Privacy Policy

In accordance with the principles of lawfulness, fairness, and transparency, we make this Privacy Policy available to you.

Who is the Data Controller of your data?

DATA CONTROLLER	INFORMATION
DATA CONTROLLER	Conductos de Ventilación, S.A.
TAX ID (NIF)	A28392694
REGISTERED ADDRESS	C/ Urano, 15, 28936, Móstoles, Madrid, Spain
CONTACT	Email info@convesa.es Phone +34 916463444

For what purpose do we process your personal data?

At Conductos de Ventilación, S.A., depending on the category of data subject, we process the information you provide to us for the following purposes:

DATA SUBJECTS	PURPOSES OF PROCESSING
POTENTIAL CLIENTS	Manage the potential business and/or professional relationship, handle the sending of requested information and/or respond to enquiries made, and provide offers of our services and/or products that may be of interest.
CLIENTS	Manage the business and/or professional relationship, and provide offers of our services and/or products that may be of interest.
SUPPLIERS	Manage the business and/or professional relationship.
CANDIDATES	Manage the recruitment and selection process.
WEB USERS	Manage the analysis of their browsing data.

What is the legal basis for processing your data?

The legal basis for processing your personal data, depending on the category of data subject concerned, may be as follows:

DATA SUBJECTS	LEGAL BASIS
POTENTIAL CLIENTS	Art. 6(1)(b) GDPR: performance, at the request of the data subject, of pre-contractual measures (quotes, engagement letters, service offers, etc.).
	Art. 6(1)(f) GDPR: legitimate interest (sending requested information, responding to enquiries, etc.).
	Art. 6(1)(a) GDPR: consent of the data subject (providing offers of our services and/or products).
CLIENTS	Art. 6(1)(b) GDPR: performance of a contract to which the data subject is party.
SUPPLIERS	Art. 6(1)(b) GDPR: performance of a contract to which the data subject is party.
CANDIDATES	Art. 6(1)(a) GDPR: consent of the data subject.
WEB USERS	Art. 6(1)(a) GDPR: consent of the data subject.

The legal basis for processing your personal data, depending on the category of data subject concerned, may be as follows:

How long will we retain your personal data?

Your data will be retained for the minimum period necessary to ensure the proper provision of the service offered, as well as to comply with any liabilities that may arise from it and any other applicable legal requirements.

To whom will your data be disclosed?

Conductos de Ventilación, S.A., in order to properly provide its services, may disclose your data to the following recipients:

Transport and/or courier companies.
Quality audit providers.

Additionally, we inform you that certain data, by virtue of applicable regulations or the contractual relationship you maintain with Conductos de Ventilación, S.A., may be disclosed to:

Banks and financial institutions for the collection of contracted services and/or purchased products.
Public authorities competent in the sectors of activity of Conductos de Ventilación, S.A., when required by applicable law.

We use WhatsApp as a communication channel with our clients, which involves an international data transfer, as regulated in its privacy policy. The safeguards applied for such transfers consist of the use of standard contractual clauses, as stated in the aforementioned privacy policy. The use of WhatsApp by the client as a communication channel implies acceptance of the said privacy policy.

What are your rights when you provide us with your data?

The data protection rights that data subjects may exercise, where applicable, are as follows:

Right to request access to personal data concerning the data subject.
Right to rectification or erasure.
Right to object.
Right to request restriction of processing.
Right to data portability.
Right not to be subject to decisions based solely on automated processing of data.

The holders of the personal data collected may exercise their data protection rights by sending a written request to the registered office of Conductos de Ventilación, S.A. or to the designated email address: info@convesa.es.

Templates, forms, and further information regarding your rights are available on the website of the national supervisory authority, the Spanish Data Protection Agency (AEPD): www.aepd.es.

Can I withdraw my consent?

You have the possibility and the right to withdraw your consent at any time for any specific purpose for which it was given, without affecting the lawfulness of processing based on consent prior to its withdrawal.

Where can I lodge a complaint if I believe my data is not being processed correctly?

If any data subject considers that their data is not being processed correctly by Conductos de Ventilación, S.A. or that their requests to exercise their rights have not been satisfactorily addressed, they may lodge a complaint with the competent data protection authority. In Spain, the competent authority is the Spanish Data Protection Agency (AEPD): www.aepd.es.

Security and updating of your personal data

For the purpose of safeguarding the security of your personal data, we inform you that all necessary technical and organisational measures have been adopted to ensure the security of the personal data provided. These measures are intended to prevent alteration, loss, and/or unauthorised processing or access, as required by applicable law, although absolute security cannot be guaranteed.

It is important that you inform us of any changes to your personal data so that we can keep it up to date.

Confidentiality

Conductos de Ventilación, S.A. informs you that your data will be processed with the utmost care and strict confidentiality by all personnel involved in any of the stages of processing. We will not disclose or share your data with any third parties, except in cases required by law or where the data subject has expressly authorised it.