PRIVACY STATEMENT

Protection of personal data according to the LOPD (Data Protection Act)

Forjas Irizar S.L.U. hereinafter referred to as Irizar Forge, in the application of the current legislation on personal data protection, hereby informs that the personal data collected through the forms on paper or computer support are included in the specific automated files of users of Irizar Forge's services.

The purpose of the collection and automated processing of personal data is to maintain the commercial relationship and to carry out information, training, consultancy and other activities of Irizar Forge.

This data will only be transferred to those entities that are necessary for the sole purpose of complying with the aforementioned purpose.

Irizar Forge adopts the necessary measures to guarantee the security, integrity and confidentiality of the data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data.

The user may at any time exercise the rights of access, opposition, rectification and cancellation recognised in the aforementioned Regulation (EU). These rights may be exercised by the user by sending an email to: [email protected] or to the following address: C/ Hiribarren 26, C.P. 20210 - Lazkao (Guipuzcoa).

The user declares that all the data provided by him/her are true and correct, and undertakes to keep them updated, notifying Irizar Forge of any changes.

Purpose of processing personal data: For what purpose will we process your personal data?

At Irizar Forge, we will process your personal data collected for the following purposes:

In the event of contracting the goods and services offered to maintain the contractual relationship, as well as the management, administration, information, provision and improvement of the service.

Sending information requested through the forms provided in digital or physical format.

Sending newsletters, as well as commercial communications of promotions and/or advertising of our entity and/or the sector.

We remind you that you may oppose the sending of commercial communications by any means and at any time by sending an e-mail to the address indicated above.

The fields in these registers must be filled in, and it will be impossible to carry out the purposes expressed if these data are not provided.

How long will the personal data collected be kept?

The personal data provided will be kept for as long as the commercial relationship is maintained and you do not request its deletion. Subsequently, they will be kept for the legally required periods (unless, in both cases, the processing is based on the User's consent and the User revokes it, in which case they will be kept until such revocation is received).

We can therefore guarantee that your data will not be kept for longer than is necessary for the purposes described above, without prejudice to any retention that may be necessary for the formulation, exercise or defence of potential claims and/or as long as permitted by applicable law.

Legitimation:

The processing of your data is carried out on the following legal bases that legitimise the same:

The request for information and/or the contracting of Irizar Forge services, the terms and conditions of which will be made available to you in any case, prior to any eventual contracting.

Free, specific, informed and unequivocal consent, insofar as we inform you by making this privacy policy available to you, which after reading it, if you agree, you can accept by means of a declaration or a clear affirmative action, such as ticking a box provided for this purpose.

In the event that you do not provide us with your details or you do so incorrectly or incompletely, we will not be able to deal with your request, making it completely impossible to provide you with the information requested or to carry out the contracting of services.

Recipients:

The data will not be communicated to any third party outside Irizar Forge, unless legally obliged to do so.

The optimal provision of the service offered by Irizar Forge may require that other third-party service providers of Irizar Forge access the User's personal data as data processors.

In addition to the access that third-party providers may have to the personal data under the responsibility of Irizar Forge as national or international data processors, within the framework of providing a service to the data controller, Irizar Forge may transfer the User's personal data to authorised Irizar Forge Distributors, provided that it has requested the User's consent and the User has expressly granted it.

In addition to the above, Irizar Forge may also transfer or communicate personal data to fulfil its obligations to the Public Administrations in cases where this is required in accordance with the legislation in force at any given time and, where applicable, also to other bodies such as the State Security Forces and Corps and the Judiciary.

User rights

Irizar Forge informs the User of the possibility of exercising the rights of access, rectification, opposition, deletion, portability and limitation of processing, as well as the right to reject the automated processing of the personal data collected by Irizar Forge.

Said rights may be exercised free of charge by the User, and where applicable, whoever represents him/her, by means of a written and signed request addressed to the following address: C/ Hiribarren 26, C.P. 20210 - Lazkao (Guipuzcoa).

Said request must include the following details: name and surname of the User, address for notification purposes, photocopy of National Identity Document or Passport, and the specific request. Likewise, we inform that the User may also exercise the aforementioned rights by e-mail: [email protected]

In addition to the aforementioned rights, the User will have the right to withdraw the consent granted at any time by means of the procedure described above, without this withdrawal of consent affecting the lawfulness of the processing prior to the withdrawal of consent. Irizar Forge may continue to process the User's data to the extent permitted by applicable law.

Irizar Forge reminds the User that he/she has the right to file a complaint with the relevant supervisory authority.

Security measures implemented

Irizar Forge undertakes to comply with its obligation to keep personal data secret and its duty to protect them, and will adopt the necessary measures to prevent their alteration, loss, processing or unauthorised access, in accordance with the provisions of the applicable regulations.

Irizar Forge has implemented the necessary technical and organisational security measures to guarantee the security of your personal data and prevent its alteration, loss and unauthorised processing and/or access, taking into account the state of technology, the nature of the data stored and the risks to which it is exposed, whether from human action or the physical or natural environment, in accordance with the provisions of the applicable regulations.

Irizar Forge, an entity concerned about privacy, in order to reinforce the confidentiality and integrity of the information in its organisation, continuously supervises, controls and evaluates its processes to ensure respect for the privacy and security of the information, in accordance with international standards.

Protection of hosted information

Irizar Forge makes backup copies of the contents hosted on its servers, however it is not responsible for the accidental loss or deletion of data by users. Likewise, it does not guarantee the total replacement of data deleted by users, as said data may have been deleted and/or modified during the period of time that has elapsed since the last backup copy.

The services offered, except for the specific backup services, do not include the replacement of the contents kept in the backup copies made by Irizar Forge, when this loss is attributable to the user; in this case, a fee will be determined according to the complexity and volume of the recovery, always with the user's prior acceptance.

The replacement of deleted data is only included in the price of the service when the loss of the content is due to causes attributable to Irizar Forge.

Commercial communications

In application of the LSSI. Irizar Forge will not send advertising or promotional communications by e-mail or other equivalent electronic communication media that have not been previously requested or expressly authorised by the recipients of the same.

In the case of users with whom there is a previous contractual relationship, Irizar Forge will be authorised to send commercial communications regarding products or services that are similar to those that were initially contracted with the customer.

In any case, the user, after proving their identity, may request not to receive any more commercial information through the channels mentioned above.