Privacy Policy. Personal Data Protection in accordance with the GDPR
We hereby inform you that the personal data collected through this Website will be processed by Sevica2025, S.L., acting as the Data Controller.
The collection and automated processing of personal data are intended to maintain the commercial relationship and to carry out information, training, advisory, and other activities related to the business operations of Sevica2025, S.L.
Such data will only be disclosed to those entities whose involvement is strictly necessary to fulfil the purposes described above.
Sevica2025, S.L. adopts the necessary technical and organisational measures to ensure the security, integrity, and confidentiality of personal data, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR) concerning the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).
Users may exercise their rights of access, objection, rectification, erasure, restriction of processing, and data portability at any time, as recognised by the aforementioned Regulation (EU). These rights may be exercised by sending an email to finanzas@sevica.es or by writing to:
C/Raurell 33, 08850 Gavà (Barcelona), Spain
Where necessary, we may request documentation to verify the identity of the applicant.
Users also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es) or with the Catalan Data Protection Authority (APDCAT) at https://apdcat.gencat.cat.
The user declares that all personal data provided are true and accurate and undertakes to keep them updated by notifying Sevica2025, S.L. of any changes.
Purpose of the Processing of Personal Data
What purposes do we process your personal data for?
At Sevica2025, S.L., we process the personal data collected through our Website (https://sevica.es/) for the following purposes:
- To comply with the Company’s commercial, employment, corporate, and accounting obligations.
- For security purposes and fraud prevention.
- To manage your request for information about our fulfillment and logistics services and to contact you in response to your enquiry. Should this relationship result in the provision of our services, your personal data will be processed for the management, performance, and monitoring of the logistics services agreement.
- To manage your application for a job vacancy published on our Website or, where applicable, to retain your curriculum vitae (CV) for consideration in future recruitment processes that match your professional profile.
- To publish and manage comments submitted by users on the Website’s blog posts, with the aim of encouraging interaction and discussion regarding the published content.
- To ensure the proper technical operation of the Website, remember your browsing preferences and, where you have given your consent, analyse user behaviour through web analytics tools in order to improve our content and user experience. For further information, please refer to our Cookie Policy.
- Where you have expressly requested it or where there is a prior commercial relationship, to send you information about our services, news, blog articles, and events related to SEVICA’s business activities. You may unsubscribe at any time by clicking the unsubscribe link included in each communication.
Please note that you may object to receiving commercial communications at any time and through any means by sending an email to the address indicated above.
The fields included in our forms are mandatory unless otherwise indicated. Therefore, if the required information is not provided, we will be unable to fulfil the purposes described above.
How long do we retain your personal data?
The personal data provided will be retained for the following periods, depending on the purpose of the processing:
- Contact details and commercial enquiries: for the time necessary to respond to your request and, subsequently, for 3 years to deal with any potential liabilities, unless you request their deletion beforehand.
- Customer and contractual data: for the duration of the contractual relationship and, once it has ended, for 5 years in accordance with commercial law obligations (Article 30 of the Spanish Commercial Code) and 4 years for tax obligations under the Spanish General Tax Law.
- Curricula vitae (CVs) and job applications: for 1 year from the date of receipt, unless the applicant requests their deletion beforehand.
- Commercial communications: until you withdraw your consent or exercise your right to object.
Legal Basis for Processing
The lawfulness of each of the processing activities described above is based on the following legal grounds set out in Article 6 of the General Data Protection Regulation (GDPR):
| Purpose | Legal Basis |
|---|---|
| a) Handling commercial enquiries | Legitimate interest (Art. 6(1)(f) GDPR) during the pre-contractual enquiry stage; Performance of a contract (Art. 6(1)(b) GDPR) once the commercial relationship has been established. |
| b) Recruitment management | Pre-contractual measures (Art. 6(1)(b) GDPR) for unsolicited job applications; Pre-contractual measures (Art. 6(1)(b) GDPR) for applications submitted in response to published job vacancies. |
| c) Blog comments | Data subject's consent (Art. 6(1)(a) GDPR). |
| d) Website browsing and technical cookies | Legitimate interest (Art. 6(1)(f) GDPR) for strictly necessary cookies; Consent (Art. 6(1)(a) GDPR) for analytics and marketing cookies. |
| e) Commercial communications | Data subject's consent (Art. 6(1)(a) GDPR) for new contacts; Legitimate interest (Art. 6(1)(f) GDPR) for existing customers, in accordance with Article 21.2 of the Spanish Information Society Services Act (LSSICE). |
For all processing activities where the legal basis is consent, the data subject may withdraw their consent at any time, without affecting the lawfulness of the processing carried out based on consent prior to its withdrawal. The withdrawal of consent shall in no case affect the provision of the contracted services.
Source of the data and method of collection
The personal data we process has been provided directly by you. If you provide us with data belonging to other individuals, you guarantee that you have obtained their express consent and that you have informed them of the contents of this Privacy Policy. Likewise, you release us from any liability arising from failure to comply with this obligation.
