Privacy policy

SUACARA’s Privacy Policy is governed by compliance with the legislation currently in force regarding the protection of personal data and the Law on Information Society Services and Electronic Commerce. The purpose of this Policy is to protect information on the Internet in the same way that it is protected through other means. SUACARA LIGHTING,SL. is the owner of the website https://www.suacara.es, and sets out in this section its Privacy Policy regarding the personal information that users may provide when visiting our website.

1.- Definitions

“Website”: domain https://www.suacara.es made available to Internet users.

“User”: natural or legal person who uses or browses the website.

2.- Use and processing of personal data.

In compliance with the provisions of the regulations on the Protection of Personal Data, SUACARA LIGHTING,SL. informs you that the personal data provided by completing the “Contact” and/or “Let’s keep in touch” forms will be incorporated into a file owned by SUACARA. In accordance with the provisions of section 4, you may exercise your rights of access, rectification, erasure, objection, restriction of processing and other rights set out in Articles 15 to 22 of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR).

If the User decides to use any of the web forms, the necessary data requested will be processed for the purpose of handling their request. In this regard, registration through such forms implies the User’s express authorization for information to be sent to their email address and/or mobile phone. Regarding the possibility of exercising data protection rights, see section 4.

In compliance with Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (hereinafter LSSI-CE), SUACARA will not send advertising communications by email that have not been authorized by users.

In cases where it is necessary to complete a form and click on the validation or submit button, doing so will necessarily imply that you have been informed of and, where applicable, have given the corresponding consent to the content of this Privacy Policy. Therefore, whenever SUACARA requests personal data, it will include a link to this Privacy Policy in order to inform you of your rights and obligations. The User must complete the request forms with true, accurate, complete and up-to-date information, and will be informed at that time of which data is mandatory and the consequences of failing to provide it. Likewise, by accepting, the User acknowledges that the information and personal data collected are accurate and truthful.

For more information on the processing of your data in accordance with the General Data Protection Regulation – GDPR, please click here https://www.boe.es/doue/2016/119/L00001-00088.pdf

3.- Security measures

At SUACARA, we are aware of the importance that your personal data has for you. Therefore, we undertake to be transparent in everything relating to the privacy and security of the information we process. We strive to adopt all the necessary security measures to ensure the protection of the personal data we process, and we are highly committed to continuously improving them, adapting to the legislation in force and the technology available at any given time.

Therefore, SUACARA informs you that it has implemented the necessary technical and organisational security measures to guarantee the security of your personal data and prevent its alteration, loss and unauthorized processing and/or access, taking into account the state of technology, the nature of the stored data and the risks to which they are exposed, whether arising from human action or from physical or natural causes.

SUACARA has established additional measures to strengthen the confidentiality and integrity of information within the organisation, such as restrictions on the use of email when sending confidential data or documents. Nevertheless, the User must be aware that Internet security measures are not impenetrable. In this regard, it is important to note that SUACARA personnel who have access to information from the various online forms are obliged to keep all data processed in the course of their work confidential and to use it only in the manner required for the performance of their duties.

SUACARA continuously monitors, controls and evaluates its processes to ensure respect for data privacy.

4.- Exercise of the rights of access, rectification, erasure and objection

Individuals who have provided their data may contact SUACARA, in its capacity as owner and data controller, in order to exercise, free of charge, their rights of access, rectification, erasure, objection, restriction of processing and other rights recognized in Articles 15 to 22 of the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR).

Due to the confidential nature of the information, you may not exercise your rights by telephone, as this method does not allow your identity as the data subject to be verified. The data subject may exercise their rights by sending a written communication to SUACARA, General Eguia, 34, 48010 Bilbao, Bizkaia, Spain, or by email to [email protected], providing proof of identity by means of a photocopy of their ID card (D.N.I.), and including the following reference in their letter or email: «LOPDYGDD – SUACARA».

