Privacy Policy

In accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Act 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), we inform you about how your personal data is processed.

1. Data controller

2. Purposes of the processing

The personal data collected through this website is processed for the following purposes:

• Handling enquiries: to manage and respond to requests received through the contact forms on the website.
• Business management: to carry out the administrative, accounting and tax management of the services requested.
• Commercial communications: to send information about the products and services of Textil Villa de Pego, S.L., only with the prior consent of the data subject.

3. Legal basis for the processing

• Article 6(1)(a) GDPR — Consent: for sending commercial communications.
• Article 6(1)(b) GDPR — Performance of a contract: for the provision of the services requested.
• Article 6(1)(c) GDPR — Legal obligation: for compliance with tax and commercial obligations.
• Article 6(1)(f) GDPR — Legitimate interest: for business management arising from pre-existing relationships.

4. Categories of data

The personal data we process includes: identifying data (first name, surname, company), contact data (postal address, email, telephone) and commercial information (products of interest, enquiry history).

5. Retention period

Data will be retained for as long as the business relationship continues and, once it has ended, for the periods legally established in order to address the liabilities arising from the processing:

• Tax data: 4 years (Spanish General Tax Act).
• Commercial data: 6 years (Spanish Commercial Code).
• Consent records: until consent is withdrawn.

6. Recipients of the data

Data will not be disclosed to third parties except where required by law. Specifically, data may be disclosed to:

• Public authorities, in compliance with legal obligations.
• Banks, for the processing of payments.
• Service providers acting as data processors, with whom the corresponding data processing agreement has been signed.

No international transfers of data outside the European Economic Area are carried out.

7. Automated decision-making

No automated decisions are taken and no profiling is carried out on the basis of the personal data collected through this website.

8. Data subject rights

Data subjects may exercise the following rights recognised by the GDPR and the LOPDGDD:

• Access: to obtain confirmation as to whether their data is being processed and to access it.
• Rectification: to request the correction of inaccurate or incomplete data.
• Erasure: to request the deletion of the data when it is no longer necessary.
• Restriction: to request the restriction of the processing in certain circumstances.
• Portability: to receive the data in a structured, commonly used format.
• Objection: to object to the processing of their data in certain circumstances.
• Withdrawal of consent: to withdraw consent at any time, without affecting the lawfulness of the processing carried out beforehand.

To exercise any of these rights, please write to info@textilvpego.com, enclosing a copy of your national identity card or an equivalent identity document. Your request will be answered within a maximum period of one month.

9. Right to lodge a complaint with a supervisory authority

If you consider that the processing of your data does not comply with the legislation in force, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), the supervisory authority for Textil Villa de Pego, S.L. as a company established in Spain: www.aepd.es, C/ Jorge Juan 6, 28001 Madrid. Under Article 77 GDPR you may also lodge your complaint with the supervisory authority of the country in which you reside or work, or in which the alleged infringement took place.

10. Data security

Textil Villa de Pego, S.L. has adopted the technical and organisational measures necessary to guarantee the security and integrity of personal data and to prevent its alteration, loss, unauthorised processing or unauthorised access, in line with the state of the art and the nature of the data stored.