Who is the controller of your data?
The controller responsible for processing the data related to the management of the different processes concerning our users, customers and suppliers is ARLUY, S.L.U., which has its registered address at Pol. Ind. El Sequero, Avda. Cameros, 178–180, 26151 Arrúbal, La Rioja, and is the holder of Corporate Tax ID Code (CIF) B26045617. For the purposes of this Data Protection Policy, our contact telephone number is 941257600 and our contact e-mail address is info@arluy.com.
What type of personal data do we have and how did we obtain it?
The categories of personal data that our company processes, with regard to its customers and suppliers, are as follows:
- Identification details
- Professional data, e.g. position, skills, etc.
- Postal or e-mail addresses
- Commercial information
- Financial and transaction-related data
Under no circumstances do we process data that is subject to special protection. We have obtained all of the aforementioned data directly from you, via the submission of a contact form or the presentation of a sales offer, contractual proposal, etc.; or from your company, when we were provided with the identification details (and/or other information) necessary to execute the purpose of the contractual relationship between the parties. In the event that your data changes, it is your responsibility – or your company’s responsibility – to inform us of the changes.
Why do we process your data?
We process the data that is provided to us by interested parties in order to manage different activities arising from specific processes related to sales, after-sales service, supplier management, service quality, etc. Consequently, we will use your data in order to perform one or more of the following actions:
- Send out the information that is requested from us via the contact form on our website or any other means of contacting our company.
- Provide existing and potential customers with offers for products and services that may be of interest to them.
- Perform tasks related to the administrative, fiscal and accounting-related management of our customers and/or suppliers.
- Conduct satisfaction surveys, market research surveys, etc. in order to be able to present you with the most suitable offers, optimise the quality of our services, etc.
We will not create commercial profiles based on the information provided; therefore, we will not take automated decisions about you based on a commercial profile.
How long will we keep your data?
Personal data concerning natural persons and pertaining to existing and potential customers or suppliers, and which is collected via contact forms and/or information-gathering activities, will be kept until the interested party requests its erasure. The data provided by our customers and suppliers will be kept while the commercial relationship with them remains ongoing, and in accordance with the minimum legal storage periods that apply in each case. Under all circumstances, we will keep your personal data for the amount of time that is reasonably necessary, taking into account our need to respond to the questions you submit to us or to resolve problems, make improvements, activate our services and comply with the legally applicable requirements. This means that we may keep your personal data for a reasonable period, even after you have stopped using our products or using this website. After this period, your personal data will be deleted from all of our company’s systems.
What is the lawful basis for the processing of your data?
Below is a summary of the lawful basis for the processing of your data, in accordance with the type of processing in question:
| PROCESSING | LAWFUL BASIS |
| Accounts management: managing invoicing processes with customers and/or suppliers | Maintenance, implementation and management of the contractual relationship between the parties |
| Fiscal management: application of tax withholdings, credits, etc. | Maintenance, implementation and management of the contractual relationship between the parties; compliance with legal obligations |
| Administrative management: managing logistics, warehousing, customer delivery, receipt of goods, etc. | Maintenance, implementation and management of the contractual relationship between the parties |
| Marketing: commercial activities related to our products or services and aimed at our customers or individuals who have requested related information from us in the past, including the completion of customer satisfaction surveys; the sending of commercial information and news regarding our products and services, etc. | Free and unequivocal consent of the interested party (potential customers); you are hereby informed that under no circumstances may the withdrawal of this consent condition the execution of any contractual arrangements that may exist between the parties; legitimate interest of the company regarding the promotion and marketing of products or services similar to those obtained or requested by the interested parties in the past |
With regard to the aforementioned lawful basis, you are required to provide your personal details and in the event that you do not provide them, it will not be possible to execute the contract and comply with the legal obligations or other stipulations arising from the public authorities.
Who will your data be shared with?
Who will your data be shared with?
Our company will never share your personal data with any third parties that intend to use them for direct marketing activities, except where you have expressly authorized us to do so. We hereby inform you that we may share your personal data with the relevant public bodies and authorities in the event that we are legally required to do so; or under circumstances in which, acting in good faith, we consider that it would be reasonable and necessary to share your data in order to comply with a legal process; or to respond to any legal claims or demands; or in order to protect the rights of ARLUY, S.L.U. or those of its customers and the public in general. We also inform you that your data will not be shared with or disclosed to third parties, and that our company bears sole responsibility for processing and storing said data.
What are your rights as the interested or affected party?
