1. Data controller
In compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), users are informed that the personal data provided through this website is processed by:
- Controller: GRUP3D HD, S.L.
- Tax ID (NIF): B10575165
- Address: Calle Mestre Racional 1, floor 3, door 6, 46005 Valencia, Spain
- Contact email for privacy matters: rgpd@grup3d.es
- Telephone: +34 662 061 421
2. Purpose of the processing
The personal data collected through the website is processed for the following purposes:
- To manage and answer requests for information, quotes, briefs and sales enquiries.
- To carry out and follow up the contracted projects for 3D visualisation, animation, tours, configurators and related services.
- To issue invoices, manage payments and comply with the applicable tax and accounting obligations.
- To send commercial communications about similar services, only where there is prior express consent or a previous contractual relationship, in accordance with art. 21.2 LSSI-CE.
- To comply with any applicable legal obligations.
3. Legal basis for the processing
The processing of the data is based on the following legal grounds (art. 6 GDPR):
- Consent of the data subject when sending a form or requesting information.
- Performance of a contract or pre-contractual measures requested by the user.
- Compliance with legal obligations (tax, accounting, commercial).
- Legitimate interest of the controller in managing the commercial relationship with its clients and improving its services.
4. Categories of data processed
The categories of data that may be collected are:
- Identification data: first name, surname, company or professional practice.
- Contact data: email address, telephone number.
- Project data: type of project, sector, deadline, indicative budget, attached technical documentation (drawings, CAD, specification, references).
- Financial data: in the event of a contract, billing details and, where applicable, bank details for payment.
- Browsing data: IP address, cookie identifiers, browser type, language and date of access, in accordance with the Cookie Policy.
No special categories of data (art. 9 GDPR) are requested or processed.
5. Recipients and disclosures
Personal data will not be disclosed to third parties except where required by law or where strictly necessary to provide the contracted service.
Where the controller uses external suppliers to provide the service (web hosting, email tools, payment gateways, accountants), these act as data processors under a contract signed in accordance with art. 28 GDPR.
No international data transfers are made outside the European Economic Area. Should suppliers with servers outside the EEA be used, appropriate protection measures will be guaranteed (European Commission standard contractual clauses or another valid safeguard).
6. Retention period
Personal data is kept for the duration of the commercial relationship, for the applicable legal periods (a minimum of 5 years for tax and commercial data under the Spanish General Tax Act) and, failing that, until the data subject requests its deletion.
The data of sales contacts who do not become clients is kept for a maximum of 2 years from the last contact, unless the data subject requests its deletion earlier.
7. Your rights
As a data subject you have the right to exercise the following data protection rights:
- Entrance to your personal data.
- Rectification of inaccurate data.
- Erasure (the right to be forgotten) when the data is no longer necessary.
- Restriction of the processing.
- Objection to processing based on legitimate interest.
- Portability of your data to another controller.
- Withdrawal of the consent given, without retroactive effect.
- Not to be subject to automated decisions with legal effects.
You can exercise these rights by sending a request by email to rgpd@grup3d.es stating your name, the right you wish to exercise and attaching a copy of your ID card or equivalent document so we can verify your identity.
Likewise, if you believe the processing does not comply with the applicable rules, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es, C/ Jorge Juan 6, 28001 Madrid.
8. Security measures
The controller has adopted the technical and organisational measures necessary to guarantee the security of personal data and prevent its alteration, loss, unauthorised processing or access, in line with the state of technology, the nature of the data and the risks to which it is exposed.
Nevertheless, users should be aware that security measures on the Internet are not impenetrable.
9. Amendments
This Privacy Policy may be amended in response to legal or case-law requirements or changes in the controller's organisation. Any amendment will be published on this same website.
10. Contact
For any query about the processing of your personal data or about exercising your rights, you can get in touch at: rgpd@grup3d.es.