Privacy Policy

In order to guarantee and protect the privacy and confidentiality of the personal data of our website’s users, and to safeguard their privacy, we have drafted this Privacy Policy in accordance with current legislation.

The terms set forth below—and in particular the duty of confidentiality—shall be binding on all internal and external personnel who work or may work with us and who have access to the data you provide to us, whether while browsing our website, by using our forms, or during the contracting or provision of services.

We reserve the right to modify the content of this Privacy Policy in order to adapt it to new legislation or case law, as well as to reports or opinions issued by the Spanish Data Protection Agency, the Article 29 Working Party, or the European Data Protection Board (EDPB).

If we intend to use the personal data of Users, Customers, or Potential Customers in a manner different from that set forth in the Privacy Policy in effect at the time you provided us with your data; or if we intend to process such data for purposes other than those indicated at the time you provided your data to us, we will make every effort to contact you as the data subject to inform you and obtain your consent again. Otherwise, we will not use the data for any other purposes.

We advise Users to review this text each time they visit our website to ensure they understand the purposes for which we may use their data and how we may use it.

This Privacy Policy shall form part of and be permanently incorporated into the provisions of our Legal Notice, the Legal Terms and Conditions of the contracted service, and our Cookie Policy. These documents are available to users on our website, and we recommend that you read them.

We will always indicate the date of the most recent update to the Privacy Policy so that Users are aware of the current version that applies to them and the date of the most recent revision.

This Privacy Policy complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the GDPR) and Organic Law 3/2018 of December 5 on the Protection of Personal Data and the Guarantee of Digital Rights (hereinafter the LOPDGDD).

DATA CONTROLLER.

The data controller for the data collected, processed, and stored through this website and in connection with the services provided and contracted through it is SISTEMA AZUD, S.A., hereinafter “AZUD,” with Tax ID No. (NIF): A-30213433, with its registered office at Polígono Industrial Oeste, Avda. de las Américas, Parcela 6/6, ZIP Code: 30.820 Alcantarilla (Murcia). Email: azud@azud.com. Contact person responsible for data processing: protecciondedatos@azud.com. Phone: (+34) 968 80 84 02. The company is registered in the Murcia Commercial Registry, Book 511, Section 3, Folio 209, Page 9055, Entry 1.

DATA PROCESSING.

Any personal data that may be requested will consist of information that is essential to identify the data subject and respond to their request, resolve any issues raised, and provide the contracted services. Such data will be collected for specific, explicit, and legitimate purposes and will not be processed in a manner incompatible with those purposes.

AZUD will inform the data subject, prior to collecting their data, of the provisions set forth in this Privacy Policy, so that they may provide express, specific, and unambiguous consent to the processing of their data.

SOURCE OF DATA.

First, it is important for Users to keep in mind that when personal information is provided online (for example, via email or the Internet), it may be collected and used by others. For this reason, AZUD is not liable for such information being collected, stored, and/or processed by an unauthorized third party, as it has taken all reasonable security measures within its power to prevent this from happening.

The data we process and store may come from various sources:
• Through our website, we collect personal data from Users who voluntarily choose to fill out the required fields we have included in each of the forms on our website.

Using these forms, Users can submit an inquiry or provide a suggestion, request a quote for a specific service offered on our website, register as a User to apply for our job openings, or—if they expressly authorize it—receive advertising and newsletters from AZUD. Through these forms, Users provide us with their personal data and consent to its processing in accordance with the purposes indicated at the time the form is completed.
Users are responsible for the accuracy and authenticity of the information they provide through our forms, and are obligated to keep it up to date to prevent errors on our part. Users are responsible for any false or inaccurate statements resulting from the information and data provided through these forms.

• Information may also be received via emails sent to azud@azud.com; therefore, we inform Users that emails sent to this address are hosted on AZUD’s own servers, located within the European Union.

Please note that, if the User or potential customer so desires, a meeting may be arranged over the phone; to do so, the User must provide their name and phone number.

The purpose of processing all this data will be as indicated at the time of collection and detailed in the section “Purposes of Processing and Retention Periods” of this Privacy Policy.

