This Personal Data Processing Policy governs the processing of personal data of users of the website jadejardi.com.
1. Data Controller
The data controller is:
Jadejardi S.L.
NIF/CIF: B67314542
Registered address: Calle del Pare Fita 76, 08203, Sabadell, Barcelona, Spain
Email: order@jadejardi.com
Phone: +34 608 864 007
When processing personal data, the Controller complies with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights, as well as any other applicable laws in Spain and the European Union.
2. What data we process
We may process the following categories of data:
first and last name;
phone number;
email address;
the content of messages sent through the website form;
data related to the user’s request regarding our services;
technical data related to the use of the website, including IP address, browser data, device data, and cookies, in the cases and to the extent provided for in this Policy and in the Cookie Policy.
We do not request personal data other than those necessary to respond to an inquiry, provide services, fulfill obligations, or comply with legal requirements.
3. Purposes of personal data processing
Users’ personal data may be processed for the following purposes:
handling inquiries, requests, and messages sent through website forms, by phone, or by email;
providing information about services, prices, deadlines, and cooperation terms;
preparing commercial offers, quotations, contracts, and following up with potential or current clients;
performing contractual obligations;
complying with legal and tax obligations;
ensuring website security, preventing abuse, and carrying out technical administration;
analyzing website usage and improving its operation, provided that the user has given consent for the relevant cookies or similar technologies;
sending commercial communications, news, and special offers only where there is a valid legal basis, including consent where required.
The purposes of processing must be specific, clear, and related to the actual use of the data.
4. Legal bases for processing
We process personal data on the following legal bases:
the user’s consent, for example when submitting a form, subscribing to a newsletter, or accepting analytics or marketing cookies;
the performance of a contract or the implementation of pre-contractual measures, where the user requests a service, quotation, consultation, or places an order;
compliance with legal obligations, for example in accounting, tax, or other mandatory matters;
the Controller’s legitimate interest, for example to protect the website, prevent fraud, manage customer requests, or organize internal administration, provided that such interest does not override the user’s rights and freedoms.
Where processing is based on consent, the user may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.
5. Data retention periods
We retain personal data only for as long as necessary to achieve the purposes for which they were collected, as well as for the period required by law for retention and possible defense against claims.
As a general guideline:
data from contact forms and inquiries are kept for the time required to handle the request and thereafter for the period necessary for follow-up and defense against possible claims;
client data are kept for the duration of the contractual relationship and thereafter for the legally required retention periods;
data processed on the basis of consent are kept until consent is withdrawn or the purpose is no longer relevant;
technical data and cookie-related data are kept in accordance with the periods specified in the Cookie Policy.
Once these periods have expired, the data will be deleted or blocked where required by law.
6. Recipients of the data
Personal data may be disclosed to:
technical service providers necessary for the operation of the website, hosting, corporate email, CRM, analytics, cookie management platform, and other digital services;
professional advisors, accountants, lawyers, or IT contractors, where this is necessary to fulfill obligations and legal requirements;
public authorities, courts, tax authorities, and other competent bodies, where such disclosure is required by law.
We do not sell users’ personal data to third parties.
Where providers act as data processors, the corresponding agreements will be entered into in accordance with the applicable legislation. If data are transferred outside the European Economic Area, such transfer will take place only with the legal safeguards required by the GDPR.
7. User rights
The user has the right to:
request access to their personal data;
request rectification of inaccurate data;
request deletion of their data;
request restriction of processing;
object to processing in cases provided for by law;
request data portability where applicable;
withdraw consent at any time where processing is based on consent;
lodge a complaint with the Agencia Española de Protección de Datos (AEPD) if they believe that the processing of their data infringes the law.
To exercise their rights, the user may send a request to: order@jadejardi.com, indicating their name, contact details, the substance of the request, and, where necessary, a document proving their identity.
8. Mandatory nature of providing data
Fields marked as mandatory in website forms are necessary to process the user’s request. If the user does not provide such data, we may be unable to respond to the inquiry or provide the requested service.
9. Minors’ data
Our website and services are not intended for minors below the age established by the applicable legislation to provide personal data on their own. If we become aware that a minor has provided data without the necessary consent of their parents or legal guardians, such data will be deleted. In Spain, for information society services, parental consent is especially relevant for minors under 14 years of age.
10. Data security
We apply appropriate technical and organizational measures to protect personal data against loss, unauthorized access, alteration, disclosure, or destruction, taking into account the nature of the data, the context, and the risks of the processing.
11. Changes to the policy
The Controller reserves the right to amend this Policy to reflect legislative changes, case law, AEPD criteria, or changes in the operation of the website. The updated version will always be available on the website.
