PRIVACY POLICY
Privacy is important to ALTADIA GROUP CORPORATE, S.A.U. (hereinafter referred to as ALTADIA GROUP). This policy contains the practices related to the processing of personal data on ALTADIA GROUP's websites, such as the type of data collected, its tracking, use, and disclosure.
At ALTADIA GROUP, we understand that the privacy and security of personal data are of vital importance. Therefore, this policy establishes what we do with the information and what we do to keep it secure. It also explains where and how we collect the information, as well as the data protection rights available to the data subject.
This policy applies to those who access and use our website services and those who interact with ALTADIA GROUP on social media (our "Services").
This policy defines our commitment to protecting personal information. We recommend reading our privacy policy before continuing to browse.
This privacy policy was last updated on September 23, 2025.
1. Identification of the Data Controller’s Corporate Name
In accordance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (GDPR), we inform you that the personal data obtained from the data subject, as well as the data generated in the context of our website's activity, will be processed by:
| Corporate name | ALTADIA GROUP CORPORATE, S.A.U. |
| Tax ID No. | A-05348669 |
| Registered Address | Ctra. CV-20, Km.2,3 12540 Vila-real (Castellón) España |
| Residence | Spain |
| info@esmalglass-itaca.com | |
| Telephone | 964 626 544 |
| Corporate Purpose | Holding Company Activities |
Who is the Data Protection Officer for ALTADIA GROUP? And how can you contact them?
The Data Protection Officer (DPO) is the person responsible for protecting the fundamental right to personal data protection at ALTADIA GROUP and is in charge of ensuring compliance with data protection regulations. You can contact the Data Protection Officer at the following address:
DPO email: dpo@altadiagroup.com
2. General Privacy Principles
ALTADIA GROUP collects and processes personal information by adopting the following principles:
- Lawfulness, Fairness, and Transparency: Data is processed in a fair, lawful, and transparent manner.
- Purpose Limitation: Data is collected for specified, explicit, and legitimate purposes and is not processed in a manner incompatible with those purposes.
- Data Minimisation: Data is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.
- Accuracy: Data is accurate and kept up to date. Inaccurate data will be updated or erased.
- Storage Limitation: Data is stored in an identifiable format for no longer than necessary.
- Integrity and Confidentiality (Security): Data is processed securely through appropriate and effective technical and organisational measures against unauthorised or unlawful processing and against accidental loss, destruction, or damage, by applying appropriate technical or organisational measures ("integrity and confidentiality").
- Data Protection by Design and by Default: We are committed to the principles of data protection by design and data protection by default.
3. How we collect your personal data and how it is used
- Directly from the Data Subject: We may collect personal data when an inquiry is made through the contact forms, or when an access account is assigned to the user, among other instances.
- From Cookies: We may collect information from "cookies" that we may store on the user's device. Cookies are small data files stored on the hard drive or in the device's memory. For more information on the use and purposes of cookies, please access our Cookie Policy.
- Logs: In the context of our website activity, we may record certain information and store it in log files when the user interacts with our Services. This information may include the Internet Protocol (IP) or other device addresses or identification numbers, as well as the browser type, Internet service provider, etc.
4. Cases where our website requests your personal data
- When inquiries are made through the contact form or email.
- When any of the services or products we offer are requested.
5. Purposes for which we process your personal data
At ALTADIA GROUP, we process the necessary data to manage and optimise our services and commercial relationships with our users and clients. Additionally, we also use this information to send users relevant advertising related to our products and services.
