Privacy Policy

Data Controller Identity

• Trading Name: CRANE ORTOFACIAL SL
• Registered Office: Praza de Agramar, Ground Floor, Units 2–3, 15172 Oleiros, Spain
• Tax Identification Number (CIF / NIF): B-05-467-006
• Telephone: +34 981 635 772
• Email: info@carralseoane.com

Principles Applied to Data Processing

When processing your personal data, the Data Controller will apply the following principles, which comply with the requirements of the new European data protection regulation:

• Principle of lawfulness, fairness and transparency: The Data Controller will always require consent to process your personal data, which may be used for one or more specific purposes. You will be informed of these purposes beforehand in a fully transparent manner.

• Principle of data minimisation: The Data Controller will only request the data strictly necessary for the purpose or purposes for which it is collected.

• Principle of storage limitation: Data will be retained only for as long as strictly necessary for the purpose or purposes of processing.

The Data Controller will inform you of the applicable retention period according to the purpose of processing. In the case of subscriptions, the Data Controller will periodically review mailing lists and delete records that have remained inactive for a considerable period.

• Principle of integrity and confidentiality: Your data will be processed in such a way as to ensure its security, confidentiality and integrity. You should be aware that the Data Controller takes the necessary precautions to prevent unauthorised access to or improper use of users’ data by third parties.

Collection of Personal Data

You do not need to provide any personal data to browse this website. You only provide personal data in the following circumstances:

When contacting us through the contact forms or by email.

Your Rights

The Data Controller informs you that, in relation to your personal data, you have the right to:

Request access to the stored data.
Request rectification or erasure.
Request restriction of processing.
Object to processing.
Request data portability.

These rights are personal and must therefore be exercised directly by the data subject by contacting the Data Controller. This means that any customer, subscriber or collaborator who has provided their data at any time may contact the Data Controller to request information about the data held and how it was obtained, request rectification, request portability of their personal data, object to processing, restrict its use or request the deletion of that data from the Data Controller’s records.

To exercise your rights of access, rectification, erasure, portability and objection, you must send an email to info@carralseoane.com, together with legally valid proof of identity, such as a photocopy of your national identity card or equivalent document.

You have the right to effective judicial protection and to lodge a complaint with the supervisory authority, in this case the Spanish Data Protection Agency (Agencia Española de Protección de Datos), if you believe that the processing of your personal data infringes the Regulation.

Purpose of Personal Data Processing

When you connect to the website to send an email to the Data Controller, subscribe to a newsletter or enter into a contract, you provide personal information for which the Data Controller is responsible. This information may include personal data such as your IP address, first and last name, physical address, email address, telephone number and other information. By providing this information, you consent to its collection, use, management and storage by carralseoane.com, solely as described in the Legal Notice and this Privacy Policy.

The personal data collected and the purposes for which the Data Controller processes it vary depending on the information collection method:

• Contact forms: The Data Controller may request personal data including your first and last name, email address, telephone number and website address in order to respond to your enquiries.

For example, the Data Controller uses this information to respond to your messages, questions, complaints, comments or concerns relating to the information provided on the website, the services offered through the website, the processing of your personal data, questions concerning the legal notices published on the website, and any other enquiries that are not subject to the website’s terms or contractual conditions.

The Data Controller also processes your personal data for the following purposes:

To ensure compliance with the terms set out in the Legal Notice and applicable law. This may include developing tools and algorithms to help the website safeguard the confidentiality of the personal data it collects.
To support and improve the services offered by this website.
To analyse browsing activity. The Data Controller collects other non-identifying data through cookies downloaded to your computer when you browse the website. The characteristics and purposes of these cookies are described in the Cookie Policy.
To manage social media accounts. The Data Controller maintains a presence on social media. If you follow the Data Controller on social media, the processing of your personal data will be governed by this section, as well as by the terms of use, privacy policies and access rules of the relevant social media platform, which you will have previously accepted.

The Data Controller will process your personal data to manage its social media presence appropriately, inform you about its activities, products or services, and pursue any other purposes permitted by the applicable social media platform rules.

Under no circumstances will the Data Controller use followers’ social media profiles to send individualised advertising.

Security of Personal Data

To protect your personal data, the Data Controller takes all reasonable precautions and follows industry best practices to prevent its loss, misuse, unauthorised access, disclosure, alteration or destruction.

The security of your data is ensured through the implementation of all necessary security measures. You may consult the relevant privacy policy for further information.

Content from Other Websites

Pages on this website may include embedded content, such as videos, images, articles and other material. Embedded content from other websites behaves in exactly the same way as if you had visited the other website directly.

These websites may collect data about you, use cookies, embed additional third-party tracking code and monitor your interaction with that content.

Cookie Policy

This website needs to use cookies to function properly. Cookies are pieces of information stored in your web browser.

You can find all the information relating to the collection, purpose and processing of cookies on the Cookie Policy page.

Legal Basis for Data Processing

The legal basis for processing your data is your consent.

To contact the Data Controller, subscribe to a newsletter or post comments on this website, you must accept this Privacy Policy.

Categories of Personal Data

The categories of personal data processed by the Data Controller are:

Identification data.

Retention of Personal Data

The personal data you provide to the Data Controller will be retained until you request its deletion.

Recipients of Personal Data

• Google Analytics is a web analytics service provided by Google, Inc., a Delaware company whose principal office is located at 1600 Amphitheatre Parkway, Mountain View, California, CA 94043, United States (“Google”). Further information is available at https://analytics.google.com.

Google Analytics uses cookies, which are text files placed on your computer, to help the Data Controller analyse how users use the website. The information generated by the cookie about your use of the website, including your IP address, will be transmitted directly to and stored by Google on servers in the United States.

You can also view a list of the types of cookies used by Google and its partners, together with information about their use of advertising cookies.

Website Browsing

When browsing this website, non-identifying data may be collected, including your IP address, geolocation, records of how services and websites are used, browsing habits and other data that cannot be used to identify you.

The website uses the following third-party analytics service:

Google Analytics.

The Data Controller uses the information obtained to compile statistics, analyse trends, administer the website, study browsing patterns and collect demographic information.

Accuracy and Truthfulness of Personal Data

You undertake to ensure that the data provided to the Data Controller is correct, complete, accurate and up to date, and to keep it updated as necessary.

As a user of this website, you are solely responsible for the accuracy and correctness of the data you submit, releasing the Data Controller from any liability in this regard.

Acceptance and Consent

As a user of this website, you declare that you have been informed of the conditions relating to the protection of personal data, and you accept and consent to the processing of your data by the Data Controller in the manner and for the purposes described in this Privacy Policy.

Withdrawal of Consent

The exercise of your rights does not extend to any data that the Data Controller is required to retain for administrative, legal or security purposes.

Changes to the Privacy Policy

The Data Controller reserves the right to amend this Privacy Policy to reflect legislative or case-law developments, as well as industry practices.

This Privacy Policy will remain in force until it is replaced by a revised version that has been duly published.