Privacy Policy

1. Data Controller Identification

In accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), we inform you regarding the Data Controller:

• Company Name: Asturiana de Aleaciones S.A.
• Tax ID (CIF/NIF): A33072711
• Registered address: Polígono industrial de Maqua S/N, 33418 Gozón (Asturias)
• Email address: dpo@grupoaleastur.com

2. Purposes of Processing

We will process your personal data for the following purposes:

• To manage our relationship with you and provide the requested services.
• To handle billing, collections, and payments arising from the contractual relationship.
• To respond to inquiries, information requests, or complaints.
• To comply with applicable legal obligations (tax, accounting, data protection, or others).
• To receive and manage curriculum vitae (CVs) for recruitment processes.

3. Legal Basis for Processing

The processing of your data is based on the following legal grounds, assigned to each purpose:

• Contract management and service provision: performance of a contract or application of pre-contractual measures.
• Billing and payments: performance of a contract and compliance with legal obligations.
• Inquiries and complaints: performance of a contract or pre-contractual measures.
• Legal compliance: compliance with applicable legal obligations.
• CV processing: application of pre-contractual measures.

4. Data Recipients

Your data may be disclosed to:

• Service providers necessary for the execution of the contract (e.g., financial institutions, IT services, tax or accounting advisors), strictly to the extent necessary.
• Public authorities, courts, and tribunals where required by law.

No data transfers to third parties for commercial purposes are foreseen without your explicit consent.

5. International Data Transfers

As a general rule, no international data transfers are carried out. Where certain services involve transfers outside the European Economic Area, it will be ensured that the destination country provides an adequate level of protection or that appropriate safeguards are in place.

6. Data Retention Periods

Personal data will be retained:

• For the duration of the contractual relationship or as long as necessary for the purposes for which they were collected.
• For the legally required retention periods under applicable legislation.
• Until consent is withdrawn where processing is based on consent.
• CVs will be retained for a maximum period of one year.

Once legal retention periods have expired, the data will be securely deleted.

7. Data Subject Rights

You may exercise the following rights:

• Right of access.
• Right to rectification.
• Right to erasure.
• Right to object.
• Right to restriction of processing.
• Right to data portability.

Requests must be sent to the postal address indicated above or to dpo@grupoaleastur.com

You may also lodge a complaint with the Spanish Data Protection Authority (AEPD) in www.aepd.es or in their headquarters located at C\ Jorge Juan 6, 28001 Madrid.

8. Profiling

No automated decisions producing legal effects or significantly affecting you will be carried out.

If profiling is required to improve services, you will be informed in advance and may object.

9. Security Measures

Asturiana de Aleaciones S.A. will process your data confidentially and implement appropriate technical and organizational measures in accordance with Article 32 GDPR.

10. Changes to this Privacy Policy

We may update this policy to reflect legal changes or modifications in data processing. Data subjects will be informed in advance.