FLUVITEX, SL is committed to protecting the privacy of users who access this website and/or any of its services. Use of the website and/or any of the services offered by FLUVITEX, SL implies the user’s acceptance of the provisions contained in this Privacy Policy and that their personal data will be processed as stipulated herein. Please note that although there may be links from our website to other websites or social media platforms, this Privacy Policy does not apply to the websites of other companies or organizations to which the website redirects. FLUVITEX, SL does not control the content of third-party websites, nor does it accept any responsibility for the content or privacy policies of such websites.

Basic Information on Data Processing (Regulation (EU) 2016/679 and Organic Law 3/2018)

Data Controller: FLUVITEX, SL NIF: B17236720 Major de Santa Magdalena, 1 17857 Sant Joan Les Fonts Email: compliance@masias.com

Purpose of processing To offer and manage our textile production services.

Legal basis – Consent obtained from the data subject when they request information from us. – Performance of the service contract when they contract with us.

Recipients The data will not be disclosed to third parties, unless required by law or necessary to fulfill the purpose of the processing.

Individual rights Data subjects have the right to exercise their rights of access, rectification, restriction of processing, erasure, data portability, and objection by sending their request to our address.

Data retention period For as long as the business relationship continues or for the number of years necessary to comply with legal obligations.

Complaints Data subjects may contact the AEPD to file any complaint they deem appropriate.

Additional information You can consult the additional and detailed information below in the “Privacy Questions” section.

Privacy Questions

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR), and Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we provide the following information regarding the processing of your personal data:

Who is responsible for processing your data?

Identity: FLUVITEX, SL

Tax ID: B17236720

Address: Major de Santa Magdalena, 1 17857 Sant Joan Les Fonts

Phone: 972 29 31 50

Email: compliance@masias.com

For what purpose do we process your personal data?

§ We process the information provided to us to manage our textile production services.

§ If you contact us via the contact form on our website, we will process your data to handle your inquiry.

§ We may also use your data to inform you about our activities, products, or services if you are already a customer or, if you are not, when you have given us your consent to do so.

§ When you enter our facilities, your image may be recorded by video surveillance cameras for security purposes.

§ If you send us a resume, we will process the data to manage our resume database for recruitment purposes.

How long will we retain your data?

The personal data provided will be retained for as long as you are a user of our services or wish to receive information, since you may object to the processing of your data for promotional purposes, either when you provide it to us or at any time thereafter, by notifying us at compliance@masias.com, and thereafter, for the periods established to comply with our legal obligations, which in the case of accounting and tax documentation for commercial purposes will be 6 years, in accordance with Article 30 of the Commercial Code, and for tax purposes will be 4 years, in accordance with Articles 66 to 70 of the General Tax Law.

§ Images captured by the video surveillance system will be retained for one month.

§ In the case of resumes, the data will be retained for one year.

What is the legal basis for processing your data?

For the management of the contractual relationship with the data subject, we will base the processing of data on the performance of the contract or within the framework of the pre-contractual relationship.

For the sending of commercial information, we will base the processing on your consent; however, if you are already a customer of ours, we may send you information about our products and services, always providing a simple and free means to unsubscribe, in accordance with the provisions of Article 21.2 of Law 34/2002, of July 11, on information society services and electronic commerce.

Regarding data collection through the capture of images by the video surveillance system, the legal basis is the legitimate interest in safeguarding the safety of individuals and property.

To whom will your data be disclosed?

The data will not be disclosed to third parties, unless required by law or necessary to fulfill the purpose of the processing.

What are your rights when you provide us with your data?

§ Any person has the right to obtain confirmation as to whether or not we are processing their personal data.

§ Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where applicable, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

§ In certain circumstances, data subjects may request the restriction of processing of their data; in this case, we will retain it solely for the exercise or defense of legal claims.

§ Also, in certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, we will cease processing the data, except for compelling legitimate grounds or for the exercise or defense of potential legal claims.

§ Data subjects also have the right to data portability.

§ Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning them or similarly significantly affects them.

§ Finally, data subjects have the right to lodge a complaint with the competent supervisory authority.

How can you exercise your rights?

By sending a written request, attaching a copy of an identification document, to our physical or email address.

How did we obtain your data?

The personal data we process comes from the data subject themselves. The data subject guarantees that the personal data provided is accurate and is responsible for notifying us of any changes to it. Data marked with an asterisk is required in order to provide the requested service.

What data do we process?

The categories of data we may process in the provision of our services are:

§ Identifying information

§ Mailing or email addresses

In the case of resumes, also:

§ Personal characteristics

§ Academic and professional information

The data is limited, as we only process the data necessary for the provision of our services and the management of our business.

Do we carry out international data transfers?

To send commercial communications, we use the MailChimp service provided by The Rocket Science Group, LLC, located in the United States. The international data transfer is based on the Standard Contractual Clauses for processors approved by the European Commission, and on the Commission Implementing Decision of July 10, 2023, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, regarding the adequate level of protection of personal data under the EU-U.S. Privacy Shield Framework.

The use of Google Analytics cookies (including YouTube cookies) involves the transfer of data to these companies located in the United States of America. The United States and the European Union have a Privacy Shield Framework agreement approved by the Commission Implementing Decision of July 10, 2023, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council. You can find more information in Google’s privacy policy

Do we use cookies?

We use cookies while you browse our website with your consent.

You can configure your browser to be notified of the use of cookies and to prevent their use. Please visit our cookie policy.

What security measures do we implement?

We apply the security measures established in Article 32 of the GDPR; therefore, we have adopted the necessary security measures to ensure a level of security appropriate to the risk of the data processing we perform, with mechanisms that allow us to guarantee the confidentiality, integrity, availability, and ongoing resilience of the processing systems and services.

Some of these measures are:

§ Informing staff about data processing policies.

§ Performing regular backups.

§ Controlling access to data.

§ Regular verification, evaluation, and assessment processes.

How do we process data on behalf of third parties?

The type of data, the category of data subjects, and the processing activities we may perform on behalf of our clients will be established in the corresponding data processing agreement.