WEBSITE PRIVACY POLICY
https://flexmetal.com

I. PRIVACY POLICY AND DATA PROTECTION

In compliance with current legislation, Flexmetal SL (hereinafter also referred to as the Website) is committed to adopting the necessary technical and organizational measures appropriate to the level of security for the data collected.

Laws Included in this Privacy Policy

This privacy policy adheres to current Spanish and European regulations on personal data protection online. Specifically, it complies with the following:

1. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and the free movement of such data (GDPR).
2. Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
3. Royal Decree 1720/2007, of 21 December, approving the Regulation for the implementation of Organic Law 15/1999, of 13 December, on the Protection of Personal Data (RDLOPD).
4. Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).

Data Controller Identity

The data controller of personal data collected on Flexmetal SL is Flexmetal SL, with Tax Identification Number (NIF): B58358128, registered in the Commercial Registry of Barcelona with the following registration details: Volume 23.358, Folio 71, Sheet B‑51‑573, 2nd Inscription, and represented by Flexmetal SL (hereinafter, the Data Controller). Contact details are as follows:

• Address: Pol.Ind La Bobila Nave 27, 08232 Viladecavalls – Barcelona
• Phone Number: 937862157
• Email: info@flexmetal.com

Registration of Personal Data

In compliance with the GDPR and LOPD-GDD, personal data collected through forms on this Website will be incorporated into our database. These data will be processed to facilitate, expedite, and fulfill the commitments established between Flexmetal SL and the User or to respond to a request or inquiry.

Principles Applied to Personal Data Processing

The processing of the User’s personal data will adhere to the following principles as per Article 5 of the GDPR:

1. Lawfulness, fairness, and transparency: Consent will always be required after full disclosure of the purposes of the data collection.
2. Purpose limitation: Data will only be collected for specified, explicit, and legitimate purposes.
3. Data minimization: Only the data strictly necessary for the purposes for which they are processed will be collected.
4. Accuracy: Data must be accurate and updated when necessary.
5. Storage limitation: Data will only be kept as long as necessary for the intended purposes.
6. Integrity and confidentiality: Data will be processed securely, ensuring their confidentiality.

Legal Basis for Data Processing

The legal basis for processing personal data is consent. Flexmetal SL commits to obtaining explicit and verifiable consent from the User for processing their data for specific purposes.

Purposes of Data Processing

Personal data collected will be used to fulfill commitments established between the Website and the User, respond to inquiries, and maintain relationships arising from completed forms.

Data Retention Period

Personal data will only be retained for the minimum time necessary for the purposes of their processing and, in all cases, only for 24 months, or until the User requests their deletion.

Recipients of Personal Data

Personal data will not be shared with third parties unless explicitly stated at the time of data collection.

Data Security Measures

Flexmetal SL has implemented appropriate technical and organizational measures to ensure the security and confidentiality of personal data. A secure SSL certificate encrypts the transmission of data between the server and the User.

II. ACCEPTANCE AND MODIFICATIONS TO THIS PRIVACY POLICY

By using the Website, the User agrees to the terms of this Privacy Policy. Flexmetal SL reserves the right to modify this policy based on legal, jurisprudential, or doctrinal changes. Users are encouraged to review this page regularly.

This Privacy Policy was last updated on 16 July 2021 to comply with Regulation (EU) 2016/679 and Organic Law 3/2018.

III. RIGHTS DERIVED FROM THE PROCESSING OF PERSONAL DATA

Users may exercise the following rights as outlined in the GDPR and Organic Law 3/2018:

1. Right of Access: Users have the right to obtain confirmation as to whether Flexmetal SL is processing their personal data and, if so, to access such data and additional information about the processing.
2. Right of Rectification: Users have the right to request the correction of inaccurate or incomplete personal data.
3. Right of Erasure (“Right to be Forgotten”): Users may request the deletion of their data when it is no longer necessary for the purposes for which it was collected, if consent is withdrawn, or in cases of unlawful processing.
4. Right to Restriction of Processing: Users can request the restriction of data processing when the accuracy of the data is contested, the processing is unlawful, or the data is no longer required by the controller but needed by the User for legal claims.
5. Right to Data Portability: Users may request their personal data in a structured, commonly used, and machine-readable format, and have the right to transmit it to another controller where technically feasible.
6. Right to Object: Users can object to the processing of their personal data at any time, including for profiling purposes.
7. Right Not to Be Subject to Automated Decision-Making: Users have the right to not be subjected to decisions based solely on automated processing, including profiling, unless legally permitted.

IV. EXERCISING YOUR RIGHTS

Users can exercise their rights by submitting a written request to the Data Controller, including the following:

• Full name and a copy of the ID (or equivalent proof of identity).
• A clear and specific request indicating the right they wish to exercise.
• Contact details for notification purposes.
• Any supporting documentation, if applicable.

Requests can be submitted to the following addresses:

• Postal Address: Pol.Ind La Bobila Nave 27, 08232 Viladecavalls – Barcelona
• Email: info@flexmetal.com

Flexmetal SL will respond to the request within the legally established timeframes.

V. DATA OF MINORS

In compliance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, data processing of individuals under 14 years of age requires parental or guardian consent. Flexmetal SL ensures that data of minors is processed lawfully and securely.

VI. DATA BREACHES

Flexmetal SL will promptly notify Users and relevant authorities of any security breaches that may pose a risk to personal data. Such breaches include, but are not limited to, unauthorized access, data destruction, or data loss.

VII. LINKS TO THIRD-PARTY WEBSITES

This Website may contain links to third-party websites. Flexmetal SL is not responsible for the privacy practices or content of these external websites. Users are encouraged to review the privacy policies of these third-party sites.

VIII. LODGING COMPLAINTS

If a User believes that their rights have been violated, they may file a complaint with the Spanish Data Protection Agency (AEPD) or seek legal recourse in their jurisdiction.

For more information, visit the AEPD website: http://www.aepd.es.

This concludes the Privacy Policy for Flexmetal SL. If you have additional questions or need further clarification, please contact us via the provided channels.