Personal data is collected and processed for the following purposes:
| Category of Data Subject | Purpose |
|---|---|
| Cookies | a. The Website uses technology for the implementation of files called cookies on the User's equipment. Cookies are used to improve your browsing experience on our website, analyze user navigation, and offer you personalized content. In any case, they can be blocked or disabled through your browser's configuration options. If you would like more information, you can consult our Cookie Policy. |
| Website Inquiry User | b. To attend to and answer communications or requests received from the contact addresses available on the Website https://www.altadiagroup.com/ |
6. Legal bases for processing and mandatory or optional nature of processing.
The legal bases are linked to the purposes in the previous section according to the letters assigned in the table.
| Category of Data Subject | Legal basis for data processing |
|---|---|
| Cookies | a. The consent provided by accepting ALTADIA GROUP's cookies, except for those cookies considered as technical and necessary for the optimal functioning of the Website. |
| Website Inquiry User | b. Consent that you grant by taking the action of contacting any of the addresses on https://www.altadiagroup.com/. The data subject may withdraw consent at any time. In no case shall the withdrawal of consent condition the provision of other services. |
7. Data voluntarily provided by the data subject
| Category of Data Subject | Data provided by the data subject |
|---|---|
| Cookies | a. IP, browsing data, statistical data, etc. |
| Website Inquiry User | b. Name, Surname(s), email address, subject, message, and other professional data freely provided. |
8. Retention of personal data
ALTADIA GROUP only stores your personal data to the extent we need it to be able to use it for the purposes listed in section 5, and according to the legal basis for processing the data and in compliance with applicable law. Your personal information will be kept as long as a contractual and/or commercial relationship exists or until you exercise your right to erasure, cancellation, and/or restriction of your data's processing.
Once the relationship with you has ended for any of the indicated reasons, the information will be duly blocked and stored, without being used, for as long as it may be necessary for the exercise or defense of claims or as long as any type of judicial, legal, or contractual liability derived from its processing, which must be addressed and for which its recovery is necessary, may arise.
Data that is processed for direct marketing purposes will be retained indefinitely until the data subject requests its erasure.
Specifically:
| Category of Data Subject | Data provided by the data subject |
|---|---|
| Cookies | a. IP, browsing data, statistical data, etc. |
| Website Inquiry User | b. Name, Surname(s), email address, subject, message, and other professional data freely provided. |
9. Recipients or third parties to whom we may disclose personal data.
9.1. Personal data may be shared for the purposes established in section 5 in the following cases:
Generally, for all categories of data subjects, personal data may be shared:
- For Compliance with Our Legal Obligations: When disclosure is necessary to comply with our obligations under applicable laws, regulations, legal processes, or governmental requests.
- For the Formulation, Exercise, or Defense of Claims or When Courts Act in Exercise of Their Judicial Function: In certain circumstances, the disclosure of personal data may be mandatory due to a requirement, order, or judicial subpoena.
- In Sale, Merger, Acquisition, or Similar Operations: In cases of merger, acquisition, sale of all or a substantial part of our assets, or other similar sale transaction, personal data may be transferred as part of that transaction. Should this occur, the data subject will be notified of this circumstance.
- For the Provision of Services by Providers Acting on Our Behalf: We occasionally enter into contracts with carefully selected third parties to help us provide our Website services, such as:
- Hosting Services for the purpose of carrying out their hosting and email services.
- IT Consulting and Web Design Services to offer technical support regarding the code created for the Website.
- Aggregated or Non-Identifiable Data: We may share aggregated information or other non-personal information that does not identify the data subject in order to improve the experience of our Services.
9.2. Personal data may be shared outside the EU, for the purposes established in section 5, in the following cases:
| Recipients of the Data | Category of Data Subject | Commission adequacy decision or appropriate safeguards |
|---|---|---|
| Technology Services Platform (Service Provider contracted by the Organisation) | User who contacts through the Website | The Data Controller contracts its virtual infrastructure, which includes the management of email, calendar, documents, office applications, file hosting, etc., under a "cloud computing" model through the G Suite services belonging to the Organisation Google LLC and under the protection of the Commission's Standard Contractual Clauses (SCCs) of Art. 46 of the GDPR. Information available at: https://workspace.google.com/terms/mcc_terms.html |
10. Security measures adopted in relation to the processing of personal data.
ALTADIA GROUP implements and applies appropriate technical and organisational security mechanisms and measures to ensure a level of processing security appropriate to the risk.
