General Regulation Data Protection Regulation (GDPR)

Data protection policy General Regulation Data Protection Regulation (GDPR) (EU) 2016/679:

Onulec S.L. is deeply committed to complying with the Spanish regulations on the protection of personal data, and guarantees full compliance with the obligations set out, as well as the implementation of the security measures set out in art. 9 of  Spanish Law 15/1999 on the Protection of Personal Data (LOPD) and its implementing regulations, and for compliance with the General Regulation Data Protection Regulation (GDPR) (EU) 2016/679.

In accordance with these regulations, from Onulec S.L inform that the use of our website may require that we provide certain personal data through registration forms or contact, or by sending emails, and that these will be processed by Onulec S.L . The sending of these personal data constitutes express consent to the processing of the same, although this consent is revocable.

Through this text, we inform users regarding the processing and protection of personal data of users and customers that may be collected by browsing, purchasing products or hiring services through its website. In this sense, Onulec S.L guarantees compliance with current legislation on the protection of personal data, reflected in Organic Law 15/1999 of 13 December on the Protection of Personal Data and in Royal Decree 1720/2007 of 21 December, which approves the Regulation for the Development of the LOPD, and in the General Data Protection Regulation (GDPR) (EU) 2016/679.


RESPONSIBLE FOR THE PROCESSING:

- Company legal Name: Onulec S.L

- Spanish VAT ID: B21245469

- Commercial: Onulec Material Eléctrico

- Address: Avenida Unión Europea S/N , 21002 de Huelva

- Security Manager: [Diego Muñoz de la Villa] (onulec@onulec.com)

Contact Details:

- Telephone: (+34) 959 240 094

- Email: onulec@onulec.com

- Contact form: https://www.onulec.com/tienda/contactenos

Registrations:

-Registered in the Mercantile Registry of Huelva.

-Registration of Treatments according to the gdpr: Clients, Suppliers, Employees and Web Users.

-Domain name (website): https://www.onulec.com


PROCESSING PURPOSE

The information you provide is used for the sole purpose of managing the services and products demanded. We also provide information about news, products and new services, through the means you have provided us to do so: mail, postal address and even telephone calls.

The collection and automated processing of personal data, as a result of browsing the pages of the PORTAL, consultation, request, order of products or subscription of any service / s, promotion / s or contest / s, of those offered by Onulec SL, also aims to provide the USER a personalized experience on the Network of sites Onulec S. S.L, the maintenance of the contractual relation established between both (including the telephone contact), as well as the management, administration, provision, extension and improvement of the services in which the USER decides to subscribe, register or use, and the adaptation of these services to the preferences and tastes of the USERS.


SECURITY MEASURES

In compliance with current legislation on data protection, users are informed that Onulec S.L. has adopted technical and organizational measures in accordance with the provisions of the aforementioned regulations. The personal data collected in the forms are processed solely by the staff of Onulec S.L. or by the persons in charge of processing established here. Appropriate security measures have been adopted for the data provided and, in addition, all the technical means and measures within its reach have been installed to prevent the loss, misuse, alteration, unauthorised access and theft of the data provided to us.


DATA ACCURACY

The Client or User declares that all the data provided by him are true and correct and undertakes to keep them updated, communicating to Onulec S.L, any modification thereof. The user will be responsible for the veracity of their data and will be solely responsible for any disputes or litigation that may result from the falsehood of the same. It is important that, so that we can keep the personal data updated, the user informs Onulec S.L whenever there has been any change in them. Otherwise, we cannot be held responsible for its veracity.


EXERCISE OF RIGHTS

The LOPD and the GDPR grant data subjects the possibility of exercising a series of rights related to the processing of their personal data. As far as the data of the user are object of treatment on the part of Onulec S.L, these will be able to exercise their rights. In order to do so, the user must go to the following address, providing documentation proving his/her identity (ID card or passport), by e-mail to onulec@onulec.com, or by written communication to the address that appears in our legal notice. Such communication shall reflect the following information:

Name and surname of the user, the request for application, address and supporting data.

The exercise of rights must be carried out by the user himself. However, they may be executed by an authorised person as the authorised person's legal representative. In this case, the documentation accrediting this representation of the interested party must be provided.

