Privacy Policy

“Pinexports” is deeply committed to compliance with Spanish and European regulations on the protection of personal data, and guarantees full compliance with the obligations set forth, as well as the implementation of the security measures provided for in the General Data Protection Regulation (GDPR) (EU) 2016/679, of April 27, and in Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD and GDD, hereinafter LOPD).

In accordance with these regulations, we inform you that the use of our website may require the provision of certain personal data through registration or contact forms, or by sending emails, and that these will be processed by “Pinexports”, the Data Controller, whose data are:

• Company name: Pinexports Trading, S.L.U.
• CIF: B70532445
• Registered Office: Rua Nueva 18, 1º dcha.,15003, A Coruña
• Telephone: 881 949 571
• eMail: info@pinexports.com

Obtaining and Processing Personal Data

Personal data is any information relating to a person: name, email, address, telephone number, NIF/NIE… Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by their Internet access provider.

“Pinexports”, as Data Controller, has the duty to inform Users of its website about the collection of personal data that may be carried out, either by sending an email or by filling in the forms included on the website.

Only the data required to perform the contracted service will be obtained, or to be able to adequately respond to the request for information made by the User. The data collected are identifying and correspond to a reasonable minimum to be able to carry out the activity carried out. In particular, specially protected data is not collected at any time. In no case will the data be used for any purpose other than the purpose for which it was collected.

Contact/email forms

• Purpose: To respond to your request for information made through our contact form(s).
• Legitimation: The legal basis that legitimizes this processing is the consent of the User, which may be revoked at any time.
• Data transfer: Personal data will be processed through servers managed by IONOS, which will be considered the Data Processor.

Customer registration/sign-up forms

• Purposes:
  • To manage your User registration on our website.
  • To manage supply requests.
  • To provide information about the processing and status of orders.
  • Historical record of orders placed.
  • Management of comments and content.
  • Sending communications via email and/or telephone, in order to inform the User of possible incidents, errors, problems and/or status of orders.
• Legitimacy: The legal basis that legitimizes this treatment is the execution of a contract.
• Data transfer: “Pinexports” will not transfer or communicate your data to any third party, except in the cases provided for by law or when it is strictly necessary for the provision of a service. Specifically, the data may be transferred to:
  * Technology service providers.
  * Payment service providers.
  * Courier and parcel companies.
  * Third parties or intermediaries, as service providers, who operate on our own behalf (management, consulting, etc.).

Data transfers will occur respecting the strictest confidentiality, using the necessary measures, such as the signing of confidentiality contracts, or adherence to their privacy policies established on their respective websites. The User may refuse to transfer his/her data to the Data Processors, by means of a written request, using any of the aforementioned means.

In addition, in those cases where it is necessary, the Clients’ data may be transferred to certain bodies, in compliance with a legal obligation: Spanish Tax Agency, banking entities, Labour Inspection, etc.

Comment form

• Purpose: To make a comment or review for publication on the website.
• Legitimation: The legal basis that legitimises this processing is the User’s consent, which may be revoked at any time.
• Data transfer: Personal data will be processed through the servers of this website, managed by IONOS, which will be considered the Data Processor.

Minors

Only persons over 14 years of age may provide personal data on this website. According to the LOPD and GDD, in the case of minors under 14 years of age, the consent of their parents or guardians is mandatory for us to process their personal data.

On the other hand, only persons over 18 years of age may contract our services. In the case of minors under 18 years of age, the consent of their parents or legal guardians is mandatory for us to provide the services offered, unless the minor is emancipated.

User Registration – Passwords

In order to use the services offered by Pinexports, registration as a User is required. To do this, the client must fill out the corresponding form with the details of their company and the person responsible, in which we collect, among other data, the following information:

• Name and surname
• Email and/or telephone
• Shipping addresses
• IP
• Username/password

Once registered, the User will receive an email informing them that Pinexports must validate their profile. Once validated, they will be able to access their private area.

The User must also provide a password, which must meet certain security requirements. They do not expire. To recover the password, the User must go to the specific recovery form and enter their email to continue with the process and be able to modify it, by clicking on the link that will be sent to the email address entered. The User is responsible for maintaining the confidentiality of their password, as well as for all uses made of it. They must inform “Pinexports” of any unauthorized use made of their account or password as soon as possible.

Once registered, the User has access to a private panel, where he/she can view certain content, make supply requests, see the record of orders placed, sign contracts using TOTP, accept quotes, view invoices, communicate with his/her account manager, etc. He/she can also manage options in his/her account, such as the password or User data.

The User may receive the following notifications:

• When registering on the platform (account validation email).
• Those necessary to manage supply orders, such as receipts for the same, incidents, contracts, invoices, etc.
• Pinexports Newsletter (the User may unsubscribe in his/her private area and in the corresponding links included at the bottom of each newsletter).
• For comments made, and responses to them.
• For password recovery.
  When unsubscribing or deleting the account.

Security Measures

Users of this website are informed that “Pinexports” has adopted the technical and organisational security measures within our reach to prevent the loss, misuse, alteration, unauthorised access and theft of data, and thus guarantee the confidentiality, integrity and quality of the information contained therein, in accordance with the provisions of current data protection regulations. The personal data collected in the forms are processed solely by the staff of “Pinexports” or the designated Data Processors.

