Privacy Policy
1. INFORMATION FOR USERS
EMDIPA, S.L., as the Data Controller, informs you that, in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), we will process your personal data as described in this Privacy Policy. This Privacy Policy explains how we collect your personal data, why we collect it, how we use it, with whom we share it, how we protect it, and the choices available to you regarding the processing of your personal data. This Policy applies to the processing of your personal data collected by the Company for the provision of its services. By accepting the terms of this Policy, you consent to the processing of your personal data as described herein.
2. CONTACT
Company name: EMDIPA, S.L.
Email: info@emdipa.com
3. KEY PRINCIPLES
We are committed to providing our services to the highest standards of quality, including processing your personal data securely and transparently. Our principles are:
- Lawfulness: We will only collect your personal data for specific, explicit and legitimate purposes.
- Data minimisation: We limit the collection of personal data to what is strictly relevant and necessary for the purposes for which it has been collected.
- Purpose limitation: We will only collect your personal data for the stated purposes and only in accordance with your wishes.
- Accuracy: We will keep your personal data accurate and up to date.
- Data security: We apply appropriate technical and organisational measures proportionate to the risks to ensure that your data is protected against unauthorised access or disclosure, accidental or unlawful destruction, accidental loss or alteration, and any other form of unlawful processing.
- Access and rectification: We provide the means for you to access and rectify your personal data whenever necessary.
- Retention: We retain your personal data lawfully and appropriately, and only for as long as necessary for the purposes for which it was collected.
- International transfers: Where your data is transferred outside the EU/EEA, it will be adequately protected.
- Third parties: Access to and transfer of personal data to third parties is carried out in accordance with applicable laws and regulations and with appropriate contractual safeguards.
- Direct marketing and cookies: We comply with all applicable legislation relating to advertising and cookies.
4. COLLECTION AND PROCESSING OF YOUR DATA
The types of data we may request and process include:
- Identification data.
We also automatically collect information about your visit to our website as described in our Cookie Policy. Whenever we request information from you, we will clearly explain what data we collect and for what purpose. In general, we collect and process your personal data in order to:
- Provide information, services, products, relevant industry information and updates.
- Send communications.
5. LAWFUL BASIS FOR PROCESSING
In accordance with the applicable data protection legislation, your personal data may be processed where:
- You have given your consent to the processing. You may withdraw your consent at any time.
- Processing is required by law.
- There is a legitimate interest that is not overridden by your privacy rights, such as sending commercial information because you have subscribed to our newsletter or are one of our customers.
- Processing is necessary for the performance of a contract between you and EMDIPA, S.L..
6. DISCLOSURE OF PERSONAL DATA
Personal data may be disclosed to companies associated with EMDIPA, S.L. for the provision of services, acting as Data Processors. The Company will not disclose your data to third parties except where required by law.
7. YOUR RIGHTS
In relation to the collection and processing of your personal data, you may contact us at any time in order to:
- Access your personal data and any other information referred to in Article 15.1 of the GDPR.
- Rectify inaccurate or incomplete personal data in accordance with Article 16 of the GDPR.
- Request the erasure of your personal data in accordance with Article 17 of the GDPR.
- Request the restriction of processing of your personal data in accordance with Article 18 of the GDPR.
- Request the portability of your data in accordance with Article 20 of the GDPR.
- Object to the processing of your personal data in accordance with Article 21 of the GDPR.
If you have given your consent for a specific purpose, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You may exercise these rights by sending a duly reasoned and verified request to marketing@emdipa.com. You also have the right to lodge a complaint with the competent supervisory authority (www.aepd.es) if you believe that the processing of your personal data does not comply with the applicable legislation.
8. LEGAL INFORMATION
The requirements of this Policy complement, and do not replace, any requirements under applicable data protection legislation, which shall prevail in the event of any conflict. This Policy is subject to periodic review and may be amended by the Company at any time. Where this occurs, we will notify you of any changes and ask you to review the latest version of this Policy and confirm your acceptance.
9. LOCATION DATA IN THE EMDIPA APP
The EMDIPA app collects location data to enable shipment tracking even when the application is closed or not in use.