Data controller
- Owner
- Mecàniques Tapias SL
- Tax ID (NIF)
- B61023891
- Registered office
- C/ Pintor Velázquez 6-8, Bl. 3, Nau 3, 08213 Polinyà (Barcelona)
- mecpre@mtapias.com
- Phone
- 938 645 300
- Registration details
- Barcelona Commercial Register, volume 44641, folio 87, sheet 462102, entry 1
- Website
- www.mtapias.com
Mecàniques Tapias SL has not appointed a data protection officer, as it is not required to do so. For any question about your data, write to mecpre@mtapias.com.
Enquiries and quotes
Contact form, email, phone and WhatsApp.
- Data
- Name, company, email, phone, part details (material, dimensions, quantity), attachments (drawings and photos) and the content of your message.
- Purpose
- To answer your enquiry, assess the job, prepare the quote and, if accepted, manage the business relationship.
- Legal basis
- Steps taken at your request prior to entering into a contract (Art. 6.1.b GDPR) and, if an order is placed, performance of the contract and compliance with legal obligations (Art. 6.1.c GDPR).
- Recipients
- Data processors: Netlify, Inc. (512 2nd Street, Suite 200, San Francisco, CA 94107, United States; web hosting and forms), which filters spam with the Akismet service of Automattic Inc., and Microsoft Ireland Operations Ltd (Microsoft 365 email). Data is not disclosed to third parties unless required by law. If you contact us on WhatsApp, the communication goes through WhatsApp Ireland Limited, subject to its own privacy policy.
- International transfers
- Yes, to the United States. Netlify, Inc. participates in the EU-US Data Privacy Framework and, in addition, its data processing agreement includes the European Commission’s standard contractual clauses, which also cover its sub-processors, such as Automattic Inc. (Akismet). Microsoft processes data in the European Union; any access from outside the European Economic Area is covered by the EU-US Data Privacy Framework and by standard contractual clauses.
- Retention
- If no order is placed, 1 year from the last communication. If an order is placed, for the duration of the relationship and then for the statutory periods (6 years for business records, Art. 30 of the Spanish Commercial Code). Form submissions, including attachments, are kept on Netlify for a maximum of 12 months and then deleted; the copy we receive in the company mailbox, which only authorised staff can access, is kept for the periods above.
Job applications
The “Work with us” form and CVs received by email. Please do not include special category data (health, beliefs, etc.) or photos in your CV unless necessary.
- Data
- Name, phone, email, years of experience, your CV and the information it contains, and your comments.
- Purpose
- To manage your participation in the selection process. Only if you tick the box, to keep your CV for future selection processes.
- Legal basis
- Your consent when sending the application (Art. 6.1.a GDPR) and steps taken prior to entering into a contract (Art. 6.1.b GDPR). Keeping your CV for future processes is based on your specific consent, which you can withdraw at any time.
- Recipients
- Data processors: Netlify, Inc. (512 2nd Street, Suite 200, San Francisco, CA 94107, United States; web hosting and forms), which filters spam with the Akismet service of Automattic Inc., and Microsoft Ireland Operations Ltd (Microsoft 365 email). Data is not disclosed to third parties unless required by law.
- International transfers
- Yes, to the United States. Netlify, Inc. participates in the EU-US Data Privacy Framework and, in addition, its data processing agreement includes the European Commission’s standard contractual clauses, which also cover its sub-processors, such as Automattic Inc. (Akismet). Microsoft processes data in the European Union; any access from outside the European Economic Area is covered by the EU-US Data Privacy Framework and by standard contractual clauses.
- Retention
- Until the selection process ends; if you are not hired, your CV is deleted within 3 months at the latest. If you allowed us to keep it, for a maximum of 1 year from when you sent it. These periods also apply to the copy stored on Netlify, which is never kept for more than 12 months.
Commercial communications (optional)
- Data
- Name, company and email.
- Purpose
- To send you information by email about the services, capabilities and news of Mecàniques Tapias SL.
- Legal basis
- Your consent, given by ticking the corresponding box in the form (Art. 6.1.a GDPR and Art. 21 LSSI-CE). It is voluntary and does not affect the answer to your enquiry.
- Recipients
- Data processors: Netlify, Inc. (512 2nd Street, Suite 200, San Francisco, CA 94107, United States; web hosting and forms), which filters spam with the Akismet service of Automattic Inc., and Microsoft Ireland Operations Ltd (Microsoft 365 email). Data is not disclosed to third parties unless required by law.
- International transfers
- Yes, to the United States. Netlify, Inc. participates in the EU-US Data Privacy Framework and, in addition, its data processing agreement includes the European Commission’s standard contractual clauses, which also cover its sub-processors, such as Automattic Inc. (Akismet). Microsoft processes data in the European Union; any access from outside the European Economic Area is covered by the EU-US Data Privacy Framework and by standard contractual clauses.
- Retention
- Until you withdraw your consent. You can unsubscribe at any time using the link in each message or by writing to mecpre@mtapias.com.
Browsing, security and cookie consent
- Data
- IP address and technical browser data in the server logs; a random cookie consent ID with the date and the options chosen.
- Purpose
- To keep the website secure, prevent mass or fraudulent form submissions and be able to prove cookie consent.
- Legal basis
- Legitimate interest in website security (Art. 6.1.f GDPR) and the obligation to demonstrate consent (Art. 7.1 GDPR).
- Recipients
- Netlify, Inc. (512 2nd Street, Suite 200, San Francisco, CA 94107, United States; web hosting), as data processor.
- International transfers
- Yes, to the United States: Netlify, Inc. participates in the EU-US Data Privacy Framework and, in addition, its data processing agreement includes the European Commission’s standard contractual clauses.
- Retention
- Server logs: Netlify keeps them online for 90 days and offline for up to 1 year, according to its data processing agreement. Cookie consent record: stored in your browser (mt_consent cookie) for 12 months.
The use of cookies is explained in our Cookie policy.
Analytics and advertising (only with your consent)
If you accept analytics or advertising cookies, Google Ireland Limited (Google Analytics 4 and Google Ads) and LinkedIn Ireland Unlimited Company (LinkedIn Insight Tag) may process browsing data as controllers or joint controllers. These companies may transfer data to the United States, to Google LLC and LinkedIn Corporation, which participate in the EU-US Data Privacy Framework. Until you accept them, these tools are not loaded. More information in our Cookie policy.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent you have given, without affecting the lawfulness of prior processing.
To exercise them, write to mecpre@mtapias.com with the subject “Data protection” or by post to C/ Pintor Velázquez 6-8, Bl. 3, Nau 3, 08213 Polinyà (Barcelona). If necessary, we will ask for the information needed to verify your identity. We will reply within one month at the latest.
If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid).
Security
We apply appropriate technical and organisational measures: encrypted connection (HTTPS), restricted access to the Netlify dashboard and to the mailbox where forms are received, and spam protection with a honeypot field and the Akismet filter, without reCAPTCHA.
Minors
The website is not aimed at children under 14. If you are under that age, please do not send us personal data.
Changes to this policy
We may update this policy to reflect legal changes or changes to the website. The date of the last update is shown at the top of the page.