This policy explains how GSC UNIÓN, S.L. processes the personal data of those who use this website, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).
Data controller
GSC UNIÓN, S.L. (hereinafter, “Garcamps”)
Tax ID (CIF): B-98378300
Registered address: Ctra. Valencia – Ademuz, km 10.4, 46184 Paterna (Valencia), Spain
Phone: 961 32 40 20
Email: jrubio@gscunion.com
Data protection officer: [PENDING: state whether a DPO has been appointed and their contact details; not mandatory for most companies of this kind].
What data we process and why
We only process the data that the person provides. This site does not build profiles, does not make automated decisions, and does not use analytics or advertising tools.
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Respond to enquiries and quotation requests sent through the contact form | Name, email, phone, subject and the content of the message | Consent of the data subject (art. 6.1.a GDPR), collected in the form itself | For as long as the enquiry is being handled and, afterwards, for the period needed to address any claims |
| Manage the business relationship when the enquiry becomes an order or rental | Contact details and those needed for invoicing | Performance of a contract or pre-contractual measures (art. 6.1.b GDPR) and compliance with legal obligations (art. 6.1.c GDPR) | Six years from the last transaction, in accordance with article 30 of the Commercial Code and tax law |
| Keep the website running and secure | IP address and technical browser data logged by the server | Legitimate interest in ensuring the security of the site (art. 6.1.f GDPR) | [PENDING: confirm with the hosting provider how long the server logs are kept] |
Sharing data with third parties
Personal data is not shared with third parties except where required by law.
The following do access it, as processors and under the contract required by article 28 of the GDPR, being the providers needed to deliver the service:
- The web hosting and email provider: [PENDING: provider name and country where the servers are hosted].
- The accounting and tax advisor, when an enquiry leads to a commercial transaction: [PENDING: confirm if applicable].
No international data transfers are made outside the European Economic Area. This site does not embed fonts, maps, videos or scripts hosted on third-party servers: all resources are served from our own domain. The map on the contact page loads only if the person expressly requests it, and they are warned beforehand.
Rights of data subjects
Anyone may exercise the following rights by writing to jrubio@gscunion.com or by post to the address above, proving their identity:
- Access: to know which of their data is processed.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to request deletion when the data is no longer needed.
- Restriction: to ask that processing be suspended in the cases provided by law.
- Objection: to object to processing based on legitimate interest.
- Portability: to receive their data in a structured, commonly used format.
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
A reply will be given within one month at most. If you believe your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan, 6, 28001 Madrid — www.aepd.es).
Security
The technical and organisational measures needed to protect the data against loss, misuse and unauthorised access are applied, taking into account the state of the art and the risks of the processing.
Minors
This site is aimed at professionals and companies. We do not knowingly collect data from children under fourteen.
Changes to this policy
This policy may be updated to reflect legal or business changes. The date of the last revision appears at the top of the page.