The purpose of this policy is to inform data subjects about the different processing carried out by this organisation through the website and that affects their personal data, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and Organic Law 3/2018 of 5 December, on the Protection of Personal Data and guarantee of digital rights.

1. IDENTIFICATION AND CONTACT DETAILS OF THE CONTROLLER

EMENASA INDUSTRIA Y AUTOMATISMO SAU, domiciled at Carretera Camposancos 182 (36330) Vigo, Pontevedra, with NIF A27826700, contact telephone number 986 160 454 and email rgpd-eia@emenasa.com

DATA PROTECTION OFFICER

SEGURIDAD Y PRIVACIDAD DE DATOS, SL, with contact telephone number 963 122 868 and email infodpo@forlopd.es

2. PURPOSES OF PROCESSING YOUR PERSONAL DATA

• USERS/SURFERS OF THE WEBSITE OF THE RESPONSIBLE PARTY

  We will process the personal data provided to:

  • Attend to requests, complaints and incidents transferred through our contact channels incorporated into the website.
  • Understand the behaviour of the user within the website in order to detect possible cyber-attacks on our website.
  • Comply with the legal obligations that are directly applicable to us and regulate our activity.
  • Protect and exercise our rights or respond to claims of any kind.
  • Where appropriate, send commercial communications relating to the goods or services that make up our activity and/or news or newsletters related to our sector. Your refusal to provide us with authorisation will mean that it will not be possible for the entity to send you information.
  • Where appropriate, manage your participation in competitions and promotions carried out by the entity. Your refusal to provide us with authorisation will result in the impossibility of participating.
  • Where appropriate, send satisfaction and/or quality surveys. Your refusal to provide us with authorisation will make it impossible to evaluate the service provided.
  • Manage your registration on the entity's web platform and generate a username and password. Your refusal to provide us with authorisation will make it impossible to register on the platform.

• WHISTLEBLOWERS/AFFECTED PERSONS (WHISTLEBLOWING CHANNEL)

  In addition to the purposes indicated in the section "users/surfers of the website", we will process your personal data provided for:

  • Prevention, detection, investigation and prosecution of infringements and enforcement of sanctions.
  • Comply with the legal obligations that are directly applicable to us.
  • Inform the competent authorities of acts or conduct that could be contrary to regulations.
  • Process communications from informants.

3. LEGAL BASIS FOR PROCESSING

• USERS/SURFERS OF THE WEBSITE OF THE RESPONSIBLE PARTY

  • Based on the consent you have given us to process your data for the purposes indicated. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
  • To comply with legal obligations that apply to us. In this case, the data subject may not object to the processing of personal data.
  • In our legitimate interest to protect our image, business and track record by preventing attacks on our website. In this case, the data subject may not refuse the processing of personal data, although they may exercise, where appropriate, the rights recognised in the "rights" section of this policy.

• WHISTLEBLOWERS/AFFECTED PERSONS (WHISTLEBLOWING CHANNEL)

  • Processing necessary for compliance with a legal obligation applicable to the data controller.
  • The processing is necessary for reasons of an essential public interest, on the basis of Union or Member State law, which must be proportionate to the objective pursued, respect in essence the right to data protection and provide for appropriate and specific measures to protect the interests and fundamental rights of the data subject.
  • Inform the competent authorities of acts or conduct that could be contrary to regulations.
  • Process communications from informants.

4. WEBSITE PLUGINS AND TOOLS

Google reCAPTCHA

We use the Google reCAPTCHA service to detect, based on legitimate interest, whether the website is being used by bots, in order to protect the portal and prevent abusive and fraudulent practices, such as sending spam.

You can access our provider's privacy policy by clicking here.

Google Maps

We use Google Maps (API) in order to display interactive maps directly on our website and allow you to use its functions. Please note that when using the service, Google will collect and store information about your usage. We inform you that the use of Google may involve International Data Transfers not based on an adequacy decision of the European Commission nor on adequate guarantees, therefore they do not have an adequate level of protection in accordance with the GDPR. This may entail certain risks for the protection of your personal data, such as the absence of an equivalent supervisory authority and/or equivalent data protection principles and/or equivalent rights of data subjects. For this reason, we recommend that you read our provider's privacy policy carefully beforehand by clicking here.

