Privacy Policy
Introduction
At Grupo Estucalia we care about the security and protection of personal information provided by our clients and other individuals. Therefore, we have updated this policy in line with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018.
Below we explain who is responsible for data processing, the purposes and legal basis, possible recipients, whether international transfers exist, retention periods, and how to exercise your rights.
Who is responsible for processing your personal data?
Under the GDPR, the controller is the entity that determines the purposes and means of processing.
Grupo Estucalia, Quality Department, is responsible for processing personal data received from clients.
You may contact us at grupoestucalia@grupoestucalia.com or by mail at Camino Viejo de Fortuna, 40 – Matanzas, 30148 – Santomera (Murcia).
What is the purpose of processing?
The purpose is to provide our services with the highest quality while ensuring the protection of personal data and privacy.
Legal basis
Processing is based on the performance of the service contract with each client and compliance with applicable legal obligations.
Security measures
We apply appropriate technical and organizational measures to protect your personal information and review them periodically.
Staff are trained and bound by confidentiality obligations regarding any personal data they may access.
Updates to this information
We review and update this information at least annually or when legal/operational changes occur. Last update: January 2023.
Who may we share your personal data with?
In some cases we must share information with third parties (e.g., advisors) to comply with tax, accounting, or labor obligations.
Such parties may only access strictly necessary information and must keep it confidential.
Data may also be available to public administrations, courts, and tribunals when required by law.
International transfers
The information we collect resides in Spain and is not processed outside the European Union.
How long do we keep your data?
We keep personal data for the duration of the commercial/service relationship and for any legally required period.
If you request deletion/objection/limitation, data may be blocked when necessary for legal claims or liabilities.
How can you exercise your rights?
You can exercise GDPR rights (access, rectification, erasure, objection, limitation, etc.) by contacting grupoestucalia@grupoestucalia.com.
- When you contest the accuracy of data (while verification occurs).
- When processing is unlawful and you request restriction instead of erasure.
- When we no longer need the data but you need it for legal claims.
- When you object and we must verify overriding legitimate grounds.