1. DATA CONTROLLER
1.1. Who is responsible for processing your data?
The data controller is the owner of this website, FACTIUN SUN, S.L. (hereinafter, the Controller), with registered office at Camino de Ardanaz 2, Postal Code 31620, Gorráiz (Valle de Egües, Navarre) and Tax Identification Number B71500136.
However, if you have any questions or concerns regarding our privacy policy, you can contact FACTIUN SUN, S.L. either by visiting our premises located at Camino de Ardanaz 2, Postal Code 31620, Gorráiz (Valle de Egües, Navarra) or by sending an email to dpo@factiun.com
2. DATA CATEGORY
2.1. What types of personal data categories may the Data Controller process?
Depending on the type of relationship and the channel through which the data is collected:
a) Identifying data: name, surname, postal and email address, contact telephone number, IP address.
b) Professional contact details: job title, company, sector of activity.
c) Browsing data: cookies, online identifiers, location data derived from access to the website.
d) Transaction data: information on services requested, quotations, acceptance or rejection of offers, related communications.
e) Other data that you voluntarily provide in the forms on the website or during the provision of services (queries, suggestions, complaints, etc.).
f) Under no circumstances will special categories of personal data be collected, unless it is exceptionally essential and you are informed and your express consent is obtained in advance, in accordance with current regulations.
3. PURPOSE
3.1. What will the Data Controller use my data for?
The data you provide may be used by the Data Controller for one or more of the purposes indicated below, depending on the reason for collection. The purpose will be determined by factors such as your relationship with us (e.g. request for a quote) or the means used to send the data (e.g. contact form, e-mail, etc.).
Below, we set out the processing referred to in this privacy policy, without prejudice to the possibility that there may be others for which you will be informed or asked for the appropriate authorisation:
Provision of services
To provide and manage the services you request from us, including the preparation of estimates and quotations you request, whether or not they are a consequence of the extension of any service we may currently be providing to you.
Requests for information
When you contact us, for example, through the contact form on the website, by telephone, e-mail, social networks, or even in person at our office, to request information or ask a question about a particular issue, make a suggestion, complaint or claim, we will process your data in order to respond to your request for information and/or query, with the management and scope that it requires. This operation may involve the use of the data received to prepare proposals for services and/or collaboration, if that is indeed the request.
Sending commercial communications
If you authorise us to send you commercial communications (newsletters, promotional campaigns, etc.), for example, by means of the contact form or by requesting it by email, we will process your data for the management and sending of commercial communications related to our activities, services and products, including by electronic means. You may withdraw your consent and terminate the processing described above at any time.
Cookies
If, when you first visited this website, you agreed to receive cookies, the website’s cookie policy will apply to you. We recommend that you visit the aforementioned policy, where you can find information on, among other things, the cookies used, their purpose, and the configuration options you can adopt on your devices for viewing the page, for example, to delete them.
3.2. How long will you keep my data?
The data will be kept for the time necessary to fulfil the purpose for which it was collected and to determine any possible liabilities that may arise from that purpose and from the processing of the data. With regard to the period determined by the purpose, the following periods are listed according to the processing:
–Tratamientos relativos a las solicitudes remitidas a través de formularios de contacto de la web: Trataremos tus datos durante el tiempo necesario para atender y gestionar tu solicitud de información.
–Tratamientos relativos a las comunicaciones comerciales. Mientras tengas la condición de cliente y no te hayas opuesto al tratamiento o en el caso de que nos hayas solicitado expresamente recibir las comunicaciones, mientras desees seguir recibiendo las mismas y no te hayas opuesto.
–Cookies: De acuerdo con el tipo de cookies, expresado en la correspondiente política.
LEGITIMACY OF PROCESSING
4.1. Why can the Data Controller process my data? What gives them the right to do so?
Requests for information and/or contact via web forms: In general, the Data Controller is entitled to process data for the purpose of managing the sending of forms provided for this purpose on this website.
Sending commercial communications: In accordance with current regulations and having weighed up our interests and your rights, we inform you that we have a legitimate interest in processing your data for the purpose of sending you commercial communications related to the services you have contracted with us (without prejudice to your right to object to this processing at any time).
Administrative management and compliance with legal obligations: For accounting and administrative purposes, we need to process your data in order to comply with the obligations imposed by commercial, tax and other regulations, among others. We are therefore entitled to carry out such processing by legal imperative.
Cookies: We are entitled to carry out this processing on the basis of the consent given at the start of browsing our website.
4.2. Consequences of withdrawing consent or objecting to the processing of your data. Mandatory and optional fields.
If we ever ask for your authorisation to process your data for a purpose that requires consent, not giving your consent (or withdrawing it at a later date) will not have any consequences for you.
