TORNILLERIA INDUSTRIAL, S.A. (hereinafter, FATOR) informs the data subjects that their data will be used in the way and with the limits, rights and obligations established in Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, called the General Data Protection Regulation(hereinafter, the GDPR), and, to comply with that established in article 13 of the GDPR, we inform of the following:
CONTROLLER
TORNILLERIA INDUSTRIAL, S.A.
C/ Catalunya 11- Pol. Ind. Can Oller
08130 Santa Perpètua de Mogoda BARCELONA (Spain)
Tel.: 936929711
administracion@fatorgroup.com
PURPOSE OF THE PROCESSING
The data submitted by the data subjects will be used for the legitimate purposes envisaged by FATOR, specified as follows:
LEGITIMACY OF THE PROCESSING
The legal basis for processing the data subjects' data regarding purposes 1 to 3 is to carry out the corresponding contractual relations.
The basis for providing FATOR customers with offers and services is to meet our legitimate business interests, i.e. enable our customers to arrange other products in order to gain their loyalty. The legitimate interest envisaged in the GDPR expressly allows the personal data to be processed for such purpose.
The basis for legitimating the sending of commercial communications to the data subjects who are not customers is the express and unequivocal consent obtained from them.
In any case, they are entitled to object to the processing of their data, in accordance with that described in this Policy.
DATA RECIPIENTS AND COMMUNICATION
The data subjects' data will not be assigned to third parties.
Where applicable, the data can be notified solely to the Public Administrations and in the cases envisaged in the applicable laws.
DURATION OF THE PROCESSING
The data for managing customer relations, invoicing, collection, etc. will be stored during the contract term. Once the contractual relationship ends, the data must be stored for the time required by the applicable legislation and until any liabilities arising from the contract expire.
The data for sending commercial communications and drafting commercial and service profiles will be stored indefinitely until, where applicable, the wish to erase them is stated.
DATA SUBJECTS' RIGHTS
FATOR ensures that the data subjects can exercise the following rights:
Access and rectification: the right to obtain confirmation that we are processing their personal data, access their personal data and request the rectification of inaccurate data.
Erasure: request the erasure of their data when, among other reasons, they are no longer necessary for the purposes for which they were collected.
Restriction of processing: request the data processing restriction or data portability, in which case we will only store such data to file or defend claims.
Objection: object to the processing of their data in certain situations envisaged in the GDPR. In such cases, we will cease to process their data or, where applicable, we will cease to process the data for that specific purpose, except for legitimate reasons or to file or defend potential claims.
Portability: request the downloading of their personal data for portability and submit them to another company.
Exercising their rights: the rights described above can be exercised vis-à-vis FATOR by sending an email to the address stated in the "Controller" section of this Privacy Policy, where they will be appropriately informed of how to exercise them.
Protection of rights: if the data subjects' rights are breached, especially when they have not been satisfied when exercising their rights, they can file a claim at the Spanish Data Protection Agency (www.aepd.es) or any other competent supervisory authority. They can also obtain further information about their rights by writing to those bodies.
