Privacy Policy

Processing of personal data

At Macranova, we care about the personal data we handle and the strict compliance with the current regulations regarding the protection of personal data, including, among others, Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, as well as Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights.

In accordance with this, the following issues regarding the processing of personal data that we carry out at Macranova are reported:

Who is responsible for the processing of your personal data?

  • Identity: E.P. (Macranova)
  • NIF: 60068567L
  • Postal address: C/Alfons el magnanim 15, Barcelona 08019
  • Email: info @ macranova . com (without spaces)

Principles regarding treatment

In the processing of personal data carried out herein, the principles required by Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC (hereinafter, GDPR) are respected:

  • Principle of lawfulness, fairness, and transparency: the data we collect is processed lawfully, fairly, and transparently, with the prior consent of the data subjects when necessary or, where applicable, for the execution of a contract in which the data subject is a party or for the application at their request of pre-contractual measures, or if the processing is necessary for compliance with a legal obligation applicable, or for the satisfaction of legitimate interests pursued by the controller or by a third party, provided that such interests do not override the interests or the fundamental rights and freedoms of the data subject requiring the protection of personal data, particularly when the data subject is a child.
  • Purpose limitation principle: the personal data we process is used for the purposes indicated in the section "What purpose do we use your personal data for".
  • Data minimization principle: according to this principle, the only personal data we collect from users is strictly necessary to manage the contractual relationship or to address the inquiries, suggestions, and/or information requests they make to us.
  • Principle of accuracy: the personal data we collect will be kept accurate and, if necessary, updated. To this end, in the event of any change in personal data, the user must inform us so that we can make the appropriate update.
  • Limitation principle of the retention period: the personal data we process will be retained for the periods indicated in the section "How long will we keep your personal data?".
  • Principle of integrity and confidentiality: to respect this principle, personal data will be processed in a way that ensures adequate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, applying appropriate technical and organizational measures.

What purpose do we use your personal data for?

Customer data: to manage your registration in order to make purchases on our website and, accordingly, manage and attend to the orders you place and the services you require.

Likewise, in case you check the box enabled for this purpose, we will use your contact information to manage your subscription to our newsletter and, accordingly, send you, by electronic means, information about our company, its products, services, news, offers, or promotions.

Data collected through support tickets: to manage and address the incident you notified us regarding the purchase made.

Subscriber data for newsletter: to manage the subscription to our newsletter and, therefore, the sending, by email of newsletters or informational bulletins about our company, its products, services, news, offers, or promotions.

Data collected through the contact form: to manage and address the inquiries or information requests made by users.

User data from our social media profiles: to interact with our users, mainly by responding to comments they make on the posts we publish on the profiles we have on different social networks.

What is the legitimacy for the processing of your personal data?

Customer data: the legal basis for processing your personal data is the execution of the contract in which the customers are a party.

Regarding the sending of commercial information, the legal basis is the consent you provide by checking the box enabled to subscribe to our newsletter.

Data collected through support tickets: the legal basis for the processing of your personal data is the execution of the contract in which the customers are a party.

Subscriber data for the newsletter: the legal basis for the processing of personal data is the consent given when subscribing to our newsletter and, therefore, the necessity of such processing to manage your subscription.

Data collected through the contact form: the legal basis for the processing of personal data provided to us by the interested parties when filling out the form is the consent given when contacting us through it and, therefore, the necessity of such processing to address and respond to the inquiries or information requests made to us by users.

User data from our social media profiles: the legal basis for the processing of your personal data is the consent given by following us on our social media, making such processing necessary to interact with users (for example, to respond to comments).

How have we obtained your personal data?

All personal data that we process at Macranova is provided to us by the interested parties themselves or their legal representatives.

The personal data we collect through this website has been gathered through the existing forms or through the email address provided for this purpose.

To which recipients will your personal data be communicated?

The personal data of customers will be communicated, where applicable, to the tax administration for the fulfillment of legal and tax obligations, as well as to the financial entity/entities through which Macranova manages collections (in the case of customers) and payments (in the case of suppliers and employees).

