Privacy policy SPAIN

Basic information on Data Protection
Data Controller ERREKA (Co. Tax I.D.: ES-F20025268)
Purposes Offer products and services from our different lines of work (entrances, fastening solutions and plastics) Provide contact tools between ERREKA and interested and related persons, and respond to requests and petitions Inform, organize and disseminate ERREKA activities Send informative and commercial communications related to our products and services Manage and analyse the use of our website and our presence on social networks
Legitimization Need for data processing for the management of our products and services (contractual or pre-contractual relationship according to article 6.1.b of the GPRD) Express consent of the user (GPRD art. 6.1.a) Legitimate interest of ERREKA (GPRD art. 6.1.f)
Recipients No data is transferred to third parties, except when legally required
Rights You can request to exercise your rights related to the protection of your personal data at Bº Ibarreta s / n, 20577 Antzuola (Gipuzkoa), telephone 943786150, email lopd@erreka.com

1. Responsible for the treatment

“Matz-Erreka, S. Coop.”, Hereinafter “ERREKA“Or”Data Controller“:

NIF: ES-F20025268

Address: Bº Ibarreta, s / n

Town: 20577 Antzuola (Gipuzkoa)

Phone: 943786150

Email: lopd@erreka.com

2. Applicable legislation

The basic regulations on personal data protection applicable to data processing carried out by ERREKA is:

  1. EU Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016 regarding the protection of individuals with regard to the processing of personal data and the free circulation of these data (“GPRD”).
  2. Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights (“Data Protection Act”).
  3. Their respective supplementary and implementation regulations.

3. Websites, APPs and social media channels

The main official website of GRUPO ERREKA is located at www.erreka.com/grupo.

The main official channels of the GRUPO ERREKA on the social and professional networks are:

For the purposes of this Privacy Policy, hereinafter the official website of ERREKA, its mobile applications (“APPs”) and official channels in social networks will all be called, “the website”, except where otherwise specified.

In compliance with current regulations on Personal Data Protection, users are informed that personal data provided by any means located on the website, APPs or official channels in social networks of ERREKA (via email, forms, private areas, etc.), or as a consequence of their use, may be incorporated into data processing systems by ERREKA.

The purposes of data processing that may occur through the ERREKA website are:

  • Offer our products and services from our different lines of work (entrances, fastening solutions and plastics), and related activities.
    Main legitimate legal grounds: Necessity of data processing for the management of our products and services (“contractual or pre-contractual relationship” according to article 6.1.b of the GPRD)
  • Provide contact tools between ERREKA and interested and related persons, and respond to requests and petitions; send informative and commercial communications related to our products and services.
    Main legitimate legal grounds: Consent of the person concerned (GPRD art. 6.1.a), when you provide your data for the following purposes
  • Inform, organize and disseminate the activities and initiatives of ERREKA, or in which ERREKA participates; manage and analyse the use of our website and our presence on social networks.
    Main legitimate legal grounds: ILegitimate interest of the Data Controller (GPRD art. 6.1.f).
  • To manage personnel selection processes. Main legitimate basis: Consent of the data subject (Art.6.1 a) RGPD).

5. Conservation period

The personal data provided will be kept for the time necessary to fulfil the purpose for which they are collected, determine the possible responsibilities that may arise from the purpose, or during the period that the applicable regulations establish in each case (accounting, tax, mercantile, etc.), after which they will be deleted adopting the necessary security measures to guarantee their confidentiality.

The personal data obtained through the contact or information request form will be kept only for the time necessary to attend and follow up your request.

The personal data of our customers will be kept for the duration of the contract and thereafter until the prescription of possible liabilities.

Personal data relating to job candidates will be kept for a period of one year from the end of the selection process.

6. Duty of secrecy

ERREKA is committed to the privacy and protection of user data. Your personal data will be treated confidentially and complying with this regulation. Employees at ERREKA have been expressly informed about their duty of professional secrecy.

