Skip to main content

Privacy Policy

29 April 2025

Privacy Policy

Who is responsible for processing your data?

Company name: CONATEC SAL

Tax ID: A20155180

Address: C/Gabiria 112, 20305 Irún (Gipuzkoa)

Registered in the Commercial Register of Gipuzkoa, Sheet -SS 8363, Folio 73, Volume 1421, Section -8, First Registration.

Telephone: 943633562

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

For what purpose do we process your personal data?

In accordance with Regulation (EU) 679/2016 and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights, we inform you that the personal data you provide, as well as those generated during the relationship with you, are processed for the following purposes:

Data provided to formalise a purchase and/or service:

  • To manage, process, send and monitor purchases and/or services made.
  • To contact the user to finalise the purchase process.
  • To carry out quality and satisfaction surveys.
  • To send personalised commercial communications to the user about our products and services by any means provided.
  • To analyse the use of the website and verify user preferences and behaviours.
  • To allow participation in commercial promotions and/or prize draws.
  • For accounting, tax and administrative management.

Data provided through contact with the company:

  • To manage, process and respond to your requests, enquiries or incidents.
  • To offer products and services.
  • To analyse the use of the website and verify user preferences and behaviours.

Data provided for Newsletter subscription:

  • To manage subscription and/or cancellation of the Newsletter.
  • To offer products and services.
  • To analyse the use of the website and verify user preferences and behaviours.

Data provided for participation in recruitment processes or unsolicited applications:

  • To evaluate your application for recruitment purposes.

How long will we keep your data?

Personal data provided will be retained until the data subject requests their deletion, or their legal representative does so, and as long as necessary – including the period required to comply with applicable statutory limitation periods – for the purpose for which they were collected.

Retention of data will be subject to the legal obligation that CONATEC SAL may have to keep them. Once these periods have expired, data will be securely deleted or destroyed to ensure that the information cannot be recovered.

Lawful basis for processing

The lawful basis for processing your data is the consent provided by the data subject. Consent is obtained expressly and unequivocally through the completion and submission of paper or electronic documents and forms used to collect your data.

It is also lawful to process data when necessary for the performance of a contract or for the provision of a service requested by the data subject, or for the implementation of pre-contractual measures (Art. 6.1.a and b GDPR).

CONATEC SAL is also authorised to process your data to comply with legal obligations and for the pursuit of legitimate interests, provided such interests do not override your fundamental rights and freedoms.

If the lawful basis is consent, it may be withdrawn at any time.

Who will your data be shared with?

Your data will not be transferred to any third party without your consent, except where legally required. In such cases, your explicit consent will be requested before any transfer of data to another entity.

As part of the authorised purposes, your data may be shared with entities or persons directly related to CONATEC SAL and the services it provides. Your personal information may also be made available to public administrations, courts and tribunals to address any liabilities arising from processing, provided such disclosure is legally justified.

Your data may also be transferred to service providers that offer consultancy, IT maintenance, marketing, training or auditing services. These entities only have access to the information necessary to perform their tasks and are bound by data processing agreements ensuring confidentiality, restricted use and the security of your information.

No international data transfers are foreseen outside the European Economic Area or to entities that do not comply with the data protection standards set by Regulation (EU) 679/2016.

What categories of data does CONATEC SAL process?

The data processed are those necessary to fulfil the purposes authorised by the user.

To formalise a purchase and/or service:

  • Identification data: name, surname(s) and ID number.
  • Contact details: email address, telephone number and postal address.
  • Transaction data: purchased products and services.
  • Financial data: bank card details.
  • Browsing data.

Data provided through contact with the company:

  • Identification data: name and surname(s).
  • Contact details: email address.
  • Browsing data.

Data provided for Newsletter subscription:

  • Identification data: name and surname(s).
  • Contact details: email address.
  • Browsing data.

Data provided for recruitment or unsolicited applications:

  • Identification data: name and surname(s).
  • Contact details: email address.
  • Browsing data.
  • Any other information included in the CV.

If the user provides data relating to third parties, they declare that they have obtained the consent of those individuals and undertake to inform them of the content of this Privacy Policy.

What are your rights?

Anyone has the right to obtain confirmation as to whether CONATEC SAL processes personal data concerning them or not.

Data subjects have the right to access their personal data, obtain a copy, update or correct inaccurate data, and request erasure when the data are no longer necessary for the purposes for which they were collected.

In certain circumstances and for reasons related to their particular situation, individuals may object to the processing of their data. CONATEC SAL will cease processing unless there are legitimate reasons or for the defence of potential legal claims.

Data subjects may also request the restriction of processing under Article 18 of the GDPR. In such cases, CONATEC SAL will only process the data with the consent of the data subject or for legal claims or public interest reasons.

Individuals have the right to erasure (right to be forgotten), the right to data portability, and the right not to be subject to automated decision-making, including profiling.

The data subject has the right to request the deletion of their data when the purpose for processing ceases to exist or consent is withdrawn, as well as in other cases provided for in Article 17 GDPR.

How can you exercise your rights?

By sending a written request to the postal or email address indicated in the header.

What are the means of complaint?

If you believe that your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency.