Entity name: BOSTAUROZOS, S.L. (hereinafter, BOSTAUROZOS)
Address: C/ Mariano Mateo, 72, 47820 Villabrágima, Valladolid
Phone: 679 16 38 25
Email: bostaurozos@bostaurozos.com
Privacy policy
Data Controller Information
Processing of Data Collected Through the Website
The data that BOSTAUROZOS may collect through the use or browsing of the website, via our forms, by email, or as part of the contractual relationship with BOSTAUROZOS, are considered personal data. When filling out any of the forms on our website, certain fields will be marked as mandatory with the symbol *. If these required fields are not completed, the intended purposes of each form cannot be fulfilled.
In some cases, we inform you that simply by using and browsing our website, BOSTAUROZOS may store data related to:
– IP address
– Browser version
– Operating system
– Duration of the visit or navigation on the website
Such information may be stored through Google Analytics, and we therefore refer you to Google’s Privacy Policy, as Google collects and processes this data.
Similarly, the website includes the Google Maps utility, which may access your location, if you allow it, in order to provide more specific information about the distance and/or route to our locations. In this regard, we refer you to the Privacy Policy used by Google Maps to understand the use and processing of such data.
BOSTAUROZOS reserves the right to modify or adapt this Privacy Policy at any time. Therefore, we recommend reviewing it every time you access the website. If a user is registered on the website and logs in to their account or profile, they will be notified in the event of any substantial changes to the processing of their personal data.
1. Contact Forms
a. Purpose. The purpose of this form is to respond to your request for information submitted via the contact forms.
b. Legal Basis. The data subject’s consent.
c. Recipients. Data will not be shared with third parties, unless lawfully permitted under current data protection regulations.
2. Information Provided via the Email Addresses Available on the Website
a. Purpose. To respond to your request for information.
b. Legal Basis. The consent you provide when sending your request via email.
c. Recipients. Data will not be shared with third parties, unless lawfully permitted under current data protection regulations.
3. Unsolicited Applications
a. Purpose. To include you in personnel selection processes carried out by BOSTAUROZOS.
b. Legal Basis. Execution of a contract to which the data subject is a party or the application of pre-contractual measures at the request of the data subject.
c. Recipients. Data will not be shared with third parties, unless lawfully permitted under current data protection regulations.
4. Exercise of GDPR Rights
a. Purpose. To process requests from citizens/users/data subjects regarding data protection rights.
b. Legal Basis. Compliance with a legal obligation under the General Data Protection Regulation.
c. Recipients. Data will not be shared with third parties, unless lawfully permitted under current data protection regulations.
5. Security Breach
a. Purpose. To manage and resolve data protection security breaches and, if necessary, notify affected individuals.
b. Legal Basis. Compliance with a legal obligation under the General Data Protection Regulation.
c. Recipients. Data will not be shared with third parties, unless lawfully permitted under current data protection regulations.
Other Data Processing Activities
1. Exclusively for Professional Contacts
a. Purpose. To maintain the professional relationship between third-party professionals and BOSTAUROZOS.
b. Legal Basis. The legitimate interest pursued by the data controller, provided this interest does not override the interests, rights, and fundamental freedoms of the data subject.
c. Recipients. Data will not be shared with third parties, unless lawfully permitted under current data protection regulations.
2. Exclusively for Contacts via Social Media
a. Purpose. At BOSTAUROZOS, we process your personal data for the following purposes:
— To respond to enquiries, requests, or questions.
— To manage the requested service, respond to the request, or process an application.
— To establish a user–data controller relationship and build a community of followers.
b. Legal Basis. The data subject’s consent. By becoming a follower of our social media accounts, you consent to our processing of the personal data available in your profile, exclusively for this purpose and only within the context of each social network in accordance with its terms of use and privacy policies.
c. Recipients. Data will not be shared with third parties, unless lawfully permitted under current data protection regulations. However, we recommend reviewing the privacy policies of the social networks we use most frequently, as these platforms, being based in the United States, may transfer data to that country.
3. Exclusively for Clients
a. Purpose.
− Invoices, delivery notes, quotes, and contracts. At BOSTAUROZOS, we process your personal data to manage the services arising from the contractual relationship, as well as to fulfil the obligations established in the contract.
− Advertising. At BOSTAUROZOS, we process your data in order to offer you our products and services/courses, activities, workshops, and general business activities.
b. Legal Basis.
− Invoices, delivery notes, quotes, and contracts. The execution of a contract to which the data subject is a party, or the application of pre-contractual measures at their request; the execution of the service agreement itself; and compliance with the following applicable legal obligations:
✓ Data retention periods once the contractual relationship ends are based on the Spanish Commercial Code.
✓ Data communication to the Tax Authority, when required, is covered under Law 58/2003 of 17 December, the General Tax Law.
