Privacy Policy

 

          1.- Who is responsible for the processing of your personal data?


          This Privacy Policy (hereinafter, the Policy) applies to all personal data provided by the User, through online forms or when making a purchase on our website.

          Both the recipients of the service and the competent bodies are expressly, precisely and unequivocally informed of the following aspects concerning the data controller:


          · Company name: NORUCO, S.L.,
          · CIF: B91847194 
          · Corporate purpose: Manufacture and repair of electromedicine equipment
          · Registered address: P.I. Ctra. Amarilla, Avenida de la Industria, nº53-55, 41007, Sevilla
          · Telephone: 954512304
          · E-mail: dptojuridico@noruco.com

          · Web: http://noruco.com/ https://opticlightcables.com/


          For the purposes of this Policy, "User" shall be understood as any natural person interested in the products and services we offer through our website. As data controllers, prior to the provision of your personal data, we will inform you of all the points to which you are entitled and request the express consent of the User for the processing of your data, when necessary, and for any other aspect that requires the prior authorization of the same.

          The purpose of the Policy is to provide transparency of information about how we treat your data and to protect the information on the Internet and the personal data that the User may enter on the website, in compliance with current legislation in this area (Regulation (EU) 2016/679; the Draft Organic Law on Data Protection and Law 34/2002, as well as its implementing regulations).

          The user may contact us at the e-mail address indicated above with any questions or needs he/she may have regarding data protection.

           

          2.- For what purposes do we process your personal data?


          The User is hereby informed that we may process the personal data provided through the online forms or during the purchase process of any of our products or services exclusively for the purposes indicated below, to the extent that there is a legal basis for each treatment, as explained below:

          a) To guarantee the User the registration, access and use of his personal space in the private area of the web page of products and services offered. We need to process your personal data to identify you as a User of the website and give you access to its different functionalities, products and services. (http://www.noruco.com)

          b) To manage purchases and requests made by the User through the website https://opticlightcables.com/. This purpose includes the processing of the User's data necessary for the development, fulfillment and execution of the contract of sale or provision of services, mainly the following:

          ·Manage the payment of the products or services purchased
          ·Activate the necessary mechanisms in order to prevent potential fraud, both against the User and against us, during the purchase process.
          ·Manage possible returns or incidents related to the order or the contracted product or service.
          ·To carry out the invoicing and make available to the User the tickets and invoices of the purchases made through the web.
          ·To guarantee the use of other available functionalities or services.

          c) Inform the User by any means, of the requests required through the web pages of http://noruco.com/ https://opticlightcables.com/, including sending commercial communications to the email address and / or cell phone that the User, where appropriate, provide, of products or services similar to those purchased by the User. 

          d) To carry out promotional activities about other products or services, including sending commercial communications to the email address and/or cell phone number that the User, if applicable, provides.

          e) To create a profile of the User and, where appropriate, combine the personal information provided by the User through the website http://www.noruco.com. No automated decisions will be made based on this profile.

          f) Usability and quality analysis for the improvement of our services on the websites of http://noruco.com/ and https://opticlightcables.com/. When the User accesses the website, we will process their browsing data for analytical and statistical purposes, i.e. to understand how users interact with the platform and be able to make improvements to it.

           

          3.- What is the legitimacy for the processing of your personal data?


          We are entitled to process your personal data for different reasons, depending on the purpose for which they are collected. The legal basis for the processing of personal data for purpose a) and b) is the performance of the contract for the provision of services and/or the purchase of the relevant products. In addition, we consider that we have a legitimate interest to carry out the necessary checks in order to detect and prevent possible fraud when the User makes a purchase, understanding that this treatment is positive for all parties involved in the sale and purchase and, in particular, for the User, as it allows us to put measures to protect against fraud attempts made by third parties. At the time of registration, we will collect and process the personal data necessary for registration and access to the User's personal space. In the event that the User decides to purchase one of our products or services, we will also collect and process the data necessary to manage the purchase process. The User knows and accepts that the non-completion of such personal data will prevent us from providing all the services linked to such data, being all fields mandatory and necessary. The legal basis for the processing of data for the purpose c) will be:-The legitimate interest of the responsible to meet the requests or queries that the user raises us through the existing means of contact. -The legitimate interest of the responsible in bringing to your knowledge products or services similar to those you have previously purchased or those who require information from us. The legal basis for the processing of data for the purpose d) is the consent that could have been requested to the User, without in any case the withdrawal of the same conditions the execution of the contract for the provision of services and / or purchase of the corresponding products. The User's personal data will not be processed for these purposes if we have not requested his/her consent. With respect to purpose e), please note that when registering as a member of the http://www.noruco.com website, we will use personal data to create a "user profile", based on the information provided, and will not be used for automated decision-making. We consider that we have a legitimate interest in profiling with the information we have about the User and the personal data provided by the User, since the processing of this data is also beneficial to the User himself, by allowing him to improve his experience and access information in accordance with his preferences. The legal basis for the purpose f) is the legitimate interest of the responsible to analyze the usability of the websites http://noruco.com/ and https://opticlightcables.com/ and the degree of user satisfaction, understanding that this treatment is also beneficial to the same, to improve your experience and provide a higher quality service. Finally, if any User or third party publishes a post or communicates directly with us through social networks, we may collect and process the data contained in these publications or in the public profile in order to respond to any question or request for services, as well as to monitor public opinion about NORUCO, S.L. Under no circumstances will we transfer, exploit or use your personal data for any purpose other than that expressly indicated herein.