LEGAL BASIS FOR DATA PROCESSING.

The legal base for processing User data will depend on when the personal data of the User, Prospective Customer, or Customer is collected or processed:

• Data collected through the “Inquiries and Information” form: This will be based on the data subject’s explicit consent (Art. 6.1 of the GDPR). These requests do not imply any contractual relationship.
• Data collected through the newsletter sign-up form: This will constitute the data subject’s express consent (Art. 6.1 of the GDPR). By filling out the form, the data subject agrees to the terms of this Privacy Policy or the specific clause.
• Data collected through the Registration Form for the Purchase of Products and Services: This constitutes an existing contractual relationship (Art. 6.2 of the GDPR). By filling out the form, the data subject agrees to the provisions of this Privacy Policy or any specific clause.
• Data collected through the “Work with Us” form: This constitutes the data subject’s explicit consent (Art. 6.1 of the GDPR).

These applications do not imply any contractual relationship. The résumés provided by Users allow us to create their corresponding profiles and take them into account for current or future hiring processes. By filling out the aforementioned form, the individual agrees to the terms of this Privacy Policy or specific clause.

• Data collected via email: This is based on either express consent or a contractual relationship, depending on when the data is collected.

PURPOSES OF DATA PROCESSING AND DATA RETENTION PERIODS.

The purposes for which AZUD will carry out each data processing activity are set forth in the various privacy notices included in each data collection channel—web forms, etc.

In general, the data processing carried out by AZUD focuses on the following areas:

• Accounting Management: Invoicing Management.
• Tax management: application of withholdings, tax credits, etc.
• Administrative management: logistics management, warehouse management, deliveries, receiving goods, etc.
• Marketing: commercial activities and promotions related to products or services directed at our customers or Users who have requested relevant information in the past, including the conduct of satisfaction surveys.

Notwithstanding the foregoing, we provide below details regarding the processing and retention period of data by AZUD:

Contact Form: To contact the User to address any inquiries, questions, or suggestions regarding the service provided or the interest expressed in our organization or our products/services. To provide both our customers and potential customers with offers and promotions for products and services of interest to them, invitations to our events, and other relevant content.

This data will be retained on the email provider’s server indefinitely, unless the data subject objects. However, if the retained emails relate to the provision of services, they will be retained for as long as obligations may arise from the contractual relationship (5 years—Article 1964 of the Civil Code).

Newsletter Form: This information will be used by AZUD to provide you with information and to contact you regarding your expressed interest in receiving newsletters and promotional materials. This information will be retained for as long as there is mutual interest, provided that the data subject has not objected.
Data Collected Through Cookies: Through the cookies described in our Cookie Policy—which we recommend you read—we collect data to personalize your experience and better meet your individual needs, improve our website, enable you to share comments on social media, and more. This data will be retained in accordance with the provisions of our aforementioned Cookie Policy.

“Work with Us” Form: This information will be used by AZUD to receive resumes from individuals interested in working at our organization. If you participate in a recruitment process, this information will be used to evaluate the candidate’s professional profile. This information will be retained for as long as there is mutual interest, provided that the individual has not objected. For more information, please refer to the “Receipt of Resumes” section of this document.

OBLIGATION TO PROVIDE THE REQUESTED INFORMATION.

In order to provide our services in the best possible way, Users must provide us with the information and personal data requested in our forms. If you do not provide all the requested information marked as required, we will not be able to offer our services or products or, where applicable, send the requested information; therefore, we will not be able to provide the services or products in which you are interested.

MINORS.

At AZUD, we strictly comply with the requirements set forth in the GDPR regarding the protection of children’s personal data; therefore, we do not intentionally collect any information from children under 14 years of age (Article 7 of the LOPDGDD).

In addition, we inform Users that this website and the ordering and purchase of our products and services are intended solely for individuals over the age of 18.

HOW WE PROTECT THE INFORMATION OF USERS, POTENTIAL CUSTOMERS, OR CUSTOMERS.