Likewise, for certain matters we use third-party services, which act as data processors, with whom we have signed the corresponding data processing agreement in accordance with the provisions of Article 28.3 of the GDPR.

How long will we keep your personal data?

Customer data: personal data will be retained for the duration of the corresponding contractual relationship and, once this has ended, for the necessary periods to comply with legal obligations.

In relation to the sending of newsletters, your personal contact data will be kept as long as you do not revoke your consent by requesting to unsubscribe.

Data collected through support tickets: we will retain your personal data for the necessary periods to manage and address the issue you notify us regarding the purchase made.

Subscriber data for the newsletter: we will keep the personal data of subscribers as long as they do not revoke their consent by requesting to unsubscribe.

Data collected through the contact form: the personal data you provide will be kept only during the management of the inquiries or information requests made by users, so that once the processing is completed, it will be deleted.

User data from our social media profiles: the retention periods for the personal data of our followers on social media depend on the policies of each social network, although we will only process them until they stop following us.

What are your rights when you provide us with your personal data?

  • Right to request access to your personal data: in order to know and verify the lawfulness of the processing, you may request at any time confirmation of whether Macranova is processing your personal data and, in that case, we will inform you, among other things, about what data we are processing, its purpose, source of the data, expected retention period of the data, and, if applicable, recipients or categories of recipients.
  • Right to request your rectification: you may request us to rectify personal data that is inaccurate or to complete data that is incomplete, including through an additional statement. In such case, you must indicate in your request which data you are referring to and the correction that needs to be made, and you must attach, if applicable, the supporting documentation of the inaccuracy or incomplete nature of the data being processed.
  • Right to request deletion ("right to be forgotten"): you can request that we delete your personal data and stop processing it if it is no longer necessary for the purposes for which it was collected or processed in another way, you withdraw your consent, it has been processed unlawfully, or it must be deleted to comply with a legal obligation.
  • Right to request the limitation of the processing of your personal data: in this case, Macranova will only retain your personal data for the formulation, exercise, or defense of claims, or with a view to protecting the rights of another natural or legal person or for reasons of significant public interest.
  • Right to data portability: you can request that we provide your personal data to you or to another controller you indicate, in a structured, commonly used, and machine-readable format.
  • Right to object to processing: Macranova will stop processing your personal data in the manner you indicate, unless we have to continue processing it for compelling legitimate reasons or for the formulation, exercise, or defense of possible claims.

How to exercise your data protection rights: by sending an email to info @ macranova . com (without spaces), accompanying in any case a photocopy of your ID.

Macranova will respond to all requests within the deadlines and conditions required by the current regulations on the protection of personal data.

How to file a complaint with the Spanish Data Protection Agency: if you believe that we have not properly handled your personal data or have not adequately addressed your data protection rights, you can file a complaint with the Spanish Data Protection Agency, either through its electronic headquarters or at its office, located at Calle Jorge Juan, nº 6, C.P. 28001 in Madrid.

More information about data protection rights and complaints to the Control Authority at www.aepd.es.

Security

In accordance with the provisions of Article 32 of the GDPR, Macranova has adopted appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

In order to assess the adequacy of the security level, particular attention has been paid to the risks presented by data processing, especially as a result of the destruction, loss, or accidental or unlawful alteration of personal data transmitted, stored, or otherwise processed, or the unauthorized communication or access to such data.

Duty of secrecy

Macranova has taken measures to ensure that anyone acting under their respective authority and having access to the personal data provided to us by users can only process it following the company's instructions, and must also maintain the corresponding professional secrecy regarding the same, which will have an indefinite duration.

To this end, our employees have signed a confidentiality and secrecy obligation document regarding the information and personal data they handle in connection with the existing employment relationship with the company.

Cookies

Cookies are small text files that are stored on the hard drive or in the memory of the computer that accesses or visits the pages of certain websites, so that user preferences can be known when reconnecting. The cookies stored on the user's hard drive cannot read the data contained in it, access personal information, or read cookies created by other providers.