7. Collection of personal data

The Data Controller does not require you to provide personal data to access the website, however, on the website there are forms (contact, registration, subscriptions to newsletters, etc.) and similar utilities which require the user to provide personal data, mostly identification or contact information. The user provides their personal data freely and voluntarily. ERREKA does not request more personal information than that necessary to carry out the consultation or the requested service.

The user who sends / includes any type of content (data, documents, texts, videos, sound, photographs, graphics, messages or other material) declares and guarantees to do so in a way that complies with the conditions expressed herein and the current legislation. The user who includes personal data of third parties declares that they have their express consent for their treatment.

The user is solely responsible for the veracity, correctness and legitimate treatment of the data included, exonerating ERREKA from any responsibility in this regard. Users guarantee and respond, in any case, to the accuracy, validity and authenticity of the personal data provided, and undertake to keep this information duly updated. Non-completion or erroneous completion of fields indicated as mandatory in the forms or similar tools on the website may result in the Data Controller being unable to meet the request of the user.

The Data Controller will collect personal data in an appropriate way, in keeping with the purposes, utilities, services or provisions included on its website, in a determined, explicit and legitimate way, therefore in no case shall fraudulent, unfair, illegal or illicit means be used that endanger the rights of users

Sending information through this website necessarily entails express authorization for the data processing described in this privacy policy and in the website terms and conditions.

8. Collecting data from minors

The services of the Data Controller are not aimed at minors. In the event that some of our services were specifically directed to minors, the Data Controller would request the consent of the parents or guardians for the collection of personal data or, where appropriate, for the treatment of the data.

9. Registrations and subscriptions

In the case of subscription to newsletters, users may request the withdrawal of said services at any time they wish by directing a request to the email address lopd@erreka.com or using any other means that the Data Controller provides for this purpose, such as the mechanism called “Unsubscribe”, located at the bottom of the newsletters themselves.

10. Resumes

Users who provide their curriculum vitae through this website, forms, email or similar mechanisms, grant their express consent for the inclusion of their data in the data processing area called “Personnel Recruitment and resumes”. Your data may be used so you can participate in future personnel recruitment processes by the Data Controller. Likewise, your data may be transferred to external companies the Data Controller hires to carry out personnel recruitment processes.

This website may offer links to social networks and external web sites and channels, such as Facebook, Twitter, YouTube and Instagram, among others. ERREKA assumes no responsibility in relation to these linked sites. The user who accesses social networks and external websites and channels, related to ERREKA, from the links located on this website or in any other way, is previously and expressly informed that the conditions of use, privacy policies, policies cookies and any conditions or regulations depend on the entities responsible for said social networks and web sites and channels, and never on ERREKA.

12. ERREKA’s presence on social networks

GRUPO ERREKA has official profiles on social networks, with the main purpose of disseminating its products, services and activities. The publications offered through these channels will be for guidance only.

By logging onto the profiles of GRUPO ERREKA with their social network profile, the user gives their express consent to ERREKA to process their personal data in accordance with this Privacy Policy.

The information and personal data voluntarily provided by the user through the social networks of GRUPO ERREKA may be processed in order to contact the user and respond to the queries and requests made, send informative and commercial communications, manage events, contests , invitations and similar activities, ascertain the opinion or the evaluation of the user about GRUPO ERREKA and its publications, and manage, in general, the presence of GRUPO ERREKA on social networks.

Users are informed that the information and content (data, texts, videos, sound, photographs, graphics, comments, messages or other material) that they publish through the ERREKA GROUP social networks (including, where appropriate, personal data) may be made publicly available to other users of social networks.

From the configuration of the user profile of each social network, the user can configure what information they wants to make public in each case, see the permissions they have granted, delete or deactivate them, and manage their publications according to their criteria and the usage rules of each social network.

The user will be solely responsible for ensuring that their publications respect current legislation, the rules of use and privacy policies established by the corresponding social network and those of ERREKA, which does not assume any responsibility in relation to the publications that each user makes. ERREKA will remove unilaterally and without prior notice those contents that it considers to be in violation of current legislation, the rules of use and established privacy policies, or that it considers inappropriate.

