Privacy Policy

Privacy policy

1.     Purpose

The purpose of this Privacy Policy is to inform the individuals (hereinafter, users or interested parties) who visit our website (hereinafter, website) of the way in which we collect, process and protect the personal data that you decide to provide us with by any means (forms, e-mails, phone numbers, contracts, etc.) and, after reading it, freely decide whether you wish us to process it. It will also expand on the information that we have previously provided to interested parties in the informative clauses set out in the processes for collecting their personal data.  

Furthermore, this policy is designed to comply with EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, (hereinafter GDPR), and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD). 

2.     Who is responsible for processing your personal data?

• Identity – Entity: ESTABLECIMIENTOS BAIXENS, S.L.
• Spanish tax code (CIF/NIF): B46915393
• Postal address: Polígono Industrial Moncarra s/n, CP 46230 Alginet (Valencia)
• Telephone number: 961750834
• Email: info@baixens.com
• Company Purpose: Manufacture Of Putties, Plasters, Cement Glue, Mortars, Paints and Waterproofing.
• Website: https://www.baixens.com/
• Registry Details: Mercantile Registry of Valencia, Volume 3066, Book 382, Folio 117, Section 8, Sheet V 5480

3.     How can you contact the Data Protection Officer?

Our entity has designated a Data Protection Delegate before the General Registry of the Spanish Data Protection Agency, to whom interested parties may address their complaints or doubts about how our entity processes their personal data. You may contact us in writing, stating the name of our entity or trade name, followed by your complaint or query to:

• BUSINESS ADAPTER, S.L.
• Ronda Guglielmo Marconi, 11, 26, (Parque Tecnológico) 46980 Paterna (Valencia).
• E-mail: info@businessadapter.es (ref. baixens) or by means of this Contact form for interested parties 

4.     What personal data do we process, and how do we obtain it?

In order to carry out our business activities, it is essential to process personal data, which may be collected digitally (e.g., e-mail, online forms or questionnaires), by filling in paper documents (e.g., contracts or forms) or by face-to-face or telephone conversations, and in any of these cases the data will be processed in a fair, lawful and transparent manner.

The categories of data that our entity will process about data subjects are as follows:

• · Identification data: name and surname, ID card or equivalent document, vehicle registration number, image and signature.
• · Contact details: phone number, email address, postal address.
• · Commercial data: quotes, purchase conditions, management and history of services and/or purchases, results of contacts (telephone, email, messaging and other communication channels).
• · Accounting data: control of income and expenditure, invoicing data. 
• · Bank details: bank accounts and bank cards.
• · Transaction for goods and services: transfers and direct debits, amounts and items.
• · Browsing data: analysis of time spent on our website, pages visited, demographic data (e.g., age, gender, language).

We will not collect special-category data (e.g., health data, ethnic origin, political opinions or religious beliefs), but if it is necessary to process this information, we will inform you and ask for your prior express consent.

 Consequently, the data requested shall be adequate, relevant, limited to strictly essential and necessary information, and processed only by personnel and/or partners authorised by our entity, who will have signed a confidentiality agreement and agree to comply with the necessary security standards that guarantee the confidentiality, integrity and availability of the data processed and other legal requirements established in the GDPR. They will therefore be processed according to the law. 

The data to be processed are provided by the interested party or their legal representative, although it may be the case that we delegate some functions to certain partners, who will be responsible for collecting your data, but they will always be processed with your prior and express consent.

In the event that a data subject does not provide the data we request or provides incomplete or incorrect data, it will not be possible to fulfil and maintain the relationship with the data subject.

The categories of data that we may process about an individual will depend on the relationship that the individual has with our organisation, as shown below:

Customers: 

Data related to identification, contact, commercial purposes, accounting, banking, transactions of goods and services will be processed, and may be collected only if you provide it to us. 

Information requests: 

Whether the information requested is by telephone or in writing (e.g., email or web forms), we will request and process your identification, contact and business data. 

Suppliers: 

Data related to identification, contact, commercial purposes, accounting, accounting, banking, transactions of goods and services and financial matters will be processed. This data may be processed during all stages of the business relationship.

Job applicants: 

For this category of interested parties, curricular, identification, contact and other data related to their professional or personal characteristics will be processed when they send us their application by any means (e.g. in person, by e-mail, web forms), such data may also be collected in recruitment interviews (in person or by video conference), and their job application may even be sent to us by a collaborator to whom we have delegated certain functions. For more information, please see our Job Applicant Policy.

