Privacy Policy

IDENTIFICATION AND CONTACT DETAILS OF THE DATA CONTROLLER

GALIAZA VIGO, SL, a company with registered office at Avda. Gregorio Espino 17, 3ºB, 36205, Vigo, (Pontevedra) – Spain, with CIF B56551856, is responsible for the processing of personal data processed through this website. This clause provides information on the use that the Company will make of your personal data.

Furthermore, the purpose of this Privacy Policy is to provide information on the rights that both registered and non-registered Users have under the GDPR 2016/679 and Organic Law 3/2018 on the Protection of Personal Data. If you have any questions regarding the processing of your personal data, please contact the Company at the following address: Avda. Gregorio Espino 17, 3ºB, 36205, Vigo, (Pontevedra) – Spain.

WHERE TO REPORT

On the following website: www.galiaza.com (+ information in our legal notice)

DATA PROCESSING

GALIAZA VIGO, SL informs through this website about its privacy policy regarding the treatment and protection of personal data of any owner with whom it maintains a relationship in which the processing of their data is required.

The operations, management and technical procedures carried out in an automated or non-automated manner and which enable the collection, storage, modification, transfer and other actions on personal data are considered to be the processing of personal data, and in this case we inform you of joint processing in those cases necessary for the management of services and/or products contracted from any of the companies indicated above, without prejudice to the provisions of section 4 of this policy.

Maximum transparency in information, for this reason we inform you about how we treat data, even when we do not collect data from the web.

We do not share data with third parties, your data is safe, it will only be communicated to third parties when there is an obligation based on a regulation or it is essential to be able to offer you the service. We inform you of this in the “Recipients” section.

Legal compliance, GALIAZA VIGO, SL complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons (RGPD), with Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights and with Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSICE or LSSI) and although repealed, by regulating the LOPD 15/99, I continue to implement security measures of the excellent Royal Decree 1720/2007.

  1. DATA CONTROLLER

In compliance with current legislation on Data Protection, we inform you that the personal data that you voluntarily provide us through any of our means of collecting information will be incorporated into automated and/or manual processing, with GALIAZA VIGO, SL, with which we maintain the contractual relationship, being the Controller of said processing. The data will not be transferred to third parties except in cases where there is a legal obligation.

Likewise, GALIAZA VIGO, SL declares and guarantees that it maintains the security levels for the protection of personal data as provided for by current legislation, and that it has established all technical means at its disposal to prevent the loss, misuse, alteration, unauthorized access, theft of the data provided by the interested parties and for its employees to observe said prescriptions, as well as the duty of confidentiality regarding the data subject to protection and other confidentiality obligations in force.

The processing of your data is necessary to give you access to the content and/or functionalities of our Website or, if you so require, to be able to send you information or provide you with the services available through it. In this regard, we maintain a firm commitment to treat your personal data in a legitimate and coherent manner in accordance with the principles and legal obligations set forth by current personal data protection regulations.

  1. WHAT PERSONAL DATA DO WE PROCESS?

When you browse through our Website and, in particular, when you interact, you provide us with data directly, for example, when you complete any form or request made available online in accordance with the processing purposes indicated in each case (for example, the contact form).

The data you provide us is related to such forms. We will always ask you for the appropriate, relevant and limited data that is necessary for the aforementioned processing purposes (principle of minimizing personal data):

  • Contact and Identification Data, name, surname, address, telephone number, email.
  • Commercial and Preferences, information you provide us about your preferences, for example, the type of services you are interested in.
  • Those that you decide to provide us voluntarily.
  • Data derived from the communications you maintain with us.
  • Information corresponding to your own browsing in the case of Online Services, (IP address or information derived from cookies or similar devices (you can see our Cookies Policy on the website).
  • That information that is available in publicly accessible sources, to which we can legitimately access.
  • The data arising from the contractual or pre-contractual relationship that you maintain with us, including your image, always informing you in this case of the possibility of capturing your image.
  • Those that third parties provide us about you, where there is a legitimate basis for doing so or having obtained your consent to do so.
  • The data of third parties that you provide to us, with the prior consent of the third party in question.
  1. HOW DO WE PROCESS DATA?

