Privacy policy

maveingenieros.es

​

I. PRIVACY AND DATA PROTECTION POLICY

​

In accordance with applicable legislation, MAVE INGENIEROS (also referred to as the Website) undertakes to adopt the necessary technical and organisational measures, with a level of security appropriate to the risks associated with the data collected.

Legislation covered by this privacy policy

This privacy policy complies with the applicable Spanish and European rules on the protection of personal data on the internet. In particular, it observes the following legislation:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
• Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and the Guarantee of Digital Rights (LOPD-GDD).
• Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the personal data controller

The controller of personal data collected by MAVE INGENIEROS is MAVE INGENIEROS, S.L., tax identification number B-81339483, registered in the Madrid Commercial Registry under volume 10319, book 0, folio 177, section 8, represented by Manuel Vega (the “Controller”). Its contact details are:

Address: C/ San José, 6 nave 2

Contact telephone: +34 916 928 520

Contact email: mvega@maveingenieros.es

Personal data records

Under the GDPR and LOPD-GDD, personal data collected by MAVE INGENIEROS through forms on its pages will be incorporated into and processed in our records to facilitate, expedite and fulfil commitments between MAVE INGENIEROS and the User, maintain the relationship established through completed forms, or respond to requests and enquiries. Unless the exception in Article 30(5) GDPR applies, a record of processing activities is maintained, specifying the activities carried out according to their purposes and the other information required by the GDPR.

Principles applicable to personal data processing

The User’s personal data will be processed in accordance with the following principles in Article 5 GDPR and Article 4 onwards of Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and the Guarantee of Digital Rights:

• Lawfulness, fairness and transparency: the User’s consent will always be required, following fully transparent information about the purposes for which personal data are collected.
• Purpose limitation: personal data will be collected for specified, explicit and legitimate purposes.
• Data minimisation: only personal data strictly necessary for the purposes of processing will be collected.
• Accuracy: personal data must be accurate and kept up to date.
• Storage limitation: personal data will be kept in a form permitting identification of the User only for as long as necessary for the purposes of processing.
• Integrity and confidentiality: personal data will be processed in a manner that ensures their security and confidentiality.
• Accountability: the Controller is responsible for ensuring compliance with the principles above.

Categories of personal data

MAVE INGENIEROS processes only identification data. No special categories of personal data within the meaning of Article 9 GDPR are processed.

Legal basis for processing personal data

The legal basis for processing personal data is consent. MAVE INGENIEROS undertakes to obtain the User’s express and verifiable consent to process personal data for one or more specific purposes.

The User may withdraw consent at any time. Withdrawing consent will be as easy as giving it. As a general rule, withdrawal will not affect use of the Website.

When Users must or may provide data through forms to make enquiries, request information or for reasons related to Website content, they will be informed if any fields are mandatory because they are essential to carry out the requested operation correctly.

Purposes for which personal data are processed

MAVE INGENIEROS collects and manages personal data to facilitate, expedite and fulfil commitments between the Website and the User, maintain the relationship established through completed forms, or respond to requests or enquiries.

Data may also be used for commercial personalisation, operational and statistical purposes, activities forming part of MAVE INGENIEROS’ corporate purpose, data extraction and storage, and marketing studies to adapt the Content offered to Users and improve the Website’s quality, operation and navigation.

When personal data are collected, the User will be informed of the specific purposes of processing, meaning the uses to which the information collected will be put.

Personal data retention periods

Personal data will be retained only for the minimum time needed for the purposes of processing and, in any event, for no more than 18 months, or until the User requests their erasure.

When personal data are collected, the User will be informed of their retention period or, where this cannot be specified, the criteria used to determine that period.

Recipients of personal data

The User’s personal data will not be shared with third parties.

In any event, when personal data are collected, the User will be informed of the recipients or categories of recipients of those data.

Personal data of minors

In accordance with Article 8 GDPR and Article 7 of Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and the Guarantee of Digital Rights, only users aged 14 or over may lawfully consent to the processing of their personal data by MAVE INGENIEROS. For children under 14, consent from a parent or guardian is required, and processing is lawful only to the extent authorised by them.

Confidentiality and security of personal data

MAVE INGENIEROS undertakes to implement the necessary technical and organisational measures at a security level appropriate to the risks of the data collected. These measures aim to protect personal data against accidental or unlawful destruction, loss or alteration, and unauthorised disclosure of or access to data transmitted, stored or otherwise processed.