Social network users: 

We are present on different social networks and may process identification, contact, commercial and other data that the user enables the displaying or sharing of with other users of the social network, including curricular data (e.g. LinkedIn). For more information, please see our Social Media Policy.

 Subscribers: 

On the subscription forms for our newsletters, an e-mail address is requested. 

Complaints: 

We will process identification data, contact data and personal information about yourself or third parties that you provide us with in relation to the complaint that you send us.

Claims: 

Through our internal Whistleblower channel, you may make reports anonymously, but you may also voluntarily provide us with identification and contact details, as well as other personal information about yourself or third parties related to the report, in accordance with the provisions of Law 2/2023 of 20 February on the protection of persons who report regulatory violations and the fight against corruption. More information on the terms of the Internal Whistleblower channel.

Visits: 

Identification and contact data will be processed, collected when they are provided to us by the interested party upon accessing our facilities or when the person you speak to in our entity provides them to us to allow access to these facilities.

Web Users:

When visiting our website, analytical data (e.g., time of visit or pages viewed), including demographic data (e.g., gender, age, country or language), may be collected only with the user's express permission. For more information, please see our Cookie Policy.  

More information for interested parties:

The information legally established in the corresponding informative clauses included in the different means of data collection will be made available to the interested parties, so that they can freely and expressly decide whether they want the personal data requested to be processed by our entity.

All categories and types of personal data processed will be duly identified in the corresponding processing activities owned by our company.

5.     For what purpose is your data processed?

In general, our company processes personal data to manage and maintain our relationship with different groups of people, such as, for example, customers or suppliers. It may also relate to people who contact us proactively through our online forms, by telephone or in person, by email or post, such as job applicants, people with enquiries, users of our website/blog or social networks, and interested parties in general. 

Depending on this relationship, your data will be processed for different purposes, which, by way of example but not limitation, are detailed below:

Customers: 

Your personal data will be processed to identify you, fulfil and maintain the pre-contractual and contractual relationship, including sending marketing information by various means, answering queries, carrying out quality controls and commercial statistics, providing our services and/or selling goods, accounting and invoicing management, transactions of goods and services, collection management, management of incidents, claims and exercising rights, consultations on economic solvency, as well as for other obligations to manage this relationship, to comply with our legitimate interests and with the laws to which we are subject.

 Information requests: 

We will process your personal data to deal with your requests for general information, to identify you, to send or deliver quotations and information about the goods and/or services you are interested in, including in our reply (verbal, written or digital) the commercial information related to the request. We will also make follow-up contacts, by various means, to find out what decisions have been taken with regard to the commercial proposals we have sent you.

Job applicants: 

Your data will be processed in order to include you in our selection processes and job vacancies, to identify you, as well as to contact you and inform you about vacancies, interview coordination and other matters related to your application. For more information, please see our Job Applicant Policy.

Suppliers: 

Your personal data will be processed for the purpose of maintaining the business relationship, whether for quotation requests, purchases of goods or contracting of services, to identify you, for accounting management, to process transactions for goods and services, as well as for other obligations to manage this relationship, meet our legal obligations and fulfil our legitimate interests. 

Social network users: 

We will process your personal data to maintain the relationship as users of the same social network, to identify you, to contact you, to share news and other personal data that you allow us to share with the rest of the components of the social network. For more information, please see our Social Media Policy.

Subscribers: 

Your data will be processed in order to send you our bulletins/newsletters or advertising by e-mail, to identify you and to process your unsubscription from these mailings if requested. 

Complaints: 

Personal data will be processed in order to identify you, to deal with your complaint and to contact you about its status, as well as to comply with our legal obligations and legitimate interests.

Claims: 

The personal data you choose to provide in your complaint will be processed in order to register, manage your complaint, identify you and contact you (except if the complaint is anonymous) to acknowledge receipt of your complaint and to keep you informed of the status of our investigations within the time limits and under the terms set out in Law 2/2023 of 20 February. We may also process your data on the basis of our legitimate interests and where necessary to comply with other legal obligations to which we are subject. More information on the terms of the Internal Whistleblower channel.

Visits: 

Data from visits to our facilities will be processed to identify you, to comply with our obligations in terms of occupational risk prevention, and for security and access control to our facilities.

 Web Users:

Data may also be processed for different purposes (e.g., analysis of visits) by accepting the installation of cookies when visiting our website. For more information, please see our Cookie Policy. 

