PRIVACY POLICY

I. INTRODUCTION AND IDENTIFICATION DETAILS

This Privacy Policy, which is an integral part of the Legal Notice, governs the processing of the personal data provided by the data subject and which are collected by ESPINA OBRAS HIDRÁULICAS, S.A.U. (hereinafter, ESPINA) through its website www.espina.es (hereinatfer, the Website). Please be advised that ESPINA, a company with registered address at Polígono Industrial del Tambre, Vía Edison nº 62, C.P.: 15890 – Santiago de Compostela (A Coruña) and holder of Spanish Tax Code no. A-15.168.156, is the entity responsible for the processing of your personal data.

II. SCOPE

The data that will be processed by ESPINA will be the identification and contact data (including full name, email, telephone number, postcode) provided by the subject data through the Website.

III. PURPOSE OF THE PROCESSING

The purpose of the collection and processing of personal data is to handle, manage, process and deal with queries, inquiries, claims, suggestions and generally any request made by those contacting us.

IV. LEGITIMACY OF DATA PROCESSING

The legal basis underlying the processing of personal data is the consent granted by the data subject, as stated when they agreed to subscribe to these communications.

V. DATA RETENTION

The personal data provided will be kept for as long as it is necessary to deal with the request made by the data subject, or, where applicable, according to the legal basis of their processing pursuant to the applicable law. Notwithstanding this, the data subject may request that data be suppressed when legally entitled to it.

VI. RECIPIENTS OF THE DATA

Generally, no personal data will be transferred to third parties, unless there is a legal obligation. Notwithstanding the above, personal data may be accessed by: – Other subsidiaries of the corporate group ESPINA is part of (GRUPO VALTALIA), when, on the basis of the consultation, application, etc. made by the data subject it is necessary to achieve said purpose. – Certain providers of technological services that are in charge of the processing and have all necessary security measures in place. In the event that any of said providers is located outside the European Economic Area (EEA), ESPINA will take any and all appropriate measures under the applicable regulations to ensure proper management of data.

VII: RIGHTS OF THE DATA SUBJECTS

The data subjects may exercise their rights of access, rectification, cancellation, portability of their personal data and/or the limitation or opposition to their processing at any time in writing and providing proof of identity by an email to contacto@espina.es or by postal mail to the following address: Pol. Ind. del Tambre, Vía Edison nº 62, C.P.: 15890 – Santiago de Compostela (A Coruña, Spain). For any matter with regard to the processing of your data on the part of ESPINA, and particularly when the data subject has not obtained satisfaction in the exercise of their rights, the Agencia Española de Protección de Datos may be contacted at: www.aepd.es; C/ Jorge Juan, 6, 28001-Madrid, Spain.

VIII. SECURITY MEASURES

ESPINA, in accordance with the current legislation on data protection, has taken such technical and organizational measures as necessary to ensure the integrity, security and preservation of personal data as well as to prevent their tampering, loss, unauthorized access or processing. These measures have been implemented taking into account such criteria as the scope, the content and the purposes of the processing, the state of the art and the risks involved, on the understanding that security measures on the Internet are not impregnable.