Privacy policy

(ADDITIONAL AND DETAILED INFORMATION ON DATA PROTECTION)

In accordance with the provisions of Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, the following information is provided:

“Who is responsible for processing your data?”

Identity: QUINTO NUT, S.L. – CIF B10506087
Postal Address: POLÍGONO EL CAÑO III, MANZANA MI-4, PARCELA 9, 14220 ESPIEL (CÓRDOBA), Spain
Telephone: +34 957 041 565
Email: INFO@QUINTONUT.COM

“For what purpose do we process your personal data?”

Your personal data will be processed for the following purposes, as applicable:

✓ Administrative management related to the sale of our products, including the preparation and delivery of your order, issuance of receipts, delivery notes or invoices, payment management, and communications necessary to provide proper service. Such communications may be made by phone, email, instant messaging (WhatsApp, SMS), and/or postal mail.

✓ Preparation, delivery, and monitoring of requested quotations for the sale of our products.

The provision of the requested data is mandatory, as the information is essential for the sale of our products. Refusal to provide such data will make it impossible to carry out the described purposes.

Your personal data will not be used for purposes other than those described. Should new purposes arise, your explicit, informed, and unequivocal consent will always be requested in advance. No profiling based solely on automated processing that produces legal effects or significantly affects you will be carried out.

✓ Manage and develop your registration on our website, to contact you and resolve any questions or inquiries about our products.

✓ Manage and send advertising communications regarding promotions, news, and offers related to our products via email, instant messaging (WhatsApp, SMS), telephone, and/or postal mail.

✓ Manage and monitor our social media accounts (RRSS) to promote our company.

QUINTO NUT, S.L. has profiles on major social media platforms (Facebook, Instagram, LinkedIn). Your data as a user will be processed solely to properly manage our presence on the respective network and promote our services.

Processing of your data as a social media follower will be governed by this section and by the terms of use, privacy policies, and access rules of the relevant social network, which you have previously accepted as a user.

✓ Receive and manage “Complaint and Claims Forms” to respond and propose a solution to the issue raised or justify the impossibility of resolving it.

✓ Respond to the exercise of rights, inquiries, and complaints.

“How long will your data be kept?”

✓ Your personal data will be retained as long as a contractual or business relationship exists between you and QUINTO NUT, S.L. and you do not request its deletion. When no longer necessary, the data will be retained for the statutory limitation period of potential legal actions arising from the processing, from the last confirmation of interest or last transaction/communication.
(6 years for commercial purposes – Article 30 of the Commercial Code: documents, issued receipts, invoices, etc.;
1 year – Law 34/2002 on Information Society Services and Electronic Commerce (LSSICE): traffic data related to emails and data provided via the website;
1 year – Law 25/2007 on Data Retention for Electronic Communications and Public Communication Networks: call data from fixed and mobile telephony; and other applicable retention periods established by law).

During these limitation periods, the data will remain properly blocked, not used for any purpose other than to comply with legal requirements, provide data to courts, the Public Prosecutor, or competent public authorities, particularly data protection authorities, for potential liabilities arising from the processing.

After these periods, personal data will be securely deleted, ensuring its total destruction.

✓ Data provided for commercial communications will be retained until you revoke your previously granted consent.

“What is the legal basis for processing your data?”

QUINTO NUT, S.L. relies on the following lawful bases for processing your personal data:

✓ Legal Obligation (Article 6.1(c) GDPR): Managing and issuing receipts, delivery notes, or invoices resulting from product sales; responding to the exercise of your rights; and handling formal claims through the “Complaints and Claims Form.”

✓ Performance of a Contract / Legitimate Interest (Articles 6.1(b) and 6.1(f) GDPR): Processing personal data for the sale of our products is based on the performance of a contract to which you are a party, as well as our legitimate interest arising from the contractual relationship requested by you. This includes administrative management, order preparation and delivery, and necessary communications.

✓ Pre-contractual Measures (Article 6.1(b) GDPR): Processing data for preparing quotations based on your request.

✓ Explicit Consent (Article 6.1(a) GDPR):
For the following purposes, data processing will be based on your explicit consent:

• Sending advertising communications via electronic means.
• Responding to claims, inquiries, or requests.
• Communications through WhatsApp to facilitate quicker contact.
• Accessing our social media profiles (Facebook, Instagram, LinkedIn) to share updates or published information. Joining our profiles implies consent to process personal data visible on your profile.

