en flag
en flag

Privacy Policy

1) Information on the collection of personal data and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we provide you with information on how we process your personal data when you use our website. In this context, personal data are data by which you can be personally identified.

1.2 The controller for the processing of data on this website within the meaning of the General Data Protection Regulation (GDPR) is ComerciaWise S.L., Plaza de la Marina 2, 4° DR, 29015 Málaga, Spain, telephone: (+34) 656 28 28 76, e-mail: info@sunwardhomes.es. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of such personal data.

2) Data collection during the visit to the website

2.1 Where the site is used merely for informational purposes, that is, if you do not register or provide us with information in any other way, we will only collect those data which your browser transmits to our server (server log files). When you access our website, we will collect the following data, which are technically necessary in order to display the pages to you:

  • The website visited

  • The date and time of access

  • The volume of data sent in bytes

  • The source or referrer from which you reached the site

  • The browser used

  • The operating system used

  • The IP address used (where applicable, in anonymised form)

The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interests in improving the stability and functionality of our website. We will not transfer the data or use them in any other way. However, we reserve the right to check the server log files subsequently in the event that there is any indication of unlawful use.

2.2 For security reasons and in order to protect the transmission of data and other confidential content (e.g. orders or enquiries to the controller), this website uses an SSL or TLS encryption protocol. You can recognise an encrypted connection by the character string "https://" and the padlock symbol in the browser bar.

3) Hosting & Content Delivery Network

3.1 For the hosting of our website and the presentation of the page content, we use a provider which renders its services itself or through selected subcontractors exclusively on servers within the European Union.

All data collected on our website are processed on these servers.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of the visitors to our website and prohibits their unauthorised disclosure to third parties.

3.2 Cloudflare

We use a content delivery network from the following provider: Cloudflare Inc., with registered office at 101 Townsend St. San Francisco, CA 94107, USA.

This service enables us to deliver large media files, such as graphics, page content or scripts, more rapidly via a network of regionally organised servers. The processing of data is carried out in accordance with Art. 6(1)(f) GDPR, on the basis of our legitimate interest in improving the stability and functionality of our website.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of the visitors to our website and prohibits unauthorised transmission to third parties.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

3.3 jsDelivr

We use a content delivery network from the following provider: Volentio JSD Limited, Suite 2a1, Northside House, Mount Pleasant, Barnet, England, EN4 9EB, United Kingdom.

This service enables us to deliver large media files, such as graphics, page content or scripts, more rapidly via a network of regionally organised servers. The processing of data is carried out in accordance with Art. 6(1)(f) GDPR, on the basis of our legitimate interest in improving the stability and functionality of our website.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of the visitors to our website and prohibits unauthorised transmission to third parties.

For the transfer of data to the provider's location, an adequate level of data protection is ensured by means of an adequacy decision of the European Commission.

4) Cookies

In order to make the visit to our website more pleasant and to enable the use of certain functions, we use cookies, which are small text files that are stored on the user's terminal device. Sometimes these cookies are deleted automatically when the browser is closed (session cookies) and, at other times, they remain on the terminal device for longer and allow page settings to be saved (persistent cookies). In the latter case, the user can consult the storage duration in the cookie settings section of the browser.

In the event that some cookies we use also process personal data, such processing is carried out in accordance with Art. 6(1)(b) GDPR for the performance of the contract; with Art. 6(1)(a) GDPR if the user has given us their consent; or with Art. 6(1)(f) GDPR in order to satisfy our legitimate interests in achieving the best possible functionality of the website, as well as an efficient and user-friendly configuration of the visit to the page.

Furthermore, the user can configure their browser in such a way that they are informed of the installation of cookies and can decide whether or not to accept them individually, or accept cookies in certain cases or never in general.

If the user does not accept cookies, the functionality of our website may be limited.

5) Contact

5.1 WhatsApp Business

You have the possibility of contacting us via the messaging service WhatsApp of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose we use the so-called "Business version" of WhatsApp.

If you contact us via WhatsApp in connection with a specific commercial transaction (for example, an order placed), we will store and use the mobile telephone number you use on WhatsApp and, if you have provided them to us, your first name and surname, in accordance with Art. 6(1)(b) GDPR, in order to process and respond to your request. On the same legal basis, we may ask you via WhatsApp to provide us with further data (order number, customer number, postal address or e-mail address) so that we can assign your request to a specific process.

