Privacy policy

Below, we describe the processing of your personal data and the rights you have under current data protection regulations – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights, hereinafter, the "applicable data protection regulations".

1. Data controller and contact information

The entity responsible for processing your data is Soluciones Industriales Y Tratamientos Ambientales, SLU (SITRA), with registered office at Avda. Castell Vell, Del, Num 35 – CP: 12004 Castelló de la Plana. Castellón (Spain).

If you wish, you can contact us via email at the following address: notifications@sitra.es or through the postal address described above.

2. For what purpose(s) will we process your data and on what legal basis?

Your personal data will be processed, in accordance with the provisions of the applicable data protection regulations, on the legal basis and for the purposes indicated below:

2.1. Consent of the interested party

Your personal data will be processed, provided you have given us your consent, for the following purposes:

  • Web contact request management. Your personal data will be processed for the purpose of managing and responding to requests for information, queries, complaints or suggestions made through the web form.
  • Commercial communications and newsletters. Your data will be processed to manage the sending of commercial communications, newsletters or any other relevant news that may be of interest to you.
  • Management of events and technical conferences. Your data will be processed for the purpose of managing the registration and dissemination of events and conferences organized by SITRA.

You may withdraw your consent at any time. Please note that the withdrawal of consent is not retroactive.

2.2. To comply with a legal obligation applicable to the data controller

Your personal data is processed, in accordance with the provisions of the applicable data protection regulations, for the purpose of responding to the exercise of your rights established in accordance with the General Data Protection Regulation, provided that you have made a request to exercise your rights through the established channels.

In this regard, if you do not allow the processing of your personal data for this purpose, and since the processing of said data is necessary to comply with the legal obligations applicable to the controller, it will not be possible to respond to your request for rights.

2.3. Within the framework of the execution of a contract or for the application of pre-contractual measures

Your personal data is processed, in accordance with applicable data protection regulations, for the following purposes:

  • Requests for information. Your personal data will be processed to respond to your requests for information, quotes, or to establish any other business relationship with Sitra.
  • Management of the contractual relationship with clients. Your data will be processed to manage the contractual relationship we have with your company and, in particular, to process your budget request, register you as a client, and manage the relationship, provision, and billing of the contracted service appropriately.
  • Management of the contractual relationship with suppliers. Your personal data will be processed if you maintain a relationship as a supplier with Sitra, primarily for the purpose of establishing, managing, or terminating a contractual relationship between the parties. Specifically, this processing will include formalizing, executing, and fulfilling the contract, as well as monitoring compliance and payment for services rendered.
  • Registration and access to the web and/or WIM customer area by Sitra. Your personal data will be processed only if you request it in order to provide you with access to the web customer area and/or the WIM by Sitra management system.

If you do not provide us with your personal data, and since this data is necessary for the execution of the contract between the parties, the contract between the parties cannot be formalized.

2.4. Justified by a legitimate interest

If you are or have been a SITRA customer, your personal data will be processed to satisfy the entity's legitimate interests, provided that these legitimate interests do not override your interests, rights, and fundamental freedoms. Your data will be processed for the following purposes:

  • Sending commercial communications and newsletters. Your data will be processed to manage the sending of commercial communications or newsletters relating to products, services, promotions or any other relevant news, provided that such communications refer to products or services that are related to a previously contracted service or product.
  • Invitation to events and conferences. Your data will be processed for the purpose of managing the registration and dissemination of events and conferences organized by Sitra related to the services or products contracted.
  • Conducting satisfaction surveys. Your personal data will be processed for the purpose of sending you satisfaction surveys related to the service or product provided, with the aim of improving our services.

You may object to these processing activities for justifiable reasons. Please note that your objection will not be automatic and must be weighed against the legitimate interests of the entity.

3. What categories of data will we be dealing with?

The possible categories of data that will be processed are:

3.1. Consent of the interested party

  • Identifying data
  • Job Details

3.2. Legitimate interest

  • Identifying data

3.3. Contract execution

  • Identifying data
  • Data relating to transactions of goods and services

3.4. Legal obligation

  • Any type that SITRA deals with regarding the interested party exercising their rights

4 To which recipients will your data be communicated?

To carry out all the purposes described above, SITRA collaborates with third-party service providers who may have access to personal data as a result of performing the contracted services. In any case, SITRA follows strict criteria for selecting these third parties in order to comply with its data protection obligations and signs a corresponding data protection agreement with them. Under this agreement, these third parties commit to fulfilling their data protection obligations and, specifically, to implementing the appropriate legal, technical, and organizational security measures to guarantee the security, integrity, and confidentiality of the data subjects' data in relation to its processing for the stated purposes.

Your data may be communicated to other companies in the business group in order to guarantee the exercise of the rights of the interested party.

Additionally, SITRA may disclose personal data and any other user information when required by public authorities in the exercise of their legitimately assigned functions and in accordance with applicable provisions in cases where it is necessary.

5. Are your data transferred to third countries or international organizations?

SITRA guarantees that if there are suppliers located in countries outside the European Union or other countries not considered adequate in accordance with the regulations on the protection of personal data, the necessary precautions are taken to ensure that the data can be transferred safely, either because the supplier offers adequate guarantees, through, among others, the signing of Standard Contractual Clauses of the European Commission, or because one of the exceptions included in the data protection regulations is met.

6. How long will we keep your data?

SITRA will comply with current regulations regarding the obligation to delete personal information once the intended purpose has been achieved, or when consent for its processing is revoked. The information will be duly blocked and made available exclusively to Judges and Courts, the Public Prosecutor's Office, or the competent Public Administrations for addressing any potential liabilities arising from the processing, and only for the duration of the applicable statute of limitations. Once these periods have expired, the information will be permanently deleted using secure methods.

7. How have we obtained your data?

The personal data that Sitra processes is the personal data provided by you in the following situations:

  • During the process of establishing a business relationship as a Sitra customer, or when making requests for offers and quotes.
  • During the contractual relationship, as information will be generated, and during the use of services such as the customer area or WIM by Sitra.
  • By completing the web contact form available on the Sitra page.
  • When requesting to exercise your data protection rights.

8. What are your rights when you provide us with your data?

In accordance with the provisions of the General Data Protection Regulation, as well as national legislation on data protection, you have the right to exercise, if you so wish, the rights of access, rectification and erasure of data, as well as to request that the processing of your personal data be limited, to object to it, to request the portability of your data, as well as not to be subject to automated individual decisions.

Additionally, if the processing of personal data described is based on the consent given by you, you can revoke said consent at any time. In this sense, it should be noted that the revocation of the consent given will not affect the legality of the processing carried out prior to the withdrawal of said consent.

You can exercise the rights described above through the following channels, providing the necessary documentation that allows us to verify your identity (copy of your ID, passport, NIE, etc.):

  • In writing, by means of an application addressed to Pol. Ind. Ciudad del Transporte – C/ Suiza corner C/ Polonia, warehouses 19, 20 and 21 – 12006 – CASTELLÓN.
  • By email to the following address notifications@sitra.es.

9. Before whom can you make your claims?

If you believe that your data protection rights have been violated or have any complaint regarding your personal information, you can contact the data controller whose contact information can be found in section 1.

In any case, interested parties may always go to the Spanish Data Protection Agency, the supervisory authority in matters of data protection, http://www.agpd.es, C/Jorge Juan number 6, 28001, Madrid.