POLICY OF DATA PROTECTION AND PRIVACY

IN VIRTUE OF COMPLIANCE WITH THE EUROPEAN REGULATION GDPR UE 679/2016, ON PROTECTION OF PERSONAL DATA, PLEASE BE ADVISED AS FOLLOWS:

Data Protection Policy Talleres Landaluce, S.A.

1. Who is responsible for the processing of your data?

The responsible for the data processing with regards to the different processes concerning the management of our users, customers or suppliers is Talleres Landaluce, S.A., with address at Requejada B11 (Polanco, Cantabria, Spain) and VAT A-39004148.

For data protection policy matters our contact phone is: (+34) 942824411 and our contact e-mail address is: info@landaluce.com

2. What kind of data do we have from you and how did we obtain them?

These are the personal data categories of customers and suppliers that our company handles:

• Identification data

• Professional data such as post, responsibility, etc.

• E-mail and post addresses

• Economic and transaction data

I no case do we handle any specially protected data.

All the data above mentioned have been obtained directly from you through the submission of a contact form or the presentation of a commercial offer, contract proposal, etc. or through your company when providing the identification data and further information necessary to carry out the object of the contractual relationship between the parties. It will be your or your company’s responsibility to provide us with up to date data in case of modification.

3. What do we treat your data for?

We treat the data provided by interested persons to manage diverse activities derived from specific procedures developed on sales, after sale services, supplier’s management, service quality, etc. So in this way, we will use your data to carry out some of the following actions:

1. To send information required through the contact form in our webpage or through any other means of contact with our company.

2. To provide offers of products and services of interest to both potential and regular customers.

3. To carry out the administrative, fiscal and accounting management of our customers and/or suppliers.

4. To conduct satisfaction surveys, market studies, etc. in order to be able to offer the most suitable offers and an optimized service quality, etc.

5. We are not going to elaborate any commercial profiles with the information provided and in consequence we are neither going to make automatized decisions about You based on a commercial profile.

4. For how long will we keep you data?

The personal data relevant to a natural person linked to potential customers, customers and suppliers gathered through the various contact and/or information collection forms will be kept for as long as there is not a request from the person concerned that they are deleted. The data provided by our customers and suppliers will be kept for as long as there still exists a mercantile relationship among the parties respecting in any case the minimum legal terms on storage depending on the subject.

In any case, we will keep your personal data for a reasonable period of time keeping in mind our needs to answer questions that may arise or solve problems, make improvements, activate our services and comply with what ordered by the applicable legislation. This means we can keep your personal data for a reasonable period of time even after you are no longer using our products or you have stopped using this webpage. After that period, your personal data will be deleted from all the systems in our company.

5. Which is the legitimate base for processing your data?

Depending on the type of data processing here is a summary of the legitimization base for said processing:

Depending on the reference legitimization base, you are obliged to provide your personal data; in the event you do not provide your personal data we will not be able to execute your contract, comply with the legal obligations or those derived from the public authorities.

6. Which addressees will your data be conveyed to?

Our company will never share your personal data with any third company expecting to use them for their direct marketing actions, except in case you have authorized us to do so.

We inform you that we may provide your personal data to the Public Administration and competent Authorities if we receive a legal requirement from said Authorities or in those cases when, acting in good faith, we consider that this action is reasonably necessary to comply with a law process; to answer any claim or lawsuit claim, or to protect the rights of their customers and the public in general.

We inform you that your data will not be transferred nor forwarded to any third party being our company the only responsible for their processing and custody.

7. What are your rights as affected or interested person?

Any person has the right to obtain confirmation on if we are or not processing any personal data of their concern.

Specifically, the concerned persons can request the right of access to their personal data, as well as receive them in a standard format and mechanized reading if the processing is being done through electronic means (portability right).

Likewise, the interested persons can request the right of rectification of inaccurate data or request their cancellation when, among other reasons, the data are no longer required for the purpose they were collected.

