Política de Privacidad y Cookies

PRIVACY POLICY

1. Controller and contact details

The controller for the processing of your data is ISTOBAL S.A., with its registered office in L’Alcúdia (VALENCIA), Avda. Conde de Serrallo, 10, CP 46250, Spain, and holder of CIF (Spanish Tax ID no.) A46011276. If you would like to get in touch, you can contract us by email on the following address: istobal@istobal.com

If you wish, you can also contact the Data Protection Officer by sending an email to dpo@istobal.com or by sending a letter to the postal address shown above for the attention of the Data Protection Officer.

2. For what purpose(s) will we use your data and on what legal grounds?

In accordance with the provisions of the GDPR, we process your data on the legal basis and for the purposes outlined below:

2.1. Consent of the data subject

As long as you have given your consent, your personal data will be processed for the following purposes depending on the form completed in each case and the permissions that we have been granted:

Data collected via the contact form, blogs and forums:

To provide a response, in the first instance, to any queries, requests, comments, questions, complaints or any other concerns that you have raised with us via the contact channels. By completing our the contact forms and providing the data required, it is implied that the data subject agrees to his/her data being processed to this end.
To relay your personal data to other companies at Istobal Group or to distributors, if necessary, in order to reply and follow up on any queries, requests, comments, questions, complaints or any other concerns that you have raised with us using the contact form.
To manage your subscription and participation in blogs or online forums. By completing our the subscription forms and providing the data required, it is implied that the data subject agrees to his/her data being processed to this end.
To carry out commercial, informative and educational communications, both electronically (by email, text message, instant messaging applications, social networks, push notifications, etc.) and by non-electronic means.
To share your data with other companies at Istobal Group with the aim of conducting commercial, informative and educational communications, both electronically (by email, text message, instant messaging applications, social networks, push notifications, etc.) and by non-electronic means.
To assess your activity history, navigation analysis and use of digital channels based on the information collection through cookies (see Cookie Policy).

Data collected through the “Work with Us" form:

To register and manage your participation in current and future selection processes based on the information collected in person or via the telematic channels enabled for this purpose. There are certain kinds of mandatory information that must be supplied as outlined in the “Work with Us" form. If you refuse to supply this information, you will be unable to participate in the current or future selection processes.
To share your personal data with other Istobal Group companies in order to manage your participation as a candidate in current or future selection processes initiated by these companies.

Data collected in the online shop:

To send commercial communications by electronic media (newsletter, promotions, etc.) or by other means at the request of the interested party: Istobal España S.L., or other companies in the Istobal Group may send commercial communications relating to the supply of products and services from these companies (always with the consent provided by the user in the registration form).
Processing of data from cookies: You will find the information relating to our cookie policy via the following link: Cookie Policy

You may withdraw your consent at any time. This also applies if your consent was granted before the EU General Data Protection Regulation (GDPR) came into force, i.e. before 25 May 2018. It should be noted that opposition to a particular process and revocation of consent do not have retroactive force.

2.2. Justification in case of a legitimate interest

If necessary, Istobal S.A. will process your personal data in order to satisfy its own legitimate interests, provided that your interests, rights and fundamental freedoms do not prevail over the legitimate interests of Istobal S.A.. In this respect, your data will be processed for the following purposes:

To conduct statistical studies and profile management studies, debugging and assessing these profiles in order to identify potential commercial campaigns that may be of interest to you.
To suggest that you participate in customer satisfaction surveys and analytical surveys in cases where you have registered on the website and/or for products and services you have expressly requested. Under all circumstances, these surveys will be related to the product or service requested.
Computerised control of the webpages: Istobal S.A. will carry out these monitoring and surveillance activities on the website in order to prevent and detect any kind of fraudulent use, unauthorised access, alterations or loss of information, whether this information is of a personal nature or not.
Incident logging and management: Istobal S.A. will process any user information required in order to manage any incidents that are reported or that Istobal S.A. detects by its own means. This data will only be processed for the purpose of solving the issue and its consequences.
To manage your registration and user sign-up on the e-SHOP: Istobal S.A will process any information required to facilitate the user sign-up process, allowing the user to take advantage of the different services offered via the website.

2.3. To comply with a legal obligation incumbent on the data controller

Istobal S.A. will process your data for the following purposes:

To obtain, store and manage permissions concerning the protection of data provided in order to demonstrate that this information corresponds to the provisions of the data protection regulations.
To meet the legal obligations stipulated by the Spanish Law of Information Society Services and Electronic Commerce (Ley de Servicios de la Sociedad de la Información y de Comercio Electrónico).