The data fields marked as mandatory on the contact forms are the minimum required to fulfil the purpose of the processing, so we inform you that the withdrawal of consent will make it impossible for the data controller to respond to your requests or queries. However, in the case of data not identified as mandatory, the withdrawal of consent will not affect the execution of the main purpose.
5. RECIPIENTS
5.1. Will my data be transferred to third parties?
Apart from the collection and processing of data by the owner of the website, we inform you that your data will not be transferred to third parties. The aforementioned personal data will only be communicated to those entities and/or public bodies to which it is necessary to communicate such data in compliance with the corresponding legal obligations.
However, in order to fulfil the purposes indicated in this Privacy Policy, it may be necessary for us to give access to your personal data to entities within the business group and to third parties who support us in the services or products we offer you. If the service providers are located in territories outside the European Economic Area that do not provide a level of data protection comparable to that of the European Union, we inform you that we transfer your data with adequate safeguards and always ensuring the security of your data.
5.2. Providers of services related to the website.
Hosting: la página web del Responsable está alojada en el proveedor profesionalhosting.com
6. RIGHTS
6.1. What are my rights regarding data protection? General information.
If you wish, you may exercise your rights of access, rectification, erasure (‘right to be forgotten’), restriction of processing, portability and objection, as well as your right not to be subject to automated individual decision-making, including profiling.
Similarly, you may withdraw your consent at any time. To do so, send a request to info.fs@factiun.com. We will respond to all legitimate requests. If we deem it necessary in order to identify you, we may request a copy of a document proving your identity.
You may also lodge a complaint with the Spanish Data Protection Agency or any other competent supervisory authority, especially if you have not obtained satisfaction in the exercise of your rights.
6.2. What do these rights consist of?
Right of access: This right allows the data subject to obtain confirmation from the controller as to whether or not personal data concerning him or her are being processed and, where that is the case, access to the personal data and the following additional information: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipients; d) the envisaged period for which the personal data will be stored, or the criteria used to determine that period; e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) available information on the source of the data; h) the existence of automated decision-making.
Right of rectification: This right entitles the data subject to request the controller to rectify or complete inaccurate personal data without delay. It is important that the data contained in the databases is up to date and, in this regard, we are at your disposal to rectify any errors or inaccuracies that may exist therein.
Right to erasure: You have the right to request that we erase your personal data at any time. We will comply with this request without delay, unless any of the circumstances provided for in the General Data Protection Regulation apply, including, notably, where we are required to retain your data in order to comply with a legal obligation or to defend ourselves against a claim.
Right to portability: In the case of automated data processing based on consent, you may request that we send the personal data you have provided to us to another data controller in a structured, commonly used and machine-readable format.
Right to object: Through this right, the data subject objects to the processing of their data by the controller. This right is not absolute, which means that the controller may continue to process the data provided that they can prove legitimate reasons that prevail over the interests and rights of the data subject or for the formulation, exercise and defence of claims.
Right to restriction of processing: This right gives you the right, under certain circumstances indicated below, to request that the controller restrict the processing of your personal data. If this right is exercised, the controller may only process the data with the consent of the data subject. The circumstances under which this right may be exercised are as follows:
- The data subject contests the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data;
- The processing carried out by the controller is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
- The controller no longer needs the personal data for the purposes of the processing, but the data subject needs it for the establishment, exercise or defence of legal claims;
- The data subject has objected to the processing, while it is being verified whether the legitimate grounds of the controller override those of the data subject.
6.3. How and where can I exercise them?
We will be happy to answer any queries or complaints you may have regarding data protection. You may also submit your complaint or exercise your rights through any of the contact channels indicated at the top of this data protection policy.
Similarly, you may also contact the supervisory authority you deem appropriate to lodge your complaint (for example, in the country where you have your habitual residence, place of work or where you consider that the alleged infringement has occurred). For the appropriate purposes, we inform you that in Spain the Supervisory Authority is the Spanish Data Protection Agency, and you may exercise your rights through the forms that this entity has enabled for this purpose and which are available on its website.
6.4. How long may it take to process my request to exercise my rights?
The reference period is one month from receipt of your request. Notwithstanding the foregoing, this period may be extended by a further two months if necessary, taking into account the complexity and number of requests. The Data Controller shall inform the data subject of any such extension within one month of receipt of the request, stating the reasons for the delay.
6.5. Will exercising these rights incur any costs for me?
The exercise of your rights will not incur any costs, except in cases where requests are manifestly unfounded or excessive, particularly if they are repetitive. In such cases, the Data Controller may charge a fee to offset the administrative costs of responding to the request or refuse to act (the fee may not imply additional income for the Data Controller, but must correspond to the actual cost of processing the request).
