Skip to Content

PRIVACY POLICY



POLICY OF PRIVACY

1. INFORMATION TO THE USER

CARROCERIAS ESTEVA, S.A. (hereinafter, "CARROCERIAS ESTEVA"), as Data Controller, informs users of its website and individuals whose personal data is processed by the entity that their data will be processed in accordance with the provisions of the Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), Organic Law 3/2018, on Personal Data Protection and guarantee of digital rights (LOPDGDD), and other applicable regulations.

This Privacy Policy describes how we collect, use, store, and protect personal data, as well as the rights that individuals have.

2. IDENTITY OF THE DATA CONTROLLER

Corporate name : CARROCERIAS ESTEVA, SA

CIF: A58285255

Postal address: Francesc Macià, 13 A – 08755 Castellbisbal (Barcelona)

Email address: esteva@esteva.com

3. APPLICABLE PRINCIPLES TO THE PROCESSING

CARROCERIAS ESTEVA processes personal data in accordance with the following principles:

  • Lawfulness, fairness, and transparency.
  • Purpose limitation.
  • Data minimization.
  • Accuracy.
  • Storage limitation.
  • Integrity and confidentiality.
  • Proactive responsibility.

4. CATEGORIES OF PROCESSED DATA

We may process the following categories of data:

  • Identifying data.
  • Professional contact data.
  • Data related to the company or organization in which the individual provides services.
  • Data derived from web browsing in accordance with the Cookie Policy.
  • Information necessary to address inquiries, requests, or business relationships.

5. SOURCE OF THE DATA

Personal data may be obtained:

a) Directly from the data subject

Through:

  • Contact forms.
  • Information requests.
  • Communications by email or phone.
  • Business or contractual relationships.

b) From third-party commercial information providers

CARROCERIAS ESTEVA may process data obtained from specialized providers of commercial information and business databases that guarantee they have obtained the data in accordance with applicable data protection regulations.

c) From publicly accessible sources

Professional data may be processed from business directories, corporate websites, public records, or publicly accessible sources, when applicable regulations allow it and always for purposes related to the professional activity of the recipient.

 

ADDITIONAL INFORMATION ABOUT DATA NOT OBTAINED DIRECTLY FROM THE DATA SUBJECT

When personal data has not been obtained directly from the data subject, CARROCERIAS ESTEVA, S.A. may process it for the purpose of carrying out commercial actions related to its business activity.

The data may come from specialized providers of commercial information, business directories, public records, publicly accessible sources, or entities that have guaranteed to have a valid legal basis for the communication of such data, in accordance with the applicable regulations on data protection.

The categories of data processed may include identifying data, professional contact information, position held, company or organization to which the interested party belongs, and any other professional information necessary for the development of legitimate commercial activities.

The legal basis for the processing will be the legitimate interest of CARROCERIAS ESTEVA, S.A. for the development of commercial promotion activities aimed at companies and professionals, as well as, where applicable, the consent granted by the interested party to the third party that provided the data.

The interested parties may request additional information about the specific origin of their data, as well as exercise at any time their rights of access, rectification, deletion, limitation of processing, portability, and opposition, by communication addressed to esteva@esteva.com.

When the data is used for sending commercial communications, the interested party may oppose at any time the receipt of such communications, free of charge and simply, through the mechanisms enabled in each communication or by contacting the data controller.

6. PURPOSES OF THE PROCESSING

Personal data may be processed for the following purposes:

Management of inquiries and requests

To respond to requests for information, inquiries, or requests made by users.

Management of commercial and contractual relationships

Manage budgets, orders, contracted services, billing, and other actions derived from the commercial relationship.

Commercial communications

Send information about products, services, promotions, news, and activities related to the business sector of CARROCERIAS ESTEVA.

These communications may be made by electronic or non-electronic means.

Commercial prospecting

Carry out actions of commercial prospecting aimed at companies and professionals related to the activity developed by CARROCERIAS ESTEVA.

7. LEGAL BASIS FOR PROCESSING

The legitimizing bases for processing are:

Consent of the interested party

When the interested party has expressly given their consent for a specific purpose.

Execution of a contractual or pre-contractual relationship

When the processing is necessary for the management of a request, budget, or contract.

Compliance with legal obligations

When there is a legal obligation applicable to the responsible party.

Legitimate interest

CARROCERIAS ESTEVA may process personal data on the basis of its legitimate interest to:

  • Maintain commercial relationships with clients and potential clients.
  • Carry out direct marketing actions aimed at companies and professionals.
  • Promote products and services related to its activity.

In these cases, the corresponding weighting between the business interest and the rights and freedoms of the data subjects will be carried out.

8. RECIPIENTS OF THE DATA

The data may be communicated to:

  • Public Administrations when there is a legal obligation.
  • Financial entities for the management of collections and payments.
  • Courts and Tribunals when appropriate.
  • Service providers acting as Data Processors.

Among these providers may be found:

  • Web hosting providers.
  • IT service providers.
  • Platforms for sending electronic communications and digital marketing.
  • Storage and document management providers.

All of them will act according to the instructions of the responsible party and under the corresponding data processing agreements.

9. INTERNATIONAL DATA TRANSFERS

Certain service providers used by CARROCERIAS ESTEVA may be located outside the European Economic Area or carry out processing from third countries.

In such cases, the international data transfers will only be carried out when there are adequate guarantees in accordance with Articles 44 and following of the GDPR, including, among others, the adoption of Standard Contractual Clauses approved by the European Commission or adequacy decisions.

10. RETENTION PERIOD

Personal data will be retained:

  • As long as there is a commercial or contractual relationship.
  • As long as the interested party does not request their deletion or opposition.
  • As long as they are necessary for the purpose for which they were collected.

Once these periods have ended, the data will remain duly blocked for the periods required by the applicable regulations to address possible legal liabilities.

11. RIGHTS OF THE INTERESTED PARTIES

The interested parties may exercise the following rights:

  • Access.
  • Rectification.
  • Deletion.
  • Limitation of processing.
  • Portability.
  • Opposition.
  • Withdrawal of consent.

Furthermore, when the processing is based on legitimate interest for direct marketing purposes, the interested party will have the right to oppose such processing at any time.

To exercise their rights, they may send a request to:

Email address: esteva@esteva.com