Legal information
Privacy policy
This is a courtesy translation of the Spanish text. In the event of any discrepancy, the Spanish version shall prevail.
1. Introduction. Website owner details
SOTO APARICIO makes this Privacy Policy available to you on the website https://www.sotoaparicio.com in order to inform you in detail about how we process your personal data and protect your privacy and the information you provide to us. Should we make changes to it in the future, we will notify you through the website or by other means, so that you can learn about the new privacy conditions introduced.
Website owner details:
- Company name: SOTO APARICIO S.L.U.
- Tax ID (NIF): B84369503
- Registered address: C/ ARAGÓN 17,1D, 28320, PINTO, MADRID (Spain)
- Email address: info@sotoaparicio.com
- Telephone: +34 91 874 20 40
- Main business activity: Lifting and transport of concrete by pumping. Transport of concrete with mixer trucks and hire of construction machinery. Operation of quarries and gravel pits for the production of aggregates, including extraction and subsequent processing of stone for sale.
- Registry details: Registered at the Commercial Registry of Madrid, Volume 21544, Book 0, Folio 114, Section 8, Sheet M-383.326, Entry 1
2. Data protection
In accordance with the regulations in force on the protection of personal data, we inform you that your data will be incorporated into the processing system owned by SOTO APARICIO, whose details are given above. The respective purposes, retention periods and legal bases are set out below. For those processing operations that require it, information is also given on possible profiling and automated decisions, as well as on any disclosures and international transfers that SOTO APARICIO intends to carry out.
Processing operations carried out
Website management
- Purpose
- Processing and management of the data required for the website to work
- Retention period
- For as long as consent is maintained
- Legal basis
- The consent of the data subject
- Type of data
- Merely identifying data
- Disclosures
- None envisaged
- International transfers
- None envisaged
- Profiling
- None envisaged
Regulatory compliance management
- Purpose
- Management and processing of the obligations and duties arising from compliance with the regulations to which the company is subject
- Retention period
- Copies of the documents are kept until the actions for claiming possible liability become time-barred
- Legal basis
- Compliance with a legal obligation
- Type of data
- Merely identifying data
- Disclosures
- Your data will be disclosed, where necessary, to public bodies and/or authorities with competence in the matter in order to comply with the obligations laid down in the applicable regulations. The legal basis for the disclosure is compliance with the obligations laid down in the applicable regulations
- International transfers
- None envisaged
- Profiling
- None envisaged
Whistleblowing channel management
- Purpose
- To manage, investigate and resolve reports concerning the alleged commission, within the organisation, of acts that may be contrary to the Code of Ethics
- Retention period
- Data will be kept for a period not exceeding three months after the date on which the investigation procedure ends, except where disciplinary and/or judicial proceedings are open.
- Legal basis
- Prior consent of the data subject; the legitimate interest of SOTO APARICIO in the investigation; compliance with a legal obligation.
- Type of data
- Merely identifying data
- Disclosures
- Your data will be disclosed, where necessary, to public bodies and/or authorities with competence in the matter in order to comply with the obligations laid down in the applicable regulations. The legal basis for the disclosure is compliance with the obligations laid down in the applicable regulations.
- International transfers
- None envisaged
- Profiling
- None envisaged
Marketing activities
- Purpose
- Collection, recording and processing of data for advertising and commercial prospecting of our products and/or services
- Retention period
- For as long as consent is maintained
- Legal basis
- The consent of the data subject
- Type of data
- Merely identifying data
- Disclosures
- None
- International transfers
- None envisaged
Cookie management
- Purpose
- Management and installation of cookies
- Retention period
- For as long as consent is maintained
- Legal basis
- The consent of the data subject
- Type of data
- Merely identifying data
- Disclosures
- Cookies may be disclosed to third parties for statistical purposes
- International transfers
- International data transfers will be made to the corresponding offices abroad
- Profiling
- None envisaged
In accordance with Article 32 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/65/EC, SOTO APARICIO undertakes to adopt the necessary technical and organisational measures, commensurate with the level of risk associated with the processing operations indicated above, so as to guarantee their integrity, confidentiality and availability.
3. Rights of data subjects
SOTO APARICIO informs Users that they may exercise their rights of access, rectification, restriction, erasure, portability and objection to the processing of their personal data before the Data Controller, as well as withdraw the consent given.
- Right of access: The right of users to obtain information about their specific personal data and the processing that has been or is being carried out, as well as the available information on the origin of that data and the disclosures made or envisaged.
- Right to rectification: The right of the data subject to have inaccurate or incomplete data amended. It may only be satisfied in relation to information under the control of the application, for example by deleting comments published on the site itself, images or web content containing the user’s personal data.
- Right to restriction of processing: The right to have the purposes of the processing originally envisaged by the controller restricted.
- Right to erasure: The right to have the user’s personal data deleted, except as provided for in the GDPR itself or in other applicable regulations that require it to be kept, in due time and form.
- Right to data portability: The right to receive the personal data the user has provided, in a structured, commonly used and machine-readable format, and to transmit it to another controller.
- Right to object: The right of users to have their personal data not processed, or to have the application cease processing it.
In order to exercise any of the rights described above, the following requirements must be met:
Submission of a written request to the address C/ ARAGÓN 17,1D, 28320, PINTO, MADRID (Spain), or by email to info@sotoaparicio.com.
The written request sent by the data subject must meet the following legal requirements:
- Name and surname of the data subject and a copy of their national ID document. In the exceptional cases where representation is accepted, identification of the representative by the same means is also required, together with the document proving such representation. The photocopy of the ID document may be replaced provided identity is proven by any other legally valid means.
- A request setting out what is being applied for (the right being exercised or the information to be accessed). If it does not refer to a specific file, all the information held about the data subject’s personal data will be provided. If information on a specific file is requested, only the information in that file will be provided. Information concerning a third party can never be provided. If the request is made by telephone, the data subject will be told to make it in writing and will be informed how to do so and the address to send it to. Information will never be given by telephone.
- An address for the purposes of notifications.
- Date and signature of the applicant.
- Documents supporting the request being made.
- The data subject must use any means that allows proof of the sending and receipt of the request.
Finally, we inform you that you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) if you become aware of, or consider that, an event may constitute a breach of the applicable data protection regulations.