GRUPO ERREKA follows other profiles on Facebook, YouTube, Instagram, Twitter and other social networks, without implying any kind of connection with them.

The GRUPO ERREKA channels on Facebook, YouTube, Instagram, Twitter and other social networks are followed by other users of these networks, without implying any kind of connection with them.

ERREKA reserves the right not to respond to messages or comments received through this channel. ERREKA may modify or eliminate at any time and without prior notice the publications issued on its social networks.

By becoming a follower or clicking on “Like” in GRUPO ERREKA’s social networks, you consent to the processing of your personal data in the environment of the corresponding social network, in accordance with its privacy policies; ERREKA’s access to the data contained in the contact list; and that published news appear in your notices and notifications.

If the user wants to stop following GRUPO ERREKA’s official channels on social networks, they must do so using the tools provided for this purpose by each social network.

13. Security measures

ERREKA will treat the personal data contained in its data processing systems adopting the technical and organizational measures that are necessary to guarantee its security and avoid its alteration, loss, treatment or unauthorized access, taking into account the state of technology, the nature of the stored data and the risks to which they are exposed, whether they come from human action or the physical or natural environment, in accordance with current legislation, applicable in terms of security measures for personal data processing . However, users are informed that computer security measures are not impregnable and that they are not safe from possible illegal and undue interference, which would not be the responsibility of ERREKA.

14. Security breaches

The user must immediately notify ERREKA of any incident, security breach, improper or unauthorized access detected in relation to the website, private areas, access codes or any other circumstance that endangers the security and confidentiality of the information. The established preferential notification mechanisms are the telephone number 943786150 and the email addresslopd@erreka.com.

15. Rights of interested persons

You can exercise the rights related to the protection of your personal data (access, rectification, deletion, treatment limitation, portability and opposition), as well as withdraw consent granted, or make any other request on this matter by writing to the Data Controller, ERREKA, at Bº Ibarreta s / n, 20577 Antzuola (Gipuzkoa), tel. 943786150, or using the email address lopd@erreka.com.

The application must include a copy of a document proving the identity of the applicant (National Identity Document or similar). When making the request in your capacity as a legal representative, in addition to the copy of the document proving the identity of the applicant, a document proving such representation must be attached.

The control authority that you can contact if you do not agree with the resolution of the requests or to file a complaint is the Spanish Data Protection Agency: www.aepd.es

16. Validity and modifications

ERREKA reserves the right to modify its privacy policy according to its criteria, to meet legal or jurisprudential changes. If the Data Controller introduces any modification, the new text will be published on this same website, where the user can become aware of it. In any case, the relationship with users will be governed by the rules provided at the precise moment the website is accessed. For this reason the Data Controller recommends that you visit this privacy policy each time you connect to the website.

17. Jurisdiction

The relationships established between ERREKA and the user will be governed by the provisions of current regulations regarding applicable legislation and competent jurisdiction. However, for cases in which the regulations enable the parties to submit to a jurisdiction, ERREKA and the user, expressly waiving any other jurisdiction that may correspond to them, submit to the Courts and Tribunals of Bergara ( Gipuzkoa).

ERREKA will pursue the breach of this Privacy Policy, as well as any improper use of the content presented on this website, exercising all civil and criminal actions to which it is legally entitled, including those of an economic nature.

Privacy policy CZECH REPUBLIC

Who is responsible for the processing of your data?

In accordance with EU Regulation 2016/679, and all other applicable legislation on the subject, we hereby inform you that the personal data you provide will be processed by ERREKA PLAST SRO (hereinafter ERREKA) with VAT number CZ27682803 and registered office at Dolní novosadská 336/90, 783 01 Olomouc – Nemilany, Czech Republic in its capacity as Data Controller.

For what purpose do we process your data?

