Privacy Policy

This Privacy Policy is intended to inform users of this website about the processing of their personal data, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”), Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (“LOPDGDD”), and all other applicable legislation on data protection and information society services.

1. Data Controller

The data controller responsible for the processing of personal data is Tecpesa, S.A., Tax Identification Number (NIF) A79282430, with its registered office at calle Punto net 10- 28805 Alcala de Henares (Madrid), Spain, and contact email info@tecpesa.com.

2. Purposes of Processing

The personal data provided through this website may be processed for the following purposes:

Managing enquiries, requests or communications submitted by users.
Handling technical issues or matters relating to the operation of the website.
Ensuring the security of the website and preventing unauthorized access, fraudulent use or cyberattacks.
Complying with legal obligations applicable to the company.
Managing the sending of commercial communications, newsletters or information related to the company’s activities, where the user has given consent or another valid legal basis exists.
Protecting the company’s rights, interests and liabilities, or responding to potential legal claims.

Where specific forms are available on the website, users will be informed separately about the processing of their personal data in relation to each form.

3. Legal Basis for Processing

The processing of personal data may be based on:

The data subject’s consent for one or more specific purposes.
The performance of a contract or the implementation of pre-contractual measures.
Compliance with legal obligations applicable to the data controller.
The legitimate interests of the data controller in ensuring the security of the website, protecting its rights, preventing fraudulent use or improving its services.

Where processing is based on consent, such consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.

4. Data Retention

Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected.

As a general rule:

Data relating to enquiries or requests will be retained for as long as necessary to respond to them.
Data processed for the purpose of sending commercial communications will be retained until the data subject withdraws consent or unsubscribes.
Data relating to contractual or pre-contractual relationships will be retained for the duration of the relationship and subsequently for the statutory limitation periods established by law.
Data processed to comply with legal obligations will be retained for the periods required by the applicable legislation.

Once these periods have expired, the data may remain duly blocked and available to courts, public authorities or competent bodies where legally required, after which they will be securely deleted in accordance with applicable legislation.

5. Automated Decision-Making and Profiling

The company does not make automated decisions nor create profiles based exclusively on the automated processing of personal data.

6. Data Recipients

Personal data may be disclosed to:

Public authorities and competent public bodies where legally required.
Courts, tribunals and law enforcement authorities.
Service providers acting as data processors and providing services necessary for the company’s activities.

The company guarantees that all data processors provide appropriate safeguards regarding data protection and that the corresponding data processing agreements have been entered into in accordance with Article 28 of the GDPR.

7. International Data Transfers

As a general rule, no international transfers of personal data are envisaged.

However, should service providers or technological tools located outside the European Economic Area (EEA) be used, any such transfers will be carried out with the appropriate safeguards provided for in Articles 44 et seq. of the GDPR, including, where applicable, the Standard Contractual Clauses approved by the European Commission or any other legally recognised transfer mechanisms.

8. Social Media

The company may maintain official profiles on various social media platforms for the purpose of providing information about its activities and services.

Users’ interactions with such profiles shall be governed by the privacy policies and terms of use of each respective platform. Users are encouraged to review the privacy settings and privacy policies of each social media platform.

In certain cases, the company may act as a joint controller together with the relevant social media platform, in accordance with applicable legislation.

9. Data Subjects’ Rights

Data subjects may exercise the following rights:

Right of access to their personal data.
Right to rectification of inaccurate or incomplete data.
Right to erasure (“right to be forgotten”) where, among other reasons, the data is no longer necessary for the purposes for which it was collected.
Right to restriction of processing.
Right to object to processing.
Right to data portability, where technically feasible.
Right to withdraw consent previously given.
Right not to be subject to decisions based solely on automated processing.

To exercise these rights, data subjects may submit a request, together with proof of identity where necessary, by email to info@tecpesa.com.

Where necessary to ensure the security of the procedure, the company may request additional information to verify the identity of the applicant.

Data subjects also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they believe that the processing of their personal data does not comply with applicable legislation: https://www.aepd.es/

In accordance with Article 21 of Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), where commercial communications are sent on the basis of the user’s consent, users may unsubscribe at any time by contacting info@tecpesa.com.

10. Accuracy and Truthfulness of Data

Users guarantee that the personal data they provide is true, accurate, complete and up to date, and undertake to notify the company of any changes thereto.

Where users provide personal data relating to third parties, they declare that they have the necessary legal authority to do so and undertake to provide such third parties with the information contained in this Privacy Policy.

Where required by law, the use of certain services by minors shall require the prior authorization of their legal representatives.

11. Changes to this Privacy Policy

The company reserves the right to amend this Privacy Policy in order to adapt it to legislative developments, the criteria of supervisory authorities or changes in the operation of the website.

Users are encouraged to review this Privacy Policy periodically to remain informed about how their personal data is processed.

Last updated: 03/08/2026