Accuracy of personal data
If you do not provide us with your data, or if you provide it incorrectly or incompletely, we will not be able to process your request, making it impossible to provide you with the requested information or to proceed with the contracting of services.
The data subject guarantees that the information provided is truthful, accurate, complete, and up to date. You must inform us of any changes to the data provided through the channels indicated in the header of this policy.
Recipients
In general, personal data will not be disclosed to additional third parties, except in the following cases:
— Legal obligation, when required by applicable regulations (Tax Authorities, State Security Forces and Bodies, judicial bodies, or other competent authorities).
— Service providers acting as data processors in accordance with Article 28 of the GDPR, with whom the corresponding data processing agreements have been signed, ensuring compliance with data protection regulations.
As a general rule, no international transfers of personal data outside the European Economic Area (EEA) are carried out. However, if, as a result of the provision of certain services by our providers (including hosting services, technical support, or system maintenance), it becomes necessary to transfer personal data to a third country or international organisation, such transfer will only take place where the European Commission has adopted an adequacy decision regarding the destination country, or, in the absence thereof, where appropriate safeguards provided for in Article 46 of Regulation (EU) 2016/679 (GDPR) are in place, such as Standard Contractual Clauses approved by the European Commission, Binding Corporate Rules, or any other legally recognised mechanism.
Data collected from users of the services
In cases where the user uploads files containing personal data to shared hosting servers, Sevica2025, S.L. shall not be held responsible for any breach of the GDPR by the user.
Intellectual Property Rights – https://sevica.es/
Sevica2025, S.L. owns all copyright, intellectual property, industrial property, know-how, and any other rights related to the contents of the website https://sevica.es/ and the services offered therein, as well as the software required for its implementation and the related information.
The reproduction, publication, and/or use of the website’s contents, whether in whole or in part, for purposes other than strictly private use is not permitted without the prior written consent of Sevica2025, S.L.
Intellectual Property of the Software
The user must respect any third-party software made available by Sevica2025, S.L., even when such software is free of charge and/or publicly available.
Sevica2025, S.L. holds the necessary exploitation rights and intellectual property rights over the software.
The user does not acquire any rights or licences over the software required for the provision of the contracted service, nor over the technical service monitoring information, except for the rights and licences strictly necessary to fulfil the contracted services and only for the duration of such services.
For any action exceeding the fulfilment of the contract, the user must obtain prior written authorisation from Sevica2025, S.L. The user is prohibited from accessing, modifying, or viewing the configuration, structure, and files of the servers owned by Sevica2025, S.L., and assumes civil and criminal liability for any incident that may occur on the servers and security systems as a direct consequence of negligent or malicious actions on their part.
Intellectual Property of Hosted Content
Any use of the services provided by Sevica2025, S.L. that contravenes intellectual property legislation is prohibited, particularly:
Any use that violates Spanish law or infringes the rights of third parties.
The publication or transmission of any content that, in the opinion of Sevica2025, S.L., is violent, obscene, abusive, illegal, racist, xenophobic, or defamatory.
Cracks, software serial numbers, or any other content that infringes third-party intellectual property rights.
The collection and/or use of other users’ personal data without their express consent or in breach of the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data.
The use of the domain’s mail server and email addresses for sending unsolicited mass emails.
The user is solely responsible for the content of their website, the information transmitted and stored, hyperlinks, third-party claims, and any legal actions relating to intellectual property, third-party rights, and the protection of minors.
The user is responsible for complying with applicable laws and regulations, as well as rules related to the operation of online services, e-commerce, copyright, public order, and the universal principles governing Internet use.
The user shall indemnify Sevica2025, S.L. for any expenses arising from Sevica2025, S.L. being involved in any legal proceedings where responsibility is attributable to the user, including legal fees and defence costs, even in the event of a non-final judicial decision.
Protection of Hosted Information
Sevica2025, S.L. performs backups of the content hosted on its servers; however, it shall not be held responsible for the loss or accidental deletion of data by users. Likewise, Sevica2025, S.L. does not guarantee the complete restoration of data deleted by users, as such data may have been removed and/or modified during the period elapsed since the last backup.
The services offered, except for specific backup services, do not include the restoration of content stored in backups made by Sevica2025, S.L. when such loss is attributable to the user. In such cases, a fee will be determined according to the complexity and volume of the recovery, always subject to prior acceptance by the user.
The restoration of deleted data is only included in the service price when the loss of content is due to causes attributable to Sevica2025, S.L.
Commercial Communications
In accordance with the Spanish Law on Information Society Services and Electronic Commerce (LSSI), Sevica2025, S.L. shall not send advertising or promotional communications by email or any other equivalent electronic communication channel unless they have been previously requested or expressly authorised by the recipients.
In the case of users with whom there is an existing contractual relationship, Sevica2025, S.L. is authorised to send commercial communications relating to Sevica2025, S.L. products or services that are similar to those initially contracted by the customer.
In any case, the user, after verifying their identity, may request that no further commercial information be sent through the Customer Service channels.