To this end, ALTADIA GROUP, based on an objective assessment, has identified, analysed, and evaluated the risks of varying likelihood and severity for the rights and freedoms of natural persons. Consequently, it has applied opportune and effective mechanisms, safeguards, and security measures to eliminate or mitigate the identified risks. Specifically, appropriate and effective technical and organisational measures are adopted to mitigate the risks of accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or the unauthorised communication of or access to such data.
Likewise, ALTADIA GROUP guarantees compliance with the duty of professional secrecy and confidentiality among all its employees, contractors, and third parties that use personal data.
11. Data subject rights
The user may direct their communications and exercise their data protection rights by following the formalities imposed by data protection regulations.
In all our operations related to your privacy, we strive to comply with the current regulations, which contain a series of rights for the data subject that we list below:
| Your rights | What does it mean? |
|---|---|
| Right to be informed | You have the right to be presented with clear, concise, transparent, and easily understandable information regarding how we use your personal data and your rights. We provide you with this information in section 5 of this Policy. |
| Right to access | You have the right to access the personal data we hold about you (subject to certain limitations). Requests that are manifestly unfounded, excessive, or repetitive may not be addressed. To exercise this right, please contact us by any of the means indicated below. |
| Right to rectification | You have the right to have your personal data rectified when it is inaccurate or no longer valid, or to have it completed when it is incomplete. To exercise this right, please contact us by any of the means indicated below. If you have an account, it may be simpler for you to correct the data yourself by modifying your profile. |
| Right to erasure/Right to be Forgotten | In certain cases, you have the right to have your personal data erased or deleted. This is not an absolute right, as we may have legal or legitimate grounds to retain them. If you wish us to delete your personal data, please contact us by any of the means indicated below. |
| Right to withdraw consent at any time when data processing is based on consent | If you have given consent for any of the informed purposes in the processing operations, you may withdraw it at any time, without affecting the lawfulness of prior processing. If you wish to withdraw your consent, please contact us by any of the means indicated below. |
| Right to object to processing based on legitimate interests | You may object at any time to the processing of your data when it is based on legitimate interests. To find out which processing operations are based on consent, see section 5. To exercise this right, contact us by any of the means indicated below. |
| Right to lodge a complaint with a supervisory authority | We also inform you that if you have not obtained satisfaction in the exercise of your rights or in the manner of exercising them, you may lodge a complaint with the Supervisory Authority. If you want more information about this right and how to exercise it, you can contact the AGPD (Spanish Data Protection Agency): http://www.agpd.es/ Tel. 901 100 099 and 91.266.35.17. C/Jorge Juan, 6 28001-Madrid. Please do not hesitate to contact us by any of the means indicated below before lodging a complaint with the competent data protection authority. |
| Right to data portability | You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, to be able to transmit it to another data controller, when the processing is based on the performance of a contract or your consent and the processing is carried out by automated means. To find out which processing operations are based on consent, we refer you to section 5 of this policy. For more information, please contact us by any of the means indicated below. |
| Right to restriction of processing | You have the right to request restriction of processing. If exercised, your data may be stored but not used. This applies in certain GDPR-defined circumstances:
|
| Right to disable/deactivate cookies | You can proceed to deactivate Cookies at any time. As a general rule, the settings of Internet browsers are usually configured by default to accept Cookies; however, you can easily deactivate them by changing your browser settings. Many of the cookies are used to enhance the usability or functionality of websites. Therefore, if you disable them, you may be prevented from enjoying all or part of the services provided through our website, you may have usability problems, or you may have problems with your session if you log in. If you wish to limit or block all cookies set by our websites (which may prevent you from using certain parts of the website) or by any other websites/applications, you can do so through your browser's settings. |
How Can You Exercise Your Data Protection Rights
To exercise rights: write to Ctra. CV-20 Km. 2,3, 12540 Vila-real (Castellón) Spain, or email dpo@altadiagroup.com, indicating "RGPD Data Protection Rights Exercise" in the subject line. You must specify which of the rights you are requesting to be satisfied and must also attach a photocopy of your ID or equivalent identification document. In case you act through a legal or voluntary representative, you must also provide a document accrediting the representation and their identification document.