At GALIAZA VIGO, SL we always process your personal data in strict compliance with current legislation. In addition, we inform you that we have the appropriate technical and organisational measures in place to guarantee an optimal level of security, thereby ensuring that only those persons with authorisation will access it, that we will keep it intact, avoiding any intentional or accidental loss and that we have reinforced the data processing systems and services.

The operations, management and technical procedures that we carry out in an automated or non-automated manner and that enable the collection, storage, modification, transfer and other actions on personal data are considered to be the processing of personal data.

We have always been committed to providing our services with the highest degree of quality, which includes treating your data safely and transparently. Our principles are:

Legality: We will only collect your Personal Data for specific, explicit and legitimate purposes.

Data minimization: We limit the collection of personal data to what is strictly relevant and necessary for the purposes for which it was collected.

Limitation of Purpose: We will only collect your personal data for the stated purposes and only according to your wishes.

Accuracy: We will keep your personal data accurate and up to date.

Data Security: We apply appropriate technical and organizational measures proportionate to the risks to ensure that your data is not damaged, such as unauthorized disclosure or access, accidental or unlawful destruction or accidental loss or alteration, and any other form of unlawful processing.

Access and Rectification: We have the means for you to access or rectify your data whenever you consider it appropriate.

Retention: We retain your personal data lawfully and appropriately and only for as long as necessary for the purposes for which it was collected.

International transfers: When your data is to be transferred outside the EU/EEA, it will be adequately protected.

Third parties: Access to and transfer of personal data to third parties is carried out in accordance with applicable laws and regulations and with appropriate contractual guarantees.

Direct Marketing and Cookies: We comply with applicable legislation regarding advertising and cookies.

4. PURPOSES OF THE DATA

GALIAZA VIGO, SL, processes your data for the following purposes:

  • Enable you to navigate our Website, thereby allowing you access to the information and content provided therein.
  • Respond to and manage your queries and requests.
  •  Send you all the necessary information regarding the characteristics of the service you have requested.
  •  If you agree, or there is sufficient legal basis for doing so, we will send you information and advertising about offers, products, services, promotions, gifts and campaigns related to our services.
  •  Provide appropriate customer service to the interested party.
  • Carry out quality control on our services by conducting possible opinion surveys.
  • In the event that you have accepted the cookie policy, for the development of the purposes associated with the different types of cookies reported through it. At any time, if you wish, you can configure the use of cookies, having the right to revoke your consent regarding the purposes associated with cookies. We inform you that the revocation of your consent to the processing of your data regarding certain types of cookies such as session or technical cookies may prevent you from browsing our Website (see cookie policy).
  • Adopt all applicable protection measures in accordance with current regulations, including the possible anonymization of your personal data by applying the appropriate techniques available for this purpose. Consequently, in this area, anonymization and pseudonymization treatments may also be carried out for the best protection of your personal data.
  •  Apply the relevant security, technical and/or organisational measures to your personal data, focusing on the risk existing at any given time.
  • In general, for compliance with legal and regulatory obligations, in accordance with the sector of activity, (without limitation or exclusion) both by judicial bodies, regulatory and supervisory bodies and state security forces, with which we are obliged to comply with the laws of the countries in which the activity is carried out, including actions aimed at detecting fraud and preventing crimes or illegal acts.
  1. LEGITIMATION OF THE TREATMENT

The basis for the legitimacy of the processing of Personal Data is based on your express consent (art. 6.1, a of the GDPR) and, as the case may be, satisfaction of the legitimate interest (art. 6.1, f of the GDPR), own or of third parties, in the application of pre-contractual measures (art. 6.1, b of the GDPR) at the request of the interested party or your consent (art. 6.1, a of the GDPR).

When sending information and advertising about offers, products, services, promotions, gifts and campaigns, in commercial communications the legitimacy of the processing of your data is based on your consent (art. 6.1, a of the GDPR), and when such can be covered by the provisions of article 21.2 of Law 34/2002, of July 11, on information society services and electronic commerce, in the legitimate interest (art. 6.1, f of the GDPR).

  1. MINORS

Minors under 14 years of age may not use the services available through the Website without the prior authorization of their parents, guardians or legal representatives, who will be solely responsible for all acts carried out through the Website by minors under their care, including the completion of forms with the personal data of said minors and marking, where appropriate, the accompanying boxes. In this regard, and to the extent that GALIAZA VIGO, SL does not have the capacity to control whether or not users are minors, it is noted that parents and guardians must enable the necessary mechanisms to prevent minors from accessing the Website and/or providing personal data without their supervision, with GALIAZA VIGO, SL not accepting any liability in this regard.

