Privacy policy

1. Who is responsible for processing your data?

Name: JOSE MARIA MENDIOLA SA

C.I.F./N.I.F.: A20076832

Address: Barrio Sorabilla P.51, 20140, Andoain, Gipuzkoa

Registered in the Commercial Registry of Gipuzkoa, Sheet SS 3928, Folio 50, Volume 1198, Section -8, First entry.

Phone: 943304088

Email: info@jmmendiola.com

2. For what purposes do we process your personal data?

In accordance with the provisions of EU Regulation 679/2016 and Organic Law 3/2018 of 5 December on the protection of personal data and guarantee of digital rights, we inform you that the personal data you provide to us, as well as data generated during the course of our relationship with you, are processed for the following purposes:

  • Data provided to formalise the machining service:
    • To manage, process, dispatch and track purchases and/or services carried out.
    • To contact the user to complete the purchase process.
    • To carry out quality and satisfaction surveys.
    • To send personalised commercial communications to the User about our products and services, through any means provided to us.
    • To analyse the use of the Website and monitor user preferences and behaviour.
    • To enable participation in commercial promotions and/or prize draws.
    • Accounting, tax and administrative management.
  • Data provided through contact with this organisation:
    • To manage, process and respond to your requests, applications, incidents or enquiries.
    • To offer products and services.
    • To analyse the use of the Website and monitor user preferences and behaviour.
  • Data provided to participate in recruitment processes or unsolicited applications:
    • To evaluate your candidacy in personnel selection processes.

3. How long will we retain your data?

The personal data provided will be retained for as long as its deletion is not requested by the data subject, or by whoever legally acts as their legal representative, and for as long as it is necessary — including the need to retain it during applicable or relevant limitation periods — for the purpose for which it was collected or recorded.

The retention of data will be subject to the legal obligation that JOSE MARIA MENDIOLA SA has to retain it. Once those periods have elapsed, the data will be destroyed or erased, with the deletion, elimination or destruction carried out in such a way that the information contained in the storage media cannot be recovered.

4. Legal basis

The legal basis for the processing of your data is the consent given by the data subject. This is obtained expressly and unambiguously through the completion and, where applicable, submission of paper or electronic documents and forms in which your data is collected. All documents used by the organisation to collect data for different purposes contain information clauses in accordance with data protection regulations, and consent is expressed explicitly through the signature of the data subject or the submission of the forms available on the website.

A further legal basis is that the processing is necessary for the performance of a contract, or the provision of a service offered to data subjects, or for the application of pre-contractual measures (art. 6.1.a and b GDPR).

JOSE MARIA MENDIOLA SA is also entitled to process your data in compliance with its legal obligations and in pursuit of legitimate interests, provided that these do not override the interests or fundamental rights of the data subjects.

Where the legal basis is consent, it may be withdrawn at any time.

5. To which recipients will your data be disclosed?

Your data will not be transferred to any organisation without your consent, except for legally required disclosures. In this regard, your express consent will be requested for the transfer of your data to any other organisation.

As a result of the authorised purposes, your data may be communicated to entities or individuals directly related to JOSE MARIA MENDIOLA SA and the services it provides. Likewise, your personal information will be made available to public authorities, judges and courts to address any liabilities arising from the processing, and only where such disclosures are permitted by law.

Your data may also be shared with companies that provide us with advisory, IT maintenance, marketing, training or auditing services. These organisations only have access to the personal information necessary to carry out such services, and are required by a "data processing agreement" to maintain confidentiality, not to use the information for other purposes, and to adopt measures that ensure its integrity and availability.

No international transfers of data outside the European Union or to entities that do not meet the data protection standards established by EU Regulation 679/2016 are envisaged.

6. What categories of data does JOSE MARIA MENDIOLA SA process?

The data processed is that which is necessary to fulfil the purposes authorised by the user.

  • To formalise the machining service:
    • Identifying data: first name, surname(s), national ID number, company name, tax identification number.
    • Contact data: email address, phone number and postal address.
    • Goods and services transactions: products and services purchased.
    • Economic and financial data: bank card.
    • Browsing data.
  • Data provided through contact with this organisation:
    • Identifying data: first name and surname(s).
    • Contact data: email address.
    • Browsing data.
  • Data provided to participate in recruitment processes or unsolicited applications:
    • Identifying data: first name and surname(s).
    • Contact data: email address.
    • Browsing data.
    • Any other data included in the curriculum vitae.

Where the user provides data relating to other individuals, they confirm they have obtained the consent of those individuals and undertake to pass on to them the information contained in this Privacy Policy.

7. What are your rights?

Any person has the right to obtain confirmation as to whether JOSE MARIA MENDIOLA SA is processing personal data concerning them, or not.

Data subjects have the right to access their personal data and obtain a copy of the personal data being processed, to update it, as well as to request the rectification of inaccurate data or, where applicable, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. JOSE MARIA MENDIOLA SA will cease processing the data, except for legitimate reasons or for the exercise or defence of possible claims.

Also in certain circumstances, as provided for in Article 18 of the GDPR, data subjects may request the restriction of the processing of their data, in which case JOSE MARIA MENDIOLA SA will process it, with the exception of storage, with the consent of the data subject or for the establishment, exercise or defence of claims, or for the protection of the rights of another natural or legal person, or for reasons of substantial public interest of the Union or of a Member State.

As a consequence of exercising the right to erasure or objection to the processing of personal data in the online environment, data subjects have the right to be forgotten in accordance with the case law of the Court of Justice of the EU.

By virtue of the right to data portability, data subjects have the right to receive their personal data in a structured, commonly used and machine-readable format and to transmit it to another controller.

Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, except as provided for in Article 22.1 of the GDPR.

The data subject has the right to the erasure of their data, due to the disappearance of the purpose that motivated the processing or collection, by withdrawal of consent where this is the basis legitimising the processing, or for any of the other reasons set out in Article 17 of the GDPR. Erasure will be carried out by high-level deletion of data held on automated storage media and physical destruction of non-automated storage media.

8. How can rights be exercised?

By sending a written communication to the addresses indicated in the header.

9. What complaint channels are available?

If you consider that your rights have not been duly attended to, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), whose contact details are: Phone: 900 293 183 / 900 293 621. Electronic headquarters: https://sedeagpd.gob.es/sede-electronica-web/vistas/infoSede/inicioCiudadano.jsf Postal address: C/ Jorge Juan, 6, 28001, Madrid.