Privacy Policy of eriksmetalwork.com

This website collects some Personal Data from its Users.

This document can be printed for reference by using the print command in the settings of any browser.

Policy Summary

Further information about the processing of Personal Data

Personal Data collected through sources other than the User

The Owner of this website may have legitimately collected Personal Data relating to Users without their knowledge by reusing or sourcing it from third parties on the grounds mentioned in the section specifying the legal basis of processing.

Where the Owner has collected Personal Data in such a manner, Users may find specific information regarding the source within the relevant sections of this document or by contacting the Owner.

Analysis and predictions based on the User's Data (profiling)

The Owner may use Personal and Usage Data collected through this website to create or update User profiles. This type of Data processing allows the Owner to evaluate User choices, preferences and behaviour for the purposes described in this document.

User profiles may also be created through automated tools provided by third parties. Users can refer to the relevant sections of this policy to find out more about any profiling activities performed.

Users have the right to object to profiling activities and may exercise their rights by contacting the Owner as described below.

Automated decision-making

Automated decision-making means that a decision which is likely to have legal effects or similarly significant effects on a User is taken solely by technological means, without human intervention.

This website may use a User's Personal Data to make decisions entirely or partially based on automated processes where this is necessary to enter into or perform a contract, authorised by applicable law, or based on the User's explicit consent.

Where automated decisions are made, Users may have the right to obtain human intervention, express their point of view, contest the decision and request an explanation of the decision taken after the assessment.

Consequences of automated decision-making for Users

Where an automated decision produces legal effects or similarly significant consequences, Users may exercise the rights available under applicable data-protection law, including requesting human intervention and contesting the decision.

Contact information

Owner and Data Controller

Eriks Metal Work
Mijas, Málaga, Spain

Owner contact email: stan@eriksmetalwork.com

Full Policy

Owner and Data Controller

Eriks Metal Work, Mijas, Málaga, Spain.

Owner contact email: stan@eriksmetalwork.com

Types of Data collected

Among the types of Personal Data that this website may collect, by itself or through third parties, are Cookies, Usage Data, company name, contact details and other information voluntarily supplied by the User.

Complete details on each type of Personal Data collected are provided in the relevant sections of this privacy policy or by specific explanatory notices displayed before the Data is collected.

Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this website.

Unless specified otherwise, requested Data may be mandatory. If Users do not provide mandatory Data, it may be impossible for the website to provide its services. Where Data is stated to be optional, Users may choose not to provide it.

Mode and place of processing the Data

Methods of processing

The Owner takes appropriate security measures to prevent unauthorised access, disclosure, modification or unauthorised destruction of Personal Data.

Data processing is carried out using computers and/or IT-enabled tools, following organisational procedures and methods strictly related to the purposes indicated. In some cases, Data may be accessible to persons involved with the operation of this website, including administration, sales, marketing, legal and system administration, or to external parties appointed as Data Processors, such as technical service providers, hosting providers, IT companies, communications agencies and similar providers.

Place

Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located.

Depending on the User's location, Data transfers may involve transferring Personal Data to a country other than the User's own. Users may refer to the section concerning international Data transfers for more information.

Retention time

Unless otherwise stated, Personal Data is processed and stored for as long as required by the purpose for which it was collected and may be retained for longer where required by a legal obligation or based on the User's valid consent.

The purposes of processing

Data concerning the User is collected to allow the Owner to provide its services, comply with legal obligations, respond to enforcement requests, protect its rights and interests and those of Users or third parties, detect malicious or fraudulent activity, and for the following purposes: contacting the User, analytics, interaction with external social networks and platforms, managing contacts and sending messages, displaying content from external platforms and tag management.

For specific information about the Personal Data used for each purpose, refer to the relevant sections of this policy.

Detailed information on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

• Analytics: Google Analytics (Universal Analytics). Personal Data processed may include Cookies and Usage Data.
• Contacting the User: information submitted through the contact form.
• Data transfer outside the EU: transfers may take place on the basis of consent, standard contractual clauses, adequacy decisions or other safeguards permitted by applicable law.
• Displaying content from external platforms: Google Fonts and Google Maps widgets may process Usage Data, Cookies and other technical information required to provide their content.
• Interaction with external social networks and platforms: Twitter/X social buttons and widgets may process Cookies and Usage Data.
• Managing contacts and sending messages: Mailchimp may process contact information supplied by Users.
• Tag Management: Google Tag Manager may process Usage Data.

Cookie Policy

This website uses Cookies and similar technologies. Some are necessary for the website to function, while analytics or marketing technologies should only be used where permitted by applicable law and, where required, after the User has given consent.

Users can review or change their choices at any time using the Cookie Settings link in the footer.

