1. Introduction

At MONTAJES Y CONSTRUCCIONES ESPECIALES, S.A., we are committed to the protection of privacy and the correct use of the personal data that we process and that you provide us, both online on this website and, where appropriate, any of its subdomains and microsites , as offline.

Please read this policy carefully and make sure that you understand and agree with it, before providing us with your personal data. If you do not agree with it, do not use this website or its services or provide us with your data.

The fact of accessing this site, using any of its services or providing us with your data, whether online or offline, will be understood as a clear affirmative action by which you give us your consent (when necessary) to process your data for the purposes indicated below.

2. Who is responsible for the processing of your data?

MONTAJES Y CONSTRUCCIONES ESPECIALES, S.A.

Postal address: C/ Vitorialanda 23 CP 01010 Vitoria – Gasteiz (Álava)

Email: mycesa@mycesa.com

Telephone: 945 227 666

3. How have we obtained your data?

3.1 Obtaining from the person concerned

If you are a client (current or potential), or user of our website, you have provided them, either off-line or on-line, when requesting our products or services, or contacting us requesting information. Also, you have been able to provide us in person, if you have come to our facilities.

By providing us with your data, you guarantee that you are authorized to do so, and that the information is true, up-to-date, and that it does not infringe any contractual restriction or third-party rights. You are responsible for keeping your data and profile correct and up-to-date, MONTAJES Y CONSTRUCCIONES ESPECIALES, S.A. declining all liability. in case you don’t. You agree not to impersonate other Users by using their registration data to the different services and/or contents of the Website.

3.2 Obtained automatically when visiting our website

When you visit our website or any of our other platforms (social networks, mobile applications…), we collect information through cookies and other tracking technologies and web analytics. This means that data is sent from your browser to our servers to optimize our services and improve your user experience. Such data may be collected and stored automatically by us or by third parties on our behalf. You can consult our cookie policy.

3.3 Communication by a third party of the data of the interested party

It is possible that your data has not been provided to us directly by you, but has been provided to us by a third party with whom we work, to whom you have previously provided such data. For example: publicly owned registries, our sales network or distributors…

Additionally, by accepting this privacy policy, and where appropriate, by the express consent you have given, you authorize MONTAJES Y CONSTRUCCIONES ESPECIALES, S.A. so that, you can request from third parties the necessary data for the fulfillment of the provision or services.

3.4 Communication by a third party of the data of the interested party

Regarding the data of other people, you must respect their privacy, taking special care when communicating or publishing their personal data. Only its owner can authorize the processing of your personal data. The publication of data from third parties without their consent may infringe, in addition to the regulations on data protection, that relating to the right to honor, privacy or the image of said third parties.

If you provide us with data from third parties, it is your responsibility to have their prior and express consent to use them, and it is your duty to inform them of the treatment that we are going to carry out with their data. By accepting this privacy policy, you expressly guarantee that you have authorization for said contribution, exonerating us from any liability in the event of any claim by an interested party.

4. What types of data do we process?

The categories of data that we process can be:

  • Obtained from the interested party: identification data (name and surname, NIF), contact data (telephone, postal address, email address, billing or delivery address), commercial and economic data (information on the products requested, history customer, and those necessary for payment: bank, credit card…), online profile data (information, preferences and interests).
  • Obtained automatically when visiting our website: IP address of the user, the date and time of the visit, the URL of the site from which the user came, the pages visited on our website, information about the browser used (type and browser version, operating system, etc.).
  • Communicated by a third party: identification data; personal characteristics data; data on social, academic and professional circumstances; economic, financial and insurance data; transaction data for goods and services, employment details.
  • Regarding data with special protection: We do not treat special categories of data.

5. Why do we process your data?

The data that you provide us, as well as all those generated during the development of the relationship that we maintain with you, can be processed for different purposes:

  • If you are a current or potential customer: to maintain contact and communication with you, and manage the contractual and/or commercial relationship, including after-sales services.
  • If you are a user of our website, or sender or recipient of an email: to manage the requests you make to us online, and to contact you.
  • In the case of accessing our facilities as a visitor: to manage access and control visits.
  • In the case of providing us with your CV: to contact you and manage the selection processes that we carry out. In this case, it is mandatory that you accept the privacy policy, marking the field enabled for it. If you do not give your consent, we will not be able to take your CV into account.

