Thus, we proceed to provide all the information required in relation to the processing of personal data carried out through this website and other processing activities that we consider necessary to publish and make available to users.
1- IDENTIFICATION OF THE DATA CONTROLLERS
The party responsible for processing your personal data will be CECOTEC INNOVACIONES S.L.U. (hereinafter CECOTEC), whose identification and contact details are indicated in the Legal Notice.
If you want to contact our Data Protection Officer (DPO), you can do so by sending an email to email@example.com.
Additionally, we inform you that SOLOTRIATLON S.L., as part of the Cecotec business group, is jointly responsible for the processing of your data for the sending of electronic commercial communications, so that both companies will be responsible for the processing of your personal data for this activity. The identification and contact details of the co-responsible company are as follows:
Company name: SOLOTRIATLON, S.L.
Registered office: C/Pinadeta s/n, Quart de Poblet, C.P. 46930 (Valencia)
NIF (TIN): B-98.116.015
Registered in the Commercial Registry of Madrid, Volume 8995, Page 60, Section 8, Sheet 132585.
E-mail address: firstname.lastname@example.org
Office: C/Pinadeta s/n, Quart de Poblet, C.P. 46930 (Valencia)
Telephone: +34 963 21 07 28
Data Protection Officer:email@example.com
2. ORIGIN, PURPOSE, LEGAL BASIS OF THE PROCESSING AND CONSERVATION PERIOD
All personal data processed by CECOTEC comes from the user, directly or indirectly, through any of the following channels:
(1) Email address;
(2) Phone number;
(3) Customer Service form;
(4) Web user account;
(5) Web clients;
(6) Commercial communications;
(7) Video-surveillance of the facilities;
(8) CVs receipt and management;
(9) Social networks
(10) Virtual consultancy ("Los Frikis")
(11) Ceco Care
Below we provide you with information about the data processing we carry out on your personal data in connection with the way you provide it to us.
(1) Email address and phone number
When you send us an email or call requesting information of any kind, we will process your personal data as follows:
▪ Data categories: the data we will process will be your contact and identification data.
o If you contact us by email, we will process your email address and any other information you provide in the body of the message.
o If you contact us by phone, we will process your phone number and any other information you provide during the conversation.
▪ The purpose of the processing is to deal with enquiries received.
▪ Legitimation differs according to the type of consultation received. Thus, we can identify the following purposes and legal bases:
o Consent of the data subject, art. 6.1.a) of the GDPR, in cases where users contact Cecotec for the first time requesting any type of information (not related to orders, complaints, etc.).
o Execution of a contract, Art. 6.1.b.) of the GDPR, in cases where customers call requesting information on the status of their orders, cancellation, etc.
o Compliance with a legal obligation, art. 6.1.c) of the RGPD, in cases where customers contact us to manage the guarantee of their products, in accordance with Royal Legislative Decree 1/2007, of 16 November, which approves the revised text of the General Law for the Defence of Consumers and Users and other complementary laws.
(2) Customer Service form
If you decide to contact us through our contact form, the treatment will have the following characteristics:
▪ Data categories: the data we will process will be contact and identification data, as requested in the form itself (name and surname, e-mail, telephone number, serial number, order number, date of purchase, place of purchase and address).
As stated in the form, all the information requested is necessary to respond to your request. In this sense, when it is not provided, the indicated processing will not be carried out.
(3) Creating a user account
All the information requested to create the user account is necessary to manage your account. In this sense, when it is not provided, the indicated processing will not be carried out.
(4) Web clients
All the requested data is necessary to process the order (to issue invoice and ship the order). In this sense, when it is not provided, the indicated processing will not be carried out and your order of purchase will not be processed.
(5) Commercial communications:
(6) Video-surveillance of the facilities:
(7) CVs receipt
(8) Social Networks:
(9) Virtual consultancy “Los Frikis”:
(10) Ceco Care:
o Execution of a contract, Art. 6.1.b.) of the GDPR.
o Compliance with a legal obligation, art. 6.1.c) of the GDPR, derived from the obligation established in Royal Legislative Decree 1/2007, of 16 November, approving the revised text of the General Law for the Defence of Consumers and Users and other complementary laws.
Conservation periods applicable to all data processing. In certain cases and upon legitimation of a mandatory law, it will be necessary for Cecotec to conserve the data for longer than the established. Some examples are stated below:
3. INTERNATIONAL DATA TRANSFER
It is possible that for some of the data processing carried out by Cecotec your data may be transferred outside the European Economic Area, as Cecotec has suppliers located outside the European Economic Area.
However, international data transfers will be carried out under appropriate safeguards, with standard contractual clauses approved by the European Commission between the parties involved.
4.- DATA SUBJECT RIGHTS
According to the European Regulation 2016/679, data subjects may exercise the following rights with regard to data protection:
Templates, forms and further information on the referred rights:Official website of the Spanish Data Protection Agency. Your rights may be exercised through postal mail at the address indicated on the controller contact details, or via e-mail address to firstname.lastname@example.org. In order to proof your identity, it is necessary that you attach a copy of your ID. In case of exercising across legal representation, besides the DNI (ID) of the interested party, it will be necessary to provide the authentic document of the representation of the third one.
Option of withholding consent: In the event that consent has been given for a specific purpose, the data subject has the right to withhold its consent at any moment, without affecting the lawfulness of the data processing based on the previous consent.
Bringing a complaint before the Control Authority: You also have at your disposal the possibility of bringing a complaint before the Control Authority if you consider Cecotec does not carry out a proper processing, being able to bring a complaint before the Spanish Data Protection Agency (AEPD).
Regarding the automated decision making, you are hereby informed that the data processing will not attempt to make decisions about your information based on the automated data processing only (automated decisions), including profiling. Your data will not be processed in order to create profiles automatically or without human intervention to assess personal aspects related to your person, as analysing or foreseeing aspects regarding economic situations, health, preferences or personal interests, the personal situation of the data subject, all this to the extent that it has legal consequences for you. In any case, it would only be applicable when required by the law and your data would be processed subject to adequate guarantees, including specific information to the data subject and the right to obtain human intervention where appropriate, right to express your point of view, right to receive an explanation of the decision taken after being assessed and contesting the decision, when relevant.
5.- DATA ACCURACY
Users guarantee and respond, in any case, to the accuracy, validity and authenticity of the personal data provided, and undertake to keep them properly updated.
6.- PROOF OF AGE
In order to browse the web, the user must be over 14 years old, and must be of legal age in order to register with a user and account and purchase products. Therefore, the user guarantees and is responsible for fulfilling this requirement.
8.- SAFETY MEASURES
At Cecotec, we implement all the necessary safety measures in order to guarantee confidentiality, integrity and data availability, taking technical, organisational and legal measures to protect you against third parties.
This way, your data will only be processed by strictly necessary parties and stored in physical servers inside the European Union with SSL certificate. The SSL certificate is a safety protocol that allow data to travel in full, safe conditions from the server to de user, and completely encrypted or encoded in feedback.
Last revision: September 2021 © Cecotec Innovaciones S.L.