Privacy Policy

1. Name and contact details of the data processing institution (the “Controller”)

The Privacy Policy is applicable to the data processing done as a Controller by:

EOS Spain S.L.U.
Manuel Guzmán, 1 Esc.1, Planta 1
15008 A Coruña. Spain

VAT: ESB64102072


Phone: +34 981 079-955
Fax: +34 981 281-931
info@eos-spain.es

www.eos-spain.es

Management Team

Carlos Lorenzo
Manuel González
Matilde Rial
José Miguel Vázquez
Raquel Pérez
Víctor Artés de Arcos
Víctor Sánchez

Commercial Register

Company registered at the Registro Mercantil of A Coruña, General Section, Volume 3.407, Folio 54, Page C-47.145, 1st Registration.

2. Scope

This Privacy Policy applies to the collection of personal data on our website and the subsequent processing of these data by us.

This Privacy Policy serves towards the provision of information pursuant to Articles 13 and 14 of the GDPR for the data processing outside the scope of collection established herein. As such we will provide you with separate privacy policies for specific data processing activities on a case by case basis.

3. Privacy Policies of other EOS Group companies

This Privacy Policy does not apply to data processed by other EOS Group companies. This is also the case if these other companies of EOS Group along with their contacts are mentioned and/or their services are shown on our website.

The other companies of EOS Group will provide you with separate privacy policies for specific data processing activities on a case-by-case basis.

4. Collection and storage of personal data, nature and purpose for their processing

a. When visiting the website

When visiting our website www.eos-spain.es, the browser used on your device automatically sends information to our website’s server. This information is temporarily stored in a log file. The following information is collected without your intervention and is stored until it is automatically deleted after seven (7) days:

  • IP address of retrieving computer
  • Date and time of access
  • Name and URL of retrieved file
  • Website from which access occurred (referrer URL)
  • Website retrieved from our website
  • Your computer’s browser and possible the operating system, as well as the name of your access provider.

The aforementioned data are processed by us for the following purposes:

  • To ensure trouble-free connection establishment to the website
  • To ensure a comfortable use of our website
  • To analyze the system’s security and stability

The legal basis for the processing of data is Article 6 (1) (f) of the GDPR. Our legitimate interest complies with the purposes for the data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you.

Furthermore, we use cookies and analysis services when visiting our website. For further information on this matter, please refer to Sections 6 and 7 of this Privacy Policy.

b. When you contact us by email, via web forms or when you provide a phone number to be used by our call center to contact you (Click to call)

You can contact us with any questions you may have via the provided email address or through the form available in our website where you can also provide a phone number to be used by our call center to contact you in order to provide the information you may request; in such a case you are required to provide just your phone number for the provision of the service, however you may be asked to provide your name and surname as a reference so that we can contact you in a personalized manner. Performing your information request enables us to process your data for this purpose.

You may also contact us through the form available at https://my.eos-spain.es/ where you can submit any query you may have about your file, being able to choose to be contacted by phone or email. When using this function, you will be required to provide your identification details and payment reference. You may also use this form for updating your contact address.

If you do so, the personal data sent by email, via web forms or via the phone contact request shall be stored. The legal basis for the processing is the need to contact you pursuant to Article 6 (1) (f) of the GDPR. If we contact you in relation to a contract, the additional legal basis for processing is Article 6 (1) (b) of the GDPR.

We delete the personal data collected after processing your query as long as we are not legally entitled or forced to process them any further.

c. When using the payment function

Our website https://my.eos-spain.es/ also offers you the opportunity to make payments. In order to make a payment, it is necessary that the required payment information is forwarded to the payment service provider of your choice (e.g. to the credit card institute when selecting the payment method “credit card”).

Data processing for the purpose of payment is carried out in accordance with Article 6 (1) point b) GDPR or, if the payment is intended for the claim of a third party, in accordance with Article 6 (1) f) GDPR.

The personal data required for the execution of a payment will be deleted after fulfillment of the purpose, unless we are legally entitled or obliged for further processing.

5. Transfer of data

We shall only transfer your data to other EOS Group companies or to third parties (recipients) if:

  • You have provided you explicit consent for one or more specific purposes pursuant to Article 6 (1) (a) of the GDPR.
  • Disclosure pursuant Article 6 (1) (f) of the GDPR is necessary for the establishment, exercising or defense of legal claims and there is no reason to assume that you have an interest worth of a primary protection so as to not having them disclosed.
  • There is a legal obligation for disclosure pursuant to Article 6 (1) (c) of the GDPR.
  • It is legally permissible and necessary for meeting the contractual obligations pursuant to Article 6 (1) (b) of the GDPR.
  • We have the data processed on our behalf pursuant Article 28 of the GDPR by a processor.

Transfer of your personal data for purposes other than those listed above shall not occur.