− Advertising. The legal basis for processing your data is the data subject’s consent.
c. Recipients.
− Invoices, delivery notes, quotes, and contracts. Data will not be shared with third parties, unless lawfully permitted under current data protection regulations. When required, client data may be shared with the following entities, in compliance with a legal obligation:
✓ The Spanish Tax Agency, for necessary compliance.
✓ Relevant banking institutions, to ensure payment status.
✓ If requested, your data may be shared with the Labour Inspectorate.
− Advertising. The recipients of your data will be third parties to whom we transfer your data, when lawfully permitted under current data protection regulations.
4. Exclusively for Video Surveillance Image Processing
a. Purpose. Our facilities are equipped with permanent video surveillance systems for security purposes and workplace monitoring.
b. Legal Basis. The legitimate interest pursued by BOSTAUROZOS to ensure the security of its facilities, provided this interest does not override the interests, rights, and fundamental freedoms of the data subject. Additionally, the public interest based on offering adequate safeguards and protection for the security of assets, premises, and individuals whose personal data are processed through the video surveillance system managed by PUERTA GRANDE.
c. Recipients. Data will not be shared with third parties, unless lawfully permitted under current data protection regulations.
Data Retention Periods
| PROCESSING OF DATA COLLECTED THROUGH THE WEBSITE | Retention Period |
|---|---|
| Contact Forms | Your personal data will be processed for the time strictly necessary to respond to your request. |
| Information Provided via Email Addresses Available on the Website | Data will be retained for the time necessary to fulfil the purpose for which they were collected and to address any potential liabilities that may arise from said purpose and data processing. |
| Unsolicited Applications | In accordance with BOSTAUROZOS’s data retention policy, your personal data will be kept for a maximum period of ONE YEAR from the receipt of your CV. |
| User Registration | Your personal data will be retained until you cancel your user account.
Historical purchase data will be retained until the user account is cancelled. Once the user account is cancelled, the data will remain blocked in our systems but will be retained until the expiration of any potential legal responsibilities. |
| Exercise of GDPR Rights | For the time necessary to resolve the claim and, thereafter, properly minimised and blocked to comply with legal obligations regarding data protection. |
| Security Breach Management | For the time necessary to manage and resolve the breach and, thereafter, properly minimised and blocked to comply with legal obligations regarding data protection. |
| OTHER DATA PROCESSING ACTIVITIES | Retention Period |
|---|---|
| Exclusively for Professional Contacts | Until our professional relationship ends or you choose to cancel or object to the processing of your contact data. |
| Exclusively for Contacts via Social Media | Your personal data will be retained for as long as necessary to fulfil the purpose for which it was collected. |
| Exclusively for Clients | Invoices, delivery notes, quotes, and contracts: Your personal data will be processed until the contractual relationship ends. Once ended, and for commercial purposes, data will be retained for 6 years in accordance with the Commercial Code. For tax purposes, data will be retained for 4 years in compliance with the General Tax Law. |
| Advertising: Your personal data will be processed until you revoke the consent previously granted. |
|
| Exclusively for Video Surveillance Systems | Recordings will be retained for a maximum of one month from the time they are captured, in accordance with Article 22 of Organic Law 3/2018, of 5 December, on Personal Data Protection and guarantee of digital rights. |
International Data Transfers
BOSTAUROZOS does not plan to carry out international data transfers. If such transfers become necessary, they will only be made to entities covered under the EU-U.S. Data Privacy Framework (Adequacy decision EU-US Data Privacy Framework_en.pdf (europa.eu)).
For more information:
www.dataprivacyframework.gov.
Transfers will only be made to entities that have demonstrated compliance with the required level of data protection and safeguards, in accordance with the standards and requirements set out in the current data protection legislation, such as the European Regulation, or where there is a legal basis for the international transfer, such as the data subject’s consent. In any case, the data subject will be duly informed.
What Are Your Rights Regarding the Processing of Your Data?
As the data subject, you have the right to obtain confirmation as to whether your data is being processed, to access your personal data, request the rectification of inaccurate data, or request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected or you withdraw the consent previously given. BOSTAUROZOS will process and retain your data in accordance with applicable regulations; however, you may, in any case, request the restriction of processing.
In certain situations, you may exercise your right to data portability, in which case your data will be provided in a structured, commonly used, and machine-readable format to you or to the new data controller you designate.
You have the right to withdraw your consent at any time for any processing operations for which it was granted. To exercise your rights, please contact us at: bostaurozos@bostaurozos.com.
We provide forms to facilitate the exercise of all of the aforementioned rights. However, you may also use the forms provided by the Spanish Data Protection Agency.
You have the right to file a complaint with the Spanish Data Protection Agency if you believe your rights have not been properly addressed. The maximum response time is one month from receipt of your request.
If any of your data changes, please notify us in writing so we can keep it up to date.
