Privacy Policy
Introduction
At Lignum Tech, we are committed to ensuring that your personal information is protected and not misused.
In this privacy policy, we explain who the data controller is, the purpose for which your personal information will be processed, the legal basis for processing, how we collect it, why we collect it, how we use it, your rights, and the measures we have put in place to protect your privacy.
By providing us with your personal information and using our website, we understand that you have read and understood the terms regarding the protection of personal data set forth herein.
viaagora.com is committed to complying with current national and European data protection laws, with the aim of processing your personal data in a lawful, fair, and transparent manner.
Scope of application
This document applies to Lignumtech.com in the provision of commercial information through
from its website www.lignumtech.com Who is responsible for data processing?
The definition of “data controller” is set forth in Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and is as follows:
“Data controller” or “controller”: The natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing.
The entity responsible for processing your personal data is:
- Company name:LIGNUMTECH S.L.U. (hereinafter “LIGNUMTECH”).
- Address:45 Conde de Peñalver Street, 6th floor – 28006 Madrid
- Email:protecciondedatos@lignumtech.es.
- Tax ID:B-84760412.
- Phone number:(+34) 918 318 808
- Company registered in the Madrid Commercial Registry: Volume 23,060, Book 0, Page 52, Section 8, Sheet M-413137, Entry 1.
- Website:www.lignumtech.es (hereinafter the “Website”)
Why do we collect your personal information?
The main reason we collect your personal information is to provide and improve the service that you, as a customer, expect from us.
We collect your personal information to process your purchases, orders, or requests made through our website.
Below are the main purposes we have identified:
– Forward customer inquiries, suggestions, and complaints for processing and resolution.
How do we collect information about you?
Information provided by you
We collect personal information that you provide to us through the forms on our website, via email, or by phone.
In any case, at the time your data is collected, you will be informed of the data controller, the purpose of the processing, the recipients of the information, and how to exercise the rights granted to you under current data protection laws.
Generally, the personal information you provide to us includes your first and last name, address, email address, and contact phone number.
In the event that, during the term of the business relationship, you provide personal data belonging to third parties, you agree in all cases to ensure that you are legally authorized to provide such data and that you have informed the data subject of such data processing, providing them with all the information required by applicable law. Otherwise, you shall be liable for any violation and penalty that may be imposed as a result of your non-compliance.
What is the legal basis for processing personal information?
We process your personal information based on several legal grounds:
-The user's consent to respond to their inquiries and, where applicable, to send information about LIGNUMTECH projects if they expressly request it.
– To keep you informed about our projects by any means (mail, phone, email, text message, or any other electronic means, including WhatsApp), provided that you expressly authorize us to do so.
To whom may we disclose your personal information?
In some cases, we may need to share the information you have provided with third parties in order to provide you with the requested service, such as information technology services (information storage and processing), etc.
These third parties have access only to the personal information they need to perform these services. They are required to keep your personal information confidential and may not use it for any purpose other than the one we have specified.
In all cases, LIGNUMTECH assumes responsibility for the personal information you provide to us, and we require the companies with which we share your personal information to apply the same level of data protection as we do.
In addition, your personal information will be made available to public authorities, judges, and courts in order to address any potential liabilities arising from the processing of such information.
International Data Transfers.
The personal information we collect is stored in Spain.
How long do we retain your personal data?
We only store your personal information to the extent necessary to use it for the purpose for which it was collected, and in accordance with the legal basis for processing it under applicable law.
We will retain your information until you exercise your right to erasure and/or restriction of processing, or for a maximum period of 3 years.
In such cases, we will keep the information securely locked away and will not use it in any way for as long as it may be necessary to assert or defend claims, or if any judicial, legal, or contractual liability may arise from its processing that must be addressed and for which its retrieval is necessary.
What rights do you have, and how can you exercise them?
Under data protection regulations, you have the right to exercise your rights of access, rectification, objection, erasure, restriction of processing, data portability, and the right not to be subject to automated individual decision-making with the data controller.
