GRÚAS AGUILAR SLU is the Data Controller responsible for processing the User’s personal data and informs the User that such data will be processed in accordance with Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation – GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD). The following information is therefore provided regarding the processing of personal data:

Purposes and legal basis for processing: to maintain a commercial relationship (based on the Data Controller’s legitimate interest, Article 6(1)(f) GDPR) and to send communications relating to products or services (based on the data subject’s consent, Article 6(1)(a) GDPR).

Data retention criteria: personal data will be retained for no longer than is necessary to fulfil the purposes of the processing or for as long as required by applicable legal retention obligations. Once the data is no longer required, it will be securely deleted or anonymised using appropriate technical and organisational measures.

Data disclosure: personal data will not be disclosed to third parties unless required by law.

User rights: the User has the right to withdraw consent at any time, as well as the rights of access, rectification, portability, erasure, restriction of processing, and objection to processing. The User also has the right to lodge a complaint with the competent supervisory authority if they consider that the processing of their personal data does not comply with the applicable legislation.

Contact details for exercising your rights: gruasaguilar@gruasaguilar.com.