6. Cookies

Like most websites, we use cookies when you access and browse our website in order to make your visit as comfortable and effective as possible. Cookies are small files that are created by the website and are automatically stored in the browser of your device (laptop, tablet, smartphone, or similar). Cookies do not harm your device and do not contain any viruses, Trojans, or other malicious software. Information yielded in connection with the specific device used is stored in the cookie. However, this does not mean that we directly receive knowledge of your identity through this. 

Use of cookies serves, for one thing, to make use of our offering more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after you leave our website. Likewise, to optimize the user-friendliness, we also use temporary cookies, which are saved on your device for a specific defined period of time. If you visit our website again to use our services, it will automatically be recognized that you already visited us and the entries and settings you made will automatically be recognized so that you do not have to enter them again.
Cookies are divided up into the four categories of “Necessary,” “Statistics,” “Comfort,” and “Marketing.” 
Necessary cookies are required for the operation and the basic functions of our website. They enable the security-relevant functioning of this website. 

Statistical cookies are used for improving our offering and ensuring a needs-based design and the continuous optimization of our website. For this, we collect anonymized data for statistics and analytics, for example, to determine site traffic, page view statistics, user behavior, and to adapt and improve our content and the website experience. 

Comfort cookies are used for facilitating the use of our website. If you visit this website again to use our service, it will automatically be recognized that you were on our website and the entries and settings you made will automatically be recognized so that you do not have to enter them again. For example, through this, you will not have to reenter your user data every time, but rather you can access the data already entered when you visit the website again.

We use marketing cookies so that we can provide you with relevant and interest-based content when you visit our website.

The data processed through necessary cookies are for the stated purposes for safeguarding our legitimate interests pursuant to Article 6 para. 1 sent. 1 lit. f of the GDPR, such as the proper functioning of the site. 
The data collected and processed through comfort, statistical and marketing cookies is done under your given consent, in accordance with Article 6 para. 1 sent. 1 lit. a of the GDPR for the purposes of  serving personalized content, for statistical purposes that aim to improve the user experience and marketing purposes. For these you can change/withdraw your consent, by clicking on the Change Cookies settings on the bottom of the website.

Cookie Management

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a notification message always appears before a new cookie is placed. Each browser differs depending on how it manages cookie settings. This is described in the Help menu of each browser, which explains how to change your cookie settings. Follow the links below depending on the browser you are using:

Complete deactivation of cookies, however, may lead to you not being able to use all of the features of our website.

We use the following cookies:

necessary

Name Java Session Cookie
Provider Owner of this website
Purpose This cookie is used by the application server. It is essential for proper
working of the application software. It stores no personal data. 
Cookie Name jsessionid
Cookie Duration Session cookie - deleted after you quit your browser.

 

Name cookieconsent_status
Provider Owner of this website
Purpose Necessary cookie to save that the cookie banner was confirmed.
Cookie Name cookieconsent_status
Cookie Duration 20 days

comfort

Name VISITOR
Provider Owner of this website
Purpose We use this cookie to serve personalized content. 
Cookie Name VISITOR
Cookie Duration Session cookie - deleted after you quit your browser.

 

Name NEW_Visitor
Provider Owner of this website
Purpose We use this cookie to serve personalized content.
Cookie Name new_visitor
Cookie Duration 1 day

statistical

Name nmstat
Provider Siteimprove GmbH
Purpose This cookie is used to help record the visitor’s use of the website.
It is used to collect statistics about site usage such as when the visitor last visited the site.
This information is then used to improve the user experience on the website.
This Siteimprove Analytics cookie contains a randomly generated ID used to recognize the browser when a visitor reads a page. The cookie contains no personal information and is used only for web analytics.
Cookie Name nmstat
Cookie Duration Persistent – expires after 400 days

 

Name AWSELB
Provider Siteimprove GmbH
Purpose The AWSELB cookie ensures that all page views for the same visit (user session) are sent to the same endpoint. This enables us to determine the sequence of a user's page views needed for features like Behavior Tracking and Funnels.
Cookie Name AWSELB
Cookie Duration Session cookie - deleted after you quit your browser.

 

marketing

Name siteimproveses
Provider Siteimprove GmbH
Purpose This cookie is used purely to track the sequence of pages a visitor looks at during a visit to the site.
This information can be used to create User Journeys and enable visitors to find relevant information more quickly.
Cookie Name siteimproveses
Cookie Duration Session cookie - deleted after you quit your browser.

7. Analysis tools

The tracking measures listed below and used by us are carried out on the basis of Article 6 (1) (f) of the GDPR. We use these tracking measures to ensure that our website is designed according to requirements and optimized on an ongoing basis. We also use the tracking measures to collect statistics on the use of our website and analyze them in order to optimize our offering for you. These interests are to be considered as legitimate in the sense given in the aforementioned regulation.

