Privacy Policy
COMEXI undertake to protect the privacy of its customers and users accessing this website.
The use of the Website implies acceptance by the user of the provisions of this Privacy Policy and that personal data are processed as stated herein. Please note that although there may be links on our Website to other websites, this Privacy Policy applies only to the Website and not to websites of other companies or organizations to which the Website is redirected. COMEXI* does not control the content of third party websites nor accept any liability for the content or the privacy policies of such websites
Basic information on data processing
In accordance with Regulation (EU) 2016/679 of European Parliament and Council, dated 27 April 2016, (GDPR), we offer the following information on the processing of your personal data:
Data controller COMEXI*. Av. Mas Pins, 135 (Pol. Ind. Girona), 17457 Riudellots de la Selva (Girona). Email: comexi@comexi.com
Data processing purpose Offer and manage our services of printing machinery and materials processing of the packaging and flexible packaging sector.
Legitimacy of the processing
- Execution of the service contract.
- Consent obtained from the interested party. They give their explicit consent for their data to be processed by the companies that make up COMEXI, listed at the end of this notice.
Data communication
Your data will be passed on to the public administrations, only when required by current legislation, and to all those institutions whenever it is necessary to fulfill the purpose of the processing.
Rights
The individuals concerned are entitled to exercise the rights of access, rectification, processing limitation, elimination, portability and opposition against the data controller. Moreover, they can turn to the competent supervisory authority to assert any claim they deem appropriate.
Term of conservation of the data
While maintaining the care relationship or during the years necessary to comply with legal obligations.
Claim
The individuals concerned can turn to the competent supervisory authority to assert any claim they deem appropriate.
Additional Information
Additional and detailed information on the data processing are available below under section ‘Frequently asked questions about privacy’.
Who is your data controller?
Identity: COMEXI*
NIF (tax identification number): A17005299
Address: Avda. Mas Pins 135 – Pol. Ind. Girona, 17457 Riudellots de la Selva
Tel.: +34 972 477 744
Fax: +34 972 477 384
Email: comexi@comexi.com
The data will be processed by the companies that make up COMEXI*:
COMEXI GROUP INDUSTRIES, SAU
TIN: A17005299
Address: Av. Mas Pins, 135 (Pol. Ind. park Girona), 17457 Riudellots de la Selva (Girona)
Activity: Producing and trading printing machinery and transforming the materials of the sector into flexible containers and packaging
COMEXI GROUP, SL
TIN: B17646944
Address: Av. Mas Pins, 135 (Pol. Ind. Girona), 17457 Riudellots de la Selva (Girona)
Activity: Asset management
For what purpose do we process your personal data?
- We process the information given to us to provide and invoice our services and products of the flexible containers and packaging sector
- If you give us your consent, we can also process your data to keep you informed, using any means of communication, including electronic ones, about: Recent news and updates on Comexi (Comexi News) Updates and/or promotions on Comexi’s products or services Presence at fairs, seminars and other events
- If you visit COMEXI’s facilities in person, we will process the data of the visitors in order to keep a record of the people who access our facilities. In this case, your image can be recorded using surveillance cameras for security purposes.
- If you send us your CV, we will process the data to manage our CV database for the selection of personnel.
How long are we going to keep your data?
- The provided personal data will be kept while maintaining the care relationship or during the years necessary to comply with legal obligations.
- The data of the visitors are kept for a month.
- The images recorded by the surveillance system are kept for a month.
- In the case of the CVs, data is kept for six months.
What is the legitimacy of processing your data?
The legitimacy to treat them lies in the execution of the service contract and in the consents given. The interested party gives its explicit consent for their data to be treated by the companies that make up COMEXI.
Regarding the collection of images by the surveillance system, the legitimacy comes from the legitimate concern to preserve the safety of people and goods.
As for the information that affects people under 16 years of age, it will be an essential requirement the consent of a parent, legal guardian or legal representative of the minor so that their personal data can be treated. Otherwise, the legal guardian of the minor will have to notify us as soon as it comes to their attention.
What recipients is your data going to be transmitted to?
Your data will be passed on to the public administrations, only when required by current legislation, and to all those institutions whenever it is necessary to fulfill the purpose of the processing.
What rights are you entitled to when you provide us with your data?
- Anyone has the right to obtain a confirmation related to whether or not to COMEXI we are processing personal data that affects them or not.
- The individuals concerned shall have the right to access to their personal data, as well as to request the rectification of any inexact data or the deletion of such when, among other reasons, that data is not needed anymore for the purpose it was collected.
- In certain circumstances, the individuals concerned might request limitation of processing of their data, in which case we will only keep it for the exercise or defence of claims.
- In certain circumstances and for reasons relating to their particular situation, the individuals concerned might be able to object to the processing of their data. COMEXI will then stop processing such data, except for compelling legitimate grounds or the exercise or defence of potential claims.
- The individuals concerned are entitled to the portability of their data.
- Finally, the individuals concerned can turn to the competent supervisory authority to assert any claim they deem appropriate.
How can you exercise your rights?
By sending us a written notice enclosing a copy of an identification document, to our fiscal address or to comexi@comexi.com
Which data do we process?
The categories of the processed data are the following:
- Identification data
- Postal and email addresses
In the case of the video surveillance system:
- Image
In the case of the CVs, also:
- Personal characteristics
- Educational and professional information
Data is limited. We only deal with the necessary data for the provision of our services and the management of our activity.
What security measures do we apply?
After carefully analyzing the data processing that is to be performed, we have taken the required security measures to make sure that the security level against the risk of such processing is appropriate, through mechanisms that allow us to guarantee the confidentiality, integrity, availability and permanent resilience of the systems and services of processing.
COMEXI implements the security measures provided under article 32 of the GDPR.
Some of these measures are:
- Informing on the personal data treatment policies;
- Making regular backup copies;
- Data access control;
- Regular verification, assessment and valuation processes.
COMEXI has carried a risk assessment regarding personal data protection and has implemented an Information Security Management System (ISMS).