You may withdraw your consent at any time without affecting the lawfulness of processing based on consent prior to withdrawal. Such withdrawal may be communicated at any time via INFO@QUINTONUT.COM.
Withdrawal of consent will not affect our contractual relationship.

✓ Legitimate Interest (Article 6.1(f) GDPR):
For the following purposes, the legal basis will be our legitimate interest:

• To pursue or initiate legal actions necessary to defend our rights and legitimate interests.
• To send commercial communications regarding products of potential interest to you, based on our legitimate interest in marketing our products under applicable law (Article 21.2 of the Information Society Services and Electronic Commerce Act).

You may object to the processing of your personal data for receiving commercial communications at any time by requesting removal via INFO@QUINTONUT.COM.

“Who will your data be shared with?”

Your personal data may be lawfully disclosed, when necessary, to the following recipients:

✓ Public administrations and authorities (Tax Agency, Consumer Affairs, etc.) or law enforcement agencies, when required by law or to protect our legitimate interests.
✓ Data processors such as IT service providers, legal advisors, accountants, etc. QUINTO NUT, S.L. has signed corresponding data processing agreements with each provider to ensure compliance with applicable data protection laws.
✓ Banks, for managing payments related to supplied products.
✓ Postal services, for physical mail deliveries.
✓ Courier and transport service providers.

International Data Transfers may occur with appropriate safeguards, for example when using WhatsApp, Microsoft Office 365, or Google Drive for cloud storage.
These providers adhere to EU-approved Standard Contractual Clauses or the EU–U.S. Data Privacy Framework, ensuring equivalent levels of data protection.

• WhatsApp LLC: Transfers data under EU Standard Contractual Clauses. See WhatsApp SCC Information.
• Google LLC (Google Drive): Certified under the Data Privacy Framework (DPF). See Google Privacy Frameworks.
• Microsoft Corporation (Office 365): Certified under the EU–U.S., UK–U.S., and Swiss–U.S. Data Privacy Frameworks. See Microsoft Privacy Statement.

“What are your rights when you provide your data?”

Everyone has the right to obtain confirmation as to whether QUINTO NUT, S.L. is processing personal data concerning them.

✓ Right of Access, Rectification, and Erasure: You may access your data, request correction of inaccuracies, or request deletion when the data is no longer necessary.
✓ Right to Restrict Processing: You may request restriction of processing in certain cases, in which case data will only be retained for legal claims.
✓ Right to Object: You may object to processing for reasons related to your particular situation; QUINTO NUT, S.L. will cease processing unless there are compelling legitimate grounds or for defense of claims.
✓ Right to Object to Direct Marketing, including profiling for such purposes.
✓ Right to Data Portability: You may request transfer of your data to another controller when processing is based on consent and is automated, provided it is technically feasible.
✓ Right to Withdraw Consent at any time without affecting the lawfulness of processing prior to withdrawal.
✓ Right to Lodge a Complaint with the Spanish Data Protection Agency (AEPD) if you are not satisfied with how your data is handled – www.agpd.es.

To exercise any of these rights, you may use the official forms available at AEPD Rights and Duties and send them to QUINTO NUT, S.L. via INFO@QUINTONUT.COM or by post to the address provided above.

You may also contact the Spanish Data Protection Agency directly for further information.

To process your request, if we have reasonable doubts about your identity, we may ask for a copy of your ID (only the portion necessary to verify identity). If you act through a legal or voluntary representative, proof of representation and identification will also be required.

✓ QUINTO NUT, S.L. will maintain professional secrecy and confidentiality regarding all information related to personal data, using it solely for the specific purposes for which it was collected. Appropriate technical and organizational measures will be adopted to prevent unauthorized access, unlawful processing, or accidental loss/destruction of data. Disclosure, distribution, or reproduction of this information by unauthorized persons is strictly prohibited.

✓ Data collected and generated during the contractual relationship will be processed lawfully, fairly, transparently, and kept accurate and up to date.

✓ Unless you inform us otherwise, we will assume your data has not changed, and you agree to notify us of any modifications.

✓ This policy may be reviewed and updated periodically to improve and keep it current. Any significant modification will be communicated to you.

“If you provide us with third-party data, you must first inform them of this fact, the purpose, and manner of processing. You are solely responsible for such disclosure.”