Privacy policy

1. RESPONSIBLE

1.1. Who is responsible for the processing of your data?

Identity: GUINAZ ELECTRÓNICA, S.L. (hereinafter, the Controller).
Postal Address: Pol. Ind. "El Escopar," P. 2, 31350 Peralta – Navarra (Spain).
Telephone: +34 948 713 182.
Email: comercial@guinaz.com.

2. PURPOSE

2.1. What will the Controller use my data for?

The data you provide may be used by the Controller for one or more of the purposes outlined below, which will be determined by factors such as your relationship with us (e.g., customers) or the means used to submit the data (e.g., contact form). Below, we present the processing activities referred to in this privacy policy, without prejudice to the possibility of other purposes for which you will be informed or asked for the appropriate authorization:

Provision of services and maintenance of the business relationship.
Sending you commercial communications related to the activities and services we offer. With your consent, commercial communications related to the services you have contracted and that fall within your reasonable expectations concerning those previously contracted services will be sent to you. This processing may cease if you object to it.

Requests for information.
When you contact us, for example, via the contact form on the website, by phone, fax, email, messaging services, social media, telephone, or even in person, to request information or a consultation on a particular matter, make a suggestion, complaint, or claim, we will process your data to address your request for information and/or consultation, as well as manage and fulfill it as needed. This process may include using the received data to prepare service proposals and/or collaboration offers, if that is indeed the request.

Newsletters
If you request to subscribe to our newsletter and/or periodic information service, for example, through the contact form on our website or by requesting it via email, we will process your data for the management and distribution of the newsletter, as well as for sending commercial communications related to our activities, services, and products, including electronically. You may withdraw your consent and terminate the processing described at any time.

Cookies
If, upon starting your visit to this website, you have accepted receiving cookies, the website's cookie policy will apply. We recommend reviewing this policy, where you can find information on the cookies used, their purposes, and the configuration options you can adopt on your devices to manage, including deleting them.

2.2. How long will my data be retained?

The data retention periods for the information you provide are closely linked to the specific processing activities.

• In this regard, we would like to inform you that, in general, we will process the data while the legal relationship is maintained or until you object to the processing.
• Once the aforementioned period has ended, we will retain your data for two purposes: on one hand, as required by applicable regulations, and on the other hand, until the complete statute of limitations for any potential claims has expired. These retention periods may be influenced by factors such as the law applicable to the relationship between the parties.

Therefore, to determine the retention period, it is necessary to start with the period indicated in section 2.2.2 concerning the specific processing activity and add the period that may be affected by statutory limitations and the prescription of claims.

2.2.1. Periods Related to Processing Activities

Processing Related to Information Requests. We will process your data for the time necessary to address and manage your information request, plus an additional period of 90 days.

Processing Related to Newsletters: Your data will be processed while you are a client and have not objected to the processing, or if you have expressly requested to receive the newsletter, as long as you wish to continue receiving it and have not objected.

Cookies: In accordance with the type of cookies, as outlined in the applicable policy.

2.2.2. Statutory Retention Periods and Limitation Periods for Claims

Civil Code (Article 1964): 5 years.

Law 28 of Law 1/1973, of March 1, 3 or 10 years generally. Additionally, Law 39 of Law 1/1973, of March 1, may also apply to the relationship between the parties, with a retention period of 30 years as specified in the same.

Commercial Code: 6 years for document retention obligations imposed by Article 30.

3. LEGITIMACY OF PROCESSING

3.1. On what grounds can the Controller process my data? What legitimizes it?

Depending on the nature of the relationship and the purpose of the processing, the legal basis for processing may vary. Below, we outline the different situations that may arise and the applicable legal basis for each type of processing:

PURPOSES RELATED TO THE PROVISION OF SERVICES OR YOUR STATUS AS A CLIENT:

• Sending commercial communications: In accordance with current regulations and after balancing our interests with your rights, we inform you that we have a legitimate interest in processing your data for the purpose of sending you commercial communications related to the services you have contracted with us (without prejudice to your right to object to this processing at any time).

HANDLING INFORMATION REQUESTS

• Handling Information Requests: This processing is legitimized by the consent you provide at the time of submitting your request for information and/or assistance.

COMMERCIAL COMMUNICATIONS:

• Newsletters and commercial communications: We will only send you commercial communications if you have given your prior and explicit consent to receive them. Failure to consent to the processing of your data for the purpose of sending commercial communications will not affect the handling of your inquiry, assistance, or request in any way.

COOKIES:

• We are legitimized for this processing by the consent you provided at the start of your navigation on our website.

