Privacy Policy

Who is the DATA CONTROLLER?

The data collected or voluntarily provided through the Website, whether through navigation or via contact forms, email, or phone, will be collected and processed by the Data Controller, whose details are provided below:

Identity: ERNSYSTEM CLIMATIZACION S.L.U.
CIF: B42550137
Postal Address: C. San Ignacio Loyola, 25 03013 Alicante Alicante
Phone: 965 20 01 90
Email: ventas@ernsystem.com

URL: www.ernsystem.com

Should you wish to contact us for any matter related to the processing of your personal data or privacy (with our Data Protection Officer), you may do so via any of the methods listed above.

When, why, who, how, for what purpose, and for how long do we process your personal data?

When and why?

You can browse most of our website without providing any personal information, but in some cases this information is necessary to provide the electronic services you request.

If we need to collect personal data to provide a service, we will process the information according to the policy presented in this document and in the specific terms of the relevant service (if any), which contain specific privacy statements regarding data usage and inform you why, for what purpose, how, for how long we process your personal data, and what security measures we implement.

Who collects your data?

The collection and processing of the personal data you provide may be carried out by our organization or, where applicable, by our data processors. In the latter case, these processors are third parties who are contractually required to respect the law and implement adequate security measures to protect such data.

For what purpose?

The personal data we request from you, or that you provide through browsing, serves to manage, deliver, and improve the services you have requested. For example, we process your personal data to handle inquiries you send us.

For this purpose, we ask for your email when using our website contact forms. We collect only the sender’s personal data necessary to respond to you.

How do we process your data?

We collect only the personal information necessary to achieve a specific purpose. The information will not be used for any purposes incompatible with what is described.

We disclose the information to third parties only if necessary to fulfill the service’s purpose and only to those who need to know it. All this is done so the service can be provided while handling your personal data confidentially and securely, in accordance with current legislation.

In any case, our organization adopts security measures to protect the data against possible misuse, unauthorized access, alteration, or loss.

How long do we keep your data?

We retain data only for as long as necessary to fulfill the purpose for which it was collected or subsequently processed. The retention period depends on the service, and each service will specify how long personal data will be processed.

At the end of this document, you will find a table providing specific retention periods.

For what purposes will we process your personal data?

– Customers:

We process your personal data to (i) manage your purchase or provided service; (ii) maintain the contractual and pre-contractual relationship for invoicing, preparing quotations, following up thereon, and sending you information electronically regarding your request; (iii) we may create a commercial profile based on the information you provide in order to offer you products and services aligned with your interests. No automated decisions will be made based on that profile.

– Suppliers:

We process your personal data to (i) handle invoicing and (ii) maintain commercial contact, (iii) as well as send you electronic information about our products or services.

– Website or email contacts:

We process your personal data to (i) respond to your inquiries and requests; (ii) manage the requested service or process your order; (iii) we may create a commercial profile based on the information you provide in order to offer you relevant products and services. No automated decisions will be taken based on that profile.

– Website users:

By browsing our site, we collect information about your browser, device, and website usage, as well as any information you provide while using our site. In anonymized or aggregated form, we may record the IP address (the identification number of your internet access device that enables devices, systems, and servers to identify and communicate with each other).

The purpose of this processing is to (i) gain practical insights into how users navigate our website to improve it; (ii) conduct statistical analysis to enhance our business strategy; (iii) analyze web performance; and (iv) ensure technical security and system diagnostics.

The data obtained is not linked to a specific user and is stored in our databases.

These aforementioned data, along with any personal data you may provide, are stored via cookies collected in pseudonymized formats and are subject to objections to data processing, as detailed in our Cookies Policy.

You may consult the Cookies Policy in the relevant section.

Your browsing information may be stored via Google Analytics, so we refer to Google’s Privacy Policy for details, as it collects and processes such information. http://www.google.com/intl/en/policies/privacy/

Additionally, our site may offer the functionality of Google Maps, which could access your location—if permitted—in order to provide better specificity regarding distance and/or routes to our facilities. We refer you to Google Maps’ privacy policy to understand the use and processing of such data http://www.google.com/intl/en/policies/privacy/

To offer information or services relevant to the User’s location, we may access location data from the User’s device when user settings allow it.

