

In the Video Surveillance form

  • Purpose Security and access control, labor and internal activity control Legitimation Public interest in security and access control and legitimate interest of the Controller based on Art. 20.3 of the Workers' Statute Conservation A maximum of 30 days (with the consent of the interested party, 6.1.a GDPR)

In the Images and Recordings form

  • File with static and/or dynamic images. Includes publication in the media of the data controller or third parties (with the data subject's consent, 6.1.a GDPR).

In the Customers and Suppliers form

  • Commercial management with customers and suppliers (due to the legitimate interest of the controller, art. 6.1.f GDPR)

In the Advertising Opt-Out form

  • Data management to prevent the sending of commercial communications to those who have expressed their refusal or opposition to receiving them (for compliance with a legal obligation, 6.1.c GDPR)

In the Commercial Advertising form

  • Advertising management and commercial prospecting. Includes data from legitimate, publicly accessible sources (based on the controller's legitimate interest, Article 6.1.f GDPR).

In the form Rights of interested parties

  • Respond to citizens' requests in the exercise of their rights under the GDPR (for compliance with a legal obligation, 6.1.c GDPR)

In the Money Laundering Prevention form

  • Data management for the prevention of money laundering and terrorist financing (for compliance with a legal obligation, 6.1.c GDPR)

In the form Web Users, app and other platforms of the controller

  • Identification data of users accessing the corporate website (due to the legitimate interest of the controller, art. 6.1.f GDPR)

In the Training, courses, workshops, activities or similar form

  • Management of access and usage conditions (based on the legitimate interest of the controller, art. 6.1.f GDPR)

In the Wifi Network Connection form

  • Conduct statistical analysis and market research (for the legitimate interest of the controller, art. 6.1.f GDPR)
  • Conducting satisfaction and quality surveys (for the legitimate interest of the controller, art. 6.1.f GDPR) and with the consent of the data subject, 6.1.a GDPR)

In the Legal Representatives and Contact Persons form

  • If you are a legal representative or contact person for any of the entities or individuals with whom the Foundation interacts, the data controller will process your data to monitor the development of the intended relationship (with the consent of the data subject, 6.1.a GDPR).

How long will we retain your personal data? It will be retained for no longer than necessary to maintain the purpose of the processing or for as long as legal requirements dictate its safekeeping. When it is no longer necessary for this purpose, it will be deleted with appropriate security measures to ensure data anonymization or complete destruction.

 

To whom do we provide your personal data? No personal data will be shared with third parties except, if necessary for the development and execution of the processing purposes, to our communications service providers, with whom the controller has signed the confidentiality and data processor agreements required by current privacy regulations.

 

Do we carry out international transfers? Pursuant to Article 44 of the GDPR, authorization for international data transfers to a country that has not been declared as having an adequate level of protection may only be granted if sufficient guarantees are obtained. Thus, authorization may be granted if the data controller provides a written contract, concluded between the data exporter and importer, containing the necessary safeguards for respecting the protection of data subjects and ensuring the exercise of their rights.

 

The controller may rely on service providers who have servers or offices in other locations, and therefore, these transfers may be made. For an updated list of providers, please contact the controller or contact info@grupoescribano.com.

 

What are your rights? The rights that assist the user are:

  • Right to withdraw consent at any time.
  • Right to access, rectification, portability, deletion of your data, restriction or opposition to its processing.
  • The right to lodge a complaint with the supervisory authority (www.aepd.es) if you believe the processing does not comply with current regulations.

Contact information to exercise your rights: Pinturas Y Fachadas Escribano SL, Camí de Jesús, 8 1 Pta 13 - 07011 Palma (Balearic Islands). Email: info@grupoescribano.com

 

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER By ticking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or presented in download forms, users expressly, freely and unequivocally accept that their data are necessary for the provider to process their request, and the inclusion of data in the remaining fields is voluntary. The user guarantees that the personal data provided to the controller is true and is responsible for communicating any changes to said data.

 

The data controller informs that all data requested through the website is mandatory, as it is necessary to provide the user with an optimal service. Failure to provide all data provides no guarantee that the information and services provided will be fully tailored to the user's needs.

 

If you provide us with personal data about other people by any means, the controller warns that you must do so with their consent and have previously informed them of the details contained in this Privacy Policy.

 

Likewise, the controller undertakes to provide any third party whose data it provides us with the relevant information, in accordance with the provisions of Article 14 of the General Regulations.

 

3. SECURITY MEASURESThat in accordance with the provisions of current regulations on the protection of personal data, the controller is complying with all the provisions of the GDPR and LOPDGDD regulations for the processing of personal data under its responsibility, and manifestly with the principles described in article 5 of the GDPR, by which they are treated in a lawful, fair and transparent manner in relation to the interested party and adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The controller guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the LOPDGDD (General Data Protection Act) to protect the rights and freedoms of users and has provided them with the appropriate information so they can exercise them.

 

For more information about privacy guarantees, you can contact the data controller at Pinturas Y Fachadas Escribano SL, Camí de Jesús, 8 1 Pta 13 - 07011 Palma (Balearic Islands). Email: info@grupoescribano.com

 

4. VALIDITY This privacy policy is effective as of 09/25/2024. The controller reserves the right to modify this policy to adapt it to future legislative or jurisprudential updates that may be applicable, or for other technical, operational, commercial, corporate, etc. reasons. If as a result of the changes, the rights of users are affected, the controller undertakes to inform about the reasons.