Privacy Policy

The Privacy Policy is part of the General Terms and Conditions governing the operation of this
website

WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

EIWA-GRACIA, S.L.
Address: Avenida Maestro Jose Garberi Serrano 12
Postal Code: 03540
Playa de San Juan
Tax ID (CIF): B19415918
Tel.: 677 717 241
E-mail: info.eiwa.gracia@gmail.com

You can contact us by any means convenient for you.

We reserve the right to modify or adapt this Privacy Policy at any time. We recommend that you periodically check its current version. If you are registered and log in to your account or profile, you will be informed of any changes made.

CONTACTS THROUGH THE WEBSITE AND BY E-MAIL

What data do we collect through the website?

We may process your IP address, information about the operating system or browser you use, as well as the duration of your visit to the website. This data may be processed anonymously.

If you provide your data through the contact form, we will be able to identify you in order to contact you if necessary.

For what purposes do we process personal data?

  • Responding to your questions, requests and inquiries.
  • Organizing the requested service and processing your request or inquiry.
  • Sending information electronically related to your request.
  • Sending commercial information or information about events by e-mail when you have given your prior consent.
  • Analyzing and improving the operation of the website, our products and services, as well as improving our commercial strategy.

On what basis do we process your data?

The legal basis is the acceptance and consent of the data subject, expressed through a voluntary action.

For example, if submitting a request requires filling out a form and clicking the “Submit” button, this means that the user has been informed and has expressed their consent to the provisions attached to the form, including the Privacy Policy.

In all our forms, mandatory fields are marked with the symbol *. If you do not complete the mandatory fields or do not tick the checkbox confirming your consent to the Privacy Policy, it will not be possible to submit the information.

How long do we retain personal data?

Until the consent provided is withdrawn.

NEWSLETTER SUBSCRIPTION

What data do we collect?

You can subscribe to an information newsletter on the website. To do so, you must provide an e-mail address to which the messages will be sent.

We only store your e-mail address in our database and send you periodic messages until you ask us to cancel your subscription or until we discontinue the newsletter.

Each message will provide you with the option to unsubscribe from further communications.

For what purposes is the data processed?

  • Organization of the requested service.
  • Sending information electronically related to your request.
  • Sending commercial information or information about events when you have given your prior consent.
  • Analyzing and improving the effectiveness of newsletters and our commercial strategy.

Legal basis for processing data

Acceptance and consent of the data subject. When subscribing, you must tick the corresponding checkbox and click the submit button. This means that the user has been informed and has given their consent to receive the newsletter.

Data retention period

Until the consent provided is withdrawn.

CLIENTS

For what purposes is the data processed?

  • Preparation of a commercial offer and subsequent interaction between the parties.
  • Sending information electronically related to the client’s request.
  • Sending commercial information or information about events when prior consent has been given.
  • Management of administrative, communication and logistics services.
  • Issuing invoices and fulfilling the corresponding tax obligations.
  • Monitoring and managing the relevant transactions.

Legal basis for processing data

The existence of a contractual relationship between the parties. Data processing is necessary for the performance of a contract to which the data subject is a party, or for taking pre-contractual measures at their request.

Data retention period

For the duration of the relationship between the parties and for the statutory limitation periods provided for by law.

QUALITY SURVEYS

For what purposes is the data processed?

  • Assessment of the quality of the service provided.
  • Improvement of the services offered in accordance with ISO requirements.

Legal basis

Direct consent of the survey participant.

Retention period

Until the consent provided is withdrawn.

SUPPLIERS

For what purposes is the data processed?

  • Sending information electronically related to the request.
  • Sending commercial information or information about events when prior consent has been given.
  • Management of administrative, communication and logistics services.
  • Issuing invoices.
  • Carrying out the relevant transactions.
  • Issuing invoices and fulfilling tax obligations.
  • Monitoring outstanding debts and collecting payments.

