PRIVACY POLICY

Latest modification: June 2024 

This privacy policy is applicable to the website https://bricoaitana.com/. 

Please read it carefully. In it you will find information on the processing of your personal data and the rights  recognised to you in the regulations in force in this area. 

We reserve the right to update our privacy policy at any time because of business decisions, as well as to  comply with possible legislative or jurisprudential changes. If you have questions or need any clarification  regarding our Privacy Policy or your rights, you can contact us through the channels indicated below. You declare that the data you provide us, now or in the future, are correct and truthful and you agree to notify  us of any change to them. Should you provide personal data of third parties, you undertake to obtain the prior  consent of those concerned and to inform them about the contents of this policy. 

In general, the fields of our forms that are indicated as obligatory, must necessarily be completed to process  your requests. 

1.Who is the company in control of processing of your data? The controller of the personal data housed on  this website is: 

Controller: BRICO AITANA, S.L. (Brico Aitana) 

VAT no.: B53402681 

Postal address: Avda. Vall de Laguart, 12 – 03710 Calpe (Alicante) 

Telephone: +34 965 87 45 66 

Email address: [email protected] 

2. What will we process your data for and on what legal basis? 

Management of the relationship with customers and users We process the data that our customers and  users provide in their queries and in the user registration form or in the purchase form to meet their requests,  process their registration or manage the sale and delivery of the products purchased. The data of the transactions carried out on the website will also be processed for accounting and  administrative management purposes and compliance with our legal obligations in accounting and tax  matters. 

This processing is necessary for the execution of the contract or for the application of pre-contractual  measures at the request of the interested parties.

Administration and management of web security: We process browsing data (IP addresses or logs) to  administer and manage web security. This processing is based on our legitimate interest in ensuring the  security of the website. This interest is expressly recognised by Article 49 of the GDPR. For the balancing of  this interest with respect to user rights and freedoms, it has been considered that this processing  corresponds to generalized security practices and does not pose significant threats to the interested parties.  Statistical and quality management purposes: To evaluate and manage the quality of our services and  products, we process identifying data and contact data provided by our customers to send them satisfaction  surveys. We also compile statistics from aggregated data obtained from transaction data and web browsing  data, e.g., IP address, weblogs, pages visited, or actions taken on the Website (more info in our cookie policy). This processing is based on our legitimate interest in evaluating and managing the quality of our services and  products. For the weighing of this interest with respect to user rights and freedoms, it has been determined  that the processing had a limited impact on the privacy of the interested parties, corresponded to their  reasonable expectations and did not pose significant threats. 

Sending of commercial communications and management of mailing lists: We process the identification  and contact data provided by our customers and those people who register on our mailing lists to send them  communications related to our activities, products and services. 

This processing is based on the consent requested and, if you are already a registered user or have made a  purchase on our website, the sending of commercial communications is covered by article 21.2. of Law  34/2002, of July 11, on information society services and electronic commerce that transposes Directive  2002/58/EC (e-privacy directive) in Spain. Not giving your consent or withdrawing it does not condition the  execution of the order placed. 

At any time, you can request withdrawal from processing for commercial purposes by activating the link  provided for this purpose in our communications or by sending an email to:  

[email protected] 

3. How long will we keep your data? 

In general, we keep your data for the duration of the relationship you have with us and in any case for the  periods provided for in the applicable legal provisions, for example, in accounting and tax matters, and for the  time necessary to meet possible responsibilities arising from the processing. We will cancel your data when  they are no longer necessary or relevant for the purposes for which they were collected. The logs of access to  restricted areas of the website will be cancelled one month after their creation. Information related to  browsing will be cancelled once the website connection has ended and the statistics have been made. Data  processed for commercial purposes will be kept for as long as you do not request its deletion. 4. To whom may we communicate your data? 

Your data will only be communicated to third parties by legal obligation, with your consent, or when your  request implies such communication. 

5. What are your rights? 

You have the right to obtain confirmation of whether we are processing your personal data and, if so, to  access them. You can also request that your data be rectified when they are inaccurate or that incomplete  data be completed, as well as request their deletion when, among other reasons, the data is no longer  necessary for the purposes for which they were collected. 

In certain circumstances, you may request the limitation of the processing of your data. In this case, we will  only process the data concerned for the establishment, exercise, or defence of legal claims or for the  protection of the rights of other persons. Under certain conditions and for reasons related to your situation,  you may also object to the processing of your data. In this case, we will stop processing the data except for  compelling legitimate reasons that prevail over your interests or rights and freedoms, or for the formulation,  exercise, or defence of complaints. Likewise, and under certain conditions, you may request the portability of  your data so that they can be transmitted to another person responsible for the treatment. You can revoke any consent you have given for certain purposes, without affecting the legality of the  processing based on the consent prior to its withdrawal and file a complaint with the Spanish Agency for Data  Protection. 

To request your withdrawal from processing for commercial purposes, you can send an email to the following  email address: [email protected] 

To exercise your rights, you must send us a request accompanied by a copy of your national identity  document, or other valid document that identifies you: by post or email to the addresses indicated in the  section: Who is responsible for the processing of your data? 

You can obtain more information about your rights and how to exercise them on the page of the Spanish  Agency for Data Protection at http://www.aepd.es.