More information for interested parties:

The information legally established in the corresponding informative clauses included in the different means of data collection (e.g., forms, locutions, contracts, etc.), and in others that we will make available to you (e.g., badges, invoices, legal notices, etc.), shall be made available to interested parties, so that you can freely and expressly decide whether you want the personal data requested to be processed by our entity.

In the event that you do not provide the information we request, or if incomplete or incorrect information is provided, it will not be possible to deal with your request for information or to contact you.

The data will not be processed further or for purposes other than those accepted by the data subjects. 

The purposes that motivate the processing of personal data will be duly identified in the corresponding processing activities owned by our company.

6.     Why do we process your data (legal basis)?

The processing of your personal data by our entity is carried out according to some or several of the following legitimate bases:

a.      When you give us your express, free, informed and unequivocal consent, after being informed at the point where we collect your data, and more broadly within this privacy policy, that after reading it and, if you agree, you can voluntarily authorise us to process your data for one or more purposes, by ticking the boxes provided for this purpose on our online forms or by signing the informative clauses that we provide you with at any given time when requesting your personal data.

b.     For the performance of a contract to which you are a party or for which you have requested us to take pre-contractual measures. 

c.      Where the processing is necessary for compliance with a legal obligation applicable to us.  

d.     Where the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject. In this regard, we inform you that our entity has carried out an analysis weighing our legitimate interests with the rights and freedoms of the data subject, always respecting their fundamental rights.

In the event that the user is under 14 years of age, it will be necessary to have the consent of parents, guardians or a legal representative to process the user's data. The user is solely responsible for the veracity of the data they send us. 

 7.     Data retention

The personal data provided will be retained for as long as we maintain the relationship with you and for as long as necessary to fulfil the purpose for which your data was collected. 

At the end of this relationship, we will keep your data locked in cases where it is necessary to retain them until the statute of limitations expires, for the sole purpose of claims or legal action, as well as to comply with our legal obligations, for example:

8. Creation of profiles

We do not create profiles or make automated decisions using your personal data, but if we do we will inform you of this and request your prior authorisation to do so.

Likewise, you have the right to object to this type of processing at any time by writing to us at info@baixens.com

9. Data transfer

As a general rule, our entity does not transfer personal data to third parties without prior consent, although it will be necessary to do so in the following cases:

If you are a customer or supplier, your personal data may be disclosed to third parties as required by law (e.g., tax authorities), or in certain cases or for certain entities where it is necessary to provide our services or pay invoices (e.g., banks).

In addition, your personal data as a customer or supplier may be processed by certain suppliers to whom we delegate some of our obligations (e.g., accountants) and all of them have committed themselves by means of a data processor contract to comply with the same security measures implemented by our entity, as well as to comply with their duty of secrecy and confidentiality as regards the personal data processed, among other obligations regarding personal data protection.

If you are a job applicant, your data will not be passed on to third parties, unless we are legally obliged to do so.

If you are an information requester or user of our website, your data will not be disclosed to third parties, unless we are legally obliged to do so.

If you are a whistleblower, your data may be lawfully processed by persons other than those responsible for the internal information system, and may also be communicated to third parties, when necessary for the adoption of corrective measures in our organisation or the processing of any disciplinary or criminal proceedings that may be appropriate (art. 32.2 Law 2/2023).

In general terms, we may disclose your personal data to the Judges, Courts, the Public Prosecutor's Office and/or to the competent Public Administrations in the event of possible claims, when we are obliged to do so.

10. International data transfers

In the case of transfers to third parties located in countries outside the European Economic Area, we will inform you and request your prior express consent.

11. Security Measures

Our organisation has implemented all the necessary technical and organisational measures to protect the personal data processed, preventing their loss, theft or unauthorised use.

These measures have been created according to the type of data processed and the purposes for which it is processed. These are periodically verified in our internal controls of compliance with personal data protection regulations and by means of external audits.

12. Your Rights

You, as the owner of your personal data and acting on your own behalf or through your legal representative (e.g., persons under 14 years of age) can contact us at any time and ask us to exercise your personal data protection rights.