Legal basis

The existence of a contractual relationship or, in the absence thereof, consent provided when contacting us or offering services/products.

Retention period

For the duration of the relationship between the parties and for the statutory limitation periods provided for by law.

CONTACTS THROUGH SOCIAL NETWORKS

For what purposes is the data processed?

  • Responding to your questions, requests and inquiries.
  • Organizing the requested service and processing your request.
  • Interacting with you and building a community of followers.

Legal basis

The legal basis is the voluntary consent of the data subject to establish contact and, where necessary, enter into a contractual relationship on the relevant social network.

Data processing on the social network is carried out in accordance with its own Privacy Policy.

Retention period

We may view or delete your data on the social network only within the capabilities available to us through the relevant profile.

We will process your data for as long as you continue to follow us, are our follower, click “Like,” “Follow,” or use similar functions.

Changes to your data, restrictions on information or publications must be made through the settings of your own profile on the relevant social network.

JOB APPLICANTS

For what purposes is the data processed?

  • Organization of candidate selection processes for employee recruitment.
  • Inviting you to interviews and evaluating your candidacy.

In addition, please note that one year after receiving your CV, we will securely destroy it.

Legal basis

Your unequivocal consent, expressed by sending us your CV.

Retention period

At least 1 year or until the consent provided is withdrawn.

DO WE PROCESS THIRD-PARTY DATA?

As a general rule, no — we only process data provided directly by its owners.

If you provide us with third-party data, you are required to inform those individuals in advance and obtain their consent. Otherwise, you release us from liability for failure to comply with this requirement.

DATA OF MINORS

We do not process data of persons under 14 years of age.

Therefore, you should not provide us with such data if you are under 14 years of age, nor provide data of third parties who are under 14 years of age.

EIWA-GRACIA, S.L. shall not be held liable for any violation of this requirement.

DO WE CARRY OUT ELECTRONIC COMMUNICATIONS?

  • Electronic messages will only be sent for the purpose of processing your request if e-mail is one of the contact methods you have provided.
  • Commercial communications are sent only with your prior and express consent.

WHAT SECURITY MEASURES DO WE APPLY?

We have adopted an appropriate level of protection for personal data and implemented the technical and organizational measures available to us, taking into account the current state of technology.

These measures are aimed at preventing:

  • loss of personal data;
  • unauthorized use;
  • alteration;
  • unauthorized access;
  • theft of personal data.

TO WHOM MAY YOUR DATA BE DISCLOSED?

Your data is not disclosed to third parties, except where required by law.

In particular, data may be disclosed to:

  • The Spanish State Tax Administration Agency (Agencia Estatal de la Administración Tributaria);
  • banks and financial institutions for payment for services provided or goods purchased;
  • data processors necessary to fulfill contractual obligations.

When making a purchase or payment, if you choose an application, website, platform, bank card or another online service, your data may be transferred to the relevant platform or processed within its system in compliance with the necessary security measures.

On our behalf, companies engaged in website development and technical maintenance, as well as companies providing hosting services, may have access to the website.

Service agreements are entered into with such companies, obliging them to ensure the same level of confidentiality as we do.

WHAT RIGHTS DO YOU HAVE?

You have the right to:

  • Find out whether we process your personal data.
  • Access your personal data.
  • Request the correction of your data if it is inaccurate.
  • Request the deletion of your data if it is no longer necessary for the purposes for which it was collected, or if you have withdrawn your consent.
  • Request the restriction of processing of your data in certain cases. In such cases, the data will be retained in accordance with applicable legislation.
  • Receive your data in a structured, commonly used and machine-readable format. In certain cases, you may also ask us to transfer it to another data controller designated by you.
  • Lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) or another competent supervisory authority if you believe that your rights have not been properly respected.
  • Withdraw your consent to data processing at any time with regard to those types of processing for which you previously gave your consent.

If any of your data changes, we ask you to inform us so that we can keep the information up to date.