This Privacy Policy has been developed in accordance with the provisions of the current Organic Law on the Protection of Personal Data, as well as Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, hereinafter referred to as the GDPR.
The purpose of this Privacy Policy is to inform data subjects — whose personal data is being collected — of the specific aspects relating to the processing of their data, including, among other things, the purposes of processing, contact details for exercising their rights, data retention periods, and security measures.
For data protection purposes, KERAFRIT S.A. shall be considered the Data Controller in relation to the files/processing activities identified in this policy, specifically in the Data Processing section.
The identifying details of the controller of this website are as follows:
Data Controller: KERAFRIT S.A.
Postal address: Ctra. Valencia-Barcelona, Km 44,1. P.O. Box 113, 12520 Nules (Castellón) Spain
Email: info@kerafrit.com
Any personal data requested will consist solely of information strictly necessary to identify and handle the request made by the data subject (hereinafter: the interested party). Such information will be processed fairly, lawfully and transparently in relation to the interested party. Personal data will be collected for specified, explicit and legitimate purposes, and will not be further processed in a manner incompatible with those purposes.
The data collected from each interested party will be adequate, relevant and not excessive in relation to the purposes for which it is collected, and will be updated whenever necessary.
Prior to the collection of data, the data subject will be informed of the general aspects regulated in this policy so that they may give express, specific and unambiguous consent to the processing of their data, in accordance with the following aspects.
The specific purposes for which each processing activity is carried out are set out in the information clauses included in each data collection channel (web forms, paper forms, voice recordings, posters and information notices).
Nevertheless, personal data of the interested party will be processed for the sole purpose of providing an effective response and handling the requests made by the user, as specified alongside the option, service, form or data collection method used by the data subject.
As a general rule, prior to processing personal data, KERAFRIT S.A. obtains the express and unambiguous consent of the data subject through the inclusion of informed consent clauses in the various data collection systems.
However, where the consent of the interested party is not required, the legal basis for processing on which KERAFRIT S.A. relies is the existence of a law or specific regulation that authorises or requires the processing of the interested party's data.
As a general rule, KERAFRIT S.A. does not transfer or communicate data to third-party entities, except where legally required. However, where necessary, any such transfers or communications will be disclosed to the interested party through the informed consent clauses included in the various personal data collection channels.
As a general rule, personal data is always collected directly from the interested party. However, in certain exceptional cases, data may be collected through third parties, entities or services other than the interested party. In such cases, this will be communicated to the interested party through the informed consent clauses included in the various data collection channels, within a reasonable period of time after the data is obtained, and no later than one month.
Information collected from the interested party will be retained for as long as necessary to fulfil the purpose for which the personal data was collected. Once that purpose has been fulfilled, the data will be erased. Such erasure will result in the data being blocked and retained solely for the use of Public Authorities, Judges and Courts to address any liabilities arising from the processing, for the applicable limitation period. Once that period has elapsed, the information will be destroyed.
For reference, the legal data retention periods applicable to various subject matters are set out below:
Document Type | Period | Legal Reference |
|---|---|---|
Employment or social security documentation | 4 years | Article 21 of Royal Legislative Decree 5/2000 of 4 August, approving the revised text of the Law on Offences and Penalties in the Social Order |
Accounting and tax documentation for commercial purposes | 6 years | Art. 30 of the Commercial Code |
Accounting and tax documentation for tax purposes | 4 years | Articles 66 to 70 of the General Tax Law |
Building access control records | 1 month | AEPD Instruction 1/1996 |
Video surveillance recordings | 1 month | AEPD Instruction 1/2006 · Organic Law 4/1997 |
Regarding any browsing data that may be processed through this website, if data subject to applicable regulations is collected, we recommend consulting the Cookie Policy published on our website.
Data protection regulations grant a series of rights to data subjects and users of KERAFRIT S.A.'s website and social media profiles. These rights are as follows:
Right of Access
The right to obtain information about whether your personal data is being processed, the purpose of the processing, the categories of data being processed, the recipients or categories of recipients, the retention period, and the origin of the data.
Right of Rectification
The right to obtain the rectification of inaccurate or incomplete personal data.
Right of Erasure
The right to obtain the erasure of data in the following circumstances:
When the data is no longer necessary for the purpose for which it was collected
When the data subject withdraws their consent
When the interested party objects to the processing
When the data must be erased in compliance with a legal obligation
When the data has been obtained in connection with an information society service as provided for in Article 8(1) of the European Data Protection Regulation
Right to Object
The right to object to a specific processing activity based on the consent of the data subject.
Right to Restriction of Processing
The right to obtain restriction of processing in the following circumstances:
When the interested party contests the accuracy of personal data, for a period allowing the company to verify its accuracy
When the processing is unlawful and the interested party objects to the erasure of the data
When the company no longer needs the data for the purposes for which it was collected, but the interested party needs it for the establishment, exercise or defence of legal claims
When the interested party has objected to processing while verification is pending as to whether the legitimate grounds of the company override those of the interested party
Right to Data Portability
The right to receive personal data in a structured, commonly used and machine-readable format, and to transmit it to another data controller, when:
Processing is based on consent
Processing is carried out by automated means
Right to Lodge a Complaint
The right to submit a complaint to the competent supervisory authority.
Data subjects may exercise the rights listed above by contacting KERAFRIT S.A. in writing at the following address: Ctra. Valencia-Barcelona, Km 44,1. P.O. Box 113, 12520 Nules (Castellón) Spain, indicating in the subject line the right they wish to exercise.
KERAFRIT S.A. will respond to your request as promptly as possible, in accordance with the timeframes established under applicable data protection regulations.