We explain what these rights are below:

Right of Access:

You have the right to access and to ask us at any time for access to the following information:

• • Whether or not we are processing your personal data.
• • The purposes of the processing, as well as the categories of personal data to be processed.
• • The origin of your data, if not provided by you.
• • The recipients or categories of recipients to whom your personal data have been or will be disclosed, including, where applicable, third-party recipients or international organisations.
• • Information on appropriate safeguards concerning the transfer of your data to a third country or to an international organisation, where applicable.
• • The expected retention period, or if this is not possible, the criteria for determining this period.
• • If there are automated decisions, including profiling, meaningful information on the logic applied, as well as the significance and intended consequences of such processing.
• • A copy of your personal data that are subject to processing.

Right to Rectification:

You may ask us to rectify your personal data if it is inaccurate, and to complete it if it is incomplete.

Right to Object:

You can object to the processing of your data if it is incorrect or no longer necessary.

In the event that you act as a respondent or person affected by a complaint within the framework of Law 2/2023, you may not exercise your right to object, as it is presumed (upon proof to the contrary) that there are grounds that legitimise the processing of your personal data, in accordance with the provisions of article 31.4 of the Law.

Right to Erasure:

You may ask us to delete your data, for any of these reasons:

• • Your data are no longer necessary for the purposes for which they were collected or processed.
• • You have not consented to the processing of your data.
• • Where you have exercised your right to object.
• • When the data have been processed unlawfully.
• • When the data must be deleted in order to comply with a legal obligation.

Right to Restrict Processing:

You may ask us to exercise this right in one or more of the following situations:

• • If you have challenged the accuracy of your personal data, allowing enough time for the controller to verify their accuracy.
• • if the processing is unlawful, and in place of deleting of your data you request the limitation of their use.
• • If the personal data is no longer needed for the purposes of processing, but the interested party needs them for the formulation, exercise or defence of claims;
• • Where you have objected to the processing pursuant to Article 21(1), while it is being verified whether the legitimate grounds of the controller outweigh those of the data subject.

Right to Portability:

This refers to the right to obtain data relating to you, in a structured, commonly used and machine-readable format, and to transmit it to another controller for further processing.

The right not to be subject to automated decisions:

The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similar on the person concerned.

To exercise any of your rights, write to us either by post to Polígono Industrial Moncarra s/n, CP 46230 Alginet (Valencia) or by e-mail: info@baixens.com stating the rights you wish to exercise, accompanied by a copy of your ID card or equivalent document so that we know to whom we must provide the information requested and your contact details so that we can send you our reply. If you are acting on behalf of another person, you must provide proof of representation.

If you have any suggestions or questions about the processing of your personal data that you wish to communicate to us, you can contact the data protection officer:

• BUSINESS ADAPTER, S.L.
• Ronda Guglielmo Marconi, 11, 26, (Parque Tecnológico) 46980 Paterna (Valencia).
• Contact form for interested parties

We inform you that you have the right to make a complaint to the Spanish Data Protection Agency at: C/ Jorge Juan, 6, 28001 Madrid or at www.aepd.es.

13. Commitment to protection of personal data

Scope of application

Our commitment to the protection of personal data will be mandatory for all departments, employees of our company and any third parties acting on our behalf.

Objective

We have established protocols for the processing of your personal data, in accordance with the provisions of Spanish and European regulations on data protection.

Principles

We will process your data lawfully, fairly, transparently, accurately, completely and confidentially, minimising its use, limiting the retention period and employing active accountability.

Special categories of data

Our company prohibits the processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, the processing of genetic or biometric data, data concerning health or data concerning sexual orientation, except in the legally authorised exceptions and with the prior consent of the data subject.

Rights of data subjects

Our entity will attend to and respond as quickly and diligently as possible to your requests to exercise your rights.

Registration of Activities, Impact Assessment and Security Measures

Our organisation will keep a record of processing activities and analyse the purposes of processing, categories of data subjects and data, recipients, international transfers, storage periods, etc., in order to assess the risks of processing and implement the necessary security measures to ensure the confidentiality, integrity and availability of personal data.

Likewise, in all instances where we process data, we have analysed the need to carry out an Impact Assessment and whether we are obligated to appoint a Data Protection Delegate, establishing, if necessary, that the person appointed to this position will have sufficient knowledge and experience in accordance with the provisions of current legislation.

Control

We rely on external help to advise us in this area, monitoring all the publications made by the competent control bodies and other European and Spanish entities related to data protection regulations, in order to comply with these regulations at all times.

14. Updating this Policy

Our entity reserves the right to modify this Policy without prior notice. For this reason, we recommend that you consult it every time you visit our website.

Text updated on 13 de February de 2024.