Everyone has the right to obtain confirmation as to whether or not we are processing their personal data. Specifically, interested parties may exercise their right to access their personal data, and to receive a copy of their data in a commonly used and machine-readable format if their data is subject to electronic processing (right to data portability). Likewise, interested parties may exercise their right to rectify any inaccurate data or to request that the data be erased when (among other reasons) it is no longer needed for the purposes for which it was collected. Additionally, under certain circumstances, interested parties may request the restriction of the processing of their data; and, under certain circumstances or for reasons related to their particular situation, interested parties may exercise their right to object to the processing of their data. Our company will then cease to process their data, except where there is a lawful and imperative reason for doing so, or in order to pursue or defend against any claims, or in accordance with the other exceptions stipulated in the applicable regulations. Moreover, we also inform you that you have the right to withdraw your consent at any time, without this affecting the lawfulness of any processing that may have been carried out on the basis of the consent granted prior to being withdrawn. You are also informed that you may exercise the aforementioned rights at any time by writing to us via the contact details provided in Section 1 (“Data Controller”) of this Data Protection and Privacy Policy, making sure to attach a copy of your National ID Card (DNI). You also have the right to submit a claim to the Spanish Data Protection Agency, especially if you feel you have been unable to exercise your rights to your satisfaction. Spanish Data Protection Agency (Agencia Española de Protección de Datos), C/ Jorge Juan, 6 28001 – Madrid. Tel. 901100099 / 912663517.
Data protection for users of the website
In accordance with Regulation (EU) 2016/679, we hereby inform you that the company will process the personal data pertaining to the users of this website in accordance with the processing activities specified in each of the data collection forms on our website. This processing will be carried out on the basis of your consent. By clicking on the “SEND” button, the user is consenting to the processing of their data by our company. Additionally, we hereby inform you that we will not disclose your data to any third parties, except when we are legally obliged to do so or if you have expressly consented to said disclosure. Likewise, and at any time, you may exercise your rights to access, rectify and erase your data, along with the other rights specified in this document and governed by Regulation (EU) 2016/679, by sending an e-mail to ARLUY, S.L.U. at info@arluy.com. Furthermore, in accordance with the provisions of the E-Commerce and Information Society Services Act (Law 34 of 11 July 2002), our company undertakes to refrain from sending out advertising materials without first obtaining the express authorization of the recipient. Users may opt out of receiving advertising materials by checking the corresponding box.
Other information of interest regarding our Data Protection and Privacy Policy
Security measures. Our company has implemented the required levels of security as stipulated by the European and Spanish data protection legislation, taking into account the state of the art, the costs of implementation and the nature, scope, context and stated purposes of processing, as well as the varying likelihood and severity of the risks to your rights and freedoms as an individual.
Processing the data of minors. In accordance with the GDPR (Regulation (EU) 2016/679) and other applicable legislation, minors over the age of 14 may consent to the contracting of information society services, such as signing up to a forum, filling out a contact form, etc. However, ARLUY, S.L.U. will be responsible for checking the veracity of the age-related information provided by the minor. With regard to the processing of data pertaining to minors under the age of 14, the collection of said data will always be subject to the express consent of the minor’s parents or legal guardians.
Modification of our Data Protection and Privacy Policy. Occasionally, our company may modify and/or correct this Data Protection Policy for users, customers and suppliers. Please check this section regularly in order to find out about any changes that may have been made and how they may affect you.
Why is it necessary to accept this Data Protection and Privacy Policy? This Data Protection Policy for users, customers and suppliers provides you with easy access to all of the information you need to find out about the type of data that _ keeps with regard to its existing and potential customers and/or suppliers, the purposes of processing their data, the rights to which you are entitled as the affected party under the data protection legislation, and how to exercise those rights. Consequently, by expressly providing us with your personal data via our contact channels and/or by entering into a commercial relationship with our company, we consider that you are acknowledging and consenting to the processing of your personal data as described in this Policy. This personal information will only be used for the purposes for which you have provided it to us, or for the purposes for which we are permitted to process it under the applicable national or regional regulations. In any case, we hereby inform you that if you refuse to provide us with certain information that we request from you, this may hinder the implementation of the contractual relationship between the parties and have serious consequences for the provision of the different benefits or services specified in the commercial agreement that has been entered into with the contracting party. If you have any queries regarding this section of the Data Protection Policy for existing and potential customers and/or suppliers of our company, please contact the company using the details provided in Section 1 (“Data Controller”); we will be delighted to assist you and to respond to any other questions you may have.
Applicable legislation
These Terms and Conditions are governed at all times by the provisions of the Spanish and European legislation on the protection of personal data and privacy.
