SURCO Interiors Privacy Policy
Privacy Policy
SURCO INTERIORS S.L. (hereinafter “SURCO”) makes this privacy policy available to you via the website https://surcoparquet.com/ in order to provide you with detailed information about how we process your personal data and protect your privacy and the information you provide to us. Should any future changes be made to this policy, we will notify you via the website or through other means so that you may be aware of the new privacy terms introduced.
In compliance with Regulation (EU) 2016/679, the General Data Protection Regulation, and Organic Law 3/2018 of December 5 on the Protection of Personal Data and the Guarantee of Digital Rights, we inform you of the following:
Data Controller
Data Controller: SURCO INTERIORS S.L.
Tax ID: B-75121285
Registered Office: Carretera de Atios a Pontellas S/N 36400 O Porriño (Pontevedra)
Email: dpo@surcointeriors.com
If you have any questions, concerns, or suggestions regarding how we use your personal data, you may contact the Data Protection Officer via email at: dpo@surcointeriors.com
For what purposes do we process your personal data?
At SURCO, we collect and process your personal information generally to manage our relationship with you. The main purposes we have identified are as follows:
– Management and procurement of the products and services offered by our company
– Handling requests for information, suggestions, and complaints you may submit to us
– Keeping you informed about events, offers, products, and services that may be of interest to you through various communication channels, provided you have given your consent.
– Management of the business relationship with our suppliers
How do we collect your information?
We collect your personal information through various means, but you will always be informed at the time of collection via privacy notices regarding the data controller, the purpose and legal basis of the processing, the recipients of the data, and the retention period for your information, as well as how you can exercise your data protection rights.
In general, the personal information we process is limited to identifying data (first and last name, phone number, and email address), contracted services, and payment and billing information. SURCO uses social media, which is another way we reach you. The information collected through the messages and communications you post may contain personal information that is available online and accessible to the public. These social media platforms have their own privacy policies explaining how they use and share your information; therefore, SURCO recommends that you review them before using these platforms to confirm that you agree with how your information is collected, processed, and shared.
Through our website, we collect personal information related to your browsing activity via the use of cookies. For a clear and precise understanding of the cookies we use, their purposes, and how you can configure or disable them, please consult our Cookie Policy.
User Responsibility
By providing us with your data through electronic channels, you warrant that you are over 14 years of age and that the data provided to SURCO is true, accurate, complete, and up-to-date. To this end, the user confirms that they are responsible for the accuracy of the data provided and that they will keep such information appropriately updated so that it reflects their actual situation, assuming responsibility for any false or inaccurate data they may provide, as well as for any direct or indirect damages that may result.
How long do we retain your information?
At SURCO, we only retain your information for the period of time necessary to fulfill the purpose for which it was collected, to comply with the legal obligations imposed on us, and to address any potential liabilities that may arise from fulfilling the purpose for which the data was collected.
If at any time we have collected your data to contact you as a potential user of our services or to respond to a request for information made by you, such data will be retained for a maximum of 2 years from the date of collection and will be deleted upon the expiration of that period if no contractual relationship has been formalized, or at the time you request it.
In any case, and as a general rule, we will retain your personal information for as long as a contractual relationship between us exists or until you exercise your right to erasure and/or restriction of processing. In the latter case, the information will be blocked and will not be used for any purpose other than storage, for as long as it may be necessary to assert or defend legal claims or to address any potential liability that may arise.
Who do we share your data with?
In general, at SURCO, we do not share your personal information, except for disclosures we are required to make based on legal obligations. Likewise, your personal information will be made available to public authorities, judges, and courts to address any potential liabilities arising from the processing.
International data transfers
There are no international transfers of your data to countries outside the European Economic Area (EEA).
What are your rights regarding the processing of your data, and how can you exercise them?
Data protection regulations allow you to exercise your rights of access, rectification, erasure, and data portability, as well as the right to object to and restrict the processing of your data, and the right not to be subject to decisions based solely on the automated processing of your data, where applicable.
These rights are characterized by the following:
– Exercising them is free of charge, unless the requests are manifestly unfounded or excessive (e.g., repetitive in nature), in which case SURCO may charge a fee proportional to the administrative costs incurred or refuse to act
– You may exercise these rights directly or through your legal or voluntary representative
– We must respond to your request within one month; however, depending on the complexity and number of requests, this period may be extended by an additional two months.
– We are obligated to inform you of the means to exercise these rights, which must be accessible, and we cannot deny you the exercise of your rights solely because you choose a different method. If the request is submitted electronically, the information will be provided electronically whenever possible, unless you request otherwise.
– If SURCO does not act on the request, it will inform you, within one month at the latest, of the reasons for its inaction and the possibility of filing a complaint with a Supervisory Authority.
To facilitate the exercise of your rights, we provide links to the request form (IN SPANISH) for each of the rights below:
Form for exercising the right of access
Form for exercising the right to rectification
Form for exercising the right to object
Form for exercising the right to erasure (“right to be forgotten”)
Form for exercising the right to restriction of processing
Form for exercising the right to data portability
Form for exercising the right not to be subject to automated individual decision-making
To exercise your rights, SURCO provides the following means:
By sending a scanned and signed form to the email address: dpo@surcointeriors.com, indicating “Exercise of LOPD Rights” in the subject line.
In both cases, you must verify your identity so that we can ensure we only respond to the data subject or their legal representative; in the latter case, you must provide documentation proving representation.
Furthermore, and especially if you feel that you have not received a satisfactory response regarding the exercise of your rights, we inform you that you may file a complaint with the national supervisory authority by contacting the Spanish Data Protection Agency at C/ Jorge Juan, 6 – 28001 Madrid.
How do we protect your information?
At SURCO, we are committed to protecting your personal information.
We use reasonably reliable and effective physical, organizational, and technological measures, controls, and procedures designed to preserve the integrity and security of your data and ensure your privacy.
In addition, all staff with access to personal data have been trained and are aware of their obligations regarding the processing of your personal data.
All these security measures are reviewed periodically to ensure their adequacy and effectiveness.
However, absolute security cannot be guaranteed, and no security system is impenetrable. Therefore, in the event that any information subject to processing and under our control is compromised as a result of a security breach, we will take appropriate measures to investigate the incident, notify the Supervisory Authority, and, where applicable, notify those users who may have been affected so that they may take appropriate measures.