           

          4.- How long do we keep your personal data?


          The period of conservation of your personal data will depend on the purposes for which we treat them, specifically:-For the purpose of managing the registration as a User in the web http://www.noruco.com, we will treat the data during the time in which the condition of registered User is maintained, that is to say, until the User unsubscribes. -In order to manage the development, fulfillment or execution of the contract of sale or provision of services signed with the User through the website https://opticlightcables.com/, we will process the data for the time strictly necessary, including possible returns, complaints or claims associated with the purchase of the product or service in particular. -For the attention of requests from the interested party, the data will be processed for the time necessary to meet it. The data used for sending electronic communications will be processed as long as the interested party does not exercise his right of opposition. -For the sending of promotional communications consented to by the User, we will keep his/her personal data as long as the consent given is not revoked. -The personal data related to the elaboration of a profile of the user of the website http://www.noruco.com will be processed for as long as the User is registered or until he/she exercises his/her right of opposition. -In the usability and quality analysis of the websites http://noruco.com/ and https://opticlightcables.com/, the data will be processed for the duration of a specific action or quality survey. Regardless of the fact that we process the User's personal data for the time strictly necessary to fulfill the corresponding purpose, we will subsequently keep them, duly blocked, during the period in which liabilities may arise from the processing, in compliance with the regulations in force at any given time, as well as when it is necessary for the formulation, exercise or defense of potential claims. Once the statute of limitations has expired in each case, we will proceed to delete the personal data.

           

          5.- Who has access to your personal data?


          The optimal provision of the service we offer through the website may require that other third parties that provide services to us access the User's personal data as processors, such as, for example, technology service providers, logistics, transport and delivery service partners or marketing-related service providers. By accepting this Policy, the User understands that some of the aforementioned service providers (in particular, Google Analytics) may be located in countries outside the European Economic Area or that do not offer a level of security equivalent to the Spanish one. In these cases, international transfers are based on the authorization of the Spanish Supervisory Authority, on model clauses approved by the Commission (the content of which can be consulted at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en) or, if applicable, on the Privacy Shield (certification that can be consulted at https://privacyshield.gov/welcome). In the specific case of Google Inc. has been configured as a safe harbor (http://web.ita.doc.gov/safeharbor/shlist.nsf/5624e34187d9c4dc85256960005fc648/9d486b16464df0648525709b006df57c?OpenDocument), so the authorization of the Director of the Spanish Data Protection Agency is not required. In addition, we may make assignments or communications of personal data to meet their obligations to the Public Administrations in cases where so required in accordance with current legislation at all times and, where appropriate, to other bodies such as Forces and State Security Forces and the Judiciary. We may also share information to prevent illegal use of our websites or violations of the Terms of Use, as well as to defend ourselves against possible claims from third parties. Finally, we may also share information with companies that assist in fraud protection and/or investigation (e.g., counterfeiting) and financial institutions that support the services offered.

           

          6.- What are the rights of the Users?