The user may request the exercise of the following rights:

Right to request access to personal data.
Right to request correction (if incorrect) or deletion.
Right to request the limitation of their treatment, in which case they will only be kept by Onulec S.L for the exercise or defense of claims.
Right to object to processing: Onulec S.L. will stop processing your data, unless for legitimate reasons or the exercise or defense of possible claims have to be further processed.
Right to data portability: in case you want your data to be processed by another company, Onulec S.L will facilitate the portability of your data to the new person in charge.
In the event that consent has been given for a specific purpose, the user has the right to withdraw consent at any time, without affecting the lawfulness of the processing based on consent prior to withdrawal.

If a user considers that there is a problem with the way in which Onulec S.L is handling their data, they can address their claims to the Security Manager or to the corresponding data protection authority, being the Spanish Data Protection Agency the one indicated in the case of Spain.


DATA RETENTION

Disaggregated data will be stored without deletion period. With regard to Customer data, the retention period of personal data will vary depending on the service that the Customer contracts. In any case, it will be the minimum necessary and can be maintained until:

4 years: Law on Violations and Sanctions in the Social Order (obligations in matters of affiliation, registration, deregistration, contribution, payment of salaries...); Arts. 66 and following General Tax Law (accounting books...)
5 years: Art. 1964 Civil Code (personal shares without special term)
6 years: Art. 30 Commercial Code (accounting books, invoices...)
10 years: Art. 25 Law for the Prevention of Money Laundering and Financing of Terrorism.
The users of mailing lists or those uploaded by Onulec S.L to pages or profiles of RRSS, will be kept until the user withdraws the consent.

Candidate data (C.V.), if any: In the event that the candidate is not selected, Onulec S.L. may keep his/her curriculum vitae stored for a maximum of two years in order to incorporate it in future calls, unless the candidate states otherwise.


COLLECTION AND PROCESSING OF DATA

Onulec S.L has the duty to inform users of its website about the collection of personal data that can be carried out, either by sending e-mail or by filling out the forms included on the website. In this sense, Onulec S.L. will be considered as Responsible for the data collected through the means described above.

At the same time Onulec S.L informs the users that the purpose of the treatment of the collected data contemplates the attention of requests made by the users, the inclusion in the agenda of contacts, the rendering of products or services and the management of the commercial relation. The operations, managements and technical procedures that are carried out in an automated or non-automated way and that make possible the collection, storage, modification, transfer and other actions on personal data, have the consideration of Treatment of personal data.

Onulec S.L makes available to users a series of telematic mechanisms for the collection and processing of their personal data, for the purposes set out above. Personal data provided telematically, either through email, contact forms on this website or online contracts will be used for commercial and administrative management of customers and users of the company. These data will be processed through servers managed by 1&1 Internet España S.L.U, which is also the company that provides e-mail services, and which will be considered the Treatment Manager.

As established by the LSSICE, Onulec S.L undertakes not to send commercial communications without identifying them as such. For these purposes, information sent to customers for the maintenance of the existing contractual relationship will not be considered as commercial communication.

In any case, only the necessary data will be obtained to be able to carry out the contracted service, or to be able to respond adequately to the request of information made by the user.

Occasionally, personal data will be provided through links to third party websites. In this case, the staff of Onulec S.L will never have access to the personal data that the Client provides to these third parties.


COMMUNICATION OF INFORMATION TO THIRD PARTIES

Onulec S.L will not transfer or communicate your data to any third party, except in the cases provided for by law or when the provision of a service implies the need for a contractual relationship with a processing manager, and always in accordance with the general conditions approved by the user prior to the hiring of the same. Thus, when contracting our services, the user accepts that some of them may be, in whole or in part, subcontracted to other people or companies, which will be considered as Treatment Managers, with whom the corresponding confidentiality contract has been agreed, or adhered to their privacy policies, established in their respective websites. You also agree that some of the personal data collected may be provided to these Treatment Managers, when necessary for the effective performance of the contracted service.

The user may refuse the transfer of your data to the Data Processors, by written request, by any of the aforementioned means.


SECRECY

The information supplied by the client will, in any case, be considered confidential, and may not be used for purposes other than those related to the services contracted or products purchased from Onulec S.L . Onulec S.L. undertakes not to disclose or reveal information about the client's claims, the reasons for the advice requested or the duration of their relationship with the client.


VALIDITY

This privacy and data protection policy has been drafted on 25 May 2018, and may vary depending on changes in legislation and jurisprudence that occur, being the responsibility of the owner of the data reading the updated document, in order to know their rights and obligations in this regard at all times.