In this regard, given that the processing of these data is necessary in order to meet the legal obligations that apply to Istobal S.A, if you do not provide your consent for your personal data to be processed for these purposes, it will not be possible to provide the services you have requested.

2.4. Performance of a contract

Your personal data may be used to manage the orders and purchases you make in the online store, as well as to answer any questions or requests you make in relation to these purchases or orders.

3. Automated individual decision-making and profiling

In accordance with the provisions of Article 22 GDPR, we do not use any solely automated individual decision-making processes. You will be notified if we ever use this procedure on occasion, and if so, you will have the right to obtain human intervention in the decision-making process.

Furthermore, your data may be processed in order to assess various elements (profile determination) for the purpose of informing and advising you on our services based on your preferences.

4. Sharing your personal data

Istobal S.A. works with third-party service providers in order to achieve the objectives set out above. These third parties may be able to access your personal data as a result of the performance of the contracted services. In any case, when choosing these third parties, Istobal S.A. follows strict criteria in order to ensure compliance with its data protection obligations, signing a data protection agreement with said third parties whereby these parties undertake to meet their data protection duties and, specifically, to comply with the relevant legal, technical and organizational measures when processing personal data for the agreed purposes, as well as to comply with the prohibition on processing said personal data for other purposes or for assignment to third parties.

Additionally, Istobal S.A. may disclose personal data and any other kind of user information if this is required by the public authorities in the exercise of their legitimated functions and in accordance with the law and applicable regulations in cases where this is deemed neccessary.

If necessary, Istobal S.A. may share your data with Istobal España S.L. to manage the orders and purchases you make in the online store, as well as to answer any questions or requests you make in relation to these purchases or orders.

Furthermore, as long as you provide your consent, this information may be shared with the followingIstobal Group companies: Istobal Servicios Integrados S.L., Istobal Manufacturing Spain S.L., Istobal España, S.L., Istobal Metal Works, S.L., ISTOBAL SVERIGE AB (Sweden), ISTOBAL DENMARK A/S (Denmark), FDI+ SRL (France), ISTOBAL UK Ltd. (United Kingdom), ISTOBAL COMMERCIAL SERVICES LTD (United Kingdom), ISTOBAL ITALIA S.R.L. (Italy), ISTOBAL HANDELSGES.m.b.H. (Austria) and ISTOBAL PORTUGAL UNIPESSOAL LDA (Portugal) ), all of which are based in the EU, as well as with any distributors deemed strictly necessary in order to provide a response, in the first instance, to any queries, requests, comments, questions, complaints or any other concern that you have raised with us through the contact channels.

5. How long will we keep your data?

Istobal S.A. will comply with the current legislation regarding the deletion of personal information once the intended purpose has been achieved or when consent for data processing has been revoked, remaining at the sole disposal of the Judges and Courts, the Public Prosecutor or the relevant Public Administrations dealing with any responsibilities arising from the use of this data, and only until any legal liability has expired. Once these deadlines have passed, this information will be deleted using secure methods.

6. How did we obtain your personal data?

The personal data which is processed by Istobal S.A. has been collected via the forms that are enabled on our website.

If necessary in order to look into a request or for a right to be exercised by you, Istobal S.A. may request information from any third party that may have received your information in order to respond to your request.

7. What are your rights when you provide us with data?

In accordance with the provisions of the General Data Protection Regulation (GDPR) and the national legislation on data protection, you have the right, if you so desire, to access, change or delete your personal data, to limit the use of your personal data, to object to the use of this information, to request data portability, and to object to your data being subject to automated individual decisions.

Additionally, if the use of your personal data requires your consent, you are entitled to revoke your consent at any time. Please note that withdrawing this consent will not affect the legality of any data processing activities carried out prior to the withdrawal of your consent.

You may exercise the rights described above as follows, providing the documentation we require in order to confirm your identity (copy of your ID, passport, etc.):

In writing, to the following address: Avda. Conde de Serrallo, 10, CP 46250, L’Alcúdia (VALENCIA).
By email: dataprotection@istobal.com

8. How can I file a complaint?

If you believe that your data protection rights have been violated, or if you have any complaints regarding your personal information, you may contact the Data Protection Officer using the contact details provided in section 1.

In any case, you can always file your complaint with the Spanish Agency for Data Protection, which is the authority for matters relating to data protection in Spain: http://www.agpd.es., C/Jorge Juan número 6, 28001, Madrid.