Privacy Policy
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), we inform you about the processing of your personal data.
1. Data Controller
Entity: VAK KIMSA, S.A.
Tax ID: A08290389
Address: Carrer Pagesia, 8-10, P.I. Molí de la Bastida, 08191 Rubí (Barcelona)
Email: vakkimsa@vakkimsa.com
Phone: +34 93 699 00 00
2. Data Processing and Purposes
2.1 Contact Form
Purpose: To send the requested product catalogue and related commercial information.
Legal basis: Consent of the data subject (Art. 6.1.a GDPR).
Data processed: Name, email address, company and sector of activity.
Retention: For as long as consent is maintained, and up to 2 years after the last interaction.
Disclosures: None envisaged.
International transfers: None envisaged.
2.2 Catalogue Request
Purpose: To send the requested product catalogue and related commercial information.
Legal basis: Consent of the data subject (Art. 6.1.a GDPR).
Data processed: Name, email address, company and sector of activity.
Retention: For as long as consent is maintained, and up to 2 years after the last interaction.
Disclosures: None envisaged.
International transfers: None envisaged.
2.3 Newsletter / Suscripción
Purpose: To send commercial communications, news and updates about VAK KIMSA, S.A.’s products and services.
Legal basis: Consent of the data subject (Art. 6.1.a GDPR and Art. 21 LSSI-CE).
Data processed: Name and email address.
Retention: For as long as the subscription remains active; you may unsubscribe at any time.
Disclosures: Email delivery providers (data processors).
International transfers: Possible if the email marketing provider operates outside the EEA, subject to appropriate safeguards (standard contractual clauses)
2.4 Job Applications / CVs
Purpose: To manage applications received and include them in personnel selection processes.
Legal basis: Consent of the data subject (Art. 6.1.a GDPR).
Data processed: First name, surname, contact details, education, work experience and any other information included in the CV.
Retention: One year from receipt, unless the data subject consents to a longer period.
Disclosures: None envisaged (internal selection process).
International transfers: None envisaged.
2.5 Website Management (cookies and analytics)
Purpose: Technical management of the website, audience analysis and improvement of user experience.
Legal basis: Legitimate interest (Art. 6.1.f GDPR) for technical cookies; consent (Art. 6.1.a GDPR) for analytical and marketing cookies.
Data processed: Browsing data, IP address, device and browser type.
Retention: According to the duration of each cookie (see the Cookie Policy).
Disclosures: Web analytics providers (e.g. Google Analytics), as data processors.
International transfers: Possible to providers located outside the EEA, subject to appropriate safeguards.
3. Rights of Data Subjects
You may exercise at any time the rights recognised under the GDPR and the LOPDGDD by writing to VAK KIMSA, S.A., Carrer Pagesia, 8-10, P.I. Molí de la Bastida, 08191 Rubí (Barcelona), or by email to vakkimsa@vakkimsa.com, attaching a copy of your ID card or equivalent document:
- Right of access: to obtain confirmation as to whether your data is being processed, and to access it.
- Right of rectification: to request the correction of inaccurate or incomplete data.
- Right of erasure (“right to be forgotten”): to request the deletion of your data when it is no longer necessary.
- Right to restriction of processing: to request that the processing of your data be restricted in certain circumstances.
- Right to portability: to receive your data in a structured, commonly used format.
- Right to object: to object to the processing of your data on grounds relating to your particular situation.
- Right not to be subject to automated decision-making, including profiling.
- Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent given prior to its withdrawal.
If you consider that the processing of your data does not comply with applicable regulations, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the Catalan Data Protection Authority (www.apdcat.gencat.cat).
4. Security Measures
VAK KIMSA, S.A. has adopted the necessary technical and organisational measures to ensure the security of personal data and to prevent its alteration, loss, unauthorised processing or access, in accordance with Article 32 of the GDPR and taking into account the state of the art, the nature of the data stored and the risks to which it is exposed.
5. Data Processors
For the provision of certain services, VAK KIMSA, S.A. may share data with data processors (technology providers, web hosting companies, email marketing platforms, etc.). All processors have signed the corresponding data processing agreement and are required to process data solely for the agreed purposes, apply appropriate security measures, and delete or return the data upon completion of the service.
6. Updates to this Policy
This Privacy Policy may be amended to reflect changes in legislation, case law or business practice. In any case, the updated version will be published on the Website, indicating the date of the last update.