Privacy Policy
Data Controller
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), and Spanish Organic Law 3/2018 of 5th of December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), users are hereby informed that the person responsible for processing the personal data collected through the Website https://www.innovation5-40.com is:
Identity: Arturo Luis Casado Domínguez
NIF: 09322616A
Email: arturo.casado@innovation5-40.com
Purposes of processing
The personal data provided by the User through the Website will be processed for the following purposes:
– To handle enquiries and requests for information received through the contact form.
Legal basis for processing
The legal bases for processing personal data are:
– Consent of the data subject (Article 6(1)(a) GDPR): when the User checks the box accepting this Privacy Policy before submitting the contact form, subscribing to the newsletter or creating an account.
– Performance of a contract (Article 6(1)(b) GDPR): when the data are necessary for the provision of a contracted service or the management of an order (payment processing, delivery, after-sales service).
– Compliance with legal obligations (Article 6(1)(c) GDPR): when there is a legal obligation to retain or process data (e.g., electronic invoicing, accounting records, tax withholdings).
– Legitimate interest (Article 6(1)(f) GDPR): only for processing activities that do not require express consent (e.g., Website security, fraud prevention), following the completion of the corresponding balancing test.
Categories of data processed
The categories of personal data that we may process include:
– Identification data: first name, surname, NIF/NIE.
– Contact details: postal address, email address, telephone number.
No special categories of data are requested or processed (data relating to health, ideology, religion, ethnicity, sexual orientation or other sensitive data), except with the User’s express authorization and where necessary for the service.
Data retention period
Personal data will be retained for the period necessary to fulfill the purposes for which they were collected:
– Data from enquiries submitted through the form: for a maximum of 1 year from the last contact, unless the User expressly states otherwise.
– Newsletter data: until the User requests to unsubscribe, with an unsubscribe option available in each communication.
– Billing data: for the periods legally established (minimum 6 years in accordance with the Spanish Commercial Code and applicable tax regulations).
– Cookies and browsing data: as established in the Cookie Policy.
Recipients of data (Disclosures)
Personal data will not be disclosed to third parties, except in the following cases:
– No data disclosures to third parties are generally carried out.
– Legal obligations: Public Authorities, Courts and Tribunals when there is a legal obligation to do so.
International data transfers
As a general rule, no international transfers of data are made to countries outside the European Economic Area (EEA).
User rights
As a data subject, the User may exercise the following rights at any time:
– Right of access: to know what personal data concerning them are being processed.
– Right to rectification: to request the correction of inaccurate data.
– Right to erasure (“right to be forgotten”): to request the deletion of their data when they are no longer necessary.
– Right to object: to object to the processing of their data, particularly processing for commercial purposes.
– Right to restriction of processing: to request that processing operations be restricted.
– Right to data portability: to receive their data in a structured, commonly used format.
– Right not to be subject to automated decision-making: including profiling.
To exercise these rights, the User may contact the data controller by email at arturo.casado@innovation5-40.com, stating “Exercise of GDPR rights” in the subject line and attaching a copy of their DNI/NIE or equivalent document proving their identity.
The User also has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they consider that the processing of their data does not comply with applicable regulations. Information is available at www.aepd.es.
Security measures
The data controller has adopted the necessary technical and organizational measures to guarantee the security of personal data and prevent their alteration, loss, processing or unauthorized access, in accordance with the provisions of the GDPR and the LOPDGDD.
Changes to the Privacy Policy
The data controller reserves the right to modify this Privacy Policy in order to adapt it to legislative developments or operational changes. Changes will be published on this same page, with the date of the latest update clearly indicated.