In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR) on the Protection of Natural Persons with regard to the Processing of Personal Data and on the Free Movement of such Data, as well as Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights, which aims to adapt the General Data Protection Regulation to Spanish law, we inform you of the following:

**PERSONAL DATA DEFINITION**

“Personal Data” refers to any information collected or received by the company, directly or indirectly, that can individually identify you, as defined by the General Data Protection Regulation (EU) 2016/679 and Organic Law 3/2018.

**1. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?**

Identity:	JOSE MANUEL CASTRO GRAGERA
NIF/CIF:	49097016T
Postal Address:	C/ Red Siete, 34. Pol. Ind. Red – 41500 Alcalá Gra.
Phone:	+34 646 952 066
Email:

**2. WHAT PERSONAL DATA DO WE COLLECT?**

JOSE MANUEL CASTRO GRAGERA (hereinafter “the company” or “this company”) informs you that we collect information about you, specifically:

– Identification data such as your name, surname, and NIF/DNI.
– Postal or electronic addresses, such as your email or postal address.
– Economic data (billing).
– Any other necessary information for the provision of our services and for responding to your requests.
– Website navigation data.
– Our company does not process specially protected data.

The categories of data processed include:

– Identification data.
– Postal or electronic addresses.
– Personal characteristics.
– Economic data.
– Payroll, personnel, and human resources data.
– Video surveillance.

**2.1. WHAT PERSONAL DATA IS SPECIFICALLY COLLECTED FROM THIS WEBSITE?**

– **Contact Form**: This website contains one or more forms to request information, quotes, suggestions, etc.
– **Cookies**: When a visitor browses our website, first-party and third-party cookies will be downloaded. You can find more information by visiting our cookie policy.

Filling out our forms and providing your personal data is not mandatory. However, refusal to do so will result in the inability to access the requested service. Additionally, voluntarily provided data will optimize the offered services.

**3. FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?**

Your data will be collected exclusively for specified, explicit, and legitimate purposes and will not be further processed in a manner incompatible with those purposes. They will be processed lawfully, fairly, and transparently.

The purposes and legal basis for processing personal data are identified in the following table:

#	Processing Purpose	Legal Basis
1.	Responding to requests from our web pages.	Based on your consent.
2.	Analyzing user navigation data on our website.	Based on your consent.
3.	Sending commercial information about our products, services, and/or offers.	Based on your consent.
4.	Managing data and metrics from our social media “Fanpages” and website.	Based on your consent and our legitimate interest.
5.	Compliance with applicable laws, court orders, legal processes, or regulatory requirements.	Necessary to fulfill legal obligations.

**4. HOW LONG WILL WE RETAIN YOUR DATA?**

Personal data will be retained while the contractual relationship lasts and for the legally required period. Data collected via web forms will be stored for a maximum of six months.

**5. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?**

You have the following rights under current privacy regulations:

– **Withdrawal of Consent**: You can withdraw your consent at any time without affecting the legality of prior processing.
– **Access**: Request confirmation of whether we process your data and access them.
– **Rectification**: Request the correction or completion of inaccurate or incomplete personal data.
– **Erasure (Right to be Forgotten)**: Request the deletion of your personal data in certain circumstances.
– **Restriction of Processing**: Request limited processing under specific conditions.
– **Data Portability**: Request data transfer to another controller in a structured format.
– **Objection to Processing**: Object to processing based on legitimate interest or direct marketing purposes.

You also have the right to file a complaint with the Spanish Data Protection Agency if you believe your data has been processed unlawfully.

**6. WHO WILL RECEIVE YOUR DATA?**

We may share your personal data with:

– External service providers (maintenance, hosting, payments, logistics, marketing services, etc.).
– Professional advisors (lawyers, auditors).
– Government authorities or regulatory bodies.
– Insurance companies.
– Regulatory agencies, tax authorities, and social security offices.
– Banks and financial institutions.

Your data may be transferred outside the European Economic Area (EEA) to countries deemed adequate or governed by Standard Contractual Clauses.

**7. DATA SECURITY MEASURES**

We implement technical and organizational security measures to protect your information from unauthorized access, improper use, alteration, and unlawful destruction. All employees and service providers handling personal data are bound by confidentiality agreements.

**8. CONTACT INFORMATION FOR EXERCISING YOUR RIGHTS**

For questions about data management or to exercise your rights, email us at with the subject line indicating the right you wish to exercise.

**9. CHANGES TO THIS PRIVACY POLICY**

We may modify this Privacy Policy at any time to comply with new legal, technical, or commercial requirements. You will be notified of significant changes.

**10. USE OF INSTANT MESSAGING SERVICES**

We may use messaging services like WhatsApp or Telegram to facilitate service management and communication.

**USE OF WEBSITE IMAGES**

The images on this website are the intellectual and industrial property of Freepik Company, S.L.

We acknowledge FREEPIK as the rightful owner of the photographic materials used, complying with Freepik’s **Content License Agreement**.