Privacy Policy
In accordance with the provisions of the personal data protection legislation in force, we provide you with the following information:
1. INFORMATION FOR THE DATA SUBJECT AND/OR USER
AERLUX ILUMINACIÓN, S.L. makes this privacy policy available to you in order to inform you, in detail, of how the personal data that you, as data subject and/or user, provide or have provided through any means (website, e-mail, telephone, in person, online or paper forms, etc.) are or will be processed.
AERLUX ILUMINACIÓN, S.L. has adopted all the technical and organisational measures necessary to guarantee the confidentiality, integrity, availability and resilience of the personal data in its custody.
Responsibility of the data subject and/or user
By providing your data, you as data subject and/or user (hereinafter, the Data Subject) warrant that you are over 18 years of age and that the data provided to AERLUX ILUMINACIÓN, S.L. are true, accurate, complete and up to date. To this end, the Data Subject confirms that they are answerable for the truthfulness of the data communicated and that they will keep that information suitably updated so that it reflects their actual situation, being responsible for any false or inaccurate data they may provide.
2. DATA CONTROLLER
- Identity: AERLUX ILUMINACIÓN, S.L.
- Tax ID (NIF): B99443384
- Postal address: Polígono El Saco 1, nave 1, 50172 Alfajarín – Zaragoza, Spain
- E-mail: administracion@aerlux.es
3. PURPOSES, RETENTION PERIODS AND LAWFUL BASIS FOR PROCESSING
AERLUX ILUMINACIÓN, S.L. , as Controller of the personal data of the Data Subject, informs that such data will be processed in accordance with the data protection legislation in force.
CONTACT / ENQUIRIES
- Purpose of the processing: to respond to and follow up enquiries, requests for information or suggestions sent through the contact forms or communication channels made available on the website.
- Retention criteria: they will be kept for the time necessary to handle the enquiry.
- Lawful basis: GDPR: 6.1.f) legitimate interest of the controller in dealing with the requests received.
REQUESTS FOR INFORMATION / QUOTATIONS
- Purpose of the processing: to manage requests for information or quotations made by data subjects regarding the products or services presented in the online catalog.
- Retention criteria: they will be kept for the time necessary to handle the request or for as long as there is mutual interest.
- Lawful basis: GDPR: 6.1.b) pre-contractual measures taken at the request of the data subject.
USER REGISTRATION
- Purpose of the processing: to manage user registration on the website and to allow access to the features available to registered users.
- Retention criteria: they will be kept for as long as the user does not request the deletion of their account.
- Lawful basis: GDPR: 6.1.a) consent of the data subject upon registration.
NEWSLETTER SUBSCRIPTION
- Purpose of the processing: to manage the sending of newsletters or bulletins about catalog news, products and AERLUX activities.
- Retention criteria: they will be kept for as long as the data subject does not request their erasure.
- Lawful basis: GDPR: 6.1.a) consent of the data subject.
SENDING OF COMMERCIAL COMMUNICATIONS
- Purpose of the processing: to send information about products, catalog news or information related to the activity of AERLUX.
- Retention criteria: they will be kept for as long as the data subject does not request their erasure.
- Lawful basis: GDPR: 6.1.a) consent of the data subject or GDPR: 6.1.f) legitimate interest.
- Source of the data: data provided by the data subject themselves through web forms or direct communications.
SUBMISSION OF CURRICULUM VITAE
- Purpose of the processing: to manage personnel selection processes.
- Retention criteria: a maximum of one year or until the data subject requests their deletion.
- Lawful basis: GDPR: 6.1.a) consent of the data subject.
SUPPLIERS
- Purpose of the processing: administrative management and maintenance of commercial relations with suppliers.
- Retention criteria: for as long as the commercial relationship exists and thereafter for the applicable legal periods.
- Lawful basis: GDPR: 6.1.b) performance of contractual relations.
VIDEO SURVEILLANCE
- Purpose of the processing: to guarantee the security of people, premises and property.
- Retention criteria: a maximum of 30 days.
- Lawful basis: GDPR: 6.1.f) legitimate interest of the controller.
- Disclosure of data: State law enforcement agencies or competent authorities.
4. DISCLOSURE OF DATA
As a general rule, personal data will not be disclosed to third parties except where there is a legal obligation or where it is necessary for the provision of services related to the activity of the company.
- Public administrations, Courts and Tribunals.
- Financial institutions where necessary.
- Technology or service providers engaged by the controller.
International transfers
AERLUX ILUMINACIÓN, S.L. does not intend to carry out international transfers of data outside the European Economic Area.
5. RIGHTS OF DATA SUBJECTS
Any person has the right to obtain confirmation as to whether AERLUX ILUMINACIÓN, S.L. is processing personal data concerning them.
Data subjects may exercise their rights of:
- Access
- Rectification
- Erasure
- Restriction of processing
- Portability
- Objection
To exercise these rights you may contact:
AERLUX ILUMINACIÓN, S.L.
E-mail: administracion@aerlux.es
You may also lodge a complaint with the Spanish Data Protection Agency.
6. SOCIAL NETWORKS
AERLUX uses social networks as a means of communication with customers and users. The processing of data on those networks shall be governed by this privacy policy and by the policies of each social network.
7. COOKIES
This website may use cookies to improve the browsing experience of the user.
For further information please see our Cookies Policy .
8. MANDATORY NATURE OF THE DATA
The data requested in the fields marked as mandatory are necessary in order to be able to deal with the requests of the user.
9. SECURITY MEASURES
AERLUX ILUMINACIÓN, S.L. adopts the technical and organisational measures necessary to guarantee the security of personal data and to prevent their alteration, loss or unauthorised access.
These measures are reviewed periodically to ensure that they remain appropriate and effective.