  1. ELECTRONIC COMMUNICATIONS
  • In the event that you receive communications by these means (emails, automated response messages from forms, and other communication systems) we inform you that the messages are addressed exclusively to the intended recipient and may contain privileged or confidential information. If you are not the intended recipient, you are hereby notified that unauthorized use, disclosure and/or copying is prohibited under current legislation.
  • In accordance with the provisions of Law 34/2002 of 11 July on Information Society Services and Electronic Commerce and Directive 2002/58/EC, we inform you that if you do not wish to receive commercial communications and information via this electronic communication system, please let us know by this same means, indicating UNSUBSCRIBE COMMUNICATIONS in the subject line so that your personal data can be removed from our database. Your request will be processed within 10 days of its submission. If we do not receive an express reply from you, we will understand that you accept and authorize our company to continue making the aforementioned communications.
  1. HOW LONG DO WE KEEP YOUR DATA?

The personal data relating to individuals that GALIAZA VIGO, SL collects by any means will be kept as long as the interested party does not request its deletion. Likewise, they will be kept as long as the relationship that gave rise to the processing of the data is maintained, respecting in any case the legal retention periods. After this period, the personal data will be deleted from all GALIAZA VIGO, SL systems.

  1. TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

There will be no assignment, transmission or transfer of personal data, except for those already reported, other than due to a legal obligation. If, at the request of the Public Administration or the Autonomous Institutions within the scope of the functions expressly attributed to them by law, your data is requested from us, these will be transmitted.

If there is an assignment, transmission or transfer of personal data outside the cases previously provided, you will be informed in advance so that you can give us your consent if applicable.

However, in order to be able to organise ourselves correctly, have good operations and procedures that guarantee good management of GALIAZA VIGO, SL, it may be necessary to hire the services of advisors, professionals, or other service companies to process data under our instructions.

This processing on behalf of third parties is regulated by a contract in writing or in some other form that allows its conclusion and content to be accredited, expressly specifying that the person in charge of the processing will process the data in accordance with our instructions and will not apply or use them for any purpose other than that stated in said contract, nor will they communicate them, not even for their conservation, to other persons.

  1. WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH DATA?

Data protection regulations grant the owner of personal data the following rights:

  • Right to revoke any consent previously given.
  • Right of access: Know what type of data is being processed and the characteristics of the processing being carried out.
  • Right to rectification: You may request the modification of data that is inaccurate or untrue.
  • Right to portability: Being able to obtain a copy in an interoperable format of the data being processed
  • Right to limit processing in cases where you consider it unnecessary
  • Right to deletion: Request the cessation of data processing and its deletion when its conservation is no longer necessary.
  • Right to lodge a complaint with the Spanish Data Protection Agency C/ Jorge Juan, 6 28001-Madrid – FAX: 914483680- TELF: 901 100 099
  • If you wish to obtain more information regarding the processing of your data, rectify any data that is inaccurate, oppose and/or limit any processing that you consider unnecessary, or request the cancellation of processing when the data is no longer necessary, you can write to: Postal mail Avda. Gregorio Espino 17, 3ºB, 36205, Vigo, (Pontevedra) – Spain, email: info@galiaza.com, Tel: 623 981 320
    • This communication must reflect the following information: Name and surname of the user, the request, address and supporting data.
    • The exercise of rights must be carried out by the user himself. However, they may be carried out by an authorised person as legal representative of the authorised party. In such case, documentation proving this representation of the interested party must be provided.
  1.  PURPOSES OF DATA PROCESSING

Below we detail the purposes of the data processing carried out by the Data Controller:

ACTIVITY RECORD: CONTACTS

  • PURPOSE: Sending commercial information, offers, information about products and/or services to clients and/or potential clients
  • LEGAL BASIS: Express consent of the interested party (art. 6.1, a of the GDPR).
  • DESCRIPTION: Category of personal data (identification: name and surname, telephone number, e-mail).
  • DATA TRANSFER: No data will be transferred to third parties.
  • DATA DELETION PERIOD: Until your request for information is resolved
Scroll to Top