Privacy policy

“Concentrace” is deeply committed to complying with Spanish and European regulations on the protection of personal data and guarantees full compliance with the obligations set forth, as well as the implementation of the security measures established in the General Data Protection Regulation (GDPR) (EU) 2016/679 of April 27, and in Organic Law 3/2018 of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPD and GDD, hereinafter referred to as LOPD).

In accordance with these regulations, we inform you that the use of our website may require the provision of certain personal data through contact forms or by sending emails, and that such data will be processed by “Concentrace”, the Data Controller, whose details are as follows:

Corporate Name: Concentrace S.L.
Tax ID (CIF): B82106758
Registered Address: C/ Pedro Texeira, 7, 28020 Madrid, Spain
Email: info@concentrace.es

Collection and Processing of Personal Data

A personal data item is any information related to a person: name, email, address, phone number, ID/NIE… Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by their Internet service provider.

As the Data Controller, “Concentrace” has the obligation to inform Users of its website about the collection of personal data that may be carried out, either through email or by completing the forms included on the website.

Only the data strictly necessary to perform the contracted service or to adequately respond to the User’s information request will be obtained. The data collected is identifying in nature and corresponds to a reasonable minimum necessary to carry out the activity. No specially protected data is collected at any time. The data will never be used for any purpose other than the one for which it was collected.

Contact Forms/Email

Purpose: To respond to your request for information made through our contact form(s).
Legal Basis: The legal basis that legitimizes this processing is the User’s consent, which may be withdrawn at any time.
Data Sharing: Personal data will be processed through servers managed by Hostinet, which will be considered a Data Processor.

Purchase Page

Purpose: To collect the necessary information to carry out the delivery of purchased products.
Legal Basis: The legal basis that legitimizes this processing is the User’s consent, which may be withdrawn at any time.
Data Sharing: Personal data will be processed through servers managed by Hostinet, which will be considered a Data Processor.

Minors

Only persons over 14 years of age may provide personal data on this website. In accordance with the LOPD and GDD, in the case of individuals under the age of 14, it will be a mandatory requirement to obtain the consent of their parents or legal guardians so we can process their personal data.

Additionally, only individuals over the age of 18 may contract our services. If the person is under 18, the consent of their parents or legal guardians will be a mandatory requirement to provide the offered services, unless the minor is legally emancipated.

Security Measures

Users of “Concentrace’s” website are informed that technical and organizational security measures have been adopted to prevent the loss, misuse, alteration, unauthorized access, and theft of data, thus ensuring the confidentiality, integrity, and quality of the information, in accordance with current data protection regulations. Personal data collected through the forms is processed solely by “Concentrace” personnel or by designated Data Processors.

Accuracy of Data

The User declares that all data provided is true and correct and commits to keeping it updated. The User will be responsible for the accuracy of their data and will be solely liable for any disputes or conflicts that may result from its falsity. It is essential that the User notifies “Concentrace” of any changes to their personal data so it can be kept up to date.

Data Sharing

“Concentrace” will not share or disclose your data to third parties except in legally required cases or when it is strictly necessary to provide a service. Specifically, data may be shared with:

Technology or IT service providers
Payment service providers
Courier and shipping companies
Third parties or intermediaries acting on our behalf (accounting, consulting, etc.)

These data transfers will be carried out with the strictest confidentiality, using necessary measures such as confidentiality agreements or adherence to the privacy policies published on the corresponding websites. The User may object to their data being shared with Data Processors by submitting a written request via any of the referenced contact methods.

Furthermore, in cases where it is required, Customer data may be shared with certain public authorities, in compliance with legal obligations: Spanish Tax Agency, Labour Inspection Authority, etc.

User Rights

The LOPD and GDPR grant data subjects the right to exercise certain rights in relation to their personal data. To do so, the User must provide proof of identity (ID card or passport), either by sending an email to info@concentrace.com, or by sending a written communication to the address stated in our Legal Notice. This communication must include: the User’s full name, the request being made, address, and proof of identity.

Rights may be exercised by the User directly or through a legally authorized representative, with appropriate documentation proving such authorization.

The User may request the exercise of the following rights:

Right of access: To obtain confirmation of whether their personal data is being processed, the purpose of the processing, and available information about the data’s origin and any disclosures made or planned.
Right to rectification: If the data is incorrect or inaccurate, or to delete data that is inappropriate or excessive.
Right to restriction of processing: Data will only be retained for the exercise or defense of legal claims.
Right to object: To request that their data not be processed or that processing be stopped when consent is not required (e.g., for direct marketing or automated decision-making).
Right to data portability: If the User wishes to have their data transferred to another company, “Concentrace” will provide it in an exportable format.

If consent was previously given for a specific purpose, the User has the right to withdraw it at any time, without affecting the legality of processing prior to withdrawal.

We commit to addressing all such rights within the legally mandated timeframe (1 month).

If a User believes that their data is being improperly handled by “Concentrace”, they may file a complaint with our Security Officer or with the appropriate Data Protection Authority — in Spain, this is the Spanish Data Protection Agency (AEPD).

Data Retention

The personal data of Users who contact us or send an email will be processed for the time strictly necessary to respond to the request or until the consent is withdrawn.

Customer data will be processed until the end of the contractual relationship. The minimum data retention period will depend on applicable legal obligations, including:

4 years: Employment and Social Security infractions (enrollment, contributions, wages); Articles 66+ of the General Tax Law (accounting books, etc.)
5 years: Article 1964 of the Civil Code (personal actions without special term)
6 years: Article 30 of the Commercial Code (accounting books, invoices…)
10 years: Article 25 of the Anti-Money Laundering and Terrorism Financing Law
Indefinite: Aggregated and anonymized data.

Social Media

“Concentrace” maintains profiles on some major social networks and is, in all cases, responsible for the processing of data from its followers, fans, subscribers, commentators, and other User profiles (hereinafter, “followers”).

Unless prohibited by law, “Concentrace” will use this data to inform followers about its activities and offers via any means allowed by the social network, as well as to provide personalized customer service. The legal basis is the User’s consent, which can be revoked at any time.

In no case will “Concentrace” extract data from social networks without the explicit, specific consent of the User (e.g., for contest participation).

Confidentiality

Information provided by the User will always be treated as confidential and will not be used for any purpose other than those described herein. “Concentrace” agrees not to disclose or share any information regarding the User’s inquiries, reasons for seeking advice, or the duration of the relationship.

Validity

This privacy and data protection policy was written on January 29, 2024, and may change due to changes in legislation or jurisprudence. It is the responsibility of the data subject to read the updated document in order to remain informed about their rights and obligations at any time.