PRIVACY POLICY

1. Data Controller

In accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), users of the website www.esquim.com are hereby informed about the processing of their personal data.

Data Controller: ESQUIM, S.A.
Tax Identification Number (NIF): A08857310
Registered office: C/ Indústria, 15, Polígono Industrial Sud, 08440 Cardedeu, Barcelona, Spain.
Email address: esquim@esquim.com
Telephone: +34 938 711 193

2. Personal Data Collected

ESQUIM, S.A. may process personal data voluntarily provided by users through contact forms, email communications and other available communication channels.

Such data may include:

  • First name and surname.
  • Company or organisation.
  • Email address.
  • Telephone number.
  • Information included in enquiries or requests.
  • Technical browsing data, where applicable.

Users are advised not to provide unnecessary personal data or particularly sensitive information through contact forms.

3. Purposes of Data Processing

Personal data may be processed for the following purposes:

Responding to Enquiries and Requests

Managing and responding to enquiries, requests for information and communications received through the website or by email.

Managing Business Relationships

Responding to requests for information about products and services, preparing commercial proposals and managing professional relationships with customers, suppliers and other companies.

Compliance with Legal Obligations

Fulfilling applicable legal, administrative and tax obligations.

Website Operation and Security

Ensuring the proper functioning of the website, preventing misuse and maintaining the security of its systems.

Management of Cookies and Similar Technologies

Managing consent preferences and, where applicable, using analytics technologies or other tools in accordance with the settings selected by the user.

4. Legal Basis for Processing

The legal bases that may justify the processing of personal data are:

  • Consent of the data subject: where the user has given consent for a specific purpose.
  • Taking steps prior to entering into a contract or performance of a contract: where processing is necessary to respond to commercial requests or manage contractual relationships.
  • Compliance with legal obligations: where processing is required by applicable legislation.
  • Legitimate interests: where appropriate to ensure website security or manage certain professional communications, subject to an assessment of the rights and interests of the individuals concerned.

The specific legal basis will depend on the purpose and circumstances of each processing activity.

5. Data Retention

Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected.

In particular:

  • Enquiries will be retained for the period necessary to respond to them and carry out any appropriate follow-up.
  • Data associated with business or contractual relationships will be retained while those relationships remain in force and for any subsequent statutory retention periods.
  • Data processed to comply with legal obligations will be retained for the periods required by applicable legislation.
  • Data processed on the basis of consent will be retained until consent is withdrawn, unless another legal basis justifies its continued retention.

Once the relevant retention periods have expired, the data will be deleted or, where legally required, restricted and retained for the applicable statutory periods.

6. Recipients of Personal Data

As a general rule, ESQUIM, S.A. will not disclose personal data to third parties unless there is a legal obligation, disclosure is necessary to provide a requested service, or another valid legal basis applies.

Certain technology service providers, such as web hosting, IT maintenance or email service providers, may access personal data as data processors, subject to the conditions and safeguards required by applicable legislation.

7. International Data Transfers

Where technology service providers are used that involve transfers of personal data outside the European Economic Area, ESQUIM, S.A. must ensure that such transfers are carried out using one of the mechanisms recognised by the GDPR, such as adequacy decisions or appropriate safeguards.

Information about any international transfers that actually take place must be made available to data subjects where required.

8. Rights of Data Subjects

Users may exercise the following rights under the conditions established by applicable legislation:

  • Access: to obtain information about the personal data being processed.
  • Rectification: to request the correction of inaccurate personal data.
  • Erasure: to request the deletion of personal data where applicable.
  • Objection: to object to certain processing activities.
  • Restriction of processing: to request restrictions on the use of personal data in the circumstances provided for by law.
  • Data portability: to receive personal data in a structured format and transmit it to another controller where applicable.
  • Withdrawal of consent: to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise these rights, data subjects may contact:

esquim@esquim.com

ESQUIM, S.A. may request additional information where necessary to verify the identity of the person making the request.

Data subjects also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) through www.aepd.es if they believe that the processing of their personal data infringes applicable legislation.

9. Data Security

ESQUIM, S.A. will implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, loss, destruction or improper disclosure, taking into account the risks associated with processing.

However, no system connected to the Internet can guarantee absolute security.

10. Data Relating to Minors

The website is primarily intended for professional users and individuals interested in the business activities of ESQUIM, S.A.

It is not designed to deliberately collect personal data from minors.

11. Cookies

The website may use cookies and similar technologies to ensure its proper operation and for other purposes, where applicable.

Users can find detailed information and manage their preferences through the Cookie Policy and the consent management system available on the website.

12. Amendments to the Privacy Policy

ESQUIM, S.A. may amend this Privacy Policy to reflect regulatory, organisational or technological changes.

Any amendments will be published on this page.

Last updated: 30 October 2026.