  • Right of access (Article 15 GDPR)

You have the right to obtain confirmation from SUACARA as to whether or not we are processing your personal data. If so, you have the right to access such personal data and the following information:

  • Purpose of the processing;
  • Categories of personal data being processed;
  • Recipients or categories of recipients to whom the data will be disclosed;
  • Planned period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period;
  • The existence of the right to request from the data controller the rectification or erasure of personal data or restriction of processing of the personal data concerning the data subject, or to object to such processing;
  • The existence of the right to lodge a complaint with a supervisory authority;
  • Where the personal data have not been obtained from the data subject, any available information as to their source;
  • The existence of automated decision-making, that is, without any human intervention, including profiling, and, at least in such cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.
  • Right to rectification (Article 16 GDPR)

You have the right to obtain from SUACARA the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

  • Right to erasure, “right to be forgotten” (Article 17 GDPR)

The right to erasure gives you the right to obtain from SUACARA the erasure of personal data concerning you where one of the following circumstances applies:

  • They are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • Where the data subject withdraws consent on which the processing is based and there is no other legal ground for the processing.
  • Where the data subject objects to the processing and there are no overriding legitimate grounds for the processing.
  • Where the personal data have been unlawfully processed.
  • Where the personal data must be erased for compliance with a legal obligation under Union or Member State law to which the data controller is subject.
  • Where the personal data have been collected in relation to the offer of information society services to children.
  • Right to object (Article 21 GDPR)

You shall have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.

In such cases, SUACARA shall no longer process your personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.

  • Right to data portability (Article 21 GDPR)

This right may only be exercised:

  • When the processing is carried out by automated means;
  • When the processing is based on consent or a contract;
  • When the data subject requests it with regard to data they have provided to the data controller and which concern them, including data derived from the data subject’s own activity.

It is not applicable:

  • To data belonging to third parties that a data subject has provided to a data controller.
  • Where the data subject has requested the portability of data concerning them but which were provided to the data controller by third parties.
  • Right to restriction of processing (Article 18 GDPR)

Restriction of processing means that, at the request of the data subject, the processing operations that would otherwise apply to their personal data will not be carried out.

Restriction of processing may be requested when:

  • The data subject has exercised their rights to rectification or objection and the data controller is in the process of determining whether the request should be granted.
  • The processing is unlawful, which would result in the deletion of the data, but the data subject objects to this.
  • The data are no longer necessary for processing, which would also result in their deletion, but the data subject requests restriction because they need them for the establishment, exercise or defence of legal claims.
  • Right not to be subject to automated individual decision-making (Article 22 GDPR)

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

The above does not apply:

  • When it is authorized by Union or Member State law.
  • When it is necessary for entering into or performing a contract between the data subject and a data controller.
  • When it is based on the data subject’s explicit consent.

5.- Use of cookies and collection of statistical data

SUACARA uses first-party and third-party cookies on this website.

What are cookies?

A cookie is a small text file that is stored in your browser when you visit almost any website. Its purpose is to enable the website to remember your visit when you return to browse that page.

What first-party cookies do we use?

Session cookies: websites do not have memory. Without these cookies, a user who moves from one page to another within the same website would be treated as a completely new visitor each time they moved from one page to another. Session cookies allow this website to keep track of the user’s browsing from one page to another on this website, so that they are not asked for information they have already provided. These cookies allow the user to move through the different pages of this website quickly and easily, without having to authenticate again or restart the process in each area they visit.

You can find more information by consulting our Cookie Policy

What third-party cookies do we use?

On this website we use third-party cookies, specifically Google Analytics cookies, analytics cookies, whose purpose is to analyse visits to the website in order to obtain access statistics. Under no circumstances do these cookies contain personal or private information about users.

For more information, you can consult the following links:

https://policies.google.com/?hl=es https://policies.google.com/technologies/cookies?hl=es

6.- Social Networks – Plugins

This website uses social network “plug-ins” for its presentation on the Internet. Plugins can be recognized by the social network logo (for example, Twitter’s silhouette of a blue bird in flight or Facebook’s blue “f”) or by the corresponding label.