The Website may offer features for sharing content through third-party applications such as Facebook or Twitter. These applications may collect and process information related to the user’s browsing across different websites. Any personal information obtained through these applications may be used by third-party users. Your interactions are subject to the privacy policies of the companies providing these applications.

The Website may host blogs, forums, and other social network tools to facilitate content sharing and knowledge exchange. Any personal information shared by the user may be visible to other users of those services, over which we have no control.

What is the lawful basis for processing your data?

– Customers:

The lawful basis for processing your data is (i) the performance of a contract and maintenance of the contractual relationship and (ii) your consent to the sending of offers of products and services via electronic means, provided that withdrawing this consent will not affect the performance of the contract.

– Suppliers:

The lawful basis for processing your data is (i) the performance of a contract to which the data subject is party or for pre-contractual measures.

– Website or email contacts:

The lawful basis for processing your data is (i) the consent of the data subject.

In cases where submitting a request requires completing a form and clicking a submit button, doing so will imply that you have been informed and have expressly consented to the clause attached to that form or accepted the privacy policy.

All our forms include a checkbox that must be selected to access the offered services.

The processing purposes are as follows:

a) To manage the inquiries or requests you send us via the Website, email, or phone.

b) To send communications, special promotions, news, or actions of interest you request or that may interest you, including via electronic means. Since this is secondary to the primary purpose, you must check the consent box.

Personal data you provide through this means will not be shared with third parties, and ERN System will respond directly to such inquiries.

– Social media contacts:

The lawful basis for processing your data is the acceptance of a contractual relationship with the social network provider made when registering on their platform, and in accordance with their privacy policies, which are external to us.

– Website users:

The lawful basis for data processing is (i) our legitimate interest in understanding how our users navigate to adapt to their interests and improve our relationship with them; and (ii) your consent to browsing our website and accepting the cookies terms.

To whom will your data be disclosed?

Your data will not be transferred to third parties outside of the service we provide, except when legally required. Specifically, it may be transferred to the State Tax Administration Agency and to banks and financial institutions for payment processing.

Your data may also be communicated to our service providers when necessary to fulfill the contract. In such cases, the data processor is contractually obligated to use the data only for the stated purpose and maintain appropriate security measures.

What security measures do we apply?

Rest assured, we have adopted appropriate technical and organizational measures to guarantee confidentiality, integrity, and availability in the processing of your personal data, specifically those that prevent loss, misuse, alteration, unauthorized access, and theft of personal data.

What are your rights when you provide us with your data?

You may exercise your rights of access, rectification, erasure, portability, restriction, or objection to the processing of your data, including the right to withdraw consent, as detailed below:

Right of access: You may ask if we are processing your data and how.

Right of rectification: You may request that we update your personal data if incorrect, and delete it if you wish.

Right to restriction of processing: In such cases, data will be stored only to assert or defend legal claims.

Right to object: After requesting opposition to processing, we will cease processing as you indicate unless we have overriding legitimate grounds or need to assert or defend legal claims.

Right to data portability: If you want your data transferred to another company, we will provide portability of your data to the new controller.

Right to erasure: You may request deletion of your data when it is no longer necessary for processing, you withdraw consent, processing is unlawful or there’s a legal obligation to delete it. We will analyze the request in accordance with the law.

For more information on your legal rights and how to exercise them, we recommend contacting the Spanish Data Protection Agency (AEPD), which is the supervisory authority for data protection.

You may contact the Data Protection Officer before filing a claim with the AEPD against the data controller.

If we have not addressed the exercise of your rights, you may submit a complaint to the Spanish Data Protection Agency.

We have forms available for exercising rights, which can be requested via the email address provided above; you may also use forms prepared by the AEPD or third parties. These forms must be electronically signed or accompanied by a copy of your ID. If acting via a representative, their ID or electronic signature must also be provided.

Forms may be submitted in person or sent by postal mail or email to the addresses listed in the “Data Controller” section.

The maximum response time is one month from receipt of your request.

For how long will we retain your data?

Personal data will be retained as long as you maintain a relationship with us.

Once that relationship ends, personal data processed for each indicated purpose will be retained for the legally mandated period. If no such legal period exists, data will be kept until you request its deletion or withdraw consent, or for the duration required by a court according to the statute of limitations for legal actions.

For each category or type of processing, we provide a specific retention period, which you can consult in the following table: