100% secure payment
ALP GIEG, S.L. considers your personal data to be very important. For this reason, we process it confidentially and securely. We are committed to safeguarding the privacy of personal data at all times and to not collecting unnecessary information.
You do not need to register in advance to access our website. If you need further information, you can contact us through the form available on our website, provided that you agree to this Privacy Policy, which you must accept in order to record your express consent to the processing of your data for the purposes indicated.
In accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), as well as with Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we provide you with information on the processing of your data through this Privacy Policy.
Who processes your data?
- Identity
- ALP GIEG, S.L.
- Tax ID (NIF)
- B65910887
- Registered address
- C/ Edison, 1 – 08150 Parets del Vallès (Barcelona), Spain
- info@alpgieg.com
What data processing do we carry out, for what purposes, and for how long?
| Data processing | Purpose and legal basis | Retention period |
|---|---|---|
| Website operation | To manage the proper operation and running of the website: personal data is processed only to the extent strictly necessary to provide and ensure the security of the application and the information. The legal basis is the legitimate interest pursued by the controller, in accordance with Art. 6(1)(f) GDPR. | Data is kept for the time strictly necessary to fulfil the purpose for which it was collected and, in any event, to determine any liabilities that may arise from that purpose, taking into account the periods set out in the applicable regulations. |
| Contact | To respond to requests and/or enquiries made by the user. The legal basis is express consent, in accordance with Art. 6(1)(a) GDPR. | Data is kept until the request has been resolved. In any event, it may be kept to determine any liabilities that may arise from that purpose. |
| Informational communications and newsletter | Subscription to news, promotions and offers from the company. The legal basis is express consent (Art. 6(1)(a) GDPR). Where a contractual relationship exists, commercial communications about products or services similar to those already contracted may be sent on the basis of our legitimate interest (Art. 6(1)(f) GDPR). | Data is kept for as long as the newsletter subscription is active or until the data subject exercises the right to object or to erasure. In any event, it may be kept to determine any liabilities that may arise from that purpose. |
| Email management | To respond to enquiries received and to manage the commercial and/or professional relationship. The legal basis is the contractual relationship between the controller and the data subject, in accordance with Art. 6(1)(b) GDPR. | Data is kept for the time strictly necessary to fulfil the purpose for which it was collected and, in any event, to determine any liabilities that may arise from that purpose, taking into account the periods set out in the applicable regulations. |
| Loyalty programme management | Data collected through the ALP GIEG loyalty programme registration forms is processed to manage those programmes. The legal basis is express consent, in accordance with Art. 6(1)(a) GDPR. | Data is kept for the time strictly necessary to fulfil the purpose for which it was collected and, in any event, to determine any liabilities that may arise from that purpose, taking into account the periods set out in the applicable regulations. |
Who is your data shared with?
Unless we are subject to a legal obligation that requires us to disclose your personal data, or you give us your express consent, we will not share your personal data with third parties.
Are international data transfers carried out?
No international transfers of data to third countries outside the European Union are carried out.
What rights do you have as a user and how can you exercise them?
Right of access
As a user, you can ask us to explain what we do with your personal data.
You can also request information about the purpose of the processing, how long we keep your data, what rights you have, whether your data has been transferred to a third country or an international organisation, and about the existence of automated decisions or profiling, among other things.
Right to rectification
If the personal data you have provided is inaccurate or incomplete, you have the right to have it rectified or completed. Contact us and we will rectify the data you request.
Right to restriction of processing
As a user, you can request the restriction of the processing of your personal data when:
- You contest the accuracy of your personal data, for a period that allows us to verify it.
- The processing is unlawful and you object to the erasure of your data, requesting instead that its use be restricted.
- We no longer need your data for the processing, but you need it to establish, exercise or defend legal claims.
Right to supression
You can request that we delete your personal data. We are obliged to erase it immediately when it is no longer necessary for the purposes for which it was collected. You can also ask us to erase it when you withdraw your consent, object and there are no legitimate grounds for the processing, it is processed unlawfully, or it must be erased to comply with a legal obligation.
Right to information
If you have exercised your right to rectification, erasure or restriction, we are obliged to inform all recipients to whom your data has been disclosed of this, unless it proves impossible or involves disproportionate effort.
As a user, you have the right to be informed by the controller about who those recipients are.
Right to data portability
You have the right to receive the personal data you have provided in a structured, commonly used and machine-readable format, and to transmit it to another controller without us being able to prevent it.
Right to object
As a user, you have the right to object at any time, on grounds relating to your particular situation, to our use of the personal data you have provided.
We will stop processing your personal data unless we have compelling legitimate grounds that override your interests, rights and freedoms, or the processing is for establishing, exercising or defending legal claims.
Right to withdraw consent
As a user, you have the right to withdraw your data protection consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.
Automated individual decisions and profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Right to lodge a complaint with a supervisory authority
As a user, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR. In Spain, the competent authority is the Spanish Data Protection Agency (AEPD, www.aepd.es).
Where can you exercise your rights?
You can request the exercise of your rights at the following email address: info@alpgieg.com.
Is it mandatory to provide all the information requested in the forms?
For the forms on the website, you must complete the fields marked as “required”. Failure to provide the required personal data, or providing it only partially, may mean that ALP GIEG, S.L. cannot handle your requests and, consequently, will be released from any liability for the non-provision or incomplete provision of the requested services.
The personal data that the user provides to ALP GIEG, S.L. must be current so that the information in the records is up to date and error-free. The user is responsible for the truthfulness of the data provided.
What security measures do we have in place?
We inform you that we look after and use your personal data in accordance with current regulations on data protection and information society services.
We have implemented the technical and organisational security measures necessary to ensure the security of the user’s personal data and to prevent its alteration, loss, unauthorised processing or access, in line with the state of technology, the nature of the stored data and the risks to which it is exposed, whether from human action or from the physical or natural environment, in accordance with current regulations.