To send you, through electronic communications, information about our activities, products and/or services similar to those requested, including advertising and/or commercial communications for the purposes of art.21 LSSICE 34/2002. If we already have a prior contractual relationship, we will send such communications on the basis of our legitimate interest. In the case of not having a prior contractual relationship, we will only send you this type of communication, if you authorize us by checking the option that is expressly included for this purpose in the corresponding forms. The electronic communications that we send you will include, in the communication itself, the option to stop receiving them. If you choose to do so, we will stop sending you this type of communication in the future.

To transfer your data to other companies or entities, directly related to MONTAJES Y CONSTRUCCIONES ESPECIALES, S.A., in order to be able to provide you with the service or product you have requested, and the administrative-accounting management that said provision requires.

6. How long will we keep your data?

The personal data that you provide us will be kept as long as the contractual, pre-contractual or commercial relationship is maintained and, once these have ended, as long as the person concerned does not request its deletion. Even if the deletion is requested, we can keep them for the necessary time and limiting their treatment, only for:

  • Comply with the legal/contractual obligations to which we are subject, and/or during the legal terms established for the prescription of any liability on our part,
  • and/or the exercise or defense of claims derived from the relationship maintained with the person concerned.
  • In coordination with the previous criteria, the deletion of personal data, either in computer records or on paper, may be carried out, at the discretion of the organization, based on logistical and/or storage space needs that make it advisable to delete information or documentation.

7. What is the legitimacy for the processing of your data?

The legal basis that legitimizes us for the treatment of your data can be diverse:

Compliance with the existing contractual or commercial legal relationship if you are already a customer, supplier, or participant in our activities. In the event that you are a potential client or supplier, it is the pre-contractual relationship that unites us.

The provision of the requested data is mandatory as it is essential to formalize and/or maintain the contractual or pre-contractual relationship and comply with the legal obligations derived from it; If you do not provide them, we will not be able to provide the service derived from said relationship.

Consent: it can also be your consent if you have made a request or request yourself, or have granted it to us for a specific purpose: For example: to send commercial communications, if you have entered our website, if you are visitor to our facilities, if you have sent us your CV etc…

Said consent is given to us unequivocally by providing us with your data online or offline, considering said contribution a clear affirmative act that manifests said consent. The provision of the requested data is mandatory as it is essential to meet your request; If you do not provide them, we will not be able to carry it out. You may withdraw this consent at any time by sending us an e-mail to that effect at mycesa@mycesa.com. Said withdrawal does not condition the processing of your data for the rest of the purposes described, but it may mean that we cannot answer your request.

Compliance with a legal regulation or obligation: such as those established in the fiscal, tax, social security, occupational risk prevention, consumer and user regulations, on the prevention of money laundering, penal code (art.31 bis), etc…

Our legitimate interest as an organization also constitutes a legal basis for processing your data. Pursuant to recital 47 of the GDPR, we have an interest in Inform you of our activities, products and/or services, even through electronic communications.

If we already have a prior contractual relationship, we will send such communications on the basis of our legitimate interest. Otherwise, we will only send you this type of communication if you give us your consent by checking the option that is expressly included for this purpose in the corresponding forms.
In any case, the indicated treatment of your data we consider to be proportionate and supposes a minimum impact on your privacy, but your interests, rights or freedoms will always prevail over our legitimate interest, therefore, if you do not want us to process your data For these purposes, please send us an e-mail in this regard to mycesa@mycesa.com, and we will do so.

8. To which recipients can we communicate your data?

We inform you that the data you provide us may be communicated to third parties for the fulfillment of purposes directly related to legitimate functions of assignor and assignee such as:

To banking entities: for the management of collections and payments.

To our legal, accounting, tax advice: for the provision of legal advice and consultancy, the management of our accounting and billing, management of the workforce, and the rest of the legal obligations of the organization.

To our legal advice, for the provision of legal advice and consultancy.

To entities or organizations to which there is a legal obligation to communicate data: for example, the Tax Administration.

To insurance companies: for the management and insurance of commercial risks.

9. International Data Transfers

At MONTAJES Y CONSTRUCCIONES ESPECIALES, S.A., we may use service providers located outside the European Union, who may have access to personal data, for the provision of auxiliary services to our activity (accommodation, housing, SaaS, remote backup copies, computer support or maintenance services, email managers, sending emails and email marketing, file transfer, etc…).

These companies may be different and vary over time but, in any case, we will choose companies that adhere to the Privacy Shield agreement between the US and the EU, or belonging to countries that have been declared as countries with an adequate level of protection, which means say that they are obliged to comply with requirements equivalent to the European ones in terms of data protection.

