Privacy policy

Privacy Policy

In accordance with the provisions of current legislation on data protection, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, GDPR), as well as Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter, LOPD-GDD), the user is informed in accordance with the provisions of Articles 13 of the GDPR and 11 of the LOPD-GDD:

CONTROLLER

Who is the controller responsible for the processing of your data?

  • Company name: LAZO Y DUQUE SL
  • CIF: B21003769
  • Address: PARQUE INDUSTRIAL Y TECNOLOGICO NAVE A07 21600 VALVERDE DEL CAMINO HUELVA SPAIN
  • Email: COMERCIAL@LAZOYDUQUE.COM
  • Website: WWW.VALVERDEBOTAS.COM
  • Commercial Registry registration details: registered in the Commercial Registry of Seville, volume 276, folio 105, sheet H-8051.

PURPOSE

For what purpose will we process your personal data? LAZO Y DUQUE SL processes your information for:

  1. Maintenance of the commercial relationship and provision of the contracted service.
  2. Preparation of a quote tailored to your needs.
  3. Managing email communications with interested parties.
  4. Carrying out the company's recruitment and selection processes.
  5. Management of the company's employees and human resources.
  6. Sending commercial information related to our sector: FOOTWEAR MANUFACTURING
  7. Monitoring the security of the facilities (video surveillance).
  8. Managing training activities.

How long will we keep your data?

The personal data you provide will be kept as long as the current commercial relationship is maintained. However, in order to offer full transparency, the general periods we work with are indicated below:

  • - Generic identification data (email, first name, last name, phone number, etc.): for the duration of the commercial relationship or until consent is revoked. In any case, they will be deleted when they are no longer to be used for the purpose for which they were collected.
  • - Law on Infractions and Sanctions in the Social Order (obligations regarding affiliation, registrations, cancellations, contributions, payment of salaries, etc.); Arts. 66 et seq. General Tax Law (account books, etc.): four (4) years.
  • - Personal actions without a special limitation period (Article 1964 of the Civil Code): five (5) years.
  • - Accounting, tax, and labor (Article 30 of the Code of Commerce - account books, invoices, etc.): six (6) years.
  • - Labor: contracts, working hours records, salary receipts and contributions, identification documents: four (4) years; in the case of occupational risk prevention reports, illness or accident files, contracts with prevention services: five (5) years.
  • - Data subject to the Law on the Prevention of Money Laundering and Terrorist Financing (Article 25): ten (10) years.
  • - Selection processes: two (2) years from the submission of the curriculum vitae.
  • - Video surveillance: thirty (30) days, unless an infraction and/or crime is recorded.
  • - Likewise, regarding the sending of commercial information, even if the relationship between the parties ends, the controller will continue to retain your information for sending newsletters related to our products and services. You may always exercise the rights recognized by current regulations by contacting us through the most convenient channel.
  • - Disaggregated and anonymized data: no limit.

Despite the existence of these general periods, we inform you that we will periodically review our systems to proceed with the deletion of data that is no longer legally necessary.

LAWFUL BASIS

What is the lawful basis for the processing of your data?

Depending on the purposes of the collection of our data, the processing of your data is necessary for:

  1. Managing the commercial relationship you have entered into and contracted with us.
    a. Performance of a contract (authorized by Article 6.1.b of the GDPR)
    b. Consent of the data subject (authorized by Article 6.1.a of the GDPR)
  2. Preparation of a quote tailored to your needs.
    a. Performance of a contract and/or pre-contractual relationship (authorized by Article 6.1.b of the GDPR)
  3. Managing email communications with interested parties.
    a. Consent of the data subject (authorized by Article 6.1.a of the GDPR)
    b. Legitimate interest (authorized by Article 6.1.f of the GDPR)
  4. Carrying out the company's recruitment and selection processes.
    a. Consent of the data subject (authorized by Article 6.1.a of the GDPR)
  5. Management of internal employees and human resources of the company.
    a. Performance of a contract (authorized by Article 6.1.b of the GDPR)
  6. Sending commercial communications.
    a. Consent of the data subject (authorized by Article 6.1.a of the GDPR)
    b. Consent of the data subject (authorized by Article 20 of the LSSICE)
    c. Legitimate interest (authorized by Article 6.1.f of the GDPR and Article 21.2 of the LSSICE)
  7. Monitoring the security of the facilities (video surveillance).
    a. Legitimate interest (authorized by Article 6.1.f of the GDPR)
  8. Managing training activities.
    a. Performance of a contract (authorized by Article 6.1.b of the GDPR)
    b. Consent of the data subject (authorized by Article 6.1.a of the GDPR)

Likewise, all the data collected is necessary for the provision of the service. However, data marked with an asterisk (*) is mandatory. If this mandatory data is not provided, the controller will not be able to provide the contracted service.

Finally, we inform you that only individuals over 14 years of age may provide personal data on this website. As required by the LOPD-GDD, in the case of minors under 14 years of age, the consent of their parents or guardians will be an obligatory condition for us to process their personal data.

Furthermore, only individuals over 18 years of age may contract our services. In the case of minors under 18, the consent of their parents or legal guardians will be an obligatory condition for us to provide the services offered, unless the minor is emancipated.

RIGHTS OF THE DATA SUBJECTS

What rights do I have regarding data protection?

In accordance with the provisions of Articles 13 of the GDPR and 11.2.c) of the LOPDGDD, you may exercise any of the following rights by notifying us at the postal address PARQUE INDUSTRIAL Y TECNOLOGICO NAVE A07 or at the email address COMERCIAL@LAZOYDUQUE.COM. In any case, according to current regulations, you are recognized the following rights in accordance with Articles 15 to 22 of the GDPR and 12 to 18 of the LOPDGDD:

  • - Right to request access to personal data relating to the data subject.
  • - Right to request rectification or erasure.
  • - Right to request restriction of processing.
  • - Right to object to processing.
  • - Right to data portability.

