The purpose of this privacy policy is to provide information on the processing of personal data by Vicrila Industrias del Vidrio S.L.U (hereinafter, VICRILA) and describe the rights of data subjects, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and Spanish Organic Law 3/2018 of December 5, on personal data protection and the guarantee of digital rights (LOPDGDD).

Identity and contact details of data controller

Owner: Vicrila Industrias del Vidrio, S.L.U.

CIF (tax ID code) / NIF (tax ID no.): 95912150

Telephone: +34 94 431 6100

The data controller is detailed below. You can use the following channels to get in touch:

• Through the email address: resp-tratamiento-datos@vicrila.com

Purpose of processing your personal data

On VICRILA’s digital platform and media, personal data will be collected from the user and processed depending on the context and nature, for the following purposes:

• The management of unsolicited applications submitted using the corresponding form on the website.
• The management of queries and requests for information received through the contact form on the website.
• The management of contact details with customers, potential customers and suppliers through the user portal and media enabled for this purpose.
• The sending of commercial communications to customers

Legal basis for processing your data

The legal basis for the processing of your personal data is the consent of the data subject to participate in a selection process or to send a query or request information, for one or more specific purposes.

The legal basis for the processing of customer and supplier data is compliance with the obligations under the agreement or, where applicable, the legitimate interest pursuant to article 19 of the LOPDGDD for the processing of contact details.

The legal basis for sending commercial communications to customers is the legitimate interest pursuant to article 21.2 of the LSSI.

Data retention

In each processing, the data will be kept for the duration of the established relationships and, subsequently, for the applicable regulatory time limits and the time necessary to fulfill the purpose for which it was collected and to determine potential liabilities that may arise from said data purpose and processing. Only the data necessary for each processing is requested. Failure to communicate the data on our online forms will mean we will not be able to respond to your requests.

Recipients

Your personal data may be assigned to commercial agents if you require the provision of an order or service. Outside of this case, no data will be assigned to third parties, except where there is a legal obligation to do so.

Exercising rights

We inform you that you may exercise the following rights:

1. Right of access to your personal data to know which data are being processed
2. Right to rectify any inaccurate personal data
3. Right to delete your personal data, when this is possible
4. Right to request the limitation of the processing of your personal data when the accuracy, legality or necessity of the processing of the data is doubtful, in which case, we may retain the data for the filing or defense of claims
5. Right to object to the processing of your personal data, when the legal basis that authorizes us to process it is a legitimate interest. VICRILA will stop processing your data unless it has an overriding legitimate interest or for the filing, making or defense of claims
6. Right to the portability of your data, when the legal basis that authorizes us to process your data is your consent

These rights may be freely exercised by the data subject, and where appropriate, by their representative, by sending a written and signed request to resp-tratamiento-datos@vicrila.com

Aside from the rights above, the data subject will have the right to revoke the consent granted at any time without such revocation of consent affecting the lawfulness of processing prior to its withdrawal. VICRILA may continue processing the data subject’s data to the extent permissible by law.

VICRILA reminds the data subject that he/she is entitled to file a claim to the relevant Supervisory Authority of the country in which he/she is located.

What security measures have we implemented?

VICRILA undertakes to fulfill its duty of secrecy with regard to personal data and to safeguard them, and to adopt all the measures necessary to prevent their alteration, loss, processing or access by unauthorized individuals, in accordance with the provisions of applicable legislation.

VICRILA hereby informs users that it has implemented the technical and organizational measures necessary to guarantee the security of their personal data and to prevent their alteration, loss, processing and/or access by unauthorized individuals, taking into consideration the state of technology, the nature of the data stored, and the risks they are exposed to from human actions or from the physical/natural environment, in accordance with the provisions of applicable legislation.

Transfer of your data

We hereby inform you that in case of using third-party providers that process your personal data outside the European Economic Area, an international transfer will occur, which will always be based on an adequacy decision by the Commission, standard data protection clauses, an approved code of conduct or another transfer mechanism provided for by data protection regulations.

Specifically, to send communications to its customers VICRILA uses the following provider located in the United States: The Rocket Science Group, LLC (Mailchimp) 675 Ponce De Leon Ave NE Ste 5000, Atlanta, GA, 30308-2172 United States, which involves international transfers of data outside the European Economic Area. It is therefore recommended that you refer to its privacy policy to find out how they process your personal data.

Confidentiality

Any personal data that we collect through the website or through the different communications we maintain with you will be treated confidentially, undertaking to keep them secret in accordance with the provisions of the applicable legislation.

Links to other websites

This website may include hyperlinks to other sites that are not operated or controlled by VICRILA. Consequently, VICRILA does not guarantee, nor is it responsible for the legality, reliability, usefulness, veracity and timeliness of the content of such websites or their privacy practices. Before providing your personal information to these websites unrelated to VICRILA, please remember that their data protection compliance rules may differ from ours.

Updating of the privacy policy

The data protection policy content may be subject to change to adapt it to any legislative changes that may arise, as well as any criteria and positions issued by the supervisory authorities. In any case, the Affected Party will be duly notified of any change to the Privacy Policy so that he/she is aware of the changes made to the processing of his/her personal data, and if so required by applicable legislation, the Affected Party may give his/her consent.