Complementary, in some specific circumstances, the interested may request the limitation on the processing of their data, or in specific circumstances and for reasons concerning their personal situation the interested can exercise their right to opposition to the treatment of their data. Our company will stop processing the data, except for imperative legitimate reasons, or the exercise of defence of eventual claims or in those exceptions established in the rules applicable.

Likewise we inform you that you have the right to withdraw your consent at any time without this affecting the legitimacy of the processing based on the consent prior to its withdrawal.

Likewise the User is informed that he/she can exercise the above mentioned rights at any time by sending us a writing using the contact data in section 1 “Responsible for the processing” of the present policy for Data Protection and Privacy, attaching a copy of your national identification number. You also have the right to report a claim to the Spanish Agency for Data Protection, especially when you had not obtained a satisfactory result in the exercising of your rights.

Spanish Agency for Data Protection

6, Jorge Juan St,

28001 – Madrid

Phone: 901100099 / 912663517

8. Data protection of the website users.

In conformity with the Regulation in force (UE) 2016/679, we inform you that the personal data of the Users of this website will be processed by the company for the processing activity stated in each form of data collection in our webpage. Said data processing will be protected under your own consent. When clicking the “SUBMIT” button the User consents to the treatment of his/her data by our company.

Likewise, we inform you that unless there is express legal obligation or consent by your side, our company is not going to transfer your data to any third persons.

We also advise the User that he/she can exercise his/her rights of access, rectification or cancellation of his/her data at any time, and also other rights recognized in the present document and regulated by the Regulation (UE) 2016/679 by notifying Talleres Landaluce, S.A., e-mail: info@landaluce.com

On the other hand and according to what decreed in the Law 34/2002, of 11th July on information society services and electronic commerce, our company commits not to send any advertising by e-mail without prior express consent from the User. The User can oppose to the sending of advertising by marking the appropriate box.

9. Further information of interest about our privacy policy

9.1 Safety measures

Our company adopts the levels of security required by the European and Spanish regulations in force on data protection taking into account the state of the art, the costs of application and the nature, scope, context and purposes of the described treatment, as well as the risks of variable probability and severity for their rights and freedoms as a person.

9.2 Processing of data of minors

Under the GDPR UE 679/2016 and the DR 1720/2007 minors under 14 can give their consent for the hiring of services of the society of information, such as the registration on a forum, the filling in of a contact form, etc. Nevertheless, it is the responsibility of Talleres Landaluce, S.A. to verify the truthfulness of the age indicated by the minor.

For the processing of data of minors under 14 the data collection will always be done with the express consent of their parents or legal tutors.

9.3 Modifications of our Policy of Data Protection and Privacy

Our company may occasionally make some modifications and amendments in this section for Policy of Data Protection for Users, customers and suppliers. Please check this section regularly to see the changes that may have been made and how these may affect you.

9.4 Why is it necessary to accept this Policy of Data Protection and Privacy?

This section of Policy of Data Protection for Users, Customers and Suppliers provides all the information necessary, easily and accessible, so that you can learn about the types of data that are kept from potential customers, regular customers and/or suppliers, the aim pursued, the rights that the regulation for data protection recognizes you as affected person and how you can exercise those rights. Therefore, with the deliberate submission of your personal data through our contact forms and/or the beginning of a mercantile relationship with our company we consider that you recognize and accept the processing of your personal data as described in the present policy. This personal information will be used solely for the purposes you have given them for or when determined national or regional regulations enable us to do so.

In any case, we must warn you that if you refuse to give us some specific requested data this may hinder the development of the contractual relationship between the parties with serious eventual consequences upon the rendering of the various performances within the mercantile contract agreed with the contracting party.

May you have any question with regards to this section of the Policy for Data Protection for Potential Customers, Customers and Suppliers of our company, please get in contact with the company by using the address stated in the first section “Responsible for Processing” and we will be glad to answer any additional questions you may be willing to ask.

10. Applicable legislation

The present Conditions will be governed at all times by what ordered in the Spanish legislation on protection of personal data and privacy.