YouTube

Our website uses plug-ins from the YouTube platform with technology provided by Google. YouTube will only associate your browsing behaviour with your personal profile if you are logged into your account. You can avoid this by logging out. We recommend that you read our provider's privacy policy carefully beforehand by clicking here.

5. DATA RETENTION PERIODS OR CRITERIA

The personal data provided will be kept for the time necessary to fulfil the purposes for which they were initially collected.

Once the data is no longer necessary for the processing in question, it will be duly blocked in order to make it available, where appropriate, to the competent Administrations and Public Bodies, Judges and Courts or the Public Prosecutor's Office, during the limitation period for actions that may arise from the relationship with the client and/or the legally established retention periods.

If you have provided us with your CV, we will keep your data for a maximum period of two years from receipt, after which we will delete it unless you have updated your data or authorised us to retain it for a longer period. You may revoke your consent at any time.

6. AUTOMATED DECISIONS AND PROFILING

The website does not make automated decisions or create profiles.

7. RECIPIENTS

During the period of processing of your personal data, the organisation may transfer your data to the following recipients:

• Judges and Courts.
• State Security Forces and Corps.
• Other competent public authorities or bodies, when the controller has a legal obligation to provide personal data.

8. INTERNATIONAL DATA TRANSFERS

The organisation does not carry out any International Data Transfer. If it is subsequently necessary to carry out international data transfers, the degree of protection of the destination country will be verified and the guarantees required by the regulations will be adopted.

9. SOCIAL NETWORKS

In order to make you part of our activity and to keep you informed of our news, we inform you that EMENASA INDUSTRIA Y AUTOMATISMO SAU has created profiles on Social Networks.

All users have the opportunity to join our social networks or groups. However, unless we request your data directly (for example, through marketing actions, contests, promotions, or any other valid means), your data will belong to the corresponding Social Network. We therefore recommend that you read carefully their terms of use and privacy policies, and ensure that you configure your preferences regarding data processing.

Below, we provide links to the privacy policies of the Social Networks in which we have a presence, so that you can access them at any time and configure your profile to ensure your privacy:

LinkedIn: https://es.linkedin.com/legal/privacy-policy

YouTube: https://policies.google.com/privacy

10. RIGHTS

Data subjects may request more information about the processing of their personal data and exercise, at any time and free of charge, their rights of access, rectification and deletion, as well as request that the processing of their personal data be restricted, object to it, request the portability of their data (where technically possible), or withdraw consent given and, where appropriate, not be subject to a decision based solely on automated processing, including profiling.

To do so, you may use the forms provided by the organisation, or send a letter to the postal address or email referenced in the header. You may be asked to provide your ID card or other similar document to verify your identity, provided that this cannot be done by other less intrusive means.

If you feel that your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in exercising your rights, you can file a complaint with the competent Data Protection Supervisory Authority (Spanish Data Protection Agency) through its website www.aepd.es.

11. ACCURACY OF DATA

The data subject guarantees that the data provided is true, accurate, complete and up to date; undertaking to inform of any changes to the data provided, through the channels indicated in point one of this policy. The data subject will be responsible for any direct or indirect damage that may be caused as a result of non-compliance with this obligation.

In the event that the user provides data from third parties, they declare that they have the consent of the data subjects and undertake to convey the information contained in this clause, exempting the organisation from any liability arising from failure to comply with this obligation.

12. MODIFICATIONS AND UPDATES

This privacy policy may be modified/updated in accordance with legal requirements or in order to adapt it to the instructions of the Spanish Data Protection Agency, or due to changes to our website. For this reason, we advise users to periodically review our Privacy Policy.

If you have any questions about this policy, you can contact EMENASA INDUSTRIA Y AUTOMATISMO SAU through the forms provided by the organisation, or send a letter to the postal address or email referenced in the header.

Last revised October 10, 2025