Privacy Policy
Introduction
At DEVICE SISTEMAS S. COOP. PEQUEÑA, we are committed to protecting privacy and the correct use of personal data that we process and that you have provided us, both online on this website and, where applicable, personally in our business relationship.Please read this policy carefully, ensure that you understand it, and agree with it before providing us with your personal data. If you do not agree with it, please contact us before using this website or its services and do not provide us with your data.The fact of accessing this site, to use any of its services or provide us with your data, whether online or offline, will be understood as a clear affirmative action by which you give us your consent (when necessary) to process your data for the purposes indicated below.
Data Controller
Data Controller DEVICE SISTEMAS S. COOP. PEQUEÑAPostal address: C/ ALBERT EINSTEIN, 15 OF 109 Edificio BIC (PARQUE TECNOLÓGICO DE ÁLAVA)Email: sistemas@devicesistemas.com
Source of Data
Source of data, as a client (current or potential), or user of our website, you have provided them, whether offline or online, when requesting our products or services, or contacting us for information. You may also have provided them in person if you visited our facilities.By providing us with your data, you guarantee that you are authorized to do so, and that the information is true, updated, and does not infringe any contractual restrictions or third-party rights. You are responsible for keeping your data and profile correct and updated, declining all responsibility DEVICE SISTEMAS S. COOP. PEQUEÑA in case of failure to do so. You agree not to impersonate other users using their registration data for the different services and/or contents of the Website.
Automatic Collection When Visiting Our Website:
When you visit our website, it collects information through cookies. This means that data is sent from your browser to optimize our services and improve your user experience. This data may be collected and stored automatically by us or by third parties on our behalf.
Categories of Data
Obtained from the interested party: identification data (name and surname, NIF/CIF), contact data (phone, postal address, email address, billing or delivery address), commercial and economic data (information about requested products, customer history, and those necessary for payment…)Automatically obtained when visiting our website: user’s IP address, date and time of visit, URL of the site from which the user comes, pages visited on our website, information about the browser used (type and version of the browser, operating system, etc.).
Purpose
The data you provide us, as well as all those generated during the development of the relationship we maintain with you, can be processed for different purposes:If you are a current or potential client: to maintain contact and communication with you, and manage the contractual and/or commercial relationship, including after-sales and warranty services.If you are a user of our website, or sender or recipient of an email: to manage the requests you make to us online, and to contact you.If you access our facilities as a visitor: to manage access and control of visitsFinally, they could be used to send you, via electronic communications, information about our activities, products and/or services similar to those requested, including advertising and/or commercial communications for the purposes of art.21 LSSICE 34/2002. If we already have a prior contractual relationship, such communications will be sent based on our legitimate interest. If we do not have a prior contractual relationship, we will only send you such communications if you authorize us by checking the option expressly included for this purpose in the corresponding forms. The electronic communications we send you will include, in the communication itself, the option to stop receiving them. If you choose to do so, we will stop sending you this type of communication in the future.
Retention Period
The personal data you provide us will be retained as long as the contractual, pre-contractual, or commercial relationship is maintained and, once these are terminated, as long as the interested party does not request their deletion. Even if deletion is requested, we may retain them for the necessary time and limit their processing, solely to:Comply with the legal/contractual obligations to which we are subject, and/or during the legal periods provided for the prescription of any liability on our part, and/or the exercise or defense of claims arising from the relationship maintained with the interested party.
Legal Basis
The legal basis for which we are legitimized to process your data can be diverse:The fulfillment of the existing contractual or commercial legal relationship if you are already a client, supplier. If you are a potential client or supplier, it is the pre-contractual relationship that binds us.It can also be your consent if you yourself have made a request or petition: For example, if you have entered our website, if you have requested information, sent your resume, if you are a visitor to our facilities, if you have given your consent for the sending of commercial communications, etc… This consent is granted to us unequivocally by providing us with your data online or offline, considering such provision a clear affirmative act that manifests such consent.You can withdraw that consent at any time by sending us an email to that effect at sistemas@devicesistemas.com. Such withdrawal does not condition the processing of your data for the rest of the described purposes, but it may mean that we cannot respond to your request.It can also be the fulfillment of a regulation or legal obligation: such as those established in tax, anti-money laundering regulations, penal code (art.31 bis: establishment of a complaint channel), etc.…Our legitimate interest as an organization also constitutes a legal basis to process your data. In accordance with recital 47 of the GDPR, we have an interest in informing you of our activities, products and/or services, even through electronic communications. If we already have a prior contractual relationship, such communications will be sent based on our legitimate interest. Otherwise, we will only send you such communications if you give us your consent by checking the option expressly included for this purpose in the corresponding forms.In any case, the indicated processing of your data is considered proportionate and has a minimal impact on your privacy, but your interests, rights, or freedoms will always prevail over our legitimate interest, so if you do not want us to process your data for these purposes, please send us an email to that effect at sistemas@devicesistemas.com, and we will do so. It is also our legitimate interest to conduct opinion and/or satisfaction surveys.
Recipients
We inform you that the data you provide us may be communicated to third entities only for the fulfillment of purposes directly related to legitimate functions of assignor and assignee such as:To banking entities: for the management of collections and payments.To entities or bodies to which there is a legal obligation to make data communications: for example, tax administration, social security.To public bodies for the request, granting, monitoring, and justification of business R&D subsidies
International Transfers
At DEVICE SISTEMAS S. COOP. PEQUEÑA, we may use service providers located outside the European Union, who may have access to personal data, for the provision of auxiliary services to our activity (hosting, SaaS, remote backups, IT support or maintenance services, email managers, email sending and email marketing, file transfer, etc.).These companies may be different and vary over time but, in any case, we will choose companies adhering to the Privacy Shield agreement between the US and the EU, or belonging to countries that have been declared as countries with an adequate level of protection, which means they are obliged to meet requirements equivalent to European data protection standards.In any case, by accepting this data protection policy, you expressly and unequivocally authorize the communication of data to these companies, knowing that this implies an international data transfer to a country not belonging to the European Economic Area and giving your unequivocal consent to such transfer.
Rights
You may, when applicable, exercise your rights of access, rectification, deletion, limitation, and opposition to their processing, as well as other rights, at the postal or email address indicated at the beginning of this privacy policy; in both cases by written and signed request attaching a copy of the ID or passport or other valid document that identifies you. In case of modification of your data, you must notify it at the same address, declining this entity all responsibility in case of failure to do soRight of access: You can ask us what personal data we are processing and even request a copy of it.Right of rectification: You can request the rectification of inaccurate personal data or complete those that are incomplete, including through an additional statement.Right of deletion (right to be forgotten): You can request the deletion of your personal data when: they are no longer necessary for the purposes for which they were collected, you withdraw your consent, there has been unlawful processing of them or for compliance with a legal obligation.Right to limitation of processing: You can request the limitation of the processing of your data, in which case we will only keep them for the exercise or defense of claims.Right of opposition: You can oppose the processing of your data if such processing is based on the legitimate interest of the data controller or is for advertising purposes.Once any of the above requests are received, we will respond within the legally established deadlines. You can file a complaint with the Spanish Data Protection Agency. If you want more information about the rights you can exercise and to request models of rights exercise forms, you can visit the website of the Spanish Data Protection Agency, www.aepd.es.