WEB PRIVACY POLICY

The Website is owned by ISTOBAL ESENS, SLU, which is responsible for processing the data provided by Users.

In compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”) and in Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDGDD”), as well as in Law 34/2002 on Information Society Services (“LSSI”), through this Privacy Policy, the Website User is informed about how ISTOBAL ESENS processes the information collected on the Website, as well as the reasons why it must collect various types of User data.

The User should read this Privacy Policy before using this Website, taking into account the information indicated below:

1. Data controller.

• Data controller: ISTOBAL ESENS, SLU (hereinafter, “ISTOBAL ESENS")
• Address: Calle Braç de Pepa, 3 46470, Massanassa (Valencia) Spain
• CIF: B44013613
• Email: administracion.llv@istobal.com
• Contact phone number: 961 322 050

2. Processing and purposes of the data collected.

Any personal data you provide to us when visiting this Website will be processed in accordance with applicable data protection legislation.

Personal data will be collected, processed, and used for lawful, legitimate, and informed purposes. Therefore, all the purposes for which personal data is used by the Website owner and Data Controller are detailed below:

Data type or categories	Treatment and Purposes	Legal basis (GDPR/LOPDGDD)
Identification and contact information (name, surname, email, telephone, address)	To handle requests and inquiries submitted via contact form	Legitimate interest (Art. 6.1.f) / Pre-contractual measures - potential clients (Art. 6.1.b)
Identification, contact and transaction data	User relationship management and compliance with obligations arising from the contractual relationship	Contractual execution (Art. 6.1.b)
Identification and contact data	Sending commercial, promotional and advertising communications about products and services similar to those previously contracted	Legitimate interest (Art. 6.1.f)
Identification and contact data	Sending electronic commercial communications that require express consent	Consent (Art. 6.1.a)
Identification details, transaction details and delivery address	Management of orders placed and products purchased, including shipping and delivery	Contractual execution (Art. 6.1.b)
Identification data, transaction data	Application and management of established legal guarantees	Compliance with legal obligations (Art. 6.1.c)
Identifying and financial data	Financing of purchased products	Contractual execution (Art. 6.1.b)
Identification and contact data	Contacting the user regarding service-related issues, inquiries, or advice	Legitimate interest (Art. 6.1.f)
Identification and contact data	Information about services, products, activities or events that may be of interest	Legitimate interest (Art. 6.1.f) / Consent (Art. 6.1.a)
Preference and opinion data	Conducting surveys and satisfaction studies	Legitimate interest (Art. 6.1.f)
Identifying, curricular and professional data	Management of candidacies and personnel selection processes	Pre-contractual measures (Art. 6.1.b)

All Users are informed that the collection of certain personal data is not mandatory, except in the fields where otherwise indicated. However, failure to provide such data may prevent the provision of Services that depend on knowing such data, and therefore ISTOBAL ESENS is released from all liability for the non-provision or incomplete provision of these Services.

It is the User's responsibility to provide truthful information and keep it up to date. Consequently, ISTOBAL ESENS reserves the right to exclude from its services and cancel the service of any User who has provided false information, without prejudice to any other legal action that may be taken.

3. Period for the retention of personal data

Personal data will be kept for the time necessary to provide the requested service, manage the contractual relationship, answer queries and maintain the record, until the owner requests the cessation of processing or the intended purposes are fulfilled.

Once these purposes have been achieved and as long as the active processing of the data is not required, they will remain blocked during the applicable statutory limitation periods for addressing potential liabilities. Once these periods have expired, the matter will be referred to them. definitive suppression.

The specific storage periods according to the type of treatment are detailed in the table below:

Type of treatment	Conservation period
Inquiries and requests (contact form)	Until consent is revoked.
Contracts and business relationship	During the term of the contract and for 5 years thereafter
Commercial communications (legitimate interest)	While a contractual relationship exists or until the interested party objects.
Commercial communications (consent)	Until withdrawal of consent
Congratulations and special communications	Until withdrawal of consent
Order and shipping management	During the term of the contract and for 5 years thereafter
Legal guarantees	During the warranty period and until the statute of limitations expires (minimum 3 years)
Product financing	During the term of the financing and 5 years thereafter
Contact for service inquiries	As long as necessary for the management of the service or contractual relationship
Product and event information	While a contractual relationship exists or until consent is withdrawn
Surveys and satisfaction studies	While a contractual relationship exists or until the interested party objects.

4. Communication of personal data to third parties

The personal data provided may be communicated to competent public bodies, judges and courts when required or necessary; to companies of the Group to which ISTOBAL ESENS belongs, to collaborating companies and suppliers in cases where it is necessary for the provision of the service or acquisition of products; to financial entities for the approval of the purchase and acquisition of products and/or services, as well as to linked or collaborating companies for the evaluation and management of selection processes in the case of data relating to the candidacy for a job.

5. User Rights

Any User who provides their personal data may exercise the following data protection rights:

• The right of access, to know what personal data is being processed and to request that the information provided for in article 13 of the GDPR be provided to you.
• The right to rectification of personal data when it is inaccurate or needs to be updated.
• The right to erasure of personal data when, among other circumstances, they are no longer necessary for the purpose or purposes for which they were collected.
• The right to restriction of processing under the circumstances contemplated in the GDPR.
• The right to data portability, requesting the transmission of personal data in electronic format to another Data Controller in a structured format.
• The right to object to the processing of your personal data.
• The right to revoke the consent given at any time.

To exercise the aforementioned rights, the User must contact ISTOBAL ESENS using the contact information indicated below, and specifically, by email. dpo@istobal.com or by writing to ISTOBAL ESENS at the registered office located at Calle Braç de Pepa, 3 46470, Massanassa (Valencia) Spain.

The User also has the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es)

6. Opposition to receiving information or revocation of consent given.

Any user may object to the use of their information for advertising purposes or for conducting satisfaction surveys, as well as revoke their consent at any time. To do so, they must send an email to the following address: dpo@istobal.com.

7. International data transfers.

In the event that the User's personal data is subject to international data transfer outside the European Economic Area, ISTOBAL ESENS will adopt the due diligence measures established in Articles 46 et seq. of the GDPR to provide such transfers of personal data with adequate safeguards, including the signing of standard contractual clauses.

8. Security measures to protect the user's personal data.

ISTOBAL ESENS ensures the information it provides is stored on computer servers; therefore, this information is in a controlled and secure environment, protected from unauthorized access, use, or disclosure. ISTOBAL ESENS adopts reasonable technical and physical security measures to protect against unauthorized access, use, modification, and disclosure of personal data under its control and custody.

9. Changes and modifications to the Privacy Policy.

This policy may be modified or updated due to legal changes and requirements, as well as improvements and changes related to how ISTOBAL ESENS offers and provides the application's services and utilities. Any changes or additions to this policy will be published on the website.

If during your reading you have any questions or concerns about our Privacy Policy or wish to exercise any rights or actions related to your personal data, please contact us at the addresses indicated above.