Privacy Policy

3. For What Purposes Do We Process Your Personal Data? We process user-provided information for the following purposes:

• Handling Quotation Requests and Commercial Inquiries: Managing, processing, and responding to inquiries, requests for catalogs, samples, or import/export quotations submitted via the web form or email.

• Pre-contractual and Commercial Relations: Conducting necessary commercial and technical follow-ups arising from your quote request.

• Web Analytics and Service Improvement: Statistically analyzing traffic and browsing behavior through Google Analytics to optimize content, usability, and the structure of our digital catalog.

• Legal Compliance and Fraud Prevention: Ensuring the technical security of the platform and complying with applicable tax, commercial, and data protection legal obligations.

4. What is the Legal Basis (Legitimacy) for Processing Your Data? The legal basis depends on the specific processing purpose:

• Inquiries and Quotation Requests: Express consent granted by checking the acceptance box and submitting the web form (Art. 6.1.a GDPR), as well as taking pre-contractual steps at the request of the data subject (Art. 6.1.b GDPR).

• Statistical Analysis and Cookies (Google Analytics): Express consent granted through the cookie settings panel or initial banner on the Website (Art. 6.1.a GDPR).

• Compliance with Legal Obligations: Fulfillment of statutory obligations applicable to the Data Controller (Art. 6.1.c GDPR).

5. How Long Will We Retain Your Data?

• Inquiry and Quotation Data: Retained strictly for the time necessary to process and resolve your request. If no commercial or contractual relationship ensues, data will be kept for a maximum period of 12 to 24 months for internal statistical and commercial follow-up, after which it will be erased or securely blocked.

• Contractual / Commercial Relations: Retained for the duration of the contractual relationship and subsequently for the statutory retention periods required by Spanish commercial and tax laws (generally between 4 and 6 years).

• Google Analytics Data: Retained in accordance with the retention periods configured within the tool (by default, 2 or 14 months), after which it is automatically deleted.

6. Who Will Receive Your Data? User data will not be transferred to third parties, except in the following circumstances:

• Legal Obligation: Public Administrations, Courts, and official bodies where required by applicable law.

• Data Processors and Tech Providers: Necessary service providers essential for website operations and business management, such as: Web hosting and server maintenance providers located within the European Economic Area (EEA). Google LLC (Google Analytics): Web analytics service. Associated international data transfers to the US operate under the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses (SCCs) approved by the European Commission.

• Web hosting and server maintenance providers located within the European Economic Area (EEA).

• Google LLC (Google Analytics): Web analytics service. Associated international data transfers to the US operate under the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses (SCCs) approved by the European Commission.

No international data transfers outside the EEA take place without appropriate legal safeguards and security measures. 7. What Are Your Rights When Providing Data? Under European and Spanish data protection regulations, you have the following rights:

• Access: Verify whether we process your personal data and access the specific details.

• Rectification: Request corrections to inaccurate or incomplete information.

• Erasure ("Right to be Forgotten"): Request deletion of data when it is no longer necessary for the purposes for which it was collected.

• Restriction of Processing: Request temporary restriction of data processing under statutory conditions.

• Objection: Object at any time to the processing of your personal data.

• Data Portability: Receive your data in a structured, commonly used, and machine-readable format, and transfer it to another controller.

• Withdraw Consent: Revoke previously granted consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

Exercising Your Rights: To exercise any of these rights, send a written request with the subject line "Data Protection" to:

• Email: info@alemaxglobal.com

• Postal Address: C. Rio Ebro, 15-2A (28947), Fuenlabrada, Madrid, Spain

The request must include: the applicant’s full name, a copy of an official identification document (National ID, NIE, or Passport) for identity verification, and the specific right being exercised. If you believe your rights have not been adequately respected, you may file a complaint with the Spanish Data Protection Agency (AEPD) via its electronic portal at www.aepd.es.

8. Accuracy and Truthfulness of Data Users are solely responsible for the accuracy and correctness of the data submitted through the quotation form, holding the Data Controller harmless from any liability. Users guarantee and remain answerable for the authenticity, validity, and accuracy of the personal details provided, undertaking to keep them updated.

9. Security Measures The Data Controller has implemented the legally required technical and organizational security measures to prevent loss, misuse, alteration, unauthorized access, and theft of the personal data provided, thereby guaranteeing confidentiality, integrity, and availability.

10. Modifications to this Privacy Policy The Data Controller reserves the right to modify this Privacy Policy to adapt it to new legislation, case law, or industry practices. Any substantial amendments will be published directly on this page prior to their implementation.