These rights are characterized by the following:
- It's free to use
- Applications must be responded to within one month; however, depending on the complexity and number of applications, this deadline may be extended by an additional two months.
- The data controller is required to inform you of the means by which you can exercise these rights. These means must be accessible, and you cannot be denied this right simply because you choose a different method.
- If the request is submitted electronically, the information will be provided electronically whenever possible, unless the data subject requests otherwise.
- If the data controller does not act on the request, they must provide, within one month at the latest, an explanation of why they have not acted and inform the data subject of their right to lodge a complaint with a supervisory authority.
- You may exercise these rights directly or through your legal representative.
- If applicable, the manager may handle your request on behalf of the person in charge if both parties have agreed to this in the contract or legal document binding them.
- Right of access: The right of access allows you to contact the data controller to find out whether or not your personal data is being processed.
- Right to Rectification: The right to rectification allows you to have your inaccurate personal data corrected by the data controller without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement. In your request, you must specify which data is involved and the correction that needs to be made. In addition, where necessary, you must accompany your request with documentation substantiating the inaccuracy or incompleteness of your data.
- Right to object: The right to object allows you to object to the controller’s processing of your personal data in the following cases:
- When they are subject to processing based on a public interest mission or a legitimate interest, including profiling.
- When the purpose of the processing is direct marketing, including the aforementioned profiling.
- Right to erasure: You may exercise your right to erasure by contacting the data controller and requesting the erasure of your personal data in any of the following circumstances:
- If your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
- If the processing of your personal data was based on the consent you provided to the data controller, and you withdraw that consent, provided that such processing is not based on another legitimate ground.
- The controller’s processing was based on a legitimate interest or the performance of a task carried out in the public interest, and no other grounds have prevailed to justify the processing of your data.
- That your personal data be used for direct marketing purposes, including profiling related to such marketing.
- If your personal data has been processed unlawfully.
- However, this right is not unlimited; thus, it may be permissible not to delete the data when the processing is necessary for the exercise of freedom of expression and information, for compliance with a legal obligation, for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, for reasons of public interest, in the field of public health, for archiving purposes in the public interest, for scientific or historical research purposes, or for statistical purposes, or for the establishment, exercise, or defense of legal claims.
- The data controller is required to block the data when it is corrected or deleted. Blocking of data consists of identifying and setting aside such data, adopting technical and organizational measures to prevent its processing, including its viewing, except for making the data available to judges and courts, the Public Prosecutor’s Office, or the competent public authorities—in particular data protection authorities—for the purpose of establishing potential liabilities arising from the processing, and only for the duration of the statute of limitations for such liabilities. Once this period has elapsed, the data must be destroyed. Right to restriction of processing: This right allows you to obtain a restriction on the processing of your data by the data controller; however, its exercise has two aspects: You may request the suspension of the processing of your data:
- If you dispute the accuracy of your personal data, for a period of time sufficient to allow the data controller to verify it.
- When you have objected to the processing of your personal data by the data controller based on its legitimate interests or a task carried out in the public interest, while the data controller verifies whether those grounds override your own. Request that the data controller retain your data:
- When the processing is unlawful and you have objected to the erasure of your data and instead request that its use be restricted.
- When the controller no longer needs the personal data for the purposes of processing, but the data subject needs it for the establishment, exercise, or defense of legal claims.
Where can you exercise your rights?
To help you exercise your rights, LIGNUMTECH provides the following options:
- By submitting a written and signed request addressed to LIGNUMTECH S.L.U., c/ Conde de Peñalver, No. 45, 6th Floor – 28006 Madrid, along with a photocopy of the applicant’s ID card or another document proving the applicant’s identity.
- By email to protecciondedatos@lignumtech.es, providing proper identification. You may file a complaint with the Spanish Data Protection Agency, particularly if you are not satisfied with the response regarding the exercise of your rights. For more details, please visit www.aepd.es
