2. Personal Data Privacy Policy

​

​

2.1. Responsible for Data Processing

​

At Alfaiate & Garcia our Person in Charge of Personal Data (EPD) can be contacted through the email address epd@alfaiategarcia.com .

​

If you have any comments or suggestions about this Privacy Policy, please use the contact above. Privacy is very important to us. It is in this spirit that we will make the best effort to respond to you as soon as possible.

​

 

 

2.2. What kind of personal data do we collect

​

If you are our CLIENT , know that we need to collect and use information about you or the people in your organization in the context of our service provision.

​

If you are our SUPPLIER , know that we need some information to ensure the relationship with your organization so that it runs smoothly. This batch of data includes data from people in your organization in order to ensure effective and efficient communication, as well as tax and banking data to ensure the correct and legal transactions between the parties.

​

If you are a POTENTIAL CLIENT , know that we can collect some information about you to help you address your business or private needs, according to our service portfolio.

​

Generally, some of the personal data we collect is strictly necessary for the full fulfillment of our contractual obligations. Therefore, if there is a refusal to provide us with part or all of that data, we may not be able to fulfill our contractual obligations. In extreme cases, it may not be possible to maintain and continue our relationship.

​

 

 

2.3. Means of collecting personal data

​

Whether you are a CLIENT , SUPPLIER or POTENTIAL CLIENT , according to each situation, know what are the main ways of collecting personal data. There are the following main ways in which we collect your personal data:

​

• CLIENTS
- Directly (from you or an element of your organization), in the relationship processes;

- Market studies;
- Rating companies;

- Media.

 

• SUPPLIERS

- Directly (from you or an element of your organization), in the relationship processes.

 

• POTENTIAL CLIENTS

- Directly (from you or an element of your organization) through online forms or other digital media;

- Public contacts;
- Acquisition of contact databases from accredited entities;
- Provision by a common Partner.

​

 

 

2.4. Use of your personal data

​

If you are our CLIENT, know that the use of your information has the exclusive purpose of ensuring the contractual conditions with you and thus maintaining a healthy and transparent relationship, without prejudice to the fulfillment of legal obligations.

​

Typically, we use your contact details for exclusive use in the commercial and contractual relationship with you.

​

If you are our SUPPLIER , it is important to know that the use of your information has the exclusive purpose of ensuring contractual conditions with your organization and thus maintaining a healthy and transparent relationship, without prejudice to compliance with legal obligations.

​

If you are a POTENTIAL CUSTOMER , please be aware that the information we collect about you will be used exclusively for sending technical and commercial information about Alfaiate & Garcia and our products and / or services.

​

Exceptionally, in situations of litigation, communications with us may be incorporated into the investigation processes that may be necessary to carry out.

​

 

​

2.5. Safeguarding your Personal Data

​

As previously mentioned, the protection of your information is important to Alfaiate & Garcia . For this reason, we are committed to taking all reasonable and appropriate measures to protect the personal information we have, whether from misuse, loss or unauthorized access. We do this through a mix of technical and organizational measures that we consider appropriate and proportionate.

​

​

​

 

 

2.6. Retention Time of your Personal Data

​

The personal data related to the contacts of our CLIENTS , SUPPLIERS or POTENTIAL CLIENTS will be kept until they ask us to be eliminated, without prejudice to the tax, legal or regulatory requirements in force, or the rights that assist us during the early termination of contracts or litigation.

​

​

​

 

 

2.7. How to access, change or delete the Personal Data obtained

​

By definition of the new Regulation, citizens have a set of rights over their personal data, regardless of whether they are in the possession of others. If you need any further clarification to what is stipulated in this Policy, you can contact Alfaiate & Garcia's Personal Data Officer (EPD). We will endeavor to deal with your request without undue delay and always in accordance with the applicable legal requirements. Eventually, we may need to keep a record of your communications.

​

The following explains how we will respond to your requests for the various cases provided:

​

• Right of opposition: if we are using your data because we believe it is necessary and do not agree, you have the right to object. We will respond to your request within 30 days (although in certain cases we may be allowed to extend this period). As a general rule, we will only disagree with you if certain limited conditions apply.

​

• Right of withdrawal of consent: if we have obtained your consent to process your personal data for certain activities or consent for marketing purposes to you, you can withdraw your consent at any time.

​

• Data Holder Access Requests: you have the right to ask us, at any time, to confirm the information we have about you and you can ask us to change, update or delete that information. In either case, send your request by email to our EPD at the address specified above. We can fulfill your request or, in addition, we can ask you to verify your identity or ask for more information about your request. The first order is free, the following may require an appropriate fee.

​

• Right to be forgotten: you have the right to ask us to delete your personal data. We will respond to your request within 30 days (although in certain cases we may be allowed to extend this period) and will only disagree with you if certain limited conditions apply. We can fulfill your request or, in addition, we can ask you to verify your identity or ask for more information about your request.

​

• Right to data portability: if you wish, you have the right to transfer your data from us to another controller. We will collaborate in this task, transferring your data directly to you or providing you with a copy in an automatic reading and / or commonly used format.

​

• Right to lodge a complaint with a supervisory authority: you have the right to lodge a complaint with your local supervisory authority.

​

​

​

​

 

 

2.8. Application of this Policy to People and Entities outside the European Union

 

In the case of People and / or Entities from outside the European Union, your personal data related to contacts and databases will be treated with the same Privacy Policy.