If you access a web page containing such a plugin, your browser establishes a direct connection with the social network’s servers, and the social network transmits the plugin content directly to the user’s browser, integrating it into the website. Consequently, SUACARA has no way of influencing the extent of the data that the social network collects with the help of these plugins.

Through these plugins, the social network receives information that the User has opened the corresponding page of our website. If the User is simultaneously logged into the social network, the social network may assign the visit to their account. When interacting with the plugins, for example by pressing the “Like” button or writing a comment, the relevant information is transmitted directly from your web browser to the corresponding social network, where it is stored. Even if you are not a member of the social network, there is a possibility that the social network may discover your IP address and store it.

SUACARA does not know which buttons the User has used or when. You should consult the Data Protection information provided by the relevant social network regarding the purpose and scope of the data collected, its subsequent processing and use by the social network, as well as your rights and the options available to you to adjust such use in order to protect your privacy.

If you wish to prevent social networks from collecting data through our online presence, you should log out of the social networks before accessing our website.

Facebook social plugins

Our website uses social plugins from the social network www.facebook.com, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA.

SUACARA warns you that we do not know what data Facebook transmits or how it uses them. The purpose and scope of data collection and the subsequent processing and use by Facebook, as well as the related rights and options for configuring privacy protection, can be consulted in Facebook’s data protection information: www.facebook.com/policy.php.

Twitter social plugins

Our website uses social plugins from the social network www.twitter.com, operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, California 94103, USA.

SUACARA warns you that we do not know what data Twitter transmits or how it uses them. The purpose and scope of data collection and its subsequent processing and use by Twitter, as well as the related rights and options for configuring privacy protection, can be consulted in the data protection information at www.twitter.com/privacy.

LinkedIn social plugins

Our website uses social plugins from the social network https://es.linkedin.com/, operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

At SUACARA we do not know what data LinkedIn transmits or how it uses them. The purpose and scope of data collection and its subsequent processing and use by LinkedIn, as well as the related rights and options for configuring privacy protection, can be consulted in the data protection information at: www.linkedin.com/legal/privacy-policy.

Google Plugins

Our website uses the «G+» button of the social network Google Plus, operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

If you access our website, your server establishes a direct connection with Google’s servers. The content of the «G+» button is transmitted directly by Google to your browser, which integrates it into the website. Therefore, we cannot influence the extent of the data that Google obtains through this button. According to Google, if you do not click the button, no personal data is collected. These data, including your IP address, are only collected and processed in the case of members who are logged in.

The purpose and scope of data collection and its subsequent processing and use by Google, as well as your rights and configuration options in this regard to protect your privacy, can be found at

https://developers.google.com/+/web/+1button/

If you have a Google Plus account but do not want Google to collect your data through our pages and link them to the membership data already held by Google, you should log out of Google Plus before visiting our website.

7.- Policy on children’s use

This website is not intended for children under fourteen (14) years of age, nor do we knowingly collect information from such individuals. If the User is under this age, they must obtain the prior consent of their parents, guardians or legal representatives before entering their personal data in any of the forms on this website. However, if the parents, guardians or legal representatives of minors believe that their children or wards have provided us with personal data without their consent, please contact us by writing to the address indicated in section 4 of this Privacy Policy.

SUACARA accepts no liability for failure to comply with this requirement.

8.- Links

This Privacy Policy only applies to the SUACARA website.

This website contains links to third-party websites whose privacy policies are separate from those of SUACARA. When accessing such websites, you may decide whether to accept their privacy and cookie policies. In general, when browsing the Internet, you can accept or reject third-party cookies through your browser’s configuration options.

9.- Modification of this Privacy Policy

SUACARA reserves the right to modify its Privacy Policy, at its own discretion, or as a result of a change in doctrine by the Spanish Data Protection Agency, legislative changes or case law. In such cases, SUACARA will announce the changes introduced on this page within a reasonable period before they come into effect.

Use of the registration forms after the changes have come into effect will imply acceptance thereof.