If you use our WhatsApp contact for general enquiries (for example, about the range of services, availability or our internet presence), we will store and use the mobile telephone number you use on WhatsApp and, if you have provided them, your first name and surname, in accordance with Art. 6(1)(f) GDPR, on the basis of our legitimate interest in providing the requested information efficiently and in a timely manner.

Your data will only be used to respond to your enquiry via WhatsApp. They will not be transmitted to third parties.

Please note that WhatsApp Business has access to the contact directory of the mobile device we use for this purpose and automatically transfers the telephone numbers stored in the directory to a server of the parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp Business account we use a mobile device in whose contact directory only the WhatsApp contact details of those users who have contacted us via WhatsApp are stored.

In this way, it is ensured that all persons whose WhatsApp contact details are stored in our contact directory have given their consent to the transfer of their WhatsApp telephone number from the contact directories of their chat contacts by accepting WhatsApp's terms and conditions of use the first time they use the application on their device, in accordance with Art. 6(1)(a) GDPR. The transmission of data of those users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded.

For information on the purpose and scope of the collection of data, as well as the further processing and use of the data by WhatsApp, and your rights and configuration options for protecting your privacy, please consult WhatsApp's privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider which protects the data of the visitors to our page and prohibits their transmission to third parties.

Within the framework of the processing operations mentioned above, data transfers to servers of Meta Platforms Inc. in the United States may occur.

For data transfers to the United States, the provider has acceded to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

5.2 When you contact us (e.g. via a contact form or by e-mail), we will collect personal data. The data that will be collected in the case of a contact form are specified in the form in question. These data will be stored and used exclusively in order to respond to your request or for the contact and the technical administration associated with it.

The legal basis for the processing of the data is our legitimate interests in responding to your request, in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the processing of the data will also have as its legal basis that set out in Art. 6(1)(b) GDPR. Once your request has been dealt with, your data will be erased provided that the circumstances indicate that the matter in question has been conclusively clarified and that there are no statutory retention obligations that preclude such erasure.

6) Use of your data for direct advertising

6.1 Subscription to our e-mail newsletter

If you subscribe to our e-mail newsletter, we will send you information about our offers on a regular basis. You only need to provide us with your e-mail address. The provision of additional data is voluntary and serves to enable us to address you personally. To send the newsletter we use a procedure called double opt-in, which means that we will only send you the newsletter if you have expressly confirmed to us that you authorise its dispatch. We will send you a confirmation e-mail asking you to click on a link to confirm that you wish to receive the newsletter from that moment on.

By activating the confirmation link, you give your consent to the use of your personal data in accordance with Art. 6(1)(a) GDPR. When you subscribe to the newsletter, we will store the IP address assigned by the internet service provider (ISP), as well as the date and time of the subscription, so as to be able to detect possible fraudulent use of your e-mail address in the future. We will only use the data we collect for the newsletter subscription for advertising contacts by means of the newsletter. You can unsubscribe from the newsletter at any time by clicking on the link you will find in it or by sending a corresponding message to the controller named at the beginning. After you unsubscribe, we will immediately delete your e-mail address from our newsletter distribution list, unless you have expressly given your agreement to our continued use of your data or we have reserved the right to make lawful use of them thereafter, of which we will inform you in this declaration.

6.2 Hostinger Reach

Our e-mail newsletters are sent via this provider: HOSTINGER operations, UAB, Švitrigailos str. 34, Vilnius 03230, Lithuania

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we transmit the data you provided to us when registering for the newsletter to this provider in accordance with Art. 6(1)(f) GDPR, so that it can send the newsletter on our behalf.

Subject to your express consent in accordance with Art. 6(1)(a) GDPR, the provider also carries out a statistical evaluation of the success of the newsletter campaigns by means of web beacons or tracking pixels in the e-mails sent, which can measure opening rates and specific interactions with the newsletter content. In the process, information from the terminal device (for example, time of the call, IP address, browser type and operating system) is also collected and evaluated, but it is not merged with other data sets.

You can withdraw your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of the visitors to our website and prohibits unauthorised transmission to third parties.

7) Web analysis services

7.1 Google Analytics 4

This website uses Google Analytics 4, a service of the company Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), with which the use of websites can be analysed.

When Google Analytics 4 is used, cookies are installed by default. Cookies are text files that are stored on the user's terminal device and allow the use the user makes of the website to be analysed. The information generated by the cookies about the use of the website (including the IP address, transmitted by the terminal device with the last digits removed; further information on this below) is generally transferred to a Google server, where it is stored and processed. In this case, information may also be transmitted to the servers of the company Google LLC, based in the USA, where further processing of the information may be carried out.

