Privacy policy

1. USER INFORMATION

CONSTRUCTORA NORAY S. A., as Data Controller, informs you that, according to the provisions of Regulation (EU) 2016/679, of April 27 (GDPR), and Organic Law 3/2018, of December 5, on Data Protection and the Guarantee of Digital Rights (LOPDGDD), we will process your data as stated in this Privacy Policy.

In this Privacy Policy we describe how and why we collect your personal data, what we do with
it, with whom we share it, how we protect it and your choices regarding its processing.

This Policy applies to the processing of your personal data collected by the company for the
purpose of providing its services. If you accept the measures in this Policy, you agree to us
processing your personal data as defined in this Policy.

2. CONTACT

Corporate name: CONSTRUCTORA NORAY S. A.
Trade name: CONSTRUCTORA NORAY
CIF: A43036052
Address: Avenida Maria Fortuny, 87 1º 3ª  43203  – (Reus) – Tarragona
e-mail: cnoray@cnoray.com

3. KEY PRINCIPLES

We have always been committed to providing our services with the highest degree of quality.
This includes the secure and transparent processing of your data. Our principles are:

• Legality: We will only collect your personal data for specific, explicit and legitimate purposes.
• Data minimisation: We limit the collection of personal data to what is strictly relevant and necessary for the purposes for which it is collected.
• Limitation of Purpose: We will only collect your personal data for the stated purposes and only according to your wishes.
• Accuracy: We will keep your personal data up to date and accurate.
• Data Security: We apply the appropriate technical and organisational measures proportional to the risks to ensure that your data does not suffer harm, such as unauthorised disclosure or access, accidental or unlawful destruction or accidental loss or alteration or any other form of illicit treatment.
• Access and Rectification: We have the means for you to access or rectify your data when you deem it appropriate.
• Retention: We retain your personal data lawfully and appropriately and only for as long as it is necessary for the purposes for which it was collected.
• International transfers: If it is necessary for your data to be transferred outside the EU/EEA, it will be adequately protected.
• Third parties: Access and transfer of personal data to third parties is carried out in accordance with the applicable laws and regulations and with the appropriate contractual guarantees.
• Direct marketing and cookies: We comply with the applicable legislation regarding advertising and cookies.

4. COLLECTION AND PROCESSING OF YOUR PERSONAL DATA

The types of data that can be requested and processed are:

• Identification data:
  We also automatically collect data about your visit to our website, as described in the cookie
  policy.
  Whenever we request your personal data, we will clearly inform you of which personal data
  we collect and for what purpose. In general, we collect and process your personal data for the
  purposes of:

• • Providing information, services, products, relevant information and news in the sector.
  • Sending communications.
• Data collected on invoices:
  The purpose of this processing is to manage your request and the company's accounting.
  These data will only be communicated to the competent public authorities. They will be kept
  for a period of 5 years, with the provision of the service and compliance with the legal
  regulations being the basis that legitimises this processing. In any case, you can exercise your
  right to access, rectify, delete, limit or oppose said processing, as well as the right to data
  portability. Such requests should be sent to Avda. Maria Fortuny 87, 1º 3º, 43203 Reus
  (Tarragona) or by email to cnoray@cnoray.com.
  If you deem it appropriate, you can also file a claim with the Spanish Data Protection Agency.
• Data collected in estimates:
  The purpose of such processing is the preparation and control of estimates in relation to the
  services provided. These data will not be transmitted to third parties, unless we are legally
  obliged to do so, and will be kept as long as is essential and/or legitimate for the purpose for
  which they were collected and the provision of the service, the basis that legitimises such
  processing. In any case, you can exercise your right to access, rectify, delete, limit or oppose
  processing, as well as the right to data portability. Such requests should be sent to Avda. Maria
  Fortuny 87, 1º 3º, 43203 Reus (Tarragona) or by email to cnoray@cnoray.com
  If you deem it appropriate, you can also file a claim with the Spanish Data Protection Agency.

5. LEGITIMACY

In accordance with the applicable data protection regulations, your personal data may be
processed, provided that:

• You have given us your consent for the purposes of processing. Of course, you can withdraw
  your consent at any time.
• By legal requirement.
• Because there is a legitimate interest that is not undermined by your privacy rights, such as
  sending commercial information, either by subscribing to our newsletter or by being a
  customer.
• Because it is necessary for the provision of any of our services through a contractual
  relationship between us.

6. PERSONAL DATA COMMUNICATION

The data may be communicated to companies related to CONSTRUCTORA NORAY S.A. for the
provision of various services as Processing Managers. The company will not make any
assignment, except by legal obligation.

7. YOUR RIGHTS

In relation to the collection and processing of your personal data, you can contact us at any
time to:

• Access your personal data and any other information indicated in Article 15.1 of the GDPR.
• Rectify your personal data that is inaccurate or incomplete in accordance with Article 16 of the
  GDPR.
• Delete your personal data in accordance with Article 17 of the GDPR.
• Limit the processing of your personal data in accordance with Article 18 of the GDPR.
• Request the portability of your data in accordance with Article 20 of the GDPR.
• Oppose the processing of your personal data in accordance with Article 21 of the GDPR.
  If you have given your consent for a specific purpose, you have the right to withdraw the
  consent granted at any time, without affecting the legality of the processing based on the
  consent prior to its withdrawal.

You can exercise these rights by sending a motivated and accredited communication to cnoray@cnoray.com

You also have the right to file a claim with the competent Control Authority (www.aepd.es) if
you consider that the processing does not comply with the current regulations.

8. LEGAL INFORMATION

The requirements of this policy complement and do not replace any other existing
requirements under the applicable data protection legislation, which will prevail in any case.
This policy is subject to periodic review and may be modified by the company at any time.
When this occurs, we will notify you of any changes and ask you to re-read the most recent
version of our policy and confirm your acceptance.

9. SOCIAL MEDIA

The user must have their profile on social media to be able to interact with CONSTRUCTORA NORAY, S.A. and accept the relationship with the company’s social media. If executed in this way, CONSTRUCTORA NORAY, S.A. will have access to the user's profile in accordance with the
parameters stipulated by the social medium itself and will be able to interact with it by sending messages, publications, and participating in contests and raffles. If the user does not want CONSTRUCTORA NORAY,S. A. to be able to access their profile or interact with it, they will have
to to disassociate themselves from the profile by ceasing to follow us or eliminate CONSTRUCTORA NORAY, S.A. as a friend, follower or user.

The actions undertaken by CONSTRUCTORA NORAY, S. A. may have an informative and/or advertising nature of its services or products, considering that the social network is an advertising medium, under the responsibility of CONSTRUCTORA NORAY, S. A., in terms of the publications and communications that are made by these online means.

Users’ participation in contests, promotions or raffles implies that they accept the legal bases
of said contest, promotion or raffle. These will be published in the social medium of reference
at the appropriate time and the user’s participation will imply acceptance of them.

Users are reminded that anything they post on social media will be their own responsibility.
They are obliged to respect the legislation and rights of third parties they may affect, with
special relevance placed on the rights of intellectual property, data protection and third party
images, as well as the rules of the social media, which can be found in the following links:

Facebook: https://www.facebook.com/legal/terms

Instagram: https://help.instagram.com/

Twitter: https://twitter.com/en/tos

LinkedIn: https://www.linkedin.com/legal/user-agreement