Privacy Policy
Legal information
Privacy Policy
How we collect, process and protect your personal data when you visit our website or use our services.
Our commitment to your privacy
Our aim is to be as transparent as possible with our users and customers about the personal data we collect. Your privacy matters to us.
By reading this Privacy Policy, users are informed of how PROASAIL SL collects, processes and protects the personal data provided to it through the website https://www.proasail.com/ (hereinafter, the Website) and any other data they may provide in future by other means.
We recommend that you read this Policy carefully – it has been written clearly and simply to make it easy to understand – and decide freely and voluntarily whether you wish to provide us with your personal data.
By completing any form on the Website and ticking the “I have read the privacy policy” box or similar, you expressly state that you have read this Policy, which sets out the data processing we carry out and its purposes. Where your consent is requested for a specific purpose by means of an “I accept” box or a selection box, you give us your unambiguous and explicit consent to that processing.
Who is the controller of your data?
08430 La Roca del Vallès, Barcelona
Data collected through the website
We process the information provided by data subjects in order to deal with their request and, where applicable, send them information about our products, services and newsletters. No automated decisions are made on the basis of the data provided.
Retention: for as long as the data subject does not request its erasure or for the duration of the business relationship, always respecting the statutory limitation periods.
Legal basis: consent of the data subject, by ticking the corresponding selection box, in order to deal with their request and, where applicable, send them commercial communications and newsletters.
Recipients: data is not disclosed to third parties unless there is a legal obligation to do so. No international data transfers are planned.
Source: the personal data we process comes from the data subjects themselves.
Data for recruitment
We process the information provided by data subjects in order to manage our recruitment processes. No automated decisions are made on the basis of the data provided.
Retention: for a maximum of two years, unless the data subject withdraws their consent earlier.
Legal basis: consent of the data subject to take part in the recruitment processes.
Recipients: data is not disclosed to third parties unless there is a legal obligation to do so. No international data transfers are planned.
Source: the data subject themselves or their legal representative. Categories of data processed:
- Identification data
- Postal and email addresses
- Professional and academic data
Use of images
We process the data obtained (images and, where applicable, voice) for the purpose of publishing it on the website, social media or other channels, as part of our advertising or activity promotion.
Retention: from the time consent is given until it is withdrawn.
Legal basis: express consent of the data subject to the use of photographs and, where applicable, videos in which they appear, which may be published on the website, social media and any other channels the company considers appropriate.
Recipients: the company website, social media and other channels.
International transfers: the use of images on social media may involve international data transfers.
Customer data
We process the information provided with the main purpose of providing the services requested, carrying out the administrative, accounting and tax management arising from those services or product sales and, where applicable, sending commercial communications.
Retention: for as long as the data subject does not request its erasure and, where applicable, for the number of years necessary to comply with legal obligations.
Legal basis: performance of a contract (provision of the service), legal obligation (administrative, accounting and tax management) and the legitimate interest of the controller (sending commercial communications).
Recipients: the Spanish Tax Agency (Agencia Tributaria), to comply with legal obligations, and financial institutions, to manage payments, where applicable. No international data transfers are planned.
Source: the data subject themselves or their legal representative. Categories of data processed:
- Identification data
- Postal and email addresses
- Commercial information
- Bank details, where applicable
Data for advertising
We process the information provided in order to manage the sending of commercial communications about our products and/or services by electronic means (email, WhatsApp, SMS, etc.).
Retention: from the time consent is given until it is withdrawn.
Legal basis: consent of the data subject, by signature, ticking a selection box or any other valid means of obtaining it.
Recipients: electronic advertising platforms, to ensure delivery and obtain statistical data. No international data transfers are planned.
Source: the data subject themselves. Categories of data processed: identification data, postal and email addresses, and commercial information.
Rights of the data subject
Everyone has the right to obtain confirmation as to whether or not PROASAIL SL is processing personal data concerning them.
Data subjects have the right to access their personal data (Art. 15 GDPR), to request its rectification (Art. 16 GDPR) where it is inaccurate, or its erasure (Art. 17 GDPR) where it is no longer necessary for the purposes for which it was collected.
In certain circumstances they may request the restriction of processing (Art. 18 GDPR), in which case we will only retain the data for the exercise or defence of claims, and they may also object to the processing (Art. 21 GDPR), in which case we will stop processing the data except on compelling legitimate grounds.
They also have the right to data portability (Art. 20 GDPR), receiving their data in a structured, commonly used format in order to transmit it to another organisation, where technically feasible. If you have given your consent for any purpose, you have the right to withdraw it at any time (Art. 7 GDPR), without this affecting the lawfulness of the prior processing.
You can exercise your rights by contacting the controller in person, by post or by email at info@proasail.com. Forms for exercising your rights are available on the website of the Spanish Data Protection Agency (AEPD): aepd.es/reglamento/derechos.
If you believe your data protection rights have been infringed, you may lodge a complaint with the competent Supervisory Authority through the electronic office of the Spanish Data Protection Agency: sedeagpd.gob.es.
Obligation to provide data
The data requested in the Website forms and, in general, the data we request in order to provide the service or sell products are generally mandatory (unless otherwise indicated) in order to fulfil the stated purposes. If they are not provided, or not provided accurately, we may be unable to deal with your request properly.
Where data subjects provide third-party data, they declare that they have the consent of those third parties and undertake to pass on to them the information contained in this Policy, releasing PROASAIL SL from any liability in this regard.
Security measures
Personal data is processed lawfully, fairly and transparently; it is collected for specified, explicit and legitimate purposes and is not processed in a manner incompatible with those purposes. It is adequate, relevant and limited to what is necessary, and is kept in a form that permits identification of data subjects for no longer than necessary, respecting the statutory limitation periods.
We apply appropriate technical and organisational measures to ensure the security of the data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.
We follow strict criteria when selecting suppliers with access to personal data, and sign the corresponding data processing agreement with them (Art. 28 GDPR), which requires them, among other things, to apply appropriate technical and organisational measures, process the data in accordance with our instructions, and erase or return it to us once the service has been provided.