With the use of Google Analytics 4, the IP address transmitted by the user's terminal device while the user uses the website is always collected and processed automatically by default, but only in anonymised form, so that it cannot be related to any specific person. This automatic anonymisation is carried out by means of the removal of the last digits of the IP address by Google within the Member States of the European Union (EU) or of other States party to the agreement on the European Economic Area (EEA).

Google uses this and other information on our behalf in order to evaluate the use the user makes of the website, to compile reports on the activities the user carries out on it or on the user's usage behaviour and to provide us with other services relating to the user's use of the website and of the internet. The IP address transmitted by the user's terminal device and shortened within the framework of Google Analytics 4 will not be combined with other data of Google. The data collected in the context of Google Analytics 4 will be stored for two months and will then be deleted.

By means of the special "demographic data" function, Google Analytics 4 also makes it possible to create statistics with data on the age, gender and interests of the users of the website on the basis of an evaluation of interest-based advertising and by consulting information from third-party providers. This makes it possible to determine and distinguish the circles of users of the website with the aim of targeting marketing campaigns at target groups in an optimised manner. However, the data collected through the demographic data cannot be assigned to a particular person or, therefore, to the user personally. The data collected through the demographic data function will be stored for two months and will then be deleted.

All the processing operations described above, in particular the installation of Google Analytics cookies for the storage and reading of information on the terminal device used by the user to use the website, only take place if the user has granted us their express consent in accordance with Art. 6(1)(a) GDPR. Without your consent, Google Analytics 4 is not used during the use of the website. The user may withdraw their consent at any time with effect for the future. In order to do so, they only have to deactivate this service via the cookie consent tool we provide on the website.

On this website, the service "Google Signals" may also be used as an extension of Google Analytics. With Google Signals, Google can create cross-device reports (so-called "cross-device tracking"). If you have activated "personalised ads" in the settings of your Google account and have linked your internet-enabled devices to your Google account, Google may analyse user behaviour across the different devices and create database models based on this, provided that you have given your consent to the use of Google Analytics in accordance with Art. 6(1)(a) GDPR (see above). The log-ins and device types of all visitors to the page who have logged in to a Google account and have carried out a conversion are taken into account. The data show, among other things, on which device an advertisement was first clicked on and on which device the associated conversion took place. Insofar as Google Signals is used, we do not receive any personal data from Google, but only statistics compiled on the basis of Google Signals. You have the possibility of deactivating the "personalised ads" function in the settings of your Google account and, in this way, deactivating the cross-device analysis.

To do so, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=es

You will find further information here: https://support.google.com/analytics/answer/7532985?hl=es

As an extension of Google Analytics, the "UserIDs" function may also be used on this website. By means of the assignment of individual UserIDs, we can have Google create cross-device reports (so-called "cross-device tracking"). This means that your usage behaviour may also be analysed across devices if you have given your corresponding consent to the use of Google Analytics in accordance with Art. 6(1)(a) GDPR, if you have created a personal account by registering on this website and have logged in to your personal account on different terminal devices with your corresponding access data. The data collected in this way show, among other things, on which terminal device you first clicked on an advertisement and on which terminal device the corresponding conversion occurred.

We have concluded a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of the visitors to our site and not to transmit them to third parties.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Further legal notices on Google Analytics 4 can be consulted at the following link: https://business.safety.google/intl/es/privacy/ and https://policies.google.com/privacy?hl=es&gl=es

Detailed information on the processing operations carried out by means of Google Analytics 4 and on the processing by Google of the data originating from websites can be consulted here: https://policies.google.com/technologies/partner-sites?hl=es

7.2 Google Tag Manager

This website uses Google Tag Manager, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter, "Google"). Google Tag Manager makes it possible to group together various web applications, including tracking and analysis services, as well as to calibrate them, control them and link them to certain conditions through a single user interface.

Google Tag Manager neither stores nor reads any kind of information on users' terminal devices. Nor does it carry out data analyses autonomously.

However, when the website is visited, Google Tag Manager transmits the user's IP address to Google, where it is stored. It is also possible that it is transmitted to servers of Google LLC. in the USA.

This processing is only carried out if the user has granted us their express consent in accordance with Art. 6(1)(a) GDPR. Without this consent, the use of Google Tag Manager does not take place during the visit to the page.