The respective purposes for data processing and data categories can be found in the corresponding tracking tools in this section.

Usage of Siteimprove Analytics

This website uses Siteimprove Analytics, a web analytics service provided by Siteimprove. Siteimprove Analytics uses “cookies“, which are text files placed on your computer, to help EOS Spain analyze how visitors use the site. The information generated by the cookies about the visitors’ use of the website will be stored and processed by Siteimprove on servers in Denmark.

IP addresses are anonymised irreversibly before data is made available in the Siteimprove Analytics or Intelligence Suite for EOS.

EOS will use this information for evaluating the visitors’ use of the website, compiling reports on website activity, and ultimately for improving the website experience for its visitors. Siteimprove will not transmit this information to third parties or use it for any marketing or advertising purposes.

These are the cookies used by Siteimprove on this website:

Cookie name: nmstat

Type: Persistent - expires after 400 days

This cookie is used to help record visitors' use of the website. It is used to collect statistics about site usage such as when the visitor last visited the site. The cookie contains no personal information and is used only for web analytics.

Cookie name: siteimproveses

Type: Session cookie

This cookie is used purely to track the sequence of pages a visitor looks at during a visit to the site. By using this website, the visitor consents to the processing of data about him/her by Siteimprove in the manner and for the purposes set out above.

You can prevent the collection of your data by Siteimprove Analytics by clicking the following link. An Opt-Out-Cookie will be set that will prevent future collection of your data when visiting this website:

8. Social media

a. Social sharing solution

We use share buttons from social networks Facebook, Twitter, Google+, LinkedIn, Xing on our website. The buttons are simple HTML links. The procedure we use is within the framework of the Shariff solution. With the Shariff solution a script retrieves the number of times, e.g., the share button on a page has been clicked on: for this the script contacts the social network via the programming interfaces and retrieves the numbers. None of your personal data are transmitted in the process. Rather than your IP address, only our server address is transmitted to Facebook, Google and Twitter. You only become directly connected to Facebook, Google or Twitter if you perform an action. Before that, the social media cannot collect any data about you. As long as you do not click on a link to share content, you remain invisible to the social media. If you click on a link, the obligation to provide information about data collection and processing no longer rests with us, but rather with the operator of the social network.

b. YouTube videos

Our website contains links to videos from YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. If you visit a website on our website that contains such a video, a direct connection is established between your browser and the YouTube server after you have activated the video. 

YouTube receives the information that you have visited our website with your IP address. If you click on the link to the video, your IP address will be forwarded to YouTube. We would like to point out that, as the provider of our website, we have no knowledge of the content of the transmitted data or of its use by YouTube. For more information, please check YouTube's privacy policy (https://www.youtube.com/).

9. Rights of the data subjects

What are your data protection rights?

Right of Access: you have the right  to request information about your personal data processed by us, in particular about the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients,  storage terms, exercises of rights, the right to lodge a complaint with a supervisory authority (Spanish Data Protection Agency), the origin of your data if they were not collected by us and the existence of automated decision-making including profiling.

Right to Rectification: you have the right to obtain from us the rectification of inaccurate or incomplete personal data. In such cases, you will have to indicate the wrong data and the correction that must be made or provide the necessary information to complete your data.

Right to erasure (“right to be forgotten”): you have the right to obtain from us the erasure of your personal data in certain cases assessed pursuant to data protection regulation:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
  • if you withdraw consent on which the processing is and there is no other legal ground for the processing.
  • you object to the processing and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing for marketing, including  profiling.
  • your personal data have been unlawfully processed.
  • your personal data have to be erased for compliance with a legal obligation in Union or Member State law to which us are subject.
  • your personal data have been collected in relation to the offer of information society services.

Right to object: if the processing by us of your personal data is based on legitimate interest, you have the right to object to processing of your personal data on grounds relating to your particular situation or if such processing is based on marketing, including profiling. In this sense, the purpose of the processing of your personal data by EOS Spain is not marketing, neither profiling.

Right to restriction of processing: you have right to to obtain from us restriction of processing where one of the following applies:

  • the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
  • the processing is unlawful and you oppose the erasure of the personal data and requests the restriction of their use instead.
  • we no longer need your personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims.
  • if you have objected to processing pursuant to article 21.

Right to data portability: you have the right to receive your personal data provided to us in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without our hindrance, where:

  • the processing is based on your consent or on a contract.
  • the processing is carried out by automated means.

Finally, you have the right to withdraw the consent you previously granted us at any time. This shall mean that we may not continue the data processing upon which this consent was based in the future.

How can you exercise your rights?

