www.mdp-eng.com

I. PRIVACY POLICY AND DATA PROTECTION

In compliance with current legislation, Madespro Engineering (hereinafter also referred to as the “Website”) undertakes to adopt the necessary technical and organizational measures, in accordance with the level of security appropriate to the risk of the data collected.

Laws included in this privacy policy

This privacy policy is adapted to current Spanish and European regulations on personal data protection on the internet. In particular, it complies with the following regulations:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR), on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

• Organic Law 3/2018 of December 5 on Personal Data Protection and guarantee of digital rights (LOPD-GDD).

• Royal Decree 1720/2007 of December 21, approving the regulations implementing Organic Law 15/1999 on Personal Data Protection (RDLOPD).

• Law 34/2002 of July 11 on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the data controller

The data controller for the personal data collected on Madespro Engineering is: Madespro Engineering, SL., with Tax ID (NIF/CIF): B72557770, registered in the Commercial Registry of Barcelona, with the following registration details: , whose representative is: Madespro Engineering, SL. (hereinafter, the “Data Controller”). Contact details:

Address: CALLE ESCULTURA. 5 NAVE 12. 08110, MONTCADA I REIXAC, BARCELONA

Telephone: +34 605 969 007

Email: JBARDO@MDP-ENG.COM

Personal Data Record

In compliance with the provisions of the GDPR and LOPD-GDD, we inform you that personal data collected by Madespro Engineering through the forms on its pages will be incorporated and processed in our database for the purpose of facilitating, streamlining, and fulfilling commitments between Madespro Engineering and the User, or maintaining the relationship established through the forms completed by the User, or to respond to a request or inquiry.

Likewise, in accordance with GDPR and LOPD-GDD, unless the exception provided in Article 30.5 of the GDPR applies, a record of processing activities is maintained, specifying the purposes and other circumstances established in the GDPR.

Principles applicable to personal data processing

The processing of the User’s personal data shall be subject to the following principles set out in Article 5 of the GDPR and in Organic Law 3/2018:

• Principle of lawfulness, fairness, and transparency

• Principle of purpose limitation

• Principle of data minimization

• Principle of accuracy

• Principle of storage limitation

• Principle of integrity and confidentiality

• Principle of proactive accountability

Categories of personal data

The only categories of data processed are identification data. Under no circumstances are special categories of personal data processed as defined in Article 9 of the GDPR.

Legal basis for processing

The legal basis for the processing of personal data is consent. Madespro Engineering undertakes to obtain the express and verifiable consent of the User for the processing of their personal data for one or more specific purposes.

The User has the right to withdraw consent at any time. Withdrawing consent shall be as easy as giving it. As a general rule, withdrawal of consent will not affect the use of the Website.

When users must or may provide data via forms for inquiries or information requests, they will be informed if any fields are mandatory.

Purposes of data processing

Personal data is collected and managed by Madespro Engineering in order to facilitate, streamline, and fulfill commitments between the Website and the User, or to maintain the relationship established through forms, or to respond to requests or inquiries.

Additionally, data may be used for commercial, personalization, operational, and statistical purposes, as well as marketing studies to improve content, quality, functionality, and navigation.

At the time of data collection, users will be informed of the specific purpose(s) of processing.

Data retention periods

Personal data will only be retained for the minimum time necessary for processing purposes and, in any case, for a maximum of 18 months, or until the User requests its deletion.

Data recipients

User personal data will not be shared with third parties.

Personal data of minors

In compliance with Article 8 of the GDPR and Article 7 of LOPD-GDD, only individuals over 14 years of age may lawfully give consent for the processing of their personal data. For users under 14, parental or guardian consent is required.

Data security and confidentiality

Madespro Engineering undertakes to adopt the necessary technical and organizational measures to ensure the security of personal data and prevent its alteration, loss, unauthorized access, or processing.

The Website has an SSL certificate (Secure Socket Layer), ensuring encrypted and secure data transmission.

However, absolute security on the Internet cannot be guaranteed. In the event of a data breach that poses a high risk to individuals’ rights and freedoms, the Data Controller will notify the User without undue delay.

All data will be treated as confidential by the Data Controller, who ensures confidentiality obligations are respected by employees and partners.

Rights of users

Users may exercise the following rights under GDPR and LOPD-GDD:

• Right of access

• Right to rectification

• Right to erasure (“right to be forgotten”)

• Right to restriction of processing

• Right to data portability

• Right to object

• Right not to be subject to automated decision-making, including profiling

Requests may be submitted including identification details, reason for request, address for notifications, date, and signature, along with supporting documentation.

Requests can be sent to:

Postal address: CALLE ESCULTURA. 5 NAVE 12. 08110, MONTCADA I REIXAC, BARCELONA
Email: JBARDO@MDP-ENG.COM

Third-party links

The Website may include hyperlinks to third-party websites not operated by Madespro Engineering. These sites have their own privacy policies, and Madespro Engineering is not responsible for their practices.

Complaints to the supervisory authority

If the User believes there is an issue with how their personal data is processed, they have the right to lodge a complaint with a supervisory authority, in Spain the Spanish Data Protection Agency (AEPD): https://www.aepd.es/

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

Users must read and agree to this Privacy Policy before providing personal data. Use of the Website implies acceptance of this policy.

Madespro Engineering reserves the right to modify this policy due to legal, regulatory, or organizational changes. Users are encouraged to review it periodically.

This Privacy Policy has been updated in accordance with GDPR (EU Regulation 2016/679) and Organic Law 3/2018.