PRIVACY POLICY

In accordance with the principles of legality, fairness and transparency, we provide you with this Privacy Policy.

Who is the Data Controller of your data?

• Responsible: Cometal, S.A.
• Tax Identification Number: ESA28117026
• Social Domicile: C/ José Lázaro Galdiano 4 4º, 28036 Madrid.
• Contact:
  • Telephone: 914585980
  • Email: dario@cometalsa.com

For what purposes do we process your personal data?

At Cometal, S.A., depending on the category of interested party in question, we process the information you provide us with the following purposes:

• Potential customers: manage the potential commercial and/or professional relationship, manage the sending of information requested and/or resolve the queries raised, provide offers of our services and/or products of interest to you.
• Clients: manage the commercial and/or professional relationship, provide offers of our services and/or products of interest to you.
• Suppliers: manage the commercial and/or professional relationship.
• Candidates: managing the recruitment process.
• Web users: manage the analysis of your browsing data.

What is the legitimacy for the processing of your data?

The legal basis for processing your personal data, depending on the category of data subject concerned, may be:

• Potential clients:
  • Art. 6.1.b GDPR: application, at the request of the data subject, of pre-contractual measures (estimates, order forms, service offers, etc.).
  • Art. 6.1.f GDPR: Legitimate interest (sending requested information, responding to queries raised…).
  • Art. 6.1.a GDPR: consent of the data subject (providing offers of our services and/or products).
• Clients: Art. 6.1.b GDPR: performance of a contract to which the data subject is a party.
• Suppliers: Art. 6.1.b GDPR: performance of a contract to which the data subject is a party.
• Candidates: Art. 6.1.a GDPR: consent of the data subject himself.
• Web users: Art. 6.1.a GDPR: consent of the data subject himself.

The data we request from you are adequate, relevant and strictly necessary and in no case are you obliged to provide them, but failure to provide them may affect the purpose of the service or the impossibility of providing it.

How long will we keep your personal data?

Your data will be kept for the minimum time necessary for the correct provision of the service offered, as well as to meet the responsibilities that may arise from the same and any other legal requirement.

To which recipients will your data be communicated?

Cometal, S.A. will not communicate your data to any third party, unless expressly informed of this.

In addition, we inform you that certain data, by virtue of the regulations in force or the contractual relationship you maintain with Cometal, S.A., may be communicated to:

• Banks and financial institutions for the collection of contracted services and/or purchased products.
• Public administrations with competence in the sectors in which Cometal, S.A. operates, when so established by current legislation.

Are data transferred internationally?

Yes, our company uses Google Analytics, which involves the transfer of data to the United States. Google Analytics helps us to analyse traffic and user behaviour on our website.

We ensure that this transfer is carried out in accordance with applicable data protection regulations, using appropriate mechanisms, such as the Standard Contractual Clauses approved by the European Commission, to guarantee an adequate level of protection for your personal data.

For more information about how Google handles data and the security measures implemented, you can consult its Privacy Policy.

What are your rights when you provide us with your data?

The data protection rights that data subjects may exercise, where applicable, are:

• Right to request access to personal data relating to the data subject.
• Right of rectification or erasure.
• Right to object.
• The right to request the restriction of processing.
• Right to data portability.
• The right not to be subject to decisions based solely on automated data processing.

The holders of the personal data obtained may exercise their personal data protection rights by sending a written communication to the registered office of Cometal, S.A. or to the e-mail address provided for this purpose, dario@cometalsa.com. Models, forms and more information about your rights are available on the website of the national supervisory authority, Agencia Española de Protección de Datos, hereinafter, AEPD, www.aepd.es.

Can I withdraw consent?

You have the possibility and the right to withdraw consent for any specific purpose given at the time, without affecting the lawfulness of the processing based on consent prior to its withdrawal.

Where can I complain if I feel that my data is not being handled correctly?

If any data subject considers that their data are not processed correctly by Cometal, S.A. or that requests to exercise their rights have not been dealt with satisfactorily, they may lodge a complaint with the corresponding data protection authority, the AEPD being the one indicated in the national territory, www.aepd.es.

Security and updating of your personal data

In order to safeguard the security of your personal data, we inform you that we have adopted all the technical and organisational measures necessary to guarantee the security of the personal data supplied. All of this to avoid their alteration, loss and/or unauthorised processing or access, as required by law, although absolute security does not exist.

In order for us to keep your personal data up to date, it is important that you inform us whenever there is a change in your personal data.

Confidentiality

Cometal, S.A. informs you that your data will be treated with the utmost care and confidentiality by all personnel involved in any of the processing phases. We will not transfer or communicate your data to any third party, except in the cases provided for by law, or unless the interested party has expressly authorised us to do so.