Privacy policy
Purpose
The purpose of this Privacy Policy is to explain how we collect, process and protect the personal data that you provide to us via our website or blog (hereinafter Website) so you are free to decide whether you want us to process it.
It also aims to comply with the General Data Protection Regulation 2016/679 (hereinafter GDPR) and Organic Law 3/2018 on the protection of personal data and guarantee of digital rights (hereinafter LOPDGDD).
Identification of the Responsible Party / Information Society Service Provider
Identity - Entity: PINTURAS MONTÓ, S.A.U.
Spanish tax code (CIF/NIF): A46218210
Postal address: Ctra. de la Base Militar, 11, 46163 Marines (Valencia) Spain.
Telephone: +34 961 648 339
E-mail: comercial@montopinturas.com
Corporate purpose: Manufacture and sale of paints
Website: https://montopinturas.com
Registration data: Registered in the Mercantile Registry of Valencia, Volume 4084, Book 1396, Folio 80, Section 8, Sheet 18868
Processing of personal data
The personal identification and contact data that you have provided us, through our contact forms, e-mail, etc., will be treated confidentially and only by personnel authorised by our company.
All categories and types of personal data processed will be duly identified in the corresponding processing activities owned by our company.
Purpose
If you are a customer or supplier, your personal data will be processed for the sole purpose of maintaining the pre- and post-contractual, business or commercial relationship, either for the provision of services, for accounting and billing management, or other purposes with which we are obliged to comply within such a relationship.
We do not send advertising without the prior consent of the interested parties, except to our customers with whom we have a current relationship and always about services or products related to those already provided or purchased.
If you are a potential customer or an information requester, we will process your data exclusively to fulfil your requests, including in our reply commercial information related to your request.
The purposes that motivate the processing of personal data will be duly identified in the corresponding processing activities owned by our company.
Legitimisation
The processing of your personal data by our entity is carried out on the following legitimate bases:
- The request made voluntarily by you, whether for information, employment, contracting of our services, or purchase of our products.
- For the fulfilment of the contractual, business or commercial relationship with you.
- For the defence of our interests.
- To attend to the exercise of your rights regarding the protection of personal data.
- For compliance with other legal obligations.
- Express, free, informed and unequivocal consent, since we inform you of this privacy policy, which, after reading it and if you agree, you can voluntarily accept by ticking the boxes provided for this purpose.
- In this regard, we inform you that you may change your mind at any time and withdraw your consent.
In the event that the user is under 14 years of age, it will be necessary to have the consent of parents, guardians or a legal representative to process the user's data.
The user is solely responsible for the veracity of the data they send us.
Data retention
The personal data provided will be kept for the time necessary to fulfil the purpose for which they are collected, for the time required by law and as long as it is necessary to purge possible liabilities arising from the processing mentioned in the purposes.
In the case of job applications, the data will be kept for a maximum period of 1 year or until the data subject asks us to delete their data.
Creation of profiles
We do not create profiles using your personal data, but if we do we will inform you of this and request your prior permission to do so.
You also have the right to object to this type of processing at any time.
Data transfer
If you are an information requester or user of our website, your data will not be disclosed to third parties, unless we are legally obliged to do so.
If you are a job applicant, your data may be transferred to other companies in our group, although we will ask for your permission to do so.
If you are a customer or supplier, your personal data may be disclosed to third parties as required by law (e.g. Tax Agency), or in those cases and entities necessary to provide you with our services or pay invoices (e.g. banking entities).
Also, your personal data as a customer or supplier may be processed by some suppliers to whom we delegate some of our obligations (e.g. accountants). All of them have committed, through a processing manager contract, to comply with the same security measures implemented by our company, as well as to submit to the duty of secrecy and confidentiality of the personal data processed.
In the case of transfers to other entities or to other countries outside the EEE, we will inform you of this and ask for your prior and express consent.
Security Measures
Our organisation has implemented all the necessary technical and organisational measures to protect the personal data processed, preventing their loss, theft or unauthorised use.
These measures have been created according to the type of data processed and the purposes for which it is processed. These are periodically verified in our internal controls of compliance with personal data protection regulations and by means of external audits.
Rights of data subjects
You have the right to know if your personal data is being processed by our entity; therefore, you have the right to access your data, rectify it if it is inaccurate or request its deletion when the data is no longer necessary, as long as this is legally possible.
You may also exercise your right to opposition, limitation or portability if you deem it appropriate, and you may do so in writing by e-mail to lopd@montopinturas.com, attaching a copy of your ID card to enable us to identify you.
If you have any suggestions, complaints or queries about the processing of your personal data by our company that you wish to communicate to us, you can contact our data protection consultants:
BUSINESS ADAPTER, S.L.
Ronda Guglielmo Marconi, 11, 26, (Parque Tecnológico) 46980 Paterna (Valencia).
E-mail: info@businessadapter.es
Web Form
If the person wishing to exercise their rights is under 14 years of age, they may do so through their parents, guardians or legal representative.
If you wish to make a complaint because you believe that your rights have been violated, you can do so at the Spanish Data Protection Agency, C/ Jorge Juan, 6, 28001 Madrid or at www.aepd.es.
Commitment to protection of personal data
Scope of application
Our commitment to the protection of personal data will be mandatory for all departments, employees of our company and those acting on our behalf.
Purpose
We have established protocols for the processing of personal data, in accordance with the provisions of Spanish and European regulations on data protection.
Principles
Lawfulness, Loyalty, Transparency, Data minimisation, Accuracy, Retention period limitation, Integrity, Confidentiality and Active responsibility.
Special categories of data
The processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, the processing of genetic or biometric data, data concerning health or data concerning sexual orientation is prohibited, except in the legally authorised exceptions and with the prior consent of the data subject.
Rights of data subjects
Data subjects shall have the right of access to their personal data, as well as the right to rectify it when it is inaccurate, to delete it when it is no longer necessary or when processing is no longer desired, to limit it to certain processing, to have the possibility of receiving their data easily and in structured formats commonly used by the controller, as well as to have their data used for profiling purposes and to object to the processing at any time.
Registration of Activities, Impact Assessment and Security Measures
Our organisation will keep a record of processing activities and analyse the purposes of processing, categories of data subjects and data, recipients, international transfers, storage periods, etc., in order to assess the risks of processing and implement the necessary security measures to ensure the confidentiality, integrity and availability of personal data.
Likewise, we have analysed the need to carry out an Impact Assessment and to appoint a Data Protection Delegate, establishing, if necessary, that the person appointed to this position will have sufficient knowledge and experience in accordance with the provisions of current legislation.
Control
We also have external consultants who monitor any publication made by the competent control bodies and other European and Spanish entities related to data protection regulations, in order to comply with these regulations at all times.
Updating this Policy
Our entity reserves the right to modify this Policy without prior notice. For this reason, we recommend that you consult it every time you visit our website.
Management
Updated 1st February, 2022