AZUD implements physical, technical, and organizational measures to ensure the security of personal data and to minimize the risk of accidental or unlawful destruction, accidental loss, unauthorized use, alteration, unauthorized modification, disclosure, and/or access, as well as any other unlawful form of processing of your data, in accordance with the provisions of Article 32 of the GDPR.

In this regard, and taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of the processing, as well as the likelihood and severity of risks that may affect the rights and freedoms of natural persons, appropriate measures have been established to ensure a level of security appropriate to the existing risk.

In any case, AZUD has put in place sufficient mechanisms to:

• Ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems and services.
• Restore the availability of and access to personal data quickly in the event of a physical or technical incident.
• Regularly verify, evaluate, and assess the effectiveness of the technical and organizational measures implemented to ensure the security of the processing.
• Pseudonymize and encrypt personal data, where appropriate.

Notwithstanding the foregoing, as a User, you acknowledge and agree that Internet security measures are not impregnable and that the networks used on the Internet are not 100% secure, therefore any communication sent through this medium may be intercepted and/or altered by unauthorized persons; consequently, as a User, you must also exercise extreme caution.

NOTICE OF PERSONAL DATA BREACHES OR SECURITY BREACHES.

A personal data breach is a breach of information system security that results in, or may result in, the destruction, alteration, loss, unauthorized disclosure, or access—whether accidental or not—to personal data transmitted, stored, or processed in connection with the provision of our services.

In the event that the personal data we store and/or process at AZUD is compromised in any way, we will promptly notify those affected, in accordance with the provisions of Article 33 of the GDPR.

DISCLOSURE OF DATA TO THIRD PARTIES.

The personal data that Users or potential customers have provided to us through our Website, or during the provision of services, will not be sold, transferred, and/or exchanged with unauthorized third parties, except where required by law, or in the cases set forth below regarding international data transfers carried out by AZUD.

Furthermore, to comply with legal requirements, the data may be disclosed to the Tax Authority and other public administration agencies, if requested to do so.

INTERNATIONAL DATA TRANSFERS.

Please be advised that the data you provide will be stored on the servers of ClickDimensions (an email marketing provider) located in the United States. ClickDimensions participates in the EU-U.S. Data Privacy Framework; information about this framework is available here, approved by the European Data Protection Board. See privacy policy from ClickDimensions. If you do not enter the information marked as required on the form, we may not be able to process your request.

AZUD informs you that the purpose of collecting and processing the requested personal data is to send you our publications, promotions for products and/or services, and exclusive resources related to this form. The legal basis for this processing is the consent of the data subject.

DATA PROTECTION RIGHTS.

Any person may exercise their rights of access, rectification, erasure, restriction of processing, data portability, and the right not to be subject to automated processing—including profiling—as well as the right to object to the processing of personal data by AZUD, and may revoke any consent provided.

To do so, you may send a written request specifying the right you wish to exercise either to the email address protecciondedatos@azud.com or to the following mailing address: Polígono Industrial Oeste, Avda. de las Américas, Parcela 6/6, ZIP Code: 30.820 Alcantarilla (Murcia). When necessary due to reasonable doubts regarding the applicant’s identity, the data controller may request that the applicant provide the additional information needed to confirm their identity, such as a photocopy of their national ID card, passport, foreign resident ID number (NIE), or other equivalent identification document. If acting on behalf of a third party, proof of the granted power of attorney must be provided.

We provide Users with forms to exercise these rights; they can request them through our contact form.

What exactly can you request?
Right of Access: You may request information regarding whether your personal data is being processed.
Right to rectification: You may request that your data be corrected if it is incorrect, as well as its deletion.

Right to erasure: You may request the erasure of your data; if any restrictions apply, the data will be retained in a blocked format solely for the purpose of asserting or defending legal claims.

Right to Object: You may request that we stop processing your data in the manner described, unless we have legitimate grounds to continue processing it, in which case we will expressly state so.

Right to Request Restriction of Processing: You may request at any time that we restrict the processing of your data in any of the following cases:

• When you contest the accuracy of the data being processed, and for a period of time that allows AZUD to verify the accuracy of the data.
• When the processing of the data is unlawful under applicable law and the data subject chooses to restrict its use rather than have it deleted.
• When the data subject needs their data to establish, exercise, or defend legal claims.
  Right to data portability: Thus, if the data is processed automatically, it must be returned or transferred to another company designated by the User in a structured, machine-readable, and commonly used format.

