Privacy Policy – Personal Data Protection under the GDPR
We inform you that the personal data collected through this Website will be processed by Sevica2025, S.L., acting as the Data Controller.
The collection and automated processing of personal data are carried out for the purpose of maintaining the commercial relationship and performing information, training, advisory, and other activities related to the services provided by Sevica2025, S.L.
Such data will only be disclosed to those entities whose involvement is strictly necessary to fulfil the purposes described above.
Sevica2025, S.L. adopts the necessary measures to ensure the security, integrity, and confidentiality of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR), concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data, as well as Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD).
Users may exercise at any time their rights of access, objection, rectification, erasure, restriction of processing, and data portability as recognised by the aforementioned Regulation (EU). These rights may be exercised by sending an email to finanzas@sevica.es or by writing to:
C/ Raurell 33, 08850 Gavà (Barcelona), Spain.
Where necessary, we may request documentation to verify your identity.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es, or with the Catalan Data Protection Authority (APDCAT) at https://apdcat.gencat.cat.
The user declares that all personal data provided is true and accurate and undertakes to keep it up to date by notifying Sevica2025, S.L. of any changes.
Purpose of the Processing of Personal Data
What purposes do we process your personal data for?
At Sevica2025, S.L., we process the personal data collected through the website https://sevica.es/ for the following purposes:
To comply with the Company’s legal, commercial, employment, corporate, and accounting obligations.
For security purposes and fraud prevention.
To manage your request for information about our fulfillment and logistics services and to contact you in response to your enquiry. If your enquiry results in the provision of our services, your data will be processed for the management, performance, and monitoring of the logistics services agreement.
To manage your application for a job vacancy published on our website or, where applicable, to retain your curriculum vitae (CV) for consideration in future recruitment processes that match your professional profile.
To publish and manage comments submitted by users on the website’s blog posts, in order to encourage interaction and discussion regarding the published content.
To ensure the proper technical operation of the website, remember your browsing preferences, and, with your consent, analyse user behaviour through web analytics tools in order to improve the website’s content and user experience. For further information, please refer to our Cookie Policy.
Where you have expressly requested it, or where a prior commercial relationship exists, to send you information about our services, company news, blog articles, and events related to SEVICA’s activities. You may unsubscribe at any time by using the unsubscribe link included in each communication.
Please note that you may object to receiving commercial communications at any time and through any channel by sending an email to the address indicated above.
The fields marked as mandatory in the relevant forms must be completed. If the required information is not provided, it will not be possible to fulfil the purposes described above.
How long do we retain the personal data collected?
The personal data provided will be retained for the following periods, depending on the purpose of the processing:
Contact details and commercial enquiries: for the time necessary to respond to your request and, thereafter, for 3 years in order to address any potential liabilities, unless the data subject requests their deletion beforehand.
Customer and contractual data: for the duration of the contractual relationship and, once it has ended, for 5 years in accordance with commercial legal obligations (Article 30 of the Spanish Commercial Code) and 4 years to comply with tax obligations (Spanish General Tax Law).
Curricula vitae (CVs) and job applications: for 1 year from the date of receipt, unless the candidate requests their deletion beforehand.
Commercial communications: until the data subject withdraws their consent or exercises their right to object.
Legal Basis for Processing
The lawfulness of each of the processing activities described above is based on the following legal grounds set out in Article 6 of the General Data Protection Regulation (GDPR):
| Purpose | Legal Basis |
|---|---|
| a) Handling commercial enquiries | Legitimate interest (Art. 6(1)(f) GDPR) during the pre-contractual enquiry stage; Performance of a contract (Art. 6(1)(b) GDPR) once the commercial relationship has been established. |
| b) Recruitment management | Pre-contractual measures (Art. 6(1)(b) GDPR) for unsolicited job applications; Pre-contractual measures (Art. 6(1)(b) GDPR) for applications submitted in response to published job vacancies. |
| c) Blog comments | Data subject's consent (Art. 6(1)(a) GDPR). |
| d) Website browsing and technical cookies | Legitimate interest (Art. 6(1)(f) GDPR) for strictly necessary cookies; Consent (Art. 6(1)(a) GDPR) for analytics and marketing cookies. |
| e) Commercial communications | Data subject's consent (Art. 6(1)(a) GDPR) for new contacts; Legitimate interest (Art. 6(1)(f) GDPR) for existing customers, in accordance with Article 21.2 of the Spanish Information Society Services Act (LSSICE). |
Withdrawal of Consent
For any processing activities where the legal basis is the data subject’s consent, consent may be withdrawn at any time without affecting the lawfulness of any processing carried out prior to its withdrawal. The withdrawal of consent shall in no case affect the provision of the contracted services.
Source of the Data and Method of Collection
The personal data we process has been provided directly by you. If you provide us with personal data relating to other individuals, you guarantee that you have obtained their express consent and that you have informed them of the contents of this Privacy Policy. Likewise, you release us from any liability arising from your failure to comply with this obligation.
Accuracy of Personal Data
If you do not provide us with your personal data, or if you provide inaccurate or incomplete information, we will be unable to process your request, making it impossible to provide the requested information or to proceed with the provision of our services.