You may request the forms to exercise your rights from the Controller at the email address indicated in the controller's details. Additionally, you can file a complaint with the Spanish Data Protection Agency (AEPD). More information is available in Section VII of this document.

RECIPIENTS

To which recipients will your data be communicated?

You will always be informed and, where appropriate, your express consent will be requested to transfer your personal data or carry out international transfers in accordance with current regulations (Articles 13.1.e) and 44 of the GDPR, as well as Articles 11.1 and 40 of Organic Law 3/2018 LOPDGDD). Therefore, we inform you that the third parties with whom the Controller works have their servers located within the EU, EEA, or Switzerland, having adequate security measures to guarantee proper and confidential data processing.

Outside of the aforementioned cases, and except under legal obligation, your data will not be transferred or communicated to any third party, except in legally provided cases or when strictly necessary for the provision of a service. Broadly speaking, the data may be transferred to:

  • - Technology service providers.
  • - Payment service providers.
  • - Courier and parcel delivery companies.
  • - Third parties or intermediaries, acting as service providers, operating on our behalf (management agencies, consultancies, collaborating freelancers, etc.).
  • - Third-party processors, collaborators, or entities with a close commercial relationship with the controller for the sole purpose of providing our services.

Data transfers will occur respecting the strictest confidentiality, employing the necessary measures, such as signing confidentiality agreements, or adhering to their privacy policies established on their respective websites. The User may refuse the transfer of their data to the Data Processors by written request, through any of the previously mentioned means. The controller will not transfer or communicate your data to any third party, except in cases provided for by law or when the provision of a service implies the need for a contractual relationship with a Data Processor. Thus, the User accepts that some of the personal data collected may be provided to these Data Processors (payment platforms, management agencies, intermediaries, etc.) when necessary for the effective performance of a contracted service or purchased product. The User also accepts that, in the case of services being provided, these may be, in whole or in part, outsourced to other individuals or companies who will be considered Data Processors, with whom the corresponding confidentiality contract has been agreed or who adhere to their privacy policies established on their respective websites. The User may refuse the transfer of their data to the Data Processors by written request, through any of the previously mentioned means.

SOURCE OF YOUR DATA

How did we obtain your data?

The personal data used by LAZO Y DUQUE SL comes from the data subject themselves, thus complying with the provisions of Articles 13 of the GDPR and 11 of the LOPDGDD mentioned above, or from group or collaborating companies, about which you can obtain more information by writing to the email address COMERCIAL@LAZOYDUQUE.COM or at the Controller's office at the postal address indicated in this document.

What categories of data do we process?

The categories of personal data processed are:

Identification data

First name

Last name

DNI / NIE / Passport or equivalent document

Postal addresses

Email addresses

Gender

Date of birth

Place of birth

Contact telephone number (mobile / landline)

Commercial information: own and third-party

Economic data

Bank account number

Credit card number

Curriculum vitae

Academic data

Qualifications / Degrees

Hobbies

Membership in associations or clubs

Video surveillance

Image

The processing of sensitive data will be carried out in accordance with the provisions of Articles 9 of the GDPR and 9 of the LOPDGDD, informing the data subject in all cases about which data will be used by the controller.

ADDITIONAL INFORMATION

  • - Security measures: Users of the controller's website are informed that security, technical, and organizational measures within our reach have been adopted to prevent the loss, misuse, alteration, unauthorized access, and theft of data, thereby guaranteeing the confidentiality, integrity, and quality of the information contained therein, in accordance with current data protection regulations. The personal data collected in the forms is processed solely by the controller's personnel or designated Data Processors. The Website also features SSL encryption, which allows the User to securely send their personal data through the contact or registration forms on the website.
  • - Social Networks: The data controller has a profile on some of the main social networks on the Internet (Facebook, Instagram), acting in all cases as the Controller for the processing of data of its followers, fans, subscribers, commentators, and other User profiles (hereinafter, followers) published by the controller. The purpose of data processing by the controller, when not prohibited by law, will be to inform its followers about its activities and offers, through any channel permitted by the social network, as well as to provide personalized customer service. The legal basis that legitimizes this processing is the consent of the data subject, which may be revoked at any time. Under no circumstances will the controller extract data from social networks unless the specific and express consent of the User has been obtained for this purpose (for example, to run a contest).
  • - Confidentiality: The information provided by the User will, in any case, be considered confidential and may not be used for purposes other than those described herein. The controller undertakes not to disclose or reveal information about the User's claims, the reasons for the requested advice, or the duration of their relationship with the User.
  • - Accuracy of the data: The User declares that all data provided by them is true and correct and undertakes to keep it updated. The User will be liable for the truthfulness of their data and will be solely responsible for any conflicts or litigation that may arise from its falsehood. To enable us to keep personal data up to date, it is important that the User informs the controller whenever there has been any change to it.
  • - Documentation prepared by LegalDPO (https://legaldpo.es/), based on the information provided by the Data Controller. The content complies with the regulations in force in February 2023, and may vary in accordance with legislative changes or jurisprudential criteria. It is the owner's responsibility to check the validity of the regulations at any given time.

SUPERVISORY AUTHORITY

We make every effort to comply with data protection regulations, as it is our most valuable asset. However, we inform you that if you believe your rights have been violated, you may file a complaint with the Spanish Data Protection Agency (AEPD), located at C/ Jorge Juan, 6. 28001 – Madrid. More information about the AEPD: http://www.agpd.es/. Documentation prepared by LegalDPO. https://legaldpo.es/