If you wish to exercise your Data Protection rights, you can contact EOS Spain, S.L.U., at any time and free of charge sending a written request under ref. “Data Protection”:

EOS Spain, S.L., Sociedad Unipersonal

C/ Manuel Guzmán, 1, Esc. 1, Planta 1.

15008, A Coruña (A CORUÑA)

The content of the written request must include:

  • request addressed to EOS Spain.
  • two-side copy of your ID Card, NIE (Foreign ID Card) or Passport. You can also use the electronic signature instead of ID.
  • in case of legal representation:

- the document which certifies the legal representative.
- two-side copy of your ID Card, NIE (Foreign ID Card) or Passport.
- two-side copy of the ID Card, NIE (Foreign ID Card) or Passport of your representative.

  • concrete request (access, rectification, erasure, object, restriction of processing, data portability, …).
  • address for the purpose of communications, date and signature of the data subject. If you don´t give an address, we will respond to you by the same way we received the request.
  • documentation certifying the request made, when appropriate.

We may deny your request where one of the following cases:

  • the request is sent by a legal person.
  • the data subject is not you or your representative.
  • you don´t state the file or the terms on which the data protection rights are exercised.
  • the request is manifestly groundless or excessive, especially as a result of their repetitive nature.
  • in case of the right of rectification, if you don´t indicate the wrong data and the correction that must be made or don’t provide the necessary information to complete your data.
  • generic-looking requests.

 

EOS Spain will provide you the information requested within a one month from the reception of the request. This term can be extended for a further two months when required, considering the complexity and number of requests. We will inform you about any of those extensions within a month since the request was served, explaining the reasons of the delay. 

If your request doesn´t meet any of the requirements indicated above, we will notify you as soon as possible so that it can be rectified and later, within one month from the date we receive your request.

If the defects of the request are rectified, the period of one month to answer will begin from the moment we receive the completed request.

If the defects of the application are not rectified within a reasonable period, we will understand that you have desist from submitting it and it will be filed.

EOS Spain has a Data Protection Officer with whom any individual may contact at the following email address: dpo@eos-spain.es, on all matters related to the processing of personal data and exercise of Data Protection Rights according to the GDPR.

We inform you that you have the right to file a claim before the responsible data protection regulatory authority, in particular, before the Spanish Data Protection Agency, if you consider any breach of Data Protection regulations has been committed when processing your personal data (www.aepd.es).

10. Payments

The required payment information (amount, currency, country code, claim number, payment reference) will be processed exclusively for the purpose of payment processing if you pay a claim via https://my.eos-spain.es/. Depending on your chosen payment method to execute the payment, we forward the required payment information to the payment service provider of the method you have chosen; i.e, payment method: credit card (Mastercard, Visa) to your respective credit card provider.

11. Data security

Within the website visit we use the widespread SSL (secure socket layer) method in conjunction with the highest level of encryption supported by your browser. In general this is a 256-bit encryption. If your browser does not support 256-bit encryption, we fall back on 128-bit v3 technology instead. You can recognize that an individual webpage in our internet presence is being transmitted in encrypted form by the closed key or padlock icon in the bottom status bar of your browser.

We also take suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are being improved continuously according to technological developments.

12. Update and amendment of this Privacy Policy

This Privacy Policy is currently valid and was last updated in July 2019.

It may be necessary to change this Privacy Policy due to improvements and offerings on our website or due to legal or official changes. The current Privacy Policy can be reviewed on our website www.eos-spain.es and can be printed out at any time.

Cookie Settings

We use cookies on our website to enable you to have the best possible website visit. These include cookies that are necessary for the operation of the website, those that are only used for anonymous statistical purposes, cookies that are used for comfort settings and cookies that are used to provide you with personalized, interest-based content. You can decide yourself whether you want to allow the use of statistics, comfort, and marketing cookies. In addition, you can change/withdraw your consent at any time by clicking on the Change Cookies settings on the bottom of the website. Further information can be found in our Privacy Policy.

Necessary

We use necessary cookies. These cookies are necessary for the operation and the basic functions of the website. In particular, they enable the security-relevant functioning of our website.
You can read about which cookies we use here.

Comfort

If you allow comfort cookies, we can make use of our site easier for you. If you visit our website again to use our services, it will automatically be recognized that you already visited us and the entries and settings you made will automatically be recognized so that you do not have to enter them again. For example, through this, you will not have to reenter your user data every time, but rather you can access the data already entered when you visit the website again.
You can read about which cookies we use here

Statistics

We use statistical cookies to improve our offering and ensure a needs-based design and the continuous optimization of our website. 
For this, we collect anonymized data for statistics and analytics, for example, to determine site traffic and user behavior and to adapt and improve our content and the website experience. 
You can read about which cookies we use here

Marketing

We use marketing cookies so that we can provide you with relevant and interest-based content when you visit our website.  
You can read about which cookies we use here.