The data subject guarantees that the personal data provided is true, accurate, complete, and up to date. You agree to notify us of any changes to the information provided through the contact channels indicated at the beginning of this Privacy Policy.
Recipients
As a general rule, personal data will not be disclosed to additional third parties, except in the following cases:
- Where required by law, when disclosure is necessary to comply with applicable legislation (Tax Authorities, State Security Forces and Law Enforcement Agencies, courts, or other competent authorities).
- To service providers acting as data processors pursuant to Article 28 of the GDPR, with whom the corresponding Data Processing Agreements (DPAs) have been executed to ensure compliance with applicable data protection legislation.
As a general rule, no international transfers of personal data outside the European Economic Area (EEA) are carried out. However, if, as a result of the provision of certain services by our providers (including hosting services, technical support, or system maintenance), it becomes necessary to transfer personal data to a third country or international organisation, such transfers will only take place where the European Commission has adopted an adequacy decision for the destination country or, where no such decision exists, where appropriate safeguards are in place in accordance with Article 46 of Regulation (EU) 2016/679 (GDPR), such as Standard Contractual Clauses (SCCs) approved by the European Commission, Binding Corporate Rules (BCRs), or any other legally recognised transfer mechanism.
Data Collected by Users of the Services
Where users upload files containing personal data to shared hosting servers, Sevica2025, S.L. shall not be held responsible for any failure by the user to comply with the GDPR.
Intellectual Property Rights – https://sevica.es/
Sevica2025, S.L. owns all copyright, intellectual property rights, industrial property rights, know-how, and any other rights relating to the content of the website https://sevica.es/, the services offered through it, the software required for its operation, and all related information.
The reproduction, publication, and/or use of the website’s content, whether in whole or in part, for purposes other than strictly private use, is prohibited without the prior written consent of Sevica2025, S.L.
Software Intellectual Property
Users must respect any third-party software made available by Sevica2025, S.L., even where such software is free of charge and/or publicly available.
Sevica2025, S.L. holds all necessary intellectual property and exploitation rights over the software used to provide its services.
The user does not acquire any ownership rights or licence over the software required for the provision of the contracted service, nor over the technical information used to monitor the service, except for those rights and licences strictly necessary for the performance of the contracted services and only for the duration of those services.
Any action beyond the scope of the contracted services requires the prior written authorisation of Sevica2025, S.L.. Users are expressly prohibited from accessing, modifying, or viewing the configuration, structure, or files of servers owned by Sevica2025, S.L.. Users shall be liable for any civil or criminal consequences arising from incidents affecting the servers or security systems as a direct result of negligent or malicious actions on their part.
Intellectual Property of Hosted Content
Any use of the services provided by Sevica2025, S.L. that contravenes intellectual property legislation is prohibited, including, in particular:
- Any use that violates Spanish laws or infringes the rights of third parties.
- The publication or transmission of any content that, in the opinion of Sevica2025, S.L., is violent, obscene, abusive, illegal, racist, xenophobic, or defamatory.
- Cracks, software serial numbers, or any other content that infringes third-party intellectual property rights.
- The collection and/or use of personal data belonging to other users without their express consent or in breach of the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data.
- The use of the domain’s mail server and email addresses for sending unsolicited mass emails.
The user assumes full responsibility for the content of their website, the information transmitted and stored, hyperlinks, third-party claims, and any legal actions relating to intellectual property, third-party rights, and the protection of minors.
The user is responsible for compliance with applicable laws and regulations, as well as rules relating to the operation of online services, e-commerce, copyright, the maintenance of public order, and the general principles governing the use of the Internet.
The user shall indemnify Sevica2025, S.L. for any expenses arising from Sevica2025, S.L. being involved in any legal proceedings where liability is attributable to the user, including legal fees and defence costs, even in the event of a non-final judicial decision.
Protection of Hosted Information
Sevica2025, S.L. performs backup copies of the content hosted on its servers; however, it shall not be held responsible for the loss or accidental deletion of data by users. Likewise, it does not guarantee the complete restoration of data deleted by users, as such data may have been removed and/or modified during the period elapsed since the last backup was performed.
The services offered, except for specific backup services, do not include the restoration of content stored in backup copies made by Sevica2025, S.L. when such loss is attributable to the user. In such cases, a fee will be established according to the complexity and volume of the recovery process, always subject to the user’s prior acceptance.
The restoration of deleted data is only included in the service price when the loss of content is due to causes attributable to Sevica2025, S.L.
Commercial Communications
In accordance with the Spanish Law on Information Society Services and Electronic Commerce (LSSI), Sevica2025, S.L. will not send advertising or promotional communications by email or any other equivalent electronic communication channel unless they have been previously requested or expressly authorised by the recipients.
In the case of users with whom there is an existing contractual relationship, Sevica2025, S.L. is authorised to send commercial communications regarding Sevica2025, S.L. products or services that are similar to those originally contracted by the customer.
In all cases, the user, after verifying their identity, may request that no further commercial information be sent through the Customer Service channels.
