We collect data through digital means, physical documents, or conversations (in-person or by phone). All data is processed fairly, lawfully, and transparently.

Categories of data may include:

• Identifying data (name, ID, image, voice, signature)
• Contact information (email, phone, address)
• Commercial data (quotes, service records, communications)
• Accounting data (billing, income/expenses)
• Bank data (account and card info)
• Curriculum data (education, professional experience)
• Transaction data (transfers, direct debits)
• Web browsing data (time spent, pages visited, demographics)
• We do not collect special categories of personal data, unless necessary and with prior, express consent.

Our entity will not collect special categories of personal data (e.g. health data, ethnic origin, political opinions or religious beliefs). However, if it becomes necessary to process such data, you will be duly informed and your prior and explicit consent will be requested.

Accordingly, the data requested will be adequate, relevant and limited to what is strictly necessary, and will be processed exclusively by personnel and/or collaborators authorized by our entity, who will have signed a confidentiality undertaking and commit to complying with the security measures required to ensure the confidentiality, integrity and availability of the data processed, as well as with all other requirements established under the GDPR. Therefore, such data will be processed lawfully.

The data to be processed are provided by the data subject themselves or by their legal representative. In some cases, certain functions may be delegated to collaborators who may be responsible for collecting such data; however, the data will always be processed with the data subject’s prior and explicit consent.

If a data subject does not provide the data requested, or provides incomplete or inaccurate data, it will not be possible to comply with or maintain the corresponding relationship.

The categories of data that may be processed in relation to an individual will depend on the nature of the relationship they maintain with our entity, as outlined below:

4.1. Customers
Personal data of an identifying, contact, commercial, accounting, banking, and goods and services transaction nature will be processed. Such data may be collected only if the customer provides them at the time of purchasing goods or services, requesting pre-contractual measures, or during the maintenance of the commercial relationship.

Data may be collected in person, by telephone, by email, or through the forms available on our website, online chat, instant messaging services, etc.

Legal basis: Articulo 6.1 a); 6.1 b); 6.1 c); 6.1 f); GDPR

4.2. Information Requesters
Whether the information request is made in person, by telephone or in writing (e.g. by email or web forms), we will request and process identifying, contact and commercial data.

Legal basis: Articulo 6.1 a); 6.1 f); GDPR

4.3. Suppliers
Identifying, contact, commercial, accounting, banking, goods and services transaction and financial data will be processed.

Such data may be processed throughout all stages of the commercial relationship and only if the supplier provides them in order to initiate such relationship.

Legal basis: Articulo 6.1 a); 6.1 b); 6.1 c); 6.1 f); GDPR

4.4. Job Applicants
For this category of data subjects, curriculum data, identifying and contact data, as well as other data relating to their professional or personal characteristics, will be processed. Such data will be provided by the applicant when submitting their application.

Data may be collected in person, by email, through web forms, during recruitment interviews (in person or remotely), or through collaborators to whom certain functions have been delegated. For further information, please consult our Job Applicants Policy.

Legal basis: Articulo 6.1 a); 6.1 b); 6.1 f); GDPR

4.5. Social Media Users
We are present on various social media platforms and may process identifying, contact and commercial data, as well as any other data that the user enables to be viewed or shared with other users of the social network, including curriculum data (e.g. LinkedIn). For further information, please consult our Social Media Policy. 

Legal basis: Articulo 6.1 f); GDPR

4.6. Complainants
Identifying and contact data, as well as personal information relating to the complainant or to third parties that the complainant provides, will be processed.

Legal basis: Articulo 6.1 a); 6.1 c); 6.1 f); GDPR

4.7. Whistleblowers
Reports may be submitted anonymously through our internal whistleblowing channel. However, whistleblowers may also voluntarily provide identifying and contact data, as well as other personal data relating to themselves or to third parties connected with the report, in accordance with Law 2/2023 of 20 February on the protection of persons who report regulatory infringements and on the fight against corruption. Further information is available in the Internal Whistleblowing Channel terms and conditions. 

Legal basis: Articulo 6.1 a); 6.1 c); 6.1 f); GDPR

4.8. Visitors

Identifying and contact data, the company the visitor works for, and the purpose of the visit will be processed. Such data will be collected when provided by the visitor themselves when requesting access to our facilities, or when their contact person within our entity provides them in order to grant such access.

Legal basis: Articulo 6.1 c); 6.1 f) GDPR

4.9. Website Users

Our entity does not use cookies to collect personal information from users. Only our own session cookies are used, strictly for technical purposes (those that allow users to browse the website and use the different options and services available). For further information, please visit our Cookies Policy.

4.10. Further information for data subjects

The legally required information will be made available to data subjects in the corresponding information notices included in the different data collection channels, so that the data subject may freely and expressly decide whether they wish their personal data to be processed by our entity. For more detailed information, such notices will indicate how to access this policy.

All categories and types of personal data processed will be duly identified in the corresponding records of processing activities maintained by our entity.