Privacy Policy

Privacy and data protection policy:

SDS BY SIDASA, SL, (hereinafter, "SDSBYSIDASA") in the exercise of its activity, processes personal data of different categories of interested parties (staff, customers, suppliers, etc.), following the guidelines imposed by the applicable data protection regulations in force.
Specifically, some of the personal data processed are collected by SDSBYSIDASA through the contact and purchase forms existing in the Internet website https://SDSBYSIDASA.com (hereinafter, the "website"). In the mentioned forms, the user who wishes to provide his data to contact SDSBYSIDASA, must fill in the fields marked as compulsory (*), being able to provide, in addition, the rest of information of optional character.
The updated list of the processing activities carried out by SDSBYSIDASA is duly documented in the register of processing activities that said company has implemented for such purpose.
If you wish additional information on the aforementioned processing activities, you may contact SDSBYSIDASA through the postal or e-mail address indicated in section 1 below.
1- Responsible for the processing:

SIDASA ENGINEERING SL
NIF B66076704
ZONA FRANCA, SECTOR E C/40, 14-16
08040, BARCELONA
2- Purpose and legitimacy of the processing:
SDSBYSIDASA processes personal data for specific, explicit and legitimate purposes, without the aforementioned data being used subsequently for purposes incompatible with the initial ones.
Likewise, SDSBYSIDASA processes personal data in a lawful manner in relation to the data subjects, being entitled to carry out the different processing activities under the legitimate bases established for such purpose by the applicable data protection regulations in force (consent of the data subject, contractual or pre-contractual relationship, legal obligation applicable to the Data Controller, vital interest of the data subject or other natural person, mission carried out in the public interest, legitimate interest of the Data Controller or of a third party). In most cases, the processing of data by SDSBYSIDASA is based on the data subject's consent, the existence of a contractual relationship with the data subject or the fulfillment of a legal obligation.
For further information on the purpose and legitimate basis of each of the processing activities carried out by SDSBYSIDASA, please contact us at the postal address or e-mail address indicated in section 1.
3. Origin and types of data processed:
In general, the personal data involved in the different processing activities carried out by SDSBYSIDASA are (i) provided by the data subject himself/herself, (ii) transferred by a Third Party who is entitled to do so, or (iii) collected from sources accessible to the public.
The types of data subject to processing (identifying, professional, etc.) will vary according to the purposes of the processing, being in any case adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
If you would like additional information on the origin and category of data subject to each of the processing activities carried out by SDSBYSIDASA, you may contact us through the postal or e-mail address indicated in section 1.
4. Periods of conservation of personal data:
In general, the periods of conservation of personal data processed by SDSBYSIDASA are determined by the legitimate basis for such processing, without prejudice to any additional periods of conservation that may apply to meet possible liabilities as a result of the processing (limitation period of legal obligations and/or period of limitation of actions):
Legal basis Period of conservation
Consent Until revocation or end of need.

 

5-Data communication:
In general, SDSBYSIDASA:
(i) communicates to the data processors with whom it has signed the corresponding contract, the personal data that are necessary for the provision of the service object thereof.
For these purposes, in accordance with the applicable data protection regulations in force, "data processor" means the "natural or legal person, public authority, service or other body that processes personal data on behalf of the data controller".
(ii) does not disclose personal data to third parties, unless such disclosure is necessary for compliance with a legal obligation or for the execution of a legally authorized power, without having detected the existence of disclosures that require the consent of the data subjects or that are covered by another legitimate basis.
For these purposes, in accordance with the applicable data protection regulations in force, the term "third party" is understood as "natural or legal person, public authority, service or body other than the data subject, the data controller, the data processor and the persons authorized to process the personal data under the direct authority of the data controller or the data processor".
Likewise, it is hereby stated that the data communications that SDSBYSIDASA carries out do not constitute international data transfers.
If you would like additional information on the communications of personal data in relation to each of the processing activities carried out by SDSBYSIDASA, you may contact us through the postal or e-mail address indicated in section 1.
6. Rights of the interested parties:
The interested parties may exercise their rights of access, rectification, suppression, limitation, opposition and portability in the terms established in the applicable data protection regulations in force, as well as to withdraw the consent given, at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
The aforementioned rights may be exercised before SDSBYSIDASA, by sending a letter, dated and signed, to the postal or e-mail address indicated in paragraph 1, indicating the right exercised, your address for communication purposes, as well as accompanying a photocopy of your N.I.F, and, where appropriate, supporting documents of the request being made.
7Integrity and confidentiality in the processing of personal data:
SDSBYSIDASA has adopted the necessary security measures to guarantee the integrity and confidentiality of the personal data it processes, and carries out periodic reviews of their effectiveness, updating, supplementing and improving them whenever appropriate based on the review. Contract or pre-contract Until the end of the duration of the contract or contractual relationship.

Legal Obligation Until fulfillment of the obligation or, if applicable, the deadline set by the regulation.
Vital interest Until the end of the need.
Public interest Until satisfaction of the public interest, end of the need or deadline set by the regulation.
Legitimate interest Until satisfaction of the legitimate interest, end of the need or, in some cases, opposition of the interested party.

If you would like additional information on the storage periods for the personal data subject to each of the processing activities carried out by SDSBYSIDASA, you may contact us at the postal or e-mail address indicated in section 1.

 of the pertinent risk analyses on the data processing it performs.