The Website uses an SSL (Secure Socket Layer) certificate so personal data are transmitted securely and confidentially, with all communications between the server and the User encrypted in both directions.

However, MAVE INGENIEROS cannot guarantee that the internet is impenetrable or that hackers or others will never gain fraudulent access to personal data. The Controller therefore undertakes to notify the User without undue delay of any personal data breach likely to pose a high risk to individuals’ rights and freedoms. Under Article 4 GDPR, a personal data breach means a breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

The Controller will treat personal data as confidential and undertakes to inform employees, associates and anyone given access to the information of this duty, ensuring through legal or contractual obligations that they respect its confidentiality.

Rights relating to personal data processing

The User may exercise against MAVE INGENIEROS, as Controller, the following rights recognised by the GDPR and Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and the Guarantee of Digital Rights:

• Right of access: the right to obtain confirmation of whether MAVE INGENIEROS processes the User’s personal data and, if so, information about the specific data and processing carried out or ongoing, including available information about the origin of the data and the recipients of disclosures already made or planned.
• Right to rectification: the right to have inaccurate personal data corrected and, taking account of the purposes of processing, incomplete data completed.
• Right to erasure (the “right to be forgotten”): unless applicable law provides otherwise, the right to have personal data erased when they are no longer needed for the purposes for which they were collected or processed; consent is withdrawn and no other legal basis exists; the User objects and there is no overriding legitimate reason to continue; the data were processed unlawfully; erasure is required by law; or the data were obtained through a direct offer of information society services to a child under 14. In addition to erasing the data, the Controller must take reasonable steps, considering available technology and implementation costs, to inform other controllers processing the data of the data subject’s request to erase any links to those data.
• Right to restriction of processing: the right to limit processing when the User disputes the accuracy of the data; processing is unlawful; the Controller no longer needs the data but the User needs them for legal claims; or the User has objected to processing.
• Right to data portability: where processing is automated, the User may receive their personal data from the Controller in a structured, commonly used and machine-readable format and transmit them to another controller. Where technically feasible, the Controller will transmit them directly to that other controller.
• Right to object: the right to require MAVE INGENIEROS not to process, or to stop processing, the User’s personal data.
• Right not to be subject to a decision based solely on automated processing, including profiling: unless applicable law provides otherwise, the User has the right not to be subject to an individual decision based exclusively on automated processing of their personal data, including profiling.

Users may exercise their rights by writing to the Controller with the reference “RGPD-maveingenieros.es” and providing:

• The User’s first and last names and a copy of their identity document. Where representation is permitted, the representative must also be identified in the same way and provide proof of authority. A copy of the identity document may be replaced by any other legally valid means of proving identity.
• The request, specifying its grounds or the information sought.
• An address for notifications.
• The applicant’s date and signature.
• Any document supporting the request.

The request and any supporting documents may be sent to the following postal or email address:

Postal address: C/ San José, 6 nave 2

Email: mvega@maveingenieros.es

Links to third-party websites

The Website may contain hyperlinks to websites belonging to third parties other than MAVE INGENIEROS and therefore not operated by it. Their owners have their own data protection policies and are responsible for their own records and privacy practices.

Complaints to the supervisory authority

If the User believes that the processing of their personal data presents a problem or infringes applicable rules, they have the right to an effective judicial remedy and to lodge a complaint with a supervisory authority, particularly in the state of their habitual residence, workplace or the alleged infringement. In Spain, the supervisory authority is the Spanish Data Protection Agency (https://www.aepd.es/).

​

II. ACCEPTANCE OF AND CHANGES TO THIS PRIVACY POLICY

The User must have read and agreed to the personal data protection terms in this Privacy Policy and accepted the processing of their personal data so the Controller can process them in the manner, for the periods and for the purposes stated. Use of the Website entails acceptance of its Privacy Policy.

MAVE INGENIEROS reserves the right to amend this Privacy Policy at its discretion or in response to legislative, judicial or interpretative changes by the Spanish Data Protection Agency. Changes or updates will not be expressly notified to the User. Users are advised to consult this page periodically to remain informed of the latest changes.

This Privacy Policy was updated to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to personal data processing and the free movement of such data (GDPR), and Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and the Guarantee of Digital Rights.

This Privacy Policy was reviewed on 18 October 2023.