The “Pinexports” Website also has SSL encryption, which allows the User to securely send their personal data through the contact or registration forms on the website.

Accuracy of data

The User declares that all the data provided by them is true and correct and undertakes to keep it updated. The User will be responsible for the accuracy of their data and will be solely responsible for any conflicts or disputes that may arise from the falsity of the same. It is important that, so that we can keep personal data up to date, the User informs “Pinexports” whenever there has been any change in said data.

Exercise of User Rights

The LOPD and GDD and the RGPD grant interested parties the possibility of exercising a series of rights related to the processing of their personal data. To do so, the User must provide documentation proving their identity (ID or passport) by email to info@pinexports.com, or by written communication to the address that appears in our Legal Notice. This communication must reflect the following information: name and surname of the User, the purpose of the request, address and supporting data.

The exercise of rights must be carried out by the User themselves. However, they may be carried out by a person authorized as the legal representative of the User, providing the documentation proving said representation.

The User may request the exercise of the following rights:

• Right to request access to personal data, which is the right to obtain information on whether his or her own personal data is being processed, the purpose of the processing, if applicable, being carried out, as well as the information available on the origin of said data and the communications made or planned of the same.
• Right to request rectification, in the event that the personal data is incorrect or inaccurate, or deletion of data that is found to be inadequate or excessive.
• Right to request the limitation of its processing, in which case only the data strictly necessary for the exercise or defense of claims will be kept by “Pinexports”.
• Right to object to processing: refers to the right of the interested party to not have their personal data processed or to have it ceased in cases where their consent is not necessary for the processing, in the case of commercial prospecting files or files that are intended to make decisions regarding the interested party and based solely on the automated processing of their data, unless for legitimate reasons or the exercise or defence of possible claims they have to continue to be processed.
• Right to data portability: in the event that you want your data to be processed by another company, “Pinexports” will facilitate the portability of your data in an exportable format.

In the event that consent has been granted for a specific purpose, the User has the right to withdraw consent at any time, without affecting the legality of the processing based on the consent prior to its withdrawal.

We undertake to execute all these rights within the maximum legal period (1 month).

If a User considers that there is a problem with the way in which “Pinexports” is handling their data, they can direct their complaints to the Security Officer or to the corresponding data protection authority, the Spanish Data Protection Agency being the one indicated in the case of Spain.

Data retention

The personal data of the Users who use the contact form or who send us an email requesting information will be processed for the time strictly necessary to attend to the request for information, or until the consent granted is revoked.

The personal data of the Client will be processed until the contractual relationship ends. The period of conservation of personal data will be the minimum necessary, and may be kept for up to:

• 4 years: Law on Infringements and Sanctions in the Social Order (obligations regarding affiliation, registrations, deregistrations, contributions, payment of salaries…); Arts. 66 et seq. General Tax Law (accounting books…)
• 5 years: Art. 1964 Civil Code (personal actions without special time limit)
• 6 years: Art. 30 Commercial Code (accounting books, invoices…)
• 10 years: Art. 25 Law on the Prevention of Money Laundering and Financing of Terrorism.
• No time limit: disaggregated and anonymized data.

On the other hand, the data of Users who subscribe to the newsletter will be kept indefinitely, until the consent granted is revoked.

In the case of processing candidate data (C.V.), “Pinexports” may keep your CV stored for a maximum of two years to incorporate it into future calls for applications, unless the candidate states otherwise.

Social Networks

“Pinexports” has a profile on some of the main social networks on the Internet (Facebook, Instagram, LinkedIn), and in all cases it is recognized as the Controller of the data of its followers, fans, subscribers, commentators and other User profiles (hereinafter, followers) published by “Pinexports”.

The purpose of data processing by “Pinexports”, when not prohibited by law, will be to inform its followers about its activities and offers, by any means that the social network allows, as well as to provide personalized customer service to the User. The legal basis that legitimizes this processing will be the consent of the interested party, which may be revoked at any time.

Under no circumstances will “Pinexports” extract data from social networks, unless the User’s express and timely consent is obtained for this purpose (for example, to carry out a contest).

Staff Selection

The candidate who sends electronic communications to “Pinexports”, in order to access the personnel selection processes of the person responsible, authorizes us to analyze the documents sent (for example, the CV), all the content that is directly accessible through Internet search engines (for example, Google), the profiles that he/she maintains on professional social networks (for example, LinkedIn), the data obtained in the access tests and the information that he/she reveals in the job interview, with the aim of evaluating his/her candidacy and being able, if applicable, to offer him/her a job.

In the event that the candidate is not selected, “Pinexports” may keep his/her CV stored for a maximum of two years, to include it in future calls for applications, unless the candidate states otherwise. The legal basis that legitimizes this treatment will be the consent of the interested party, which may be revoked at any time.

Confidentiality

The information provided by the User will, in any case, be considered confidential, and may not be used for purposes other than those described herein. “Pinexports” undertakes not to disclose or reveal information about the User’s claims, the reasons for the information requested or the duration of its relationship with the User.

Validity

This privacy and data protection policy has been drafted by ExpertosLOPD®, a GDPR – LOPD (data protection) adaptation company, on February 16, 2022, and may vary depending on changes in regulations and jurisprudence that may occur, with the data owner being responsible for reading the updated document in order to know their rights and obligations in this regard at all times.