INTRODUCTION

This Privacy Policy explains what we do with your personal data. Specifically, this document describes how we collect, use and process your personal data and how, in doing so, we comply with our legal obligations under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and other related legislation. We care about your privacy and are committed to protecting and safeguarding your rights.

Furthermore, we are committed to maintaining and continuously improving our privacy management system, aligning ourselves with the standards of ISO 27701, and adopting advanced measures such as encryption techniques and anonymisation, whilst ensuring the confidentiality, integrity and availability of the personal data we process.

This Privacy Policy applies, in general terms, to the personal data of users of our website, customers (current or potential), suppliers (current or potential), partners and other collaborating third parties (current or potential), and our employees (current or potential).

Furthermore, where necessary, we may process personal data to comply with legal or security requirements of the organisation, or for commercial purposes.

The data controller is Grupo de Empresas Azvi, S.L. (hereinafter, Grupo Azvi), with tax identification number (C.I.F.) B-91164343, postal address at C/ Almendralejo, 5, 41019, Seville (Spain), telephone number 954 999 320, fax number 954 999 200 and email address protecciondedatos@grupoazvi.com. Consequently, Grupo Azvi shall be responsible for determining the purposes and means of processing the personal data collected.

Grupo Azvi will have the necessary staff whose main duties will be to inform and advise the company and the employees responsible for processing personal data of their obligations under the applicable data protection legislation, and to monitor compliance with these obligations; to provide, where appropriate, any advice requested regarding the data protection impact assessment and to oversee its implementation; cooperate, where appropriate, with the supervisory authority; act as the supervisory authority’s point of contact for matters relating to processing; and provide advice on any other matters relating to the protection of personal data. Their contact details are the same as those set out in the previous paragraph.

It is worth noting that we may amend this Privacy Policy from time to time. We therefore advise you to visit this page if you wish to stay informed, as we will publish all changes here. Under no circumstances will automated individual decision-making techniques be used, nor will profiling be carried out based on the information provided by the data subject.

If you are not satisfied with any aspect of our Privacy Policy, please be aware that you may have certain legal rights, which we have also set out accordingly.

BASIC INFORMATION

What type of personal data do we collect?

As a general rule, Grupo de Empresas Azvi, S.L. only processes basic categories of personal data, such as the data subjects’ personal identification number, first name, surname, postal address, telephone number or email address. Special categories of personal data may only be processed where necessary to comply with specific legal obligations incumbent on the organisation or for security reasons; in such cases, only personal data relating to health, biometric data or trade union membership of the data subject will be processed.

We carry out regular risk assessments and privacy impact assessments to ensure that personal data is secure and processed in accordance with the applicable regulations.

Some of the personal data we collect about you is necessary to fulfil our contractual and non-contractual obligations towards you or third parties; other data, however, may simply be necessary to ensure a smooth relationship. Depending on the type of personal data and the grounds justifying its processing, it is possible that, if you refuse to provide it to us, we may be unable to fulfil our contractual or non-contractual obligations or, in extreme cases, may be obliged to terminate our relationship.

How do we collect your personal data?

We collect your personal data primarily in two ways: directly from you; and through third parties and other specific sources.

We also collect certain data automatically when you access our website, read or click on the emails we send you, or when you provide it to us yourself. We incorporate the principles of privacy by design and by default, which means that privacy and data protection are key components in the design of all our projects and services from the outset.

How do we use your personal data?

The main reason we use your personal data is to ensure proper compliance with contractual provisions that have been entered into or are yet to be entered into, so that our relationship runs smoothly, or to comply with certain legal requirements. However, we may also use it to improve the user experience on our website or to optimise other aspects of the communications we send you or the service we provide. We ensure that any third parties with whom we share data maintain equally rigorous privacy and security standards.

With whom do we share your personal data?

In general, and unless you instruct us otherwise, we may share your information with any group company, as well as with associated third parties, such as our service providers and organisations to which we provide services, to help achieve these objectives. We may also do so, where necessary, to ensure proper compliance with certain legal requirements. Finally, unless you instruct us otherwise, we may share your information with web analytics and social media service providers to ensure that you receive personalised marketing communications.

