1. Data Controller
In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), we hereby inform you that the data controller for personal data is:
CARPINTERÍA J.L. PASCUAL S.L.U
Avda. Alicante 35
03820 Cocentaina (Alicante)
2. Principles Applied to Data Processing
At CARPINTERÍA J.L. PASCUAL S.L.U., we are committed to processing personal data in accordance with the following principles:
- We do not request personal information unless it is necessary to provide our services.
- We do not transfer data to third parties unless legally required or with express consent.
- Data is not used for purposes other than those disclosed.
- We implement appropriate security measures to protect the information.
- No automated decisions with legal effects on users are made.
3. Applicable regulations
This policy has been developed in accordance with current regulations:
- Regulation (EU) 2016/679 (GDPR)
- Organic Law 3/2018 (LOPDGDD)
- Royal Decree 1720/2007 (insofar as it does not conflict with the GDPR)
4. Data retention
Personal data will be retained for as long as necessary to fulfill the purpose for which it was collected and to determine any potential legal liabilities arising from its processing.
In the case of data subject to tax or accounting obligations, it will be retained for the periods required by current regulations.
5. Data processing activities performed
5.1. Customers (generic treatment)
Purpose:
Customer management, service provision, and administrative, accounting, and tax management.
Legal basis:
- Contract performance
- Compliance with legal obligations
Data processed:
Identification, contact, banking, and tax information.
Recipients:
- Financial institutions
- Internal Revenue Service
5.2. Web Contacts
Purpose:
Respond to requests for information and correspondence received.
Legal basis:
Consent of the data subject.
Data processed:
Name, email, phone number.
Conservation:
Until the inquiry is resolved or a request for deletion is made.
Recipients:
No transfers are expected.
5.3. Suppliers
Purpose:
Management of business relationships and procurement of services.
Legal basis:
- Contract Performance
- Legal Obligations
Data processed:
Personal, tax, and banking information.
Recipients:
- Financial institutions
- Internal Revenue Service
5.4. Employees
Purpose:
Human resources management, payroll, occupational safety and health, time tracking, and compliance with labor regulations.
Legal basis:
- Performance of an employment contract
- Legal obligation
Data processed:
Personal, employment, financial, union, and health information in cases provided for by law.
Recipients:
- Social Security
- Internal Revenue Service
- Financial institutions
- Occupational safety and health services
- Labor unions (if applicable)
5.5. Candidates (HR)
Purpose:
Management of recruitment processes.
Legal basis:
Consent and pre-contractual measures.
Data processed:
Personal, academic, and professional information.
Conservation:
During the selection process and for a reasonable period thereafter.
5.6. Video Surveillance
Purpose:
Safety of people, property, and facilities.
Legal basis:
Legitimate interest of the data controller.
Data processed:
Images.
Conservation:
A maximum of 30 days, unless otherwise notified to law enforcement authorities.
Recipients:
State law enforcement agencies, if necessary.
6. Recipients of the data
As a general rule, data will not be disclosed to third parties unless required by law or necessary for the provision of the service.
Please contact:
- Tax Administration
- Social Security
- Financial institutions
- Prevention and consulting services (where applicable)
7. International transfers
No international data transfers are anticipated.
In the event that external service providers located outside the European Economic Area are used, compliance with the GDPR will be ensured through appropriate safeguards.
8. Rights of Data Subjects
You have the following rights:
- Access to your personal data
- Correction of inaccurate data
- Erasure (right to be forgotten)
- Restriction of processing
- Objection to processing
- Data portability
- Withdrawal of consent at any time
- Not to be subject to automated decision-making
How to exercise your rights
The data subject may exercise their rights by submitting a request to the data controller, accompanied by a valid form of identification.
Complaints
If you believe your rights have not been properly addressed, you may file a complaint with:
Spanish Data Protection Agency (AEPD)
https://www.aepd.es
9. Minors
We do not collect data from children under the age of 14 without the consent of their parents or legal guardians.
10. Data security
CARPINTERÍA J.L. PASCUAL S.L.U implements appropriate technical and organizational measures to ensure the security, confidentiality, and integrity of personal data.
11. Links to third-party websites
This website may contain links to third-party sites. We are not responsible for their privacy policies, so we recommend that you review them individually.
12. Third-party data
If the user provides data regarding third parties, the user represents that they have obtained their consent and agrees to inform them in accordance with Article 14 of the GDPR.
13. Policy changes
This policy may be updated to reflect changes in regulations or improvements in data processing. We recommend reviewing it periodically.