Users may withdraw their consent at any time with effect for the future. In order to do so, they only have to deactivate this service in the cookie consent tool we provide on the website. We have concluded a data processing agreement with Google under which Google undertakes to protect the data of the visitors to our website and not to disclose them to third parties.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Further information on privacy and Google Tag Manager at: https://business.safety.google/intl/es/privacy/ and https://support.google.com/tagmanager/answer/9323295?hl=es

In this privacy policy, in the corresponding sections, specific information can be consulted on the services and applications relevant to data protection that are encompassed by Google Tag Manager.

8) Retargeting, remarketing and advertising by means of recommendations

8.1 Meta Pixel without extended data synchronisation

Within our online offering, we use the service "Meta Pixel" of the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta")

If a user clicks on an advertisement placed by us on Facebook and/or Instagram, the "Meta Pixel" is used to add a parameter to the URL of our linked page. This URL parameter is entered into the user's browser after the redirection by means of a cookie set by our own linked page.

This enables Meta to determine the visitors to our online offering as a target group for the display of advertisements. Accordingly, we use the service in order to display the Facebook and/or Instagram advertisements placed by us only to those users who have also shown an interest in our online offering or who have certain characteristics (for example, interests in certain topics or particular products on the basis of the websites visited), which we transmit to Meta (so-called "Custom Audiences").

Moreover, the "Meta Pixel" may be used to track whether users have been redirected to our website after clicking on an advertisement and what actions they carry out there (so-called "conversion tracking").

The data collected are anonymous for us and therefore do not allow us to draw conclusions about the identity of the users. However, the data are stored and processed by Meta so that a connection with the respective user profile is possible and Meta can use the data for its own advertising purposes.

All the processing operations described above, in particular the installation of cookies for the reading of information on the terminal device used, will only be carried out if you have given us your express consent for this in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of the visitors to our website and prohibits their unauthorised disclosure to third parties.

The information generated by Meta is normally transferred to a Meta server and stored there; in this context, it may also be transferred to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has acceded to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

8.2 Google Ads Remarketing

This website uses the retargeting technology of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

This technology enables us to systematically address the visitors to our website who have already shown an interest in our shop and our products with personalised, interest-oriented advertising. The insertion of the advertisements takes place on the basis of a cookie-based analysis of previous and current usage habits, but does not entail personal data being stored. With the retargeting technology, a cookie is stored on the user's computer or mobile terminal device in order to record pseudonymised data on their interests and, in this way, to adapt the advertising individually to the stored information. These cookies are small text files that are stored on the user's computer or mobile terminal device. Advertising will be displayed to users which most probably corresponds to their interests relating to products and information.

All the processing operations described above, in particular the installation of cookies for the reading of information on the terminal device used, only take place if the user has granted us their express consent in accordance with Art. 6(1)(a) GDPR. Without this consent, the retargeting technology is not implemented during the user's visit to the page.

Users may withdraw their consent at any time with effect for the future. In order to do so, they only have to deactivate this service in the cookie consent tool we provide on the website.

The data may also be transmitted to: Google LLC, USA

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Further information on Google's data protection can be found here: https://business.safety.google/intl/es/privacy/

8.3 Google Ads Conversion-Tracking

This website uses the online advertising programme "Google Ads" and, within the scope of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads in order to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine the success of the individual advertising measures in relation to the data of the advertising campaigns. Our aim is to show you the advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an advertisement placed by Google. Cookies are small text files that are stored on your terminal device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the advertisement and was redirected to this page. Each Google Ads customer receives a different cookie. Therefore, the cookies cannot be tracked across the websites of Google Ads customers. The information obtained by means of the conversion cookie is used to create conversion statistics for the Google Ads customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their advertisement and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that could be used to personally identify the users. The use of Google advertisements may also give rise to the transmission of personal data to the servers of Google LLC. in the United States.

You will find detailed information on the processing carried out with Google Ads conversion tracking and on Google's processing of the data from websites at: https://policies.google.com/technologies/partner-sites.

All the processing operations described above, in particular the installation of cookies for the reading of information on the terminal device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

You can also permanently object to the installation of cookies by Google Ads conversion tracking by downloading and installing the Google browser add-on available at the following link:

https://www.google.com/settings/ads/plugin?hl=es

Please note that some functions of this website may not be available or may be restricted if you have deactivated the use of cookies.

Google's privacy policy can be consulted here: https://business.safety.google/intl/es/privacy/ and https://policies.google.com/privacy?gl=es

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

9) Website functions

OpenStreetMap

This portal uses an online map service provided by the following provider: OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom

The online map service is a tool for displaying interactive (terrestrial) maps for the purpose of visually presenting geographical information. When this service is used, our location is displayed to you and any geolocation is facilitated.