          We guarantee the User the exercise of their rights in relation to the processing of their personal data. In particular, we inform the User that they have the right to:-Obtain confirmation as to whether their data is being processed. -Exercise the right of access to personal data we have, obtaining information on the purposes of processing, the category of data processed, the possible recipients, the storage period, the origin of the data and, where appropriate, profiling or automated decision making. -Exercise the right of rectification. For these purposes, we remind you that the personal data we hold must always be a true reflection of reality, so do not hesitate to make use of your right in the event that any data is modified, changed or cancelled. The registered User can access the section corresponding to his/her data on the website and modify or update them. The User guarantees that the personal data provided by any means are true and accurate, and undertakes to notify any change or modification thereof, being solely responsible for any loss or damage caused to the website, its manager or any third party by reason of a communication of erroneous, inaccurate or incomplete information. -For reasons related to your particular situation, you may object to the processing of your data, in which case our organization will stop processing the data, unless there are legitimate reasons that prevent it. -Request the deletion of your personal data when, among other reasons, they are no longer necessary for the purposes described above or we no longer have the legitimacy to process them. -Request the portability of your data, when the processing is carried out by automated means and provided that you are linked to our company on the basis of a contract signed or you have given consent to the processing carried out. In such cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format, or to have it transmitted directly to another controller, where technically feasible. -In certain circumstances, you may request the limitation of the processing of your data, in which case we will only keep them for the exercise or defense of claims. -To object to automated decision making, including profiling. These rights may be exercised free of charge by the User, and where appropriate by anyone representing him/her, by means of a written and signed request addressed to:-Address: P.I. Ctra. Amarilla, Avenida de la Industria, nº53-55, 41007, Sevilla-E-mail: dptojuridico@noruco.com . The request must contain in the subject the reference "Data Protection / Right being exercised" and must include the following information: name and surname of the user, address for notification purposes, photocopy of ID card or passport and circumstances in which the request is made. In the case of representation, it must be proved by means of a reliable document. In addition, the User shall have the right to withdraw the consent given at any time through the procedure described above, without such withdrawal affecting the lawfulness of the processing prior to the withdrawal thereof and without, in any case, condition the execution of the contract for the provision of services and / or purchase of the corresponding products. However, we may continue to process the User's data to the extent required or permitted by applicable law. Finally, we remind you that you also have the right to file a complaint with the supervisory authority (in particular, with the Spanish Data Protection Agency, on the website https://www.agpd.es/) and before the Courts of Justice.

           

          7.- Unsubscribe from the service of sending commercial communications.


          As mentioned in the previous section, the User has the right to revoke at any time the consent given for the sending of commercial communications by simply informing NORUCO, S.L. that he/she no longer wishes to receive them. To do so, the User may either revoke his/her consent in the manner described in the previous section or click on the link included in each commercial communication, thereby cancelling the sending of electronic commercial communications.

           

          8.- From what age can the user access our products and services?


          Our website is not directed to persons under 18 years of age. By accepting this Policy, the User declares and guarantees that he/she is over 18 years of age. Therefore, data of minors should not be provided and, if provided, we will proceed to its destruction as soon as we become aware of it, disclaiming any liability in case of breach of this condition of use of the service.

           

          9.- What security measures do we have in place?


          We are committed to fulfilling our obligation of secrecy of personal data and the duty to protect them, so we will take the necessary measures to prevent alteration, loss, treatment or unauthorized access, in accordance with the provisions of the applicable regulations. In this line, we have implemented the necessary technical and organizational security measures to ensure the security of your personal data and avoid its alteration, loss and treatment and / or unauthorized access, given the state of technology, the nature of the data stored and the risks to which they are exposed, whether from human action or non-natural physical environment, in accordance with the provisions of the applicable regulations. As an entity concerned about privacy, in order to reinforce the confidentiality and integrity of the information in our organization, we continuously maintain the supervision, control and evaluation of our processes to ensure respect for privacy and information security, according to international standards. Nevertheless, the User must be aware that security measures on the Internet are not invulnerable, so we disclaim any responsibility for those practices in which the User does not assume the appropriate level of security or due diligence, or its consequences, as well as causes or damages caused by third parties outside us.

           

          10.- Restricted access areas.


          To enter the restricted access areas, Users must have the corresponding access codes. We reserve the right to freely accept or reject the registration request of any User. The data entered by Users must be accurate, current, truthful and will be processed and treated in the terms indicated above, in compliance with current legislation on personal data protection. Users will be responsible in any case for the custody of their passwords, so they will be solely responsible for any damages that may arise from improper use of the same, as well as its loss or any other circumstance that could pose a risk of access to use the same by unauthorized third parties. In this last case, the Users must communicate it immediately, so that it can be blocked and replaced, to the following e-mail: dptojuridico@noruco.com

           

          11.- Forms.


          In those cases in which to make a request, it is necessary to complete a form and "click" on the submit button, the completion of the same necessarily implies that the User is informed and expressly gives his consent and acceptance of this Privacy Policy and Data Protection.

           

          12.- Use of cookies.


          Our website uses cookies to distinguish you from other users of our website, which helps us to provide you with a good experience when you browse our website while allowing us to improve it. You can learn more about the use of cookies in the Cookie Policy.  Política de Cookies.

           

          13.- Modification of the Privacy Policy.


          We may modify this Policy in accordance with the applicable legislation at any given time. In any case, any modification of the same will be duly notified to the User so that he/she is informed of the changes made in the processing of his/her personal data and, in the event that the applicable regulations so require, the User may withdraw his/her consent. el Usuario pueda retirar su consentimiento.