1.- DATA CONTROLLER

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Organic Law 3/2018 of December 5 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), you are informed that the controller of your personal data is:

ALFONSO GALLARDO, S.A.
Tax ID: A06049464
Registered office: Cr. de Badajoz, 32, 06380 Jerez de los Caballeros (Badajoz)
Data Protection Officer (DPO) email: dpo@clgrupoindustrial.com

2.- PERSONAL DATA WE PROCESS

Depending on your interaction with our website, we may process the following categories of data:

• Identification data: name, surname, ID number/passport.
• Contact data: postal address, email address, telephone number.
• Professional data: company, position, business sector.
• Browsing data: IP address, browser type, operating system, pages visited, and date and time of access, collected automatically.

3.- PURPOSES AND LEGAL BASIS FOR PROCESSING

We process your personal data for the following purposes, based on the corresponding legal grounds:

• Responding to enquiries and information requests submitted via email or contact forms. Legal basis: legitimate interest and/or performance of a contract (Art. 6(1)(b) and (f) GDPR).
• Managing contractual and business relationships with clients, suppliers, and partners. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Sending commercial communications regarding our products and services, only with prior consent. Legal basis: consent (Art. 6(1)(a) GDPR).
• Compliance with legal and tax obligations. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

4.- DATA RETENTION PERIOD

Your data will be retained for as long as necessary to fulfill the purpose for which it was collected and to address potential liabilities, respecting the following minimum retention periods:

• Tax obligations: 4 years.
• Commercial documentation: 6 years.
• Civil contractual liabilities: 5 years.
• Anti-money laundering obligations: 10 years.

After these periods, the data will be blocked and subsequently securely deleted.

5.- DATA RECIPIENTS

As a general rule, ALFONSO GALLARDO, S.A. will not transfer your data to third parties, except in the following cases:

• Legal obligation: Tax Agency, courts and tribunals, law enforcement authorities, or other competent authorities when required by applicable law.
• Data processors: providers of technology, hosting, email, or advisory services acting under contracts in accordance with Article 28 GDPR.
• Group companies: within CL Grupo Industrial, when necessary for administrative management or service provision, always with appropriate safeguards.

Your data will never be sold or transferred to third parties outside the group for commercial purposes.

6.- INTERNATIONAL TRANSFERS

As a general rule, ALFONSO GALLARDO, S.A. does not carry out international data transfers outside the European Economic Area (EEA). If any technology service provider involves such transfers, we will ensure that the destination country has an adequacy decision by the European Commission or that appropriate safeguards предусмотрены in Article 46 GDPR are implemented.

7.- DATA SUBJECT RIGHTS

In accordance with Articles 15 to 22 of the GDPR and Articles 13 to 18 of the LOPDGDD, you may exercise the following rights at any time:

• Access: obtain confirmation as to whether we process your data and access it.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your data when it is no longer necessary or consent has been withdrawn.
• Objection: object to processing based on legitimate interest or for direct marketing purposes.
• Restriction: request limitation of processing under certain circumstances.
• Portability: receive your data in a structured format and transmit it to another controller.
• Withdrawal of consent: withdraw consent at any time, without retroactive effect.

To exercise these rights, send your request in writing, together with a copy of your ID document, to: dpo@clgrupoindustrial.com. We will respond within a maximum period of one month, extendable by two additional months in particularly complex cases.

If you consider that the processing of your data is not compliant with the GDPR, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

8.- SECURITY MEASURES

ALFONSO GALLARDO, S.A. has implemented the necessary technical and organizational measures to ensure the security of your personal data and prevent its alteration, loss, unauthorized processing, or access, in accordance with Article 32 GDPR, including:

• Role-based access control and the principle of least privilege.
• Encryption of communications using secure protocols (TLS/SSL).
• Procedures for managing incidents and security breaches.
• Staff training and awareness in data protection.

9.- COOKIES

This website may use technical and analytics cookies. Technical cookies are necessary for the proper functioning of the website; analytics cookies require prior consent. For more information, please consult our Cookie Policy.

10.- MINORS

The services offered through this website are not intended for individuals under the age of 14. ALFONSO GALLARDO, S.A. does not knowingly collect data from minors without verifiable consent from their parents or legal guardians. If you become aware of this, please notify us at dpo@clgrupoindustrial.com.

11.- COMMERCIAL COMMUNICATIONS

We will only send commercial communications to users who have provided their explicit consent. Each communication will include a simple and free mechanism to withdraw such consent, without affecting the lawfulness of prior processing, in accordance with Article 7(3) GDPR.

12.- CHANGES

ALFONSO GALLARDO, S.A. reserves the right to modify this Privacy Policy to adapt it to legislative, case law, or business practice developments. Any significant changes will be communicated via the website.

13.- APPLICABLE LAW AND JURISDICTION

This policy is governed by Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPDGDD), and other applicable data protection regulations.

For the resolution of any disputes, the parties shall submit to the courts and tribunals of Badajoz, unless otherwise provided by applicable regulations.

14.- CONTACT

For any queries related to this Privacy Policy, you can contact:

dpo@clgrupoindustrial.com