Your personal data may be processed for the following purposes:

  • Contact: The purpose of the treatment is the management and response to requests or requests for information that we are notified through any means.
  • Clients: ERREKA processes the personal data of the representatives of its customers in order to manage the contractual relationship that binds the parties.
  • Suppliers: ERREKA processes the personal data of the representatives of its suppliers for the purpose of managing the contractual relationship between the parties.
  • Candidates for employment: In the event that you had sent your resume to enter our selection processes, ERREKA will process the data in order to manage your application.
  • Exercise of rights and privacy management: ERREKA may process your data in order to manage your requests to exercise your rights regarding data protection, or any other purpose necessary to comply with the regulations on personal data protection.

To whom will we disclose your personal information?

ERREKA will only communicate your personal data to those third parties, public bodies and institutions, including jurisdictional bodies, to which it is legally obliged to provide it.

In the case of customers and suppliers, the data may be communicated to:

  • (i) Banking institutions for the management of collections and payments derived from our contractual relationship; and
  • (ii) Other entities that make up ERREKA if necessary: These entities are established in Europe and Mexico, treating your personal data in accordance with the provisions of Regulation (EU) 2016/679 General Data Protection and Federal Law on Protection of Personal Data Held by Private Parties, ensuring treatment under the highest security standards. You can find information about ERREKA’s privacy policy in Europe and Mexico in the first and second section of this Privacy Policy.

International transfers of personal data will only be made in the event that it is strictly necessary to manage our relationship. The recipient entities will be the rest of the entities that make up ERREKA established in the previous section. Said international transfer of personal data shall be carried out in strict compliance with the provisions of the regulations in force on the protection of personal data, being covered by art. 37 of the Federal Law for the Protection of Personal Data in Possession of Private Parties.

In the event that it is necessary to make any additional international transfer of personal data, it will be carried out in strict compliance with the obligations established in the current regulations on the protection of personal data.

How long will we keep your data?

Depending on the purpose for which we process your data, the retention period may vary:

  • Contact: In the event that you contact ERREKA to request information about our products and services, your data will be kept for a period of two years from the last communication made by the user, being renewed this computation with each new contact or relationship made by the user.
  • Customers and suppliers: The personal data of our customers and suppliers will be kept for as long as the contractual relationship remains in force, and thereafter, until the prescription of possible legal liabilities.
  • Candidates for employment: The curricular data and any other data that you have provided to be part of our personnel selection processes, will be kept for a period of two years from its receipt. If ERREKA considers that your curriculum may be of interest for future selection processes, it will ask the candidate to update his/her curriculum before the expiration of said period.
  • Exercise of rights and privacy management: In the event that you have exercised your rights regarding data protection, or we need to process your data in compliance with legal obligations established by the data protection regulations, your data will be kept for the time necessary to comply with our obligations and, subsequently, until the time of prescription of possible legal actions duly blocked.

How can you exercise your rights in relation to your personal data?

In case you wish to revoke the consents granted, as well as to exercise your rights of access, rectification, opposition and deletion, or to limit the use or disclosure of your personal data, you may address your written request to our Data Protection Officer in Czech Republic, Dolní novosadská 336/90, 783 01 Olomouc – Nemilany, Czech Republic or by e-mail to gdprcz@erreka.com

How will we notify you of any changes to the privacy notice?

ERREKA will inform you of any change in the privacy notice by e-mail, where you will be informed that this privacy policy has been modified, as well as how to access the updated text.

User commitments

The user undertakes to inform ERREKA of any modification of the information provided. In order to do so, you may contact our data protection officer by e-mail at gdprcz@erreka.com

Privacy policy MEXICO

Who is responsible for the processing of your data?

In accordance with the Federal Law for the Protection of Personal Data in Possession of Individuals, and with the rest of the applicable legislation on the matter, we inform you that the personal data you provide us will be processed by ERREKA Mex S.A. de C.V. (hereinafter, ERREKA) with NIF 15040747593 and located at Avenida 5 de Febrero 1325, int. 3-E, Parque Industrial Querétaro PARK IV, Col. Carrillo Puerto, CP: 76138, 76138 Qro.

For what purposes do we process your data?