3.2. Consequences of Withdrawing Consent or Objecting to the Processing of Your Data. Mandatory and Optional Fields.

If at any point you are asked for your consent for processing a purpose that requires consent, not providing it (or withdrawing it later) will not have any consequences for you. Similarly, objecting to the processing of your data for purposes based on legitimate interests (e.g., using your data as a client for sending commercial communications) will not result in any adverse effects.

In some data collection forms, you will clearly see that certain fields are marked as mandatory (with an asterisk), while the rest are entirely optional. Therefore, not filling out optional fields will have no consequences, and you may complete them if you are interested.

4. RECIPIENTS

4.1. Will my data be disclosed to third parties?

Con carácter general, salvo obligación legal sus datos no serán cedidos a ningún tercero sin su
consentimiento expreso y afirmativo.

4.2. Service providers related to the website and email service.

Hosting: the Responsible party's website is hosted by the provider __________.

5. RIGHTS

5.1. What rights do I have regarding data protection? General information.

With respect to the personal data collected for processing, you have the possibility to exercise the rights of access, rectification, deletion, and portability. Additionally, we inform you that under certain circumstances, you will have the right to request the restriction or objection to the processing of your data, in which case the Responsible party will cease processing and will only retain the data if there is a legal obligation to do so or until the expiration of any applicable statutory period.

If you would like more information about the aforementioned rights, we invite you to continue reading or to visit the infographic created by the Spanish Data Protection Agency, accessible via the following hyperlink.

5.2. What do these rights entail?

Right of Access: This right allows the data subject to obtain confirmation from the Responsible party as to whether or not personal data concerning them is being processed, and if so, the right to access the personal data as well as the following additional information: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipients; d) the envisaged period for which the data will be retained or the criteria used to determine this period; e) the existence of the right to request from the Responsible party the rectification or deletion of personal data or the restriction of processing of personal data related to the data subject, or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) available information on the origin of the data; h) the existence of automated decisions.

Right of Rectification: This right allows the data subject to request that the Responsible party promptly correct or complete any inaccurate personal data. It is important that the data in the databases is up-to-date, and in this regard, we are at your disposal to rectify any errors or inaccuracies that may exist.

Right to Erasure: At any time, you have the right to request the deletion of your personal data, a request that will be addressed promptly unless one of the circumstances provided for in the General Data Protection Regulation applies. These circumstances include, notably, the necessity to retain your data to comply with a legal obligation or to defend ourselves against a claim.

Right to Data Portability: In the case of automated data processing based on consent, you may request that we transfer the personal data concerning you, which you have provided to us, to another data controller in a structured, commonly used, and machine-readable format.

Right to Object: This right allows the data subject to object to the processing of their data by the Responsible party. This right is not absolute, meaning that the Responsible party may continue processing the data if they can demonstrate legitimate grounds that override the interests or rights of the data subject or for the formulation, exercise, and defense of claims.

Right to Restrict Processing: This right allows you, under certain circumstances outlined below, to request that the Responsible party restrict the processing of your personal data. If this right is exercised, the Responsible party may only process the data with the consent of the data subject. The circumstances under which this right may be exercised are as follows:

i) the data subject contests the accuracy of the personal data, for a period that allows the Responsible party to verify its accuracy;

ii) the processing carried out by the Responsible party is unlawful, and the data subject opposes the deletion of the personal data and instead requests the restriction of its use;

iii) the Responsible party no longer needs the personal data for the purposes of processing, but the data subject requires it for the formulation, exercise, or defense of claims;

iv) the data subject has objected to the processing, while it is verified whether the legitimate grounds of the Responsible party override those of the data subject.

5.3. How and where can I exercise these rights?

We will be pleased to address any inquiries or complaints you may have regarding data protection. Additionally, you may submit your complaint or exercise your rights through any of the contact methods indicated at the beginning of this data protection policy.

Similarly, you can also go to the supervisory authority that you consider appropriate to file your claim (for example, in the country where you have your habitual residence, place of work or where you consider that the alleged infringement has occurred). For the appropriate purposes, we inform you that in Spain the Control Authority is the Spanish Data Protection Agency, and you can exercise your rights through the forms
that this entity has enabled for this purpose and that are available at its electronic headquarters.

5.4. How long can it take to process my request to exercise rights?

The reference period is one month from the receipt of your request. Notwithstanding the above, this period may be extended for another two months if necessary, taking into account the complexity and number of applications. The Controller will inform the interested party of any such extensions within a period of one month from receipt of the request, indicating the reasons for the delay.

5.5. Will the exercise of these rights incur an expense for me?

The exercise of rights will not entail an expense, except in cases in which manifestly unfounded or excessive requests are made, especially because they are repetitive, the Controller may charge a fee to compensate for the administrative costs of responding to the request or refusing to act (the fee may not imply additional income for the person responsible, but must effectively correspond to the true cost of processing the request).