The purpose of this Privacy Policy is to inform users of the website mecanizadosbaikor.com (hereinafter, the «Website») about the processing of the personal data collected through it.
Data controller: Mecanizados Baikor S.L.
Address: Calle Tellería 2, 20500, Arrasate, Gipúzcoa.
Contact email: baikor@mecanizadosbaikor.com.
Mecanizados Baikor S.L. undertakes to process personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter, «GDPR»), and with other applicable personal data protection regulations.
What personal data do we collect?
Through the Website, the personal data that the user voluntarily provides may be collected through the following channels:
- Sending emails to the contact addresses published on the Website.
- Completing contact forms, information request forms or other forms made available.
- Using the functionalities and services available on the Website at any given time.
- Technical data arising from browsing, such as the IP address, in accordance with the sections relating to cookies and browsing data.
The user shall provide only the data necessary for the corresponding purpose and shall ensure that the information provided is truthful, accurate and up to date.
For what purpose do we process personal data?
The personal data provided by users will be processed for the following purposes:
- Responding to queries and requests: managing and responding to queries, petitions or requests for information sent by the user.
- Managing the services requested: processing requests and carrying out the actions necessary to provide the services required or to manage the existing relationship with the user.
- Maintaining communications related to the services: sending communications relating to the management, provision and follow-up of the services requested.
- Sending commercial communications: sending information about products or services similar to those previously requested or contracted, where legally permissible. Where the regulations require prior consent, such communications will only be sent if such consent has been validly obtained.
- Improving the Website: analysing its operation and use in order to identify possible improvements and optimise the services offered, in accordance with the applicable regulations.
- Managing the cancellation of services: processing cancellation requests and carrying out the actions necessary to make them effective.
- Fulfilling other purposes of which the user has been informed: fulfilling the specific purposes indicated in the forms or functionalities made available at any given time, provided that there is a legal basis legitimising the processing.
The data will not be used for purposes incompatible with those for which they were collected.
What is the legal basis for processing the data?
The processing of personal data will be based on the legal basis applicable to each specific purpose, which may be:
- The consent of the data subject, where necessary and validly given.
- The application of pre-contractual measures requested by the data subject or the performance of a contract.
- Compliance with legal obligations applicable to Mecanizados Baikor S.L.
- The legitimate interest of the controller, where appropriate and provided that the rights and freedoms of the data subject do not prevail.
Where processing is based on consent, such consent may be withdrawn at any time, without affecting the lawfulness of processing carried out prior to its withdrawal.
The withdrawal of consent will not affect processing that has an independent legal basis.
The purpose of accepting this Privacy Policy is to evidence that the user has been informed about the processing of their data. Such acceptance shall not replace the specific consent that must be obtained for those purposes that require it.
To whom will personal data be disclosed?
Mecanizados Baikor S.L. will treat personal data confidentially and will only allow access to or disclosure of such data where there is a legal basis legitimising it and it is necessary for the purposes of which the user has been informed. Depending on the circumstances, the data may be disclosed to:
- Public administrations, authorities and competent bodies, where there is a legal obligation.
- Financial institutions, where necessary for the management of collections and payments.
- Legal advisory, consulting or auditing professionals and firms, where their involvement is necessary.
- Providers acting as data processors that provide support and maintenance services for the Website, IT systems, management software, servers or cloud services.
- Other entities or partners, solely where the disclosure is necessary and there is a legal basis supporting it.
Providers acting as data processors will be subject to the corresponding contractual and legal obligations regarding data protection.
The disclosure of data to third parties acting as independent controllers will require a valid legal basis and, where applicable, prior information to the data subject.
International data transfers
Where the use of certain applications, tools or services involves international transfers of personal data outside the European Economic Area, such transfers will only be carried out if the requirements established in the applicable regulations are met.
In particular, there must be a valid legal basis and, where necessary, an adequacy decision or the appropriate safeguards provided for in data protection regulations.
Accuracy of data and third-party data
The user shall be responsible for ensuring that the personal data they provide are truthful, accurate, complete and up to date, and undertakes to report any changes that may be necessary.
Where the user provides personal data of third parties, they must have a legal basis legitimising such disclosure and, where applicable, must have previously informed those third parties of the processing of their data.
If Mecanizados Baikor S.L. detects that third-party data have been provided without a valid legal basis, it may adopt the necessary measures to limit or prevent their processing and, where appropriate, erase them, without prejudice to any liability that may arise from such disclosure.
Confidentiality and security of data
Mecanizados Baikor S.L. undertakes to preserve the confidentiality of personal data and to adopt appropriate technical and organisational measures to ensure a level of security appropriate to the risk.
These measures will be aimed at preventing, among other risks, the loss, alteration, destruction, unauthorised processing of or access to personal data, taking into account the nature of the information processed, the state of the art and the existing risks.