If you would like a template to use, you can:
- Either use an official template from the Agency (AEPD): https://www.aepd.es/reglamento/derechos/index.html
- Or request a template from us: dpo@altadiagroup.com
12. Processing of special categories of personal data and personal data relating to criminal convictions and offences.
In the formalisation of free-text fields, the introduction of personal information relating to personal data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation, as well as personal data relating to criminal convictions and offences, is not permitted. If any information related to the aforementioned aspects is entered in any of our forms or via email, it will be immediately deleted from our information systems and we will be unable to address the inquiry, as such data is neither necessary nor relevant for the purposes determined in the processing operations of this Website.
13. Links to other websites
We sometimes provide links to other websites, but these websites are not under our control. Therefore, we will not be responsible for any issues that arise in relation to the use of personal data, the website content, or the services offered by these websites.
14. Data quality
The User declares that the data provided, whether their own or those of third parties they represent, are true and accurate and assumes responsibility for communicating any modification or update of the same. The user will be responsible for any damage or loss, direct or indirect, that may be caused to ALTADIA GROUP or any third party as a consequence of providing false, fraudulent, inaccurate, incomplete, or outdated personal data.
The data requested from the User and marked with an asterisk (*) will be strictly necessary to be able to contact the User. In no case shall the failure to provide more data than what is strictly necessary imply a reduction in the quality of the service.
15. Data of minors or incapacitated persons
The use of the Service is not permitted to minors. Therefore, if you are under 16 years of age, we ask you to refrain from using our website services.
ALTADIA GROUP may request additional information or documentation for the purpose of verifying the data subject's age, taking into account the available technology.
16. Data update
The user is the sole source of information regarding their personal data, which is why ALTADIA GROUP requests that, in order to keep your data updated at all times in accordance with the principles of the GDPR, you communicate any variation of the same, as well as the cessation of your activity in the entity you represent, where applicable, to the address indicated for the exercise of the rights of access, rectification, cancellation, and objection, in order to proceed with their cancellation and/or historical processing.
17. Consent for advertising mailings
In accordance with the LSSI Law (Information Society Services Law), ALTADIA GROUP will not send commercial communications via email or other equivalent electronic means that have not been previously authorised by the recipient through the authorisation systems used by ALTADIA GROUP.
In the case of users with whom a prior contractual relationship exists, ALTADIA GROUP is authorised to send commercial communications regarding ALTADIA GROUP products or services that are similar to those that were initially contracted by the client. In any case, the user may voluntarily request exclusion from receiving further commercial information through the Customer Service channels after proving their identity, or by unsubscribing directly from the advertising email itself.
Personal data will be kept indefinitely in our information systems to carry out commercial communications regarding the company's products and services, provided that the right to object to such advertising mailings is not exercised.
18. Social media
By becoming a fan, follower, or similar of ALTADIA GROUP on different social networks and in the context of this processing, you must keep in mind that ALTADIA GROUP can only consult or delete your data in a restricted manner due to having a specific profile. Any rectification of your data or restriction of information or publications must be carried out through the settings of your profile or user account on the social network itself. By default, you consent to:
- The processing of your personal data within the environment of said social network and in accordance with its Privacy Policies.
- ALTADIA GROUP's access to the data contained in your profile or biography, which will be more or less extensive depending on your privacy settings on each network.
- Having news published about our events, or our comments, appear on your wall or biography.
- Receiving communications about our products/events.
If you want to stop following us, you just have to click the "Unfan" or "Unfollow" option.
19. Modification of this privacy policy
ALTADIA GROUP reserves the right to modify this policy to adapt it to future legislative or jurisprudential developments, as well as to industry practices, by previously informing users of the changes made to it.
The user's uninterrupted use of ALTADIA GROUP will constitute a ratification of this document, along with any modifications and changes that may have been introduced.
For the same reasons mentioned above, ALTADIA GROUP reserves the right to modify or interrupt the ALTADIA GROUP Service, in whole or in part, with or without notification to the user. ALTADIA GROUP shall not be liable to the User or to third parties for having exercised its right to modify or interrupt the ALTADIA GROUP Service.