Further information for Users

Legal basis of processing

The Owner may process Personal Data relating to Users when one or more of the following applies:

• Users have given consent for one or more specific purposes.
• Processing is necessary for the performance of an agreement with the User or for pre-contractual steps requested by the User.
• Processing is necessary to comply with a legal obligation to which the Owner is subject.
• Processing is related to a task carried out in the public interest or in the exercise of official authority vested in the Owner.
• Processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party, where those interests are not overridden by the User's rights.

Users may contact the Owner to clarify the specific legal basis that applies to particular processing activities.

Further information about retention time

Personal Data collected for purposes related to the performance of a contract between the Owner and the User is retained until that contract has been fully performed and for any additional period required by law.

Personal Data collected for the purposes of the Owner's legitimate interests is retained for as long as needed to fulfil those purposes. Where processing is based on consent, the Owner may retain Personal Data until consent is withdrawn, unless a longer retention period is required or permitted by law.

Once the applicable retention period expires, Personal Data is deleted. Rights of access, erasure, rectification and data portability may therefore no longer be enforceable after deletion.

The rights of Users based on the General Data Protection Regulation (GDPR)

Users may exercise certain rights regarding their Data processed by the Owner. In particular, Users may have the right to:

• Withdraw consent at any time. Users can withdraw consent where they have previously given it.
• Object to processing. Users can object where processing is carried out on a legal basis other than consent, subject to applicable law.
• Access their Data. Users can learn whether Data is being processed, obtain disclosure regarding aspects of the processing and obtain a copy of Data undergoing processing.
• Verify and seek rectification. Users can verify the accuracy of their Data and ask for it to be updated or corrected.
• Restrict processing. Where permitted by law, Users can request that processing of their Data be restricted.
• Have Personal Data deleted or otherwise removed. Where permitted by law, Users can ask the Owner to erase their Data.
• Receive their Data and have it transferred to another controller. Where applicable, Users can receive their Data in a structured, commonly used and machine-readable format and have it transmitted to another controller without undue hindrance.
• Lodge a complaint. Users have the right to bring a claim before their competent data-protection authority.

Users are also entitled to information about the legal basis for international Data transfers, including transfers to international organisations, and the security measures taken by the Owner to safeguard their Data.

Details about the right to object to processing

Where Personal Data is processed for a public interest, in the exercise of official authority vested in the Owner, or for the purposes of legitimate interests pursued by the Owner, Users may object to such processing by providing a reason related to their particular situation.

Where Personal Data is processed for direct marketing purposes, Users may object to that processing at any time, free of charge and without providing any justification. If a User objects to processing for direct marketing purposes, the Personal Data will no longer be processed for those purposes.

How to exercise these rights

Requests to exercise User rights may be directed to the Owner through the contact details provided in this document. Requests are handled in accordance with applicable data-protection law and, where required, without undue delay.

Transfer of Personal Data outside of the European Union

Data transfer abroad based on consent

Where permitted by law, Personal Data may be transferred from the EU to third countries if the User has explicitly consented to the proposed transfer after being informed of the possible risks due to the absence of an adequacy decision or other appropriate safeguards.

Data transfer abroad based on standard contractual clauses

Where this is the legal basis, Personal Data may be transferred from the EU to third countries under standard contractual clauses approved by the European Commission and any supplementary safeguards required by applicable law.

Data transfer to countries that guarantee European standards

Where applicable, Personal Data may be transferred to countries covered by an adequacy decision of the European Commission or another legally recognised mechanism that provides an adequate level of protection.

Other legal bases for Data transfer abroad

If no other transfer mechanism applies, Personal Data may be transferred outside the EU where one of the legal conditions allowed by applicable law is met, for example where the transfer is necessary for a contract, important reasons of public interest, the establishment or defence of legal claims, or to protect vital interests.

Additional information about Data collection and processing

Legal action

The User's Personal Data may be used for legal purposes by the Owner in court or in the stages leading to possible legal action arising from improper use of this website or the related services. The User acknowledges that the Owner may be required to reveal Personal Data upon request of public authorities.

Additional information about User's Personal Data

In addition to the information contained in this privacy policy, this website may provide Users with additional and contextual information concerning particular services or the collection and processing of Personal Data upon request.

System logs and maintenance

For operation and maintenance purposes, this website and third-party services may collect files that record interaction with the website (system logs) or use other Personal Data such as an IP address for this purpose.

Information not contained in this policy

More details concerning the collection or processing of Personal Data may be requested from the Owner at any time using the contact information provided above.

Changes to this privacy policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, where technically and legally feasible, through other available contact information. Users are encouraged to check this page regularly, referring to the date of the last modification when shown.

Where changes affect processing activities performed on the basis of the User's consent, the Owner will collect new consent where required.