In any case, by accepting this data protection policy, you expressly and unequivocally authorize the communication of the data to said companies, knowing that this implies an international transfer of data to a country not belonging to the European Economic Area and giving your unequivocal consent to said transfer.

10. Social networks and instant messaging applications

10.1 Use of WhatsApp instant messaging

In the event that we provide you with an instant messaging App to expedite communication with you, use it responsibly, read its privacy policy and configure it according to your preferences before sending information with personal data by said means.

Although this type of instant messaging application can be useful in certain circumstances, we remind you that the information you publish on the Internet is accessible to many people, known or unknown, so there is a risk to your privacy and that of others.

We recommend not providing personal, private and/or intimate information through this means or that you want to keep reserved as there are safer ways to do so. We cannot be held responsible for the operation and availability of the service since it is not provided by us but by third parties outside of us.

10.2 Use of social networks

10.2.1 Social Media Features incorporated into our website

Our Services may include certain Social Media features and widgets, such as “Connect with Facebook” connectors, the “Like” button, the “Share It” button or other common interactive social media mini-programs. We are not responsible for the correct functioning of these.

10.2.2 Rules of use of social networks

Keep in mind that if you decide to participate, publish or share content through our official page on a social network, said content will be public, and it will be your sole responsibility that said content comply with legal regulations.

You can prevent your personal data associated with said participation from appearing, configuring your privacy, or pseudonymizing your data (eg: using a “Nick” or “alias”).

We remind you that, with respect to the data of other people, you must respect their privacy, taking special care when communicating or publishing their personal data. Only its owner can authorize the processing of your personal data.

The user may only publish on this page, or on our official page on social networks, personal data, photographs and information or other content whose ownership and property belongs to them or for which they have the authorization of third parties. If you provide us with or publish data from third parties, it is your responsibility to have their prior and express consent to use, communicate and publish them, and it is your responsibility to inform them of the processing of their data by us or its publication by you. The publication of data from third parties without their consent may infringe, in addition to the regulations on data protection, that relating to the right to honor, privacy or the image of said third parties.

In any case, we may remove any content published by the user from both this website and our social media pages when we detect that it has violated current legislation, and what is indicated in this privacy policy.

Social Networks are not hosted directly on our Services. Your interactions with them are governed by their policies and not ours. Read the privacy policies of those social networks for detailed information on the collection and transfer of personal data, your rights and your privacy settings.

10.2.3 Data we collect through social networks

We collect data through these applications, and in particular, through functional and analytical cookies to allow them to function properly. These cookies may collect information about your IP address, or your browsing.

In addition, if you log into one of these social networks during your visit to one of our websites or mobile applications, the social network may add that information to your profile and that information will be transferred to the social network. If you do not want this data transfer to take place, exit your session on the social network before entering our websites or mobile applications, since it is not in our power to influence this collection and transfer of data through the connectors social.

10.2.4 Display of other third-party pages within our website

Likewise, through our website, we can offer content or services from third parties (using page frame or framing techniques), preserving the appearance of our website, and showing within it the appearance of the third party that provides the service. Keep in mind that the information you provide will be provided to those third parties, and not to us, so the policies of said third parties will govern and not ours.

11. What are your rights when you provide us with your data?

You can, when appropriate, exercise your rights of access, rectification, deletion, limitation and opposition to your treatment, as well as other rights, at the postal or electronic mail address indicated at the beginning of this privacy policy; in both cases by written and signed request attaching a copy of the ID or passport or other valid document that identifies you. In case of modification of your data, you must notify it at the same address, this entity declining all responsibility in case of not doing so.

Right of access: You can ask us what personal data we are dealing with, even request a copy of it.

Right of rectification: You can ask us to rectify inaccurate personal data or to complete those that are incomplete, including through an additional declaration.

Right of deletion (right to be forgotten): You can request the deletion of your personal data when: they are not necessary for the purposes for which they were collected, you withdraw your consent, there has been an illegal treatment of them or due to compliance with a legal obligation.

Right to limitation of treatment: You can ask us to limit the treatment of your data, in which case we will only keep them for the exercise or defense of claims.

Right of opposition: You can oppose the treatment that is made of your data if said treatment is based on the legitimate interest of the person in charge of treatment or is for advertising purposes.

Once any of the above requests have been received, we will respond to you within the legally established deadlines. You can complain to the Spanish Data Protection Agency. If you want more information about the rights you can exercise and to request model forms for exercising your rights, you can visit the website of the Spanish Agency for Data Protection, www.aepd.es.