PRIVACY POLICY

Last update: 28th February 2025

EFIPROX, S.L. is committed to protecting your privacy. This Privacy Policy explains how we collect and use your personal data and what rights and options you have regarding it. Please also refer to our Cookie Policy which explains the use of cookies and other web tracking devices on our website.

Who is responsible for the processing of your personal data?

EFIPROX, S.L., with N.I.F. B-75866442, with address at PL. REYES MAGOS Nº 4, 1º C, C.P- 03440- IBI- ALICANTE, with telephone number: (+34) 684 752 841 and email: contacto@efiprox.com, is responsible for the processing of your personal data. Therefore, we guarantee your security and the confidential treatment of your data in accordance with the provisions of the EUROPEAN DATA PROTECTION REGULATION (EU) 679/2016, as well as any other applicable regulations.

What types and categories of personal data do we process?

The categories of data we will need from you are classified as follows:

  • Identifying and contact data.
  • Billing and payment data.
  • Connection and browsing data.

Within each of these data categories, the following types of data will be requested from you or provided by you at some point during our relationship:

Identifying and contact data

Identifying and contact data: Full name, postal address, shipping address, date of birth, telephone number, and email address. It may happen that you provide us with data of third parties with whom you have some kind of relationship. In that case, we will process the data because we understand that you have informed these third parties that you were going to provide their data and have forwarded them this Privacy Policy so that they know how we handle their data. However, as soon as possible, we will inform them of this Privacy Policy.

Billing and payment data

Billing and payment data: Billing address, bank account number, and banking details. These are necessary data to issue and complete an invoice; for companies, in compliance with tax obligations, it is mandatory to have a NIF/CIF to complete the invoice. Payment or card data are not stored or collected in our systems; instead, the data are sent directly through the payment gateway to the payment service provider.

Connection and browsing data

Connection and browsing data: In cases where we use this type of data, we may have access to your device's IP address, the device's identification code, and metadata.

For companies

For companies, we will process the name of your company and tax identification number, the name and surname of the contact person, the address, and telephone number.

Data update

We appreciate that the data you provide are up-to-date and accurate. In the event that the data you provide are false, incomplete, inaccurate, or not current, we reserve the right to terminate the contracted services or any other agreement that may have been entered into.

For what purposes do we use your personal data?

At EFIPROX, S.L. we use your data to the extent permitted by the GDPR and any applicable current regulations. In any case, the processing will be carried out for specific, explicit, and legitimate purposes, and under no circumstances will the data be processed in a manner incompatible with those purposes. Specifically, the following processing activities will be carried out:

  • Respond to your inquiries, requests, or petitions.
  • Manage the contractual relationship and provide the consultation services requested by the client.
  • Manage your telephone calls.
  • Issue payment receipts for the services provided to the client.
  • For the proper performance of the requested service, the necessary personal data of the client will be processed to monitor its progress during service provision.
  • Carry out all necessary administrative, fiscal, and accounting procedures to fulfill our contractual commitments and tax and accounting obligations.
  • Comply with our legal obligations.
  • Analyze and improve our services and communications with you.
  • Monitor and evaluate compliance with our policies and regulations.
  • Manage the sending of information and commercial prospecting through any means in the case of explicit consent.

What is the legal basis for processing your data?

The legal basis for the processing of personal data that we carry out is, at all times, in compliance with Article 6 of the GDPR, as well as Article 8 of Organic Law 3/2018. In cases where the legal basis for the primary purpose of data use is not found in any of the aforementioned legal bases, the consent of the data subject will be requested for processing.

How long do we retain your data?

Personal data will be retained for as long as necessary to provide the service or until the data subject withdraws their consent. Subsequently, the data will be deleted in accordance with data protection regulations, which implies that they will be blocked and made available only upon request by judges and courts, the Ombudsman, the Public Prosecutor, or the competent Public Administrations during the limitation period for any actions that may arise, and once that period has passed, they will be completely deleted.

With whom do we share your data?

Please note that the data you provide will be communicated to various product and service providers necessary for the execution of the requested processing. Our providers are obliged to use the provided data solely and exclusively for the fulfillment of the requested service. The personal data processed by EFIPROX, S.L. to achieve the purposes detailed above may be communicated to the following recipients depending on the legal basis for communication:

  • Public Administrations in cases provided by law.
  • State Security Forces and Corps.
  • Banks and financial institutions for the collection of contracted services.
  • Public registers of financial solvency and fraud prevention systems.

What are your rights?

In particular, regardless of the purpose or legal basis on which we process your data, you have the right to:

  • Right of access: Anyone has the right to obtain confirmation as to whether EFIPROX, S.L. is processing personal data concerning them.
  • Right of rectification: You have the right to access your personal data held by us and request its rectification if it is inaccurate.
  • Right to erasure: When the collected data are no longer necessary for the purposes for which they were collected.
  • Right to restrict processing: You may request that the processing of your data be restricted and that they be retained solely for the establishment, exercise, or defense of legal claims.
  • Right to data portability: You have the right to obtain the personal data concerning you in a structured, commonly used, and machine-readable format and to transmit them to another controller.
  • Right to withdraw consent: The right to withdraw any consent you have previously given for the processing of your personal data. Withdrawing your consent will not affect the lawfulness of the processing based on consent before its withdrawal.

How can you exercise your rights?

EFIPROX, S.L. is committed to respecting the confidentiality of your personal data and ensuring your ability to exercise your rights. You can exercise them free of charge by sending an email to contacto@efiprox.com, simply indicating the reason for your request and the right you wish to exercise, noting that, as required by law, you must provide a copy of your ID or NIE. Please also note that, in line with our transparency policy, you may request the forms for exercising your rights either in person at our office or by email. You are also informed that you can exercise your rights by submitting a complaint to the competent supervisory authority if you do not receive a satisfactory response.

Would you like a form to exercise your rights?

We have forms available for exercising your rights. You can request them by email or, if you prefer, you can use those provided by the Spanish Data Protection Agency or third parties. These forms must be electronically signed or accompanied by a copy of your ID. If you are represented by someone, you must provide a copy of their ID or have them sign with their electronic signature. The forms can be submitted in person, sent by mail, or by email to the Controller's address mentioned at the beginning of this text.