Already upon accessing the subpages in which the provider's map is integrated, the information about your use of our website (such as your IP address) is transmitted to the provider's servers and stored there.

The processing of your personal data is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the demand-oriented configuration of our portal. If you do not agree to the future transmission of your data to the provider, you have the possibility of completely deactivating the provider's online map service by switching off the JavaScript application in your browser. The online map service of this portal will then no longer be usable.

Insofar as it is legally necessary, we have obtained your consent in accordance with Art. 6(1)(a) GDPR for the processing of your data described above. You can withdraw your consent at any time with effect for the future. In order to exercise your withdrawal, follow the option described above for lodging an objection.

For the transfer of data to the provider's location, an adequate level of data protection is ensured by means of an adequacy decision of the European Commission.

10) Tools and Miscellaneous

Cookie consent tool

This website uses a cookie consent tool in order to obtain users' effective consent to the use of cookies that require such consent. The cookie consent tool is displayed to users when they open the website in the form of an interactive user interface in which they can give their consent to the use of certain cookies or cookie-based applications by ticking the respective boxes. With the use of this tool, all cookies or services that require consent will only be loaded if the user has given the corresponding consent by ticking the boxes in question. In this way it is ensured that these cookies will only be installed on the user's terminal device if the user has given their consent beforehand.

This tool installs technically necessary cookies in order to save the selected cookie preferences. In general, no personal data will be processed.

If the isolated case arises in which personal data (e.g. the IP address) have to be processed in order to store, assign or log the cookie settings, this processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in lawful, personalised and intuitive management of cookie consents and, therefore, in a legally compliant design of our website.

A further legal basis for the processing of data is Art. 6(1)(c) GDPR. As controller, we are obliged to make the use of cookies that are not technically necessary subject to the user's consent.

Further information on the operator and the setting options of the cookie consent tool can be consulted in the corresponding user interface of our website.

11) Rights of the data subject

11.1 The applicable statutory data protection provisions grant you extensive rights vis-à-vis the controller for the processing of your personal data (rights of information and intervention), of which we inform you below:

  • Right of access pursuant to Art. 15 GDPR

  • Right to rectification pursuant to Art. 16 GDPR

  • Right to erasure pursuant to Art. 17 GDPR

  • Right to restriction of processing pursuant to Art. 18 GDPR

  • Right to information pursuant to Art. 19 GDPR

  • Right to data portability pursuant to Art. 20 GDPR

  • Right to withdraw the consents given pursuant to Art. 7(3) GDPR

  • Right to lodge a complaint pursuant to Art. 77 GDPR

11.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA IN THE CONTEXT OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL TERMINATE THE PROCESSING OF THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING THEM IF WE CAN DEMONSTRATE THAT THERE ARE COMPELLING JUSTIFIED GROUNDS WHICH OVERRIDE YOUR INTERESTS AND YOUR FUNDAMENTAL RIGHTS AND FREEDOMS, OR WHERE SUCH PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND RIGHTS.

IF WE PROCESS YOUR PERSONAL DATA IN ORDER TO CONDUCT DIRECT ADVERTISING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING OF THE PERSONAL DATA IN QUESTION FOR SUCH ADVERTISING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL TERMINATE THE PROCESSING OF THE DATA IN QUESTION FOR DIRECT ADVERTISING PURPOSES.

12) Retention period for your personal data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of the processing and, where applicable, also the corresponding statutory retention period (for example, the retention periods under commercial and tax law).

Where personal data are processed on the basis of explicit consent in accordance with Art. 6(1)(a) GDPR, these data are stored until the data subject withdraws their consent.

If statutory retention periods exist for the data that are processed within the scope of legal or quasi-legal obligations on the basis of Art. 6(1)(b) GDPR, these data will be deleted routinely after the expiry of the retention periods, provided that they are no longer necessary for the performance of the contract or the initiation of the contract and/or there is no justified interest on our part in continuing to store them.

Where personal data are processed on the basis of Art. 6(1)(f) GDPR, such data will be retained until the data subject exercises their right to object in accordance with Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or unless the processing serves to assert, exercise or defend legal claims.

Where personal data are processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, such data will be retained until the data subject exercises their right to object in accordance with Art. 21(2) GDPR.

Unless otherwise indicated in the remaining information in this declaration on specific processing situations, the stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

The original version of this Privacy Policy is the Spanish one; should a translation prove less precise than the original, the Spanish text serves as the reference.

Reference version: 18.09.2026, 17:02:57