隐私权政策

1. INTRODUCTION

At MAHER HOLDING S.A., we are committed to privacy protection and the proper use of the personal data that we process and that you provide to us, both online on this Website and, if applicable, any of its subdomains, microsites, and offline.

Please read this policy carefully and ensure you understand it and agree with it before providing your personal data. If you do not agree with it, please refrain from using this Website or its services and do not provide us with your data.

The act of accessing this site, using any of its services or providing your data, either online or offline, will be understood as an affirmative act through which you give your consent (when this is necessary) to process your data for the purposes indicated below.

2. WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?

MAHER HOLDING S.A.
Postal address: C/Lerun,1 – 20870 Elgoibar – Gipuzkoa - Spain
Email: maherholding@maherholding.es
Telephone: (+34) 943 127 186

3. HOW HAVE WE OBTAINED YOUR DATA?
3.1. Obtained from the interested party themselves

If you are a current or potential customer or User of our Website, you have provided it yourself, either offline or online by requesting our products or services, or by contacting us to request information.

When you provide your data, you are guaranteeing that you are entitled to provide this information and that it is true, up to date and does not breach any contractual restriction or third-party rights. You are responsible for keeping your data and your profile correct and up to date. MAHER HOLDING S.A. accepts no responsibility if you do not do so. You agree not to impersonate other Users by using their registration data for the different Website services and/or content.

3.2. Obtained automatically due to visiting our Website

When you visit our Website, we compile information through cookies and other tracking and web analytics technologies. This means that data is sent from your browser to our servers to optimise our services and improve your User experience. This data may be gathered and stored automatically by us or by third parties on our behalf. You can consult our cookies policy.

3.3. Obtained from a person other than the interested party

It is possible that you have not directly provided us with your data, but that it has been provided by a third party with whom we work, to whom you have previously provided this data. For example:

Regarding the other people’s data, their privacy must be respected and special care taken when communicating or posting their personal data. Only the holder can authorise the processing of personal data. The publication of third-party data without their consent may infringe, in addition to the data protection regulations, those related to the right to honour, privacy or the image of these third parties.

It is the responsibility of the party who provides third-party data to: a) have their prior, express consent to use it, and b) inform them of the processing we are going to carry out with their data. Through the acceptance of this privacy policy, whoever provides third-party data expressly guarantees that they have authorisation to provide it, exempting us from any responsibility in the event of any complaint by the interested party.

4. WHAT CATEGORIES OF DATA DO WE PROCESS?

The data categories we process may be:

5. WHAT DO WE PROCESS YOUR DATA FOR?

The data you have provided, as well as the data generated during the course of the relationship we maintain with you, can be processed for different purposes:

General purposes:

Specific purposes:

Purposes with special duty of information:

6. WHAT IS THE LAWFUL BASIS FOR PROCESSING YOUR DATA?

The legal basis that legitimises the processing of your data may be diverse:

7. HOW LONG WILL WE KEEP YOUR PERSONAL DATA?
7.1. General storage period

The personal data that you provide will be stored while the contractual, precontractual or commercial relationship is maintained and, once these come to an end, while the interested party does not request its deletion. Even if their deletion is requested, we will be able to hold it for the time needed, limiting its processing, only to:

In line with the above criteria, personal data either in electronic records or on paper, may be deleted, at the discretion of the organisation, depending on logistics needs and/or storage space that make it advisable to eliminate information or documentation.

7.2. Specific storage period
8. TO WHOM CAN WE COMMUNICATE YOUR DATA?

We inform you that the data you provide may be communicated to third-party entities for purposes directly related to legitimate functions of assignor and assignee, such as:

General transfers

  1. To banking entities: for the management of collection and payments.
  2. To the occupational health centre and independent prevention service: in compliance with the obligations of occupational health monitoring and occupational risk prevention.
  3. Entities or organisations to which there is a legal obligation to communicate data: for example, Inland Revenue.
  4. To notary’s offices, courts or tribunals, registries, public prosecutors, loss adjusters, etc.
  5. To insurance companies: for the management and insurance of commercial risks / in case of credit insurance and surety for insurance against collection of transactions or civil liability insurance / to insure against defective products in the event of possible customer complaints.
  6. To any of the companies that make up the business Group for internal administrative purposes, include the processing of personal data of customers, suppliers and staff.
9. INTERNATIONAL DATA TRANSFERS

At MAHER HOLDING S.A., we ensure your personal data is always processed and located in the European Economic Area. Nevertheless, in certain circumstances, we may make international data transfers, for example, in the event it is necessary to enter into or execute a contract, in the interest of the interested party, between MAHER HOLDING S.A. and another natural or legal person; or in the event it is necessary to execute a contract between the interested party and MAHER HOLDING S.A. for example when using service providers located outside of the European Union that may have access to personal data, for the purpose of providing auxiliary services for our activity (accommodation, housing, SaaS, remote backups, IT maintenance or support services, email managers, email senders and email marketing, file transfers, etc.) or for the execution of precontractual measures adopted at the request of the interested party.

These entities may be different and vary over time, but we will try to select entities that either belong to countries with a level of protection equivalent to Europe on data protection, or that have appropriate guarantees that this level is met. Otherwise they will be carried out based on one of the exceptions stipulated for this purpose in the GDPR.

10. WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE YOUR DATA?

You may, when relevant, exercise your rights to access, rectify, delete, limit and oppose its processing, as well as other rights, at the postal or email addresses indicated at the top of this privacy policy. In both cases send a signed, written request, attaching a copy of your national identity document, passport or other valid document that identifies you. In the event your data changes, you must report this to the same address; this entity accepts no responsibility if you fail to do so.

Once we receive any of the above requests, we will respond within the legally established timelines. You may make a complaint before the Spanish Data Protection Agency. If you would like further information about the rights you can exercise and to request the forms for exercising your rights, you can to visit the Website of the Spanish Data Protection Agency, www.aepd.es.