Corporate / IERTEC
Privacy policy
Information on the processing of personal data when visiting our website and contacting us.
At IERTEC SMART TECHNOLOGIES, S.L. we respect the privacy of people who visit our website or write to us through the contact form. This policy explains what personal data we may process, for what purposes, on what legal basis and how the rights recognised by the applicable legislation may be exercised.
1. Data controller
Company name: IERTEC SMART TECHNOLOGIES, S.L.
Tax identification number (NIF/CIF): B11920758
Address: Avenida de la Innovación, 2, 11591 Guadalcacín, Cádiz, Spain.
Email: contact@iertec.com
Website: www.iertec.com
For any matter relating to personal data protection, you may write to the email address above.
2. Scope and data we process
This policy applies to the informational use of this website and to communications received through its contact form or the email address provided.
Data provided when contacting us
Depending on the fields available in the form and the information you choose to provide, we may process:
- Full name, company or organisation and job title, where requested or provided.
- Email address and, where applicable, telephone number.
- The subject of the enquiry, message content and any other information included voluntarily.
- Information about communications exchanged to respond to and follow up on the request.
Please do not include particularly sensitive data in your message, such as medical or health information, unless it is strictly necessary and an appropriate channel exists for its processing.
Technical browsing data
Browsing may generate technical data necessary for the operation and security of the service, such as IP address, access date and time, browser, device, pages requested or error logs. The actual processing of these data will depend on the technical configuration of the website and its hosting services.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and contact requests | IERTEC's legitimate interest in responding to those who voluntarily contact the company and maintaining communication related to their request (Article 6(1)(f) GDPR), following a balancing of the interests and rights affected. |
| Preparing proposals or providing information requested in connection with a potential contract | Taking pre-contractual steps at the data subject's request, where applicable (Article 6(1)(b) GDPR). |
| Ensuring the operation and security of the website | Legitimate interest in protecting the website, preventing unauthorised access, managing incidents and maintaining service continuity (Article 6(1)(f) GDPR). |
| Meeting legal obligations and handling claims | Compliance with applicable legal obligations (Article 6(1)(c) GDPR) and, where applicable, legitimate interest in establishing, exercising or defending legal claims (Article 6(1)(f) GDPR). |
Data submitted through the form will not be used to subscribe the person to advertising communications merely because they have contacted us. If a commercial subscription were offered in the future, separate information would be provided and consent requested where legally required.
Fields marked as mandatory are necessary to process the enquiry. Not providing them may prevent us from properly addressing or responding to the request. Sending an enquiry does not in itself entail any contractual obligation.
The ordinary handling of messages received through the form does not involve decisions based solely on automated processing that produce legal effects or similarly significantly affect the data subject.
4. Retention periods
Contact data and communications will be retained for as long as necessary to address and close the enquiry and, where appropriate, to follow up on the relationship requested. If a contractual relationship results from the communication, the relevant data may be incorporated into the processing associated with that relationship, subject to the corresponding information and retention periods.
Once their purpose has ended, the data will be erased or, where legally applicable, kept duly blocked during the limitation periods for liabilities or compliance with applicable obligations.
Technical browsing logs will be retained only for the necessary and proportionate period for operation, security and incident resolution, in accordance with the periods established for the systems used.
5. Recipients and access to data
Personal data may be consulted by authorised IERTEC personnel who need access to perform their duties.
Certain technology service providers supplying services to IERTEC, such as web hosting, email, IT maintenance or technical management of the form, may also access the data. Where these providers act as processors, their involvement must be governed by the agreements and safeguards required by Article 28 GDPR.
Personal data obtained through the contact form are not sold. They will only be disclosed to third-party controllers where an appropriate legal basis or legal obligation exists, for example to the competent authorities in the circumstances provided for by law.
6. International transfers
The use of certain technology services, particularly hosting, email or security services, could involve access to or processing of data from countries outside the European Economic Area.
Where an international transfer takes place, IERTEC must ensure that it has a valid basis under Chapter V GDPR, such as an adequacy decision by the European Commission or the appropriate safeguards legally required (for example, standard contractual clauses, where applicable).
You may request information about the providers involved, destination countries and applicable safeguards at contact@iertec.com.
8. Data subjects' rights
Under the terms of data protection legislation, you may exercise the following rights:
- Access: to know whether we process your personal data and obtain information about that processing.
- Rectification: to request correction of inaccurate data or completion of incomplete data.
- Erasure: to request deletion of your data where applicable.
- Objection: to object to certain processing based on legitimate interest in the circumstances provided for by law.
- Restriction: to request that we temporarily restrict use of your data in certain circumstances.
- Portability: to receive the data you have provided and transmit them to another controller where the legal requirements are met.
- Withdrawal of consent: where specific processing is based on your consent, to withdraw it at any time without affecting the lawfulness of earlier processing.
- Automated decisions: to exercise, where applicable, rights relating to automated individual decisions, including profiling.
How to exercise your rights
Send your request to contact@iertec.com, indicating "Data protection – Exercise of rights", or by post to Avenida de la Innovación, 2, 11591 Guadalcacín, Cádiz, Spain.
We may request additional information only where necessary to verify your identity. We will respond within the statutory period, generally one month, without prejudice to legally permitted extensions.
If you consider that the processing of your data does not comply with the legislation, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) through www.aepd.es.
9. Confidentiality and security
IERTEC will apply technical and organisational measures appropriate to the risk of the processing carried out, with the aim of protecting the confidentiality, integrity and availability of data and preventing unauthorised access, alteration, loss or disclosure.
However, no system for transmitting or storing information can guarantee an absolute level of security.
10. Minors
The website and its contact form are intended for general and professional enquiries and are not specifically directed at minors. If a minor needs to contact IERTEC, we recommend that they do so with the assistance of their legal representative where necessary.
11. Changes to the policy
This policy may be updated to reflect changes in the processing carried out, the website configuration or the applicable legislation. The current version will be available on this page, indicating the date of the latest update.
This policy is interpreted in accordance with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 and, where applicable, Law 34/2002.