We carry out thorough due diligence and maintain contractual agreements that require high standards of data protection with all our partners and third parties with whom we share personal information.

How do we protect your personal data?

Protecting your information is a priority for Grupo Azvi. For this reason, we are committed to taking all reasonable steps to protect the personal information we hold against any misuse, loss or unauthorised access.

To this end, we implement a range of appropriate technical and organisational measures. These include measures to address any suspected personal data breaches. We use multi-layered security measures, such as firewalls, access controls and security awareness training for staff, to protect against the loss, misuse and alteration of personal data under our control. If you suspect that your personal information may be subject to misuse or unauthorised access, please let us know immediately.

How long do we retain your personal data?

The personal data collected will be retained until the data subject requests its erasure or until the purpose for which it was collected has been fulfilled. Once this period has ended, we will retain your personal data in a blocked format for the period established by law, after which we will proceed to its erasure.

How long do we retain your personal data?

The personal data collected will be retained until the data subject requests its erasure or until the purpose for which it was collected has been fulfilled. Once this period has ended, we will keep your personal data blocked for the period established by law, after which we will proceed to erase it.

We adhere to data retention policies that comply with applicable legislation and ensure that personal data is securely deleted once it is no longer required.

How can you access, amend or delete the personal data you have provided to us?

Although we hold your personal data, you have a number of rights in relation to it. To find out more, please contact us in writing at Grupo Azvi, C/ Almendralejo, 5, 41019, Seville (Spain) or by email at: protecciondedatos@grupoazvi.com, providing proof of your identity. We will endeavour to process your request without undue delay and, in any event, in accordance with the requirements set out in the applicable legislation. Please note that, in some cases, we will keep a record of our correspondence to help us resolve any issues you have raised.

We would ask that, should there be any changes to your personal data, you inform us so that we can keep our database up to date.

The data subject’s rights are as follows:

Right of access: any person may request confirmation as to whether or not Grupo Azvi is processing personal data concerning them and, if so, they shall have the right to access their personal data and certain information provided for by law.

Rights to rectification and erasure: the data subject has the right to request the rectification of their data where it is inaccurate or, where applicable, to request its erasure where, amongst other reasons, it is no longer necessary for the purposes for which it was collected.

Right to restriction of processing: in certain circumstances, data subjects may request the restriction of the processing of their personal data; in such cases, their data may only be processed – with the exception of storage – with the data subject’s consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of substantial public interest at national or EU level.

Right to data portability: the data subject shall have the right to receive the personal data concerning them which they have provided to Grupo Azvi in a structured, commonly used and machine-readable format, and to transmit those data to another data controller without hindrance, provided that the processing is based on consent or is necessary for the performance of a contract to which the data subject is a party or for the implementation, at the data subject’s request, of pre-contractual measures, and provided that the processing is carried out by automated means. The data subject shall have the right to have the personal data transmitted directly from Grupo Azvi to the new data controller where this is technically feasible.

Right to object: in certain circumstances, and on grounds relating to their particular situation, the data subject may object to the processing of their data. Grupo Azvi will cease processing the data, unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.

You will also have the right to lodge a complaint with the supervisory authority if we fail to process your request within the legally prescribed time limit from the date of submission. Furthermore, should we have obtained your consent to process your personal data in relation to any of the stated purposes, you have the right to withdraw your consent at any time.

How do we store and transfer your data abroad?

The Azvi Group is an international organisation. It is precisely this characteristic that enables us to offer the high standard of service for which we are known, but in order to continue operating in this way, we sometimes need to transfer or store your data abroad. Specifically, your data may be transferred to group companies and third parties, such as suppliers, customers and other partners (both in Spain and abroad) or to cloud storage providers.

In such cases, we want to ensure that your data is stored and transferred securely. Therefore, we will only transfer it outside the European Economic Area where data protection legislation is complied with and the means of transfer provide adequate safeguards for your data. To ensure that your personal information receives an adequate level of protection, we have put in place appropriate procedures in conjunction with the third parties with whom we share your personal data.

Who is responsible for processing your personal data on the Grupo Azvi website?

Grupo Azvi is responsible for the processing of personal data on its website. We use advanced technologies to ensure the security and privacy of the data transmitted via our digital platforms and services.