Right to erasure: You may request the erasure of your personal data, and AZUD must erase it without undue delay when:

• The data is no longer necessary in relation to the purposes for which it was collected or processed.
• The data subject withdraws the consent on which the data processing is based, and there is no other legal basis for it.
• The data subject objects to the processing because its purpose is the direct marketing of products. The data has been processed unlawfully.
• The data must be deleted to comply with a legal obligation at the EU and/or national level.

In addition, Users have other rights, namely:

Right to Withdraw Consent: The User may withdraw their consent to the processing of personal data for a specific purpose at any time by simply contacting us to exercise this right.

Right to File a Complaint with the Supervisory Authority: Any User may contact the Supervisory Authority if they believe that their data is being processed incorrectly. In Spain, the supervisory authority is the Spanish Data Protection Agency, located at C/ Jorge Juan, 6, 28001 Madrid, with the following contact numbers: 901 100 099 / 91 266 35 17.

SOCIAL MEDIA

AZUD is active on Twitter, Facebook, LinkedIn, and YouTube, though it may use other platforms in the future.

That is why, through this Privacy Policy, AZUD acknowledges that it is the data controller with respect to the data published by AZUD on those platforms, as well as the data that Users send privately to AZUD for the purpose of being processed—for example, communications requesting a response to an inquiry.

Notwithstanding the foregoing, AZUD does not share or disclose any personal information about Users, Twitter “followers,” Facebook “followers,” etc., through these profiles.

We would like to take this opportunity to inform Users that AZUD’s profile on the aforementioned social media platforms is open to the general public, with no restrictions on access by other users, so that our brand, services, products, promotions, etc., can be seen by as many people as possible. Therefore, if Users who follow our profiles post personal information on our wall, they will be solely responsible for doing so.

Anyone who does not wish to be a “follower” of AZUD on the social media platforms where it is present need only unfollow that profile in accordance with the Privacy Policies and Terms and Conditions of the social media platform in question. User data uploaded to our profiles will remain there from the moment the user gives consent until the user withdraws it by submitting a request to the platform.

AZUD’s use of social media will be limited to the extent permitted by the social media platform for corporate profiles. Therefore, unless prohibited by law, AZUD may inform its followers—through any means permitted by the social media platform—about its activities, contests, competitions, services, etc., as well as provide personalized customer service through the social media platform.

Any User may exercise their data protection rights by contacting us at the address and email address provided in the section on those rights.
Under no circumstances will it extract data from social media without the user’s express consent.

We strongly recommend that Users read the Privacy Policies and Terms and Conditions of the social media platforms where we are active.

SUBMISSION OF RESUMES.

Anyone interested in working with AZUD can submit their resume by registering as a user on our website, sending us their resume, and applying for the job openings posted there.

In these cases, the data will be processed for the purpose of analyzing the candidate’s professional profile and offering them the opportunity to participate in recruitment processes organized by AZUD, depending on vacant or newly created positions. Similarly, if the candidate’s profile is selected, their data may be used to process their hiring as part of AZUD’s workforce.

Similarly, at AZUD, we process the information you provide us in order to maintain a database of prospective candidates to fill potential job openings at our company that match your professional profile.

Please be advised that no automated decisions will be made, including profiling.
AZUD will request your free, informed, specific, and unambiguous consent, in accordance with Article 6.1.a of the GDPR, to maintain a database of prospective candidates. This information will not be shared with third parties.

The personal data provided will be retained until the data subject requests its deletion.

In any case, please be advised that this information will be retained as long as there is a mutual interest and provided that the data subject has not objected.

TERMS AND CONDITIONS.

We strongly recommend that Users also visit the following sections:

• Legal Terms
• Legal Notice
• Cookie Policy

These terms and conditions govern, among many other aspects, the use of this website, as well as the disclaimers and limitations of liability that apply to it.

Last updated April 3, 2020.