Privacy policy

PRIVACY POLICY

This Privacy Policy applies to the processing of personal data carried out by INDOLINK CONSULTING S.L. (hereinafter, the DATA CONTROLLER) as controller of such data, in relation to the data provided by users as a result of purchasing the products sold by the DATA CONTROLLER, or collected in any section of this website.

The DATA CONTROLLER reserves the right to amend this Policy in order to adapt it to new legislation, case law, industry practice or the interests of the company. Any changes will be announced with due notice so that you are fully aware of their content.

1. Data controller

The controller of your personal data is:

• CONTROLLER: INDOLINK CONSULTING S.L.
• TAX ID (NIF): B95327581
• ADDRESS: Máximo Aguirre, 18bis - 7º dpto. 5 - 48011 Bilbao (Spain)
• TEL: +34 94 444 95 52
• EMAIL: indolink@indolinkconsulting.com

2. Purposes of processing

Your personal data will only be used for the following purposes:

• To manage full access to and proper use of the website.
• To communicate with you in response to quotation requests, comments and questions submitted through the Services or the contact forms on our website.
• To manage, administer and invoice the sale of the selected products.
• Commercial communications (newsletter): we may use your data to contact you, by electronic and non-electronic means, to carry out surveys, obtain your opinion on the product or service provided and, occasionally, send you offers or promotions related to our services. You may opt out of these communications at any time using the mechanism provided in the communications themselves, or by sending a message with the subject "Unsubscribe" to indolink@indolinkconsulting.com.

We will not process your personal data for any purpose other than those described above, unless required by law or by court order.

The personal data needed to manage access to and/or registration on our website and the purchase of products will be kept and processed for as long as the contractual relationship remains in force, including any returns, complaints or claims associated with the purchase of the specific product or service, as well as compliance with legally established periods.

Data provided for the newsletter will be processed until you unsubscribe or cancel your subscription.

All of the above is without prejudice to your right to erasure, restriction, etc., in which case the DATA CONTROLLER will block your data for as long as its legal obligations persist.

3. Legal basis for processing

The legal basis for processing your data is your consent for the purposes described above, which will be requested:

• Before processing your data.
• Upon registering as a user.
• Upon purchasing the DATA CONTROLLER's products.

Requests for information, as well as any purchase of the DATA CONTROLLER's products, require that you voluntarily provide the data needed to attend to your request or provide the Services. Where providing such data is mandatory, this will be indicated with an asterisk (*) in the corresponding forms or sections.

You may nevertheless freely refuse to provide such data or subsequently withdraw the consent previously given, although such refusal will mean that we are unable to attend to your request or provide the service.

The DATA CONTROLLER understands that, by providing this data, you expressly declare, accept and consent to its processing for the purposes described above.

We may also process your data on the basis of the DATA CONTROLLER's legitimate interest in maintaining and building loyalty among its customers and/or users and better meeting their previously expressed expectations or interests, e.g. improving services and products, ensuring security, preventing fraud, handling requests, enquiries or complaints, offering our own products and services similar to those purchased, providing information about promotions, etc.

You may, of course, object at any time to the use of your data for commercial prospecting purposes, without this affecting the performance of any contract you may have entered into.

4. Disclosure of data

The DATA CONTROLLER may disclose your personal data to banks, technical services in connection with product warranties, or transport companies in order to deliver the product to the address you have provided. The DATA CONTROLLER will not disclose your personal data to any other third parties unless legally required to do so or unless you have expressly authorised it.

This website also uses the Cloudflare Turnstile verification service (Cloudflare, Inc.) on its forms, for the sole purpose of distinguishing legitimate users from automated programs and preventing abuse. When you use a form, Cloudflare may process technical connection data (such as your IP address and browser characteristics) as a processor for this purpose. More information in Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

5. Rights of data subjects

Any person has the right to obtain confirmation as to whether or not the DATA CONTROLLER is processing personal data concerning them. In this way we also ensure that the information is accurate and truthful.

• Right of access: allows you to know and obtain information about your personal data being processed.
• Right to rectification: allows you to correct errors, amend inaccurate or incomplete data and ensure the accuracy of the information processed.
• Right to erasure: allows you to request the deletion of the data being processed.
• Right to object: your right to prevent or stop the processing of your personal data.
• Restriction of processing: in certain circumstances, you may request that the processing of your data be restricted, in which case it will only be kept for the exercise or defence of claims.
• Data portability: you may request to receive the data concerning you that you have provided to us or, where technically possible, to have it sent to another controller of your choice, in a structured, commonly used and machine-readable format.
• Right not to be subject to automated individual decision-making (including profiling): the right not to be subject to a decision based on automated processing which produces effects on you or significantly affects you.

You also have the right to withdraw your consent at any time, without this affecting the lawfulness of processing based on the consent given at the time you provided your data.

If you wish to exercise any of these rights, please send a letter with your full details, including a copy of your ID document, to: Máximo Aguirre, 18bis - 7º dpto. 5, 48011 Bilbao (Spain), or email us at indolink@indolinkconsulting.com.

The DATA CONTROLLER also informs you of your right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security measures

Finally, please be informed that the DATA CONTROLLER will adopt appropriate technical and organisational measures in its information systems, in compliance with the principle of proactive responsibility, in order to ensure the security and confidentiality of the data stored, thereby preventing its alteration, loss, unauthorised processing or access; taking into account the state of the art, the costs of implementation, and the nature, scope, context and purposes of the processing, as well as the varying likelihood and severity of the risks associated with each processing operation.