Privacy Policy

1. INFORMATION FOR THE USER

The GravelPackers, as the Data Controller, informs you that, in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December on data protection and digital rights (LOPDGDD), we will process your data as described in this Privacy Policy.

In this Privacy Policy, we explain how we collect your personal data and why we collect it, what we do with it, with whom we share it, how we protect it, and your choices regarding the processing of your personal data.

This Policy applies to the processing of personal data collected by the company for the provision of its services. If you accept the measures described in this Policy, you agree to the processing of your personal data as defined herein.

2. CONTACT INFORMATION

Corporate name: The GravelPackers
Tax ID (CIF): B24990749
Trade name: The GravelPackers
Address: BO/Pagamuno-3, Gipuzkoa Zizurkil
E-mail: info@thegravelpackers.com

3. KEY PRINCIPLES

We have always been committed to offering our services with the highest level of quality, which includes handling your data securely and transparently. Our principles are:

  • Lawfulness: We only collect your personal data for specific, explicit, and legitimate purposes.
  • Data minimization: We limit the collection of personal data to what is strictly relevant and necessary for the purposes for which it is collected.
  • Purpose limitation: We will only collect your personal data for the declared purposes and only according to your wishes.
  • Accuracy: We keep your personal data accurate and up to date.
  • Data security: We apply appropriate technical and organizational measures to prevent your data from being damaged, disclosed, or accessed without authorization, as well as from accidental or unlawful destruction, loss, alteration, or any other unlawful processing.
  • Access and rectification: We provide mechanisms for you to access or correct your data whenever you deem appropriate.
  • Retention: We retain your personal data legally and appropriately and only for as long as necessary for the purposes for which it was collected.
  • International transfers: When your data is transferred outside the EU/EEA, it will be properly protected.
  • Third parties: Access to and transfer of personal data to third parties is carried out in accordance with applicable laws and with the appropriate contractual safeguards.
  • Direct marketing and cookies: We comply with applicable legislation on advertising and the use of cookies.

4. COLLECTION AND PROCESSING OF YOUR PERSONAL DATA

The types of data that may be requested and processed include:

  • Identifying personal data.

We also automatically collect data about your visit to our website as described in our Cookie Policy.

In general, we collect and process your personal data for the purpose of:

  • Providing information, services, products, relevant content, and industry updates.
  • Sending communications.

5. LEGAL BASIS

In accordance with applicable data protection regulations, your personal data may be processed when:

  • You have given your consent for the processing. You may withdraw your consent at any time.
  • Required by law.
  • There is a legitimate interest that is not overridden by your privacy rights, such as sending commercial information when you subscribe to our newsletter or are a customer.
  • It is necessary for the performance of a contract or the provision of one of our services.

6. DISCLOSURE OF PERSONAL DATA

Data may be shared with companies associated with The GravelPackers for the provision of various services as Data Processors. The company will not transfer your data to any third parties except when legally required.

7. YOUR RIGHTS

Regarding the collection and processing of your personal data, you may contact us at any time to:

  • Access your personal data and any other information specified in Article 15.1 of the GDPR.
  • Rectify your inaccurate or incomplete personal data (Article 16 GDPR).
  • Delete your personal data (Article 17 GDPR).
  • Restrict the processing of your personal data (Article 18 GDPR).
  • Request data portability (Article 20 GDPR).
  • Object to the processing of your personal data (Article 21 GDPR).

If you have given consent for a specific purpose, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

You may exercise these rights by sending a justified and documented communication to info@thegravelpackers.com

You also have the right to file a complaint with the competent Supervisory Authority (www.aepd.es) if you believe the processing does not comply with current regulations.

8. LEGAL INFORMATION

The requirements of this Policy complement, and do not replace, any other legal requirements applicable under data protection law, which shall prevail in any case.

This Policy is subject to periodic review, and the company may modify it at any time. When this occurs, we will inform you of any changes and ask you to read the most recent version of our Policy again and confirm your acceptance.