Your personal data may be processed for the following purposes:

  • Contact: The purpose of the treatment is the management and response to requests or requests for information that we are notified through any means.
  • Clients: ERREKA processes the personal data of the representatives of its customers in order to manage the contractual relationship that binds the parties.
  • Suppliers: ERREKA processes the personal data of the representatives of its suppliers for the purpose of managing the contractual relationship between the parties.
  • Candidates for employment: In the event that you had sent your resume to enter our selection processes, ERREKA will process the data in order to manage your application.
  • Exercise of rights and privacy management: ERREKA may process your data in order to manage your requests to exercise your rights regarding data protection, or any other purpose necessary to comply with the regulations on personal data protection.

To whom will we disclose your personal information?

ERREKA will only communicate your personal data to those third parties, public bodies and institutions, including jurisdictional bodies, to which it is legally obliged to provide it.

In the case of customers and suppliers, the data may be communicated to:

  • (i) (i) Banking institutions for the management of collections and payments derived from our contractual relationship; and
  • (ii) (ii) Other entities that make up ERREKA if necessary: These entities are established in Europe, treating your personal data in accordance with the provisions of Regulation (EU) 2016/679 General Data Protection, ensuring treatment under the highest security standards. You can find information about ERREKA’s privacy policy in Spain and Czech Republic in the first and third section respectively of this Privacy Policy.

On the other hand, ERREKA has external suppliers, such as administrative agencies, law firms and the like, who will process your data following ERREKA’s documented instructions, and only for the purpose for which they were collected. In this sense, ERREKA has signed the pertinent agreements for the treatment of personal data with said suppliers.

International transfers of personal data will only be made in the event that it is strictly necessary to manage our relationship. The recipient entities will be the rest of the entities that make up ERREKA established in the previous section. Said international transfer of personal data shall be carried out in strict compliance with the provisions of the regulations in force regarding the protection of personal data, being covered by art. 37 of the Federal Law for the Protection of Personal Data in Possession of Private Parties. In the event that it is necessary to make any additional international transfer of personal data, it will be carried out in strict compliance with the obligations established in the current regulations on the protection of personal data.

How long will we keep your data?

Depending on the purpose for which we process your data, the retention period may vary:

  • Contact and potential customers: In the event that you contact ERREKA to request information about our products and services, your data will be kept for a period of two years from the last communication made by the user, such computation being renewed with each new contact or relationship made by the user.
  • Commercial communications: Your data will be processed for as long as it is considered that there is a commercial interest.
  • Customers and suppliers: The personal data of our customers and suppliers will be kept for as long as the contractual relationship remains in force, and thereafter, until the prescription of possible legal liabilities.
  • Candidates for employment: The curricular data and any other data that you have provided to be part of our personnel selection processes, will be kept for a period of two years from its receipt. If ERREKA considers that your curriculum may be of interest for future selection processes, it will ask the candidate to update his/her curriculum before the expiration of said period.
  • Exercise of rights and privacy management: In the event that you have exercised your rights regarding data protection, or we need to process your data in compliance with legal obligations established by the data protection regulations, your data will be kept for the time necessary to comply with our obligations and, subsequently, until the time of prescription of possible legal actions duly blocked.

How can you exercise your rights in relation to your personal data?

In case you want to revoke the consents granted, as well as exercise your rights of access, rectification, opposition and suppression, or want to limit the use or disclosure of your personal data, you may contact our Data Protection Officer in Mexico, Avenida 5 de Febrero 1325, int. 3-E, Parque Industrial Querétaro PARK IV, Col. Carrillo Puerto, CP: 76138, 76138 Qro., Mexico El Marques Querétaro. C.P.76246, Mexico through email protecciondatosmx@erreka.com

How will we notify you of any changes to the privacy notice?

ERREKA will inform you of any change in the privacy notice by e-mail, where you will be informed that this privacy policy has been modified, as well as how to access the updated text.

User commitments

The user undertakes to inform ERREKA of any modification of the information provided. In order to do so, you may contact our Data Protection Officer by e-mail at protecciondatosmx@erreka.com