This English version is provided for convenience. In the event of any discrepancy, the Spanish version prevails.
1. Data controller
In accordance with Regulation (EU) 2016/679 ("GDPR") and Spanish Organic Law 3/2018 ("LOPDGDD"), users are informed of the following details of the data controller:
| Item | Information |
|---|---|
| Controller | TRANS-GRÚAS J. PALAZÓN, S.L. |
| Tax ID (NIF/CIF) | B63961684 |
| Address | Avinguda Principal, 14 · 08181 Sentmenat (Barcelona), Spain |
| Phone | +34 937 151 650 |
| transgruasjp@gmail.com |
2. Data Protection Officer
Trans-Grúas J. Palazón, S.L. is not required to appoint a Data Protection Officer under article 37 GDPR and article 34 LOPDGDD. For any data protection matter, please write to transgruasjp@gmail.com.
3. Purposes of processing
3.1. Handling enquiries
Managing enquiries, information requests, quote requests and any other communication made by phone or email.
3.2. Service provision and client management
Formalising the contractual relationship, managing the contracted services, issuing invoices and complying with the related legal obligations.
3.3. Commercial communications (where applicable)
Sending information about services and news related to the Company's activity, only with the User's express consent or where a prior contractual relationship allows it under article 21.2 LSSI-CE.
3.4. Legal obligations
Responding to requests from competent authorities and complying with tax, accounting and commercial obligations.
4. Legal basis
| Purpose | Legal basis |
|---|---|
| Handling enquiries and requests | Consent (art. 6.1.a GDPR) and pre-contractual measures (art. 6.1.b GDPR) |
| Service provision and client management | Performance of a contract (art. 6.1.b GDPR) |
| Invoicing and tax obligations | Legal obligation (art. 6.1.c GDPR) |
| Commercial communications to clients about similar services | Legitimate interest (art. 6.1.f GDPR and art. 21.2 LSSI-CE) |
| Commercial communications to non-clients | Express consent (art. 6.1.a GDPR and art. 21.1 LSSI-CE) |
5. Categories of data
- Identification data: name, surname, tax ID (for professionals or companies).
- Contact data: postal address, email address, phone number.
- Service data: location, description of the service, date and time.
- Financial and billing data: bank details, amounts, invoices.
- Browsing data: IP address, device and browser type (see Cookie Policy).
No special categories of data are processed unless the User provides them voluntarily and they are necessary for the service.
6. Retention periods
| Processing | Retention |
|---|---|
| Enquiries not leading to a contract | Up to 1 year from the last communication |
| Client data | For the duration of the contractual relationship and then for the legal limitation periods (generally up to 6 years) |
| Tax and accounting data | At least 6 years (art. 30 Commercial Code) and, where applicable, up to 10 years under Law 10/2010 |
| Commercial communications | Until consent is withdrawn or the User objects |
After these periods, data will be blocked for the legally established limitation periods and then deleted.
7. Recipients
Personal data will not be disclosed to third parties except where there is a legal obligation, where necessary to perform the contract (financial institutions, insurers, recipients of the transport service), or with the User's express consent.
8. Data processors
The controller works with providers acting as data processors under contracts compliant with article 28 GDPR, including:
- Hosting and web services provider: Cloudflare, Inc.
- Email provider: Google LLC (Gmail)
9. International transfers
Some processors may be located outside the European Economic Area, particularly in the United States. In such cases transfers are made with appropriate safeguards: European Commission adequacy decisions, Standard Contractual Clauses or the EU-US Data Privacy Framework. Further information is available at transgruasjp@gmail.com.
10. Your rights
You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing, data portability, not to be subject to automated decisions, and to withdraw consent, by writing to transgruasjp@gmail.com or to Avinguda Principal, 14 · 08181 Sentmenat (Barcelona), stating the right exercised and attaching a copy of your ID.
If you consider your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6 · 28001 Madrid, or at www.aepd.es.
11. Security measures
The controller applies appropriate technical and organisational measures under article 32 GDPR, including access control, encrypted communications (HTTPS), periodic backups, staff training and confidentiality agreements. Nevertheless, no Internet security measure is impregnable.
12. Accuracy of data
The User guarantees that the personal data provided is true, accurate, current and complete, and undertakes to report any changes.
13. Minors
The Website is not aimed at children under 14. The controller does not knowingly collect data from them; if detected, such data will be deleted immediately.
14. Changes to this policy
The controller may modify this Privacy Policy to adapt it to legal or regulatory changes. The new version will be published on the Website with its update date.