PRIVACY POLICY

DATA CONTROLLER – the Company

Impetux Optics, S.L. – C.I.F. B65836181

Postal Address: Ferran Puig 13, 08023 Barcelona, Spain

Email: [email protected]

Phone: 931862411

Website: www.impetux.com

Why do we process your personal data?

To manage and maintain a commercial, contractual or pre-contractual relationship with you as a USER. The planned processing operations are:

• Sending commercial communications by email related to our products and services, where legally permitted.
• Ensuring the proper operation, security, availability and performance of the website, including DNS, proxy/CDN, SSL/TLS, technical security and traffic management services.
• Conducting market research and statistical analysis, preferably using aggregated or anonymised data where possible.
• Processing orders and requests, responding to queries or handling any type of request made by the USER through any of the contact methods available on our website.
• Sending the online newsletter with news, offers and promotions related to our activity.

Why can we process your personal data?

Because the processing is legitimised by Article 6 of the GDPR on the following legal bases:

• With the USER’s consent: for sending newsletters and commercial communications where such consent is required.
• For the performance of a contract or the application of pre-contractual measures requested by the USER: for processing orders, requests, enquiries or any other request made by the USER through the contact methods available on our website.
• In the legitimate interest of the Company: for conducting market research and statistical analysis, preferably using aggregated or anonymised data where possible, improving our products, services and commercial relationship with USERS, and ensuring the security, availability, performance and proper technical operation of the website.
• For compliance with legal obligations: where processing is necessary to comply with applicable tax, accounting, administrative or legal requirements.

For how long will we keep your personal data?

Personal data will be kept for as long as necessary to manage the relationship with the USER, respond to requests, provide the requested services or comply with applicable legal obligations.

Data used for commercial communications will be kept until the USER withdraws consent or objects to receiving such communications.

Once the data are no longer necessary for the purposes for which they were collected, they will be erased using appropriate security measures to ensure their anonymisation or complete destruction, unless retention is required by applicable legal obligations.

To whom do we disclose your personal data?

No personal data will be disclosed to third parties unless legally required to do so or where necessary for the development and execution of the purposes of the processing.

Where necessary, personal data may be accessed by service providers related to website operation, DNS, proxy/CDN, SSL/TLS, website security and availability services, hosting, email services, newsletter delivery, analytics, marketing communications, customer relationship management, ERP, cloud storage or other support services. In such cases, the Company will ensure that the appropriate confidentiality and data processing agreements required by applicable data protection regulations are in place.

In certain cases, where necessary to manage enquiries or requests from USERS located outside the European Economic Area, the Company may disclose the minimum personal data necessary to official distributors responsible for the relevant territory, for the purpose of responding to the USER’s request.

In addition, where a potential customer requests customer references, the Company may provide the name, institution and academic email address of current customers only where those current customers have previously given their consent.

International transfers of personal data

As a general rule, the Company does not directly transfer the USER’s personal data to countries outside the European Economic Area.

Exceptionally, the Company may carry out international transfers of personal data in the following cases:

• where a USER located outside the European Economic Area submits an enquiry through the website and the request needs to be referred to an official distributor responsible for the relevant territory. In such cases, only the minimum data necessary to handle the enquiry will be transferred, such as name, institution and academic email address;
• where a potential customer located outside the European Economic Area requests customer references. In such cases, the Company may provide the name, institution and academic email address of current customers only where those current customers have previously given their consent;
• where service providers used by the Company for website operation, DNS, proxy/CDN, SSL/TLS, website security and availability services, hosting, email services, newsletter delivery, analytics, marketing communications, customer relationship management, ERP, cloud storage or other support services are located outside the European Economic Area or process data from such territories.

In these cases, any international transfer of personal data shall be carried out in accordance with the GDPR and only where there is an appropriate legal basis for the transfer, including, where applicable:

• an adequacy decision adopted by the European Commission;
• standard contractual clauses approved by the European Commission;
• additional contractual, technical and organisational safeguards where required;
• certification under the EU-U.S. Data Privacy Framework, where the recipient is a certified organisation in the United States; or
• any other valid mechanism recognised by applicable data protection legislation.

The USER may obtain further information about the applicable safeguards by contacting the Company at: [email protected].

What are your rights?

The rights of the USER are:

• Right to withdraw consent at any time.
• Right of access, rectification, portability and erasure of your data, as well as the right to request restriction of processing or to object to the processing of your data.
• The right to file a claim with the Spanish Supervisory Authority (www.aepd.es) if you consider that the processing does not comply with the current legislation.

Contact information for exercising rights:
IMPETUX OPTICS S.L. – carrer Ferran Puig 13, 08023 Barcelona, Spain  

Email: [email protected]

Compulsory or optional nature of the information provided by the user

The fields marked as mandatory in the contact forms, download forms or any other forms available on the website are necessary to process the USER’s request, respond to enquiries, provide the requested information or service, or manage the corresponding commercial or contractual relationship.

Failure to provide the mandatory data may prevent the Company from properly responding to the USER’s request or providing the requested service.

Any additional information provided in fields that are not marked as mandatory is supplied voluntarily by the USER.

The USER guarantees that the personal data provided to the Company are true, accurate, complete and up to date, and undertakes to notify the Company of any changes to such data.

The Company will process only the personal data that are adequate, relevant and limited to what is necessary in relation to the purposes for which they are collected.