At Talleres Palmer MYU, S.L. we process personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and with Organic Law 3/2018 on the protection of personal data and the guarantee of digital rights (LOPDGDD). Here we explain what data we process, for what purposes, for how long and what your rights are. This is a translation provided for information; in case of discrepancy, the Spanish version prevails.
1. Data controller
2. What data we process
- Identification and contact details: full name, company, position, email address and telephone number.
- The content of your enquiry and any files you attach (drawings, 3D models or other documents). Please do not include in them any personal data that is not necessary.
- The data of customers and suppliers needed for the business relationship: contact persons, and billing and payment details.
- The data of job applicants: the CV and the information you send us.
- The technical data essential for the operation and security of the website, such as the IP address recorded in the server logs.
3. Purposes, legal basis and retention periods
| PURPOSE | LEGAL BASIS | RETENTION |
|---|---|---|
| Responding to your enquiries and requests for quotation (web form, email or telephone). | Pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR) and your consent when you send us the request (Art. 6(1)(a) GDPR). For the contact details of professionals, legitimate interest (Art. 19 LOPDGDD). | For as long as necessary to respond and to follow up on the quotation. If no order is placed, a maximum of two years from the last contact. |
| Managing the relationship with customers and suppliers: quotations, orders, manufacturing, deliveries, invoicing and collections. | Performance of the contract (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR). | For the duration of the relationship and, thereafter, for the statutory periods; as a general rule, six years for commercial and accounting records (Art. 30 of the Commercial Code, Código de Comercio). |
| Sending our customers information about products and services similar to those they have contracted. | Legitimate interest (Art. 6(1)(f) GDPR and Art. 21(2) LSSI-CE). | Until you object. You may do so at any time, including from each communication. |
| Managing the job applications we receive. | Your consent when you send us your CV (Art. 6(1)(a) GDPR). | One year from receipt, unless you ask us to erase it before then. |
| Ensuring the security and proper functioning of the website. | Legitimate interest (Art. 6(1)(f) GDPR). | For the strictly necessary time and, at most, one year. |
We do not take automated decisions or carry out profiling using your data.
4. Recipients
We do not disclose your data to third parties, except where required by law (for example, to the Spanish Tax Agency or other public authorities) or where necessary for the business relationship (banks for collections and payments, and transport companies for deliveries).
The providers that supply us with web hosting, email, IT and advisory services may access the data as processors, under the contract required by Article 28 of the GDPR.
5. International transfers
None are planned. Should any provider process data outside the European Economic Area, it will do so with the safeguards required by the GDPR: an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework) or standard contractual clauses.
6. Your rights
You may exercise the following rights at any time:
- Access: to know whether we process your data and to obtain a copy.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to ask us to delete your data when it is no longer necessary.
- Objection: to object to the processing, for example to the sending of communications.
- Restriction: to ask us to retain the data without processing it, in the cases provided for by law.
- Portability: to receive your data in a structured, commonly used format.
- Withdrawal of any consent you have given, without affecting the processing carried out before its withdrawal.
To exercise them, write to us at info@tallerespalmer.es or at our postal address, stating “Data protection” and the right you wish to exercise. If we have reasonable doubts about your identity, we may ask you for the information necessary to verify it. We will reply within one month.
If you consider that we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es; C/ Jorge Juan, 6, 28001 Madrid).
7. Mandatory data and accuracy
The form fields marked with an asterisk are required in order to handle your request. You guarantee that the data you provide to us is true and that, if you give us data relating to other people, you have informed them beforehand.
8. Security
We apply technical and organisational measures appropriate to the risk (Art. 32 GDPR) to protect the data against loss, alteration or unauthorised access.
9. Minors
This website is aimed at companies and professionals. We do not knowingly collect data from minors under the age of 14.
10. Changes to this policy
We may update this policy to adapt it to legal or operational changes. The date of the last revision is shown at the top of the page.