Data Controller
- Identity: CERPROKEM S.L.U.
- Tax ID (NIF / CIF): B65877441
- Postal address: Francesc Macià, Unit 78, 08530 La Garriga, Barcelona, Spain
- Email: info@cerprokem.com
Data collected, purposes and legal basis
Personal data collected through this website will be processed on the following legal bases and for the following purposes:
1. Contact form
- Data collected: First name, last name, company, email address, telephone number (when provided) and any information voluntarily included in the message.
- Purpose: To manage and respond to enquiries, complaints or requests for information received.
- Legal basis: The data subject's explicit consent, provided by selecting the mandatory acceptance checkbox before submitting the form.
2. Browsing data (Google Analytics)
- Data collected: Anonymised IP address, behavioural data, pages visited and approximate geographical origin.
- Purpose: Statistical analysis of website use in order to improve the service.
- Legal basis: Explicit consent provided through the cookie banner.
3. Marketing and advertising data (Google Ads)
- Data collected: Interaction with advertising campaigns and browsing profiles.
- Purpose: To measure advertising performance and enable personalised remarketing campaigns.
- Legal basis: Explicit consent provided through the cookie banner.
Data retention period
Personal data will be retained only for as long as necessary to fulfil the relevant purpose:
- Data submitted through contact forms will be retained until the enquiry has been fully resolved or until the data subject requests its deletion.
- Data associated with cookies will be retained in accordance with the Cookie Policy, for a maximum of 2 years.
- Thereafter, the data will remain duly blocked and available exclusively to judges, courts or competent public authorities for the purpose of addressing possible legal liabilities, and will be deleted once the applicable statutory limitation periods have expired.
Recipients of the data
Personal data will not be disclosed to third parties outside the organisation unless there is an express legal obligation to do so. However, we rely on technology service providers acting as Data Processors under strict contractual security requirements:
- Web hosting provider: Serinfon.com, whose servers are located within the European Economic Area.
- Google Ireland Limited: Provider of analytics and advertising services, covered by the Data Privacy Framework for the protection of international data transfers.
Data subject rights
The General Data Protection Regulation guarantees users the following rights, which may be exercised by sending a written request to the Data Controller's email address together with a copy of an identity document for verification purposes:
- Access: The right to know what personal data is being processed.
- Rectification: The right to correct errors or amend inaccurate or incomplete data.
- Erasure (right to be forgotten): The right to request deletion of data when it is no longer necessary for the purposes for which it was collected.
- Objection: The right to request that data processing cease in specific circumstances, for example in relation to marketing communications.
- Restriction of processing: The right to request the temporary suspension of processing in the cases provided for by law.
- Data portability: The right to receive personal data in a structured, commonly used format for transmission to another controller.
If the data subject considers that the processing of their personal data infringes data protection law, they also have the right to lodge a formal complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD).
Security measures
The website uses secure encryption through an SSL (Secure Sockets Layer) certificate, ensuring that all information transmitted through forms is transferred with integrity, confidentiality and encryption.
Policy updates
This policy may be amended in order to adapt it to future legislative changes, case law or criteria issued by the supervisory authority.