Processing of data of minors
The Website is not aimed at children under the age of fourteen and Mecanizados Baikor S.L. does not intend to collect personal data from persons under that age.
Therefore, children under the age of fourteen are requested not to provide personal data through the Website. If it is detected that data have been collected from a minor under that age without the necessary legal basis, the appropriate measures will be taken to erase them, where applicable.
What rights can the data subject exercise?
The user may exercise the following rights, under the terms provided for in the applicable regulations:
- Access: to know whether their personal data are being processed and to obtain information about such processing.
- Rectification: to request the correction of inaccurate or incomplete data.
- Erasure: to request the deletion of their data where the legal requirements are met.
- Objection: to object to certain processing where the legally established conditions are met.
- Restriction of processing: to request that the processing of their data be temporarily restricted in the legally established cases.
- Portability: to receive the data provided in a structured, commonly used and machine-readable format, or to request their transmission to another controller where applicable.
- Withdrawal of consent: to withdraw the consent given for processing based on it, without retroactive effect.
- Complaint: to lodge a complaint with the Spanish Data Protection Agency (AEPD) or with the competent supervisory authority.
The exercise of these rights will be free of charge, except in the exceptional cases provided for by law. To exercise them, the data subject may contact Mecanizados Baikor S.L. through the following means:
Postal address: Calle Telleria 2, 20500, Arrasate, Gipúzcoa.
Email: baikor@mecanizadosbaikor.es.
The request must sufficiently identify the data subject and specify the right they wish to exercise. Where there are reasonable doubts as to their identity, additional information strictly necessary to verify it may be requested.
The data subject may use the forms provided by the Spanish Data Protection Agency or other means that allow proof of receipt of their request.
Time limit for responding to requests to exercise rights
Mecanizados Baikor S.L. will respond to requests to exercise rights without undue delay and, in any event, within a maximum period of one month from their receipt.
Where the number or complexity of the requests so requires, this period may be extended by a further two months. In such case, the data subject will be informed of the extension and the reasons for it within the initial one-month period.
If the request is not acted upon, the data subject will be informed, within the legally established period, of the reasons for not taking action and of the possibility of lodging a complaint with the supervisory authority or bringing the corresponding legal actions.
How long will we keep personal data?
Personal data will be kept for as long as necessary to fulfil the purposes for which they were collected and for as long as the corresponding relationship is maintained, where applicable.
Once the relationship has ended, the data may be kept for the legally established periods and, where appropriate, for the limitation periods of any actions that may arise from such relationship or from the processing.
Likewise, information and communications related to the provision of the services may be kept for the periods necessary to address any applicable guarantees, claims and liabilities.
Where necessary, the data may remain blocked for the legally established periods, being made available exclusively to the competent authorities in order to address possible liabilities. Once these periods have elapsed, they will be erased or, where appropriate, anonymised.
Notification of personal data breaches
In the event of a personal data breach, Mecanizados Baikor S.L. will assess the risks that may arise for the rights and freedoms of natural persons.
Where the breach must be notified to the supervisory authority, this will be done without undue delay and, where feasible, within seventy-two hours of becoming aware of it, unless the breach is unlikely to result in a risk to the rights and freedoms of natural persons.
Likewise, where the breach is likely to result in a high risk to the rights and freedoms of data subjects, they will be informed without undue delay, unless any of the legally established exceptions apply.
Cookies and similar technologies
The Website may use technical cookies necessary for its operation and, where appropriate, other cookies intended to analyse browsing, measure audience or improve the services offered.
The user may consult detailed information about the cookies used, their purpose, duration and ownership in the Cookie Policy, available through the link provided on the Website.
Non-essential cookies will only be installed once the user’s consent has been obtained in advance, where such consent is required. The user may accept, reject or configure such cookies using the mechanism provided for this purpose, and may subsequently modify their preferences.
Browser settings may also allow certain cookies to be managed or blocked, although this may affect the operation of some functionalities of the Website.
IP addresses and browsing data
The Website’s servers may automatically record certain technical data associated with browsing, such as the IP address, domain name, date and time of access, pages visited or information relating to the device and browser used.
These data may be processed to ensure the security and proper operation of the Website, detect incidents and obtain statistics on its use, in accordance with the applicable regulations.
Where such data allow a natural person to be identified directly or indirectly, they will be treated as personal data and will be subject to the safeguards provided for in this Privacy Policy.
Amendments to the Privacy Policy
Mecanizados Baikor S.L. may update this Privacy Policy when necessary to adapt it to regulatory changes, criteria of the competent authorities or changes in the processing carried out.
The updated version will be available on the Website. Where the changes substantially affect the processing of personal data, additional information will be provided to data subjects where required by the applicable regulations.
