LEGAL INFORMATION
Privacy policy
How personal data in B2B enquiries submitted through the form or by email is processed.
Last reviewed:
Data controller
- Controller: ALTURA TRADING, S.L.
- Provisional tax identification number (NIF): B88852017
- Registered office: Urbanización Aloha Garden, 4, bajo, puerta 3, 29660 Marbella, (Málaga), Spain
- Privacy contact: info@alturatradingsl.com
Data we process
We process the professional and contact details you provide, such as your name, company, business email address, country, telephone number if you choose to include it, and the content of your enquiry.
The infrastructure may generate limited technical data, such as an IP address, date, time and security logs, in order to transmit the enquiry and protect the service.
We do not request special categories of personal data or copies of identity documents through the form. Please do not include them in open text fields or files.
Purposes and legal bases
We do not use form data for profiling, automated decisions, behavioural advertising or newsletters. Any future commercial communication will require a valid legal basis and a clear option to object or unsubscribe.
- Responding to your enquiry, assessing requirements and preparing a possible offer: taking pre-contractual steps at your request; where you act as a company contact, the legitimate interest in managing the professional relationship may also apply.
- Maintaining security, preventing abuse and defending legal claims: legitimate interests, after balancing the rights of the people concerned.
- Complying with applicable legal obligations: compliance with a legal obligation.
Required data
Fields marked as required are necessary to understand and respond to the enquiry. If you do not provide them, we may be unable to assist you. All other fields are optional.
Retention
At the end of the applicable period, data will be securely erased or anonymised. A longer general retention period will not be set unless its purpose and legal basis have first been identified.
- Enquiries that do not result in a transaction: for up to 12 months after the last interaction, unless you request erasure sooner or retention is necessary in connection with a legal claim.
- Enquiries that result in a contractual relationship: for the duration of the relationship and, afterwards, blocked or retained only for periods required by legal obligations or necessary to establish, exercise or defend legal claims.
- Technical logs: for the minimum period configured and documented with the provider for security and incident resolution.
- Requests to exercise rights: for as long as necessary to handle them and demonstrate compliance with the response obligation.
Recipients and processors
Personal data is not sold. It is disclosed only where required by law or where necessary to manage the enquiry through hosting, security and email providers acting on Altura's instructions.
Vercel Inc. has been selected for the intended deployment's hosting and security, and Plus Five Five, Inc. (Resend) for transactional email delivery.
Form delivery remains disabled until the Vercel plan, data-processing agreements, applicable regions and transfer safeguards have been confirmed.
International transfers
Vercel and Resend may process certain data outside the European Economic Area, including in the United States. Before delivery is enabled, the applicable DPA, standard contractual clauses, configured region and any required supplementary measures must be confirmed.
You may request information about providers and applicable safeguards by writing to info@alturatradingsl.com.
Your rights
Where applicable, you may request access, rectification, erasure, restriction, objection and data portability, and may withdraw consent without affecting processing carried out beforehand. Write to info@alturatradingsl.com and state the right you wish to exercise.
You do not need to send a copy of your Spanish identity document (DNI) by default. Additional proportionate information will be requested only where there are reasonable doubts about the identity of the person making the request.
If you believe that the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) at aepd.es.
Security and changes
We apply measures proportionate to the risk and review access to enquiries. No system is infallible, so we also maintain procedures for handling incidents.
We will update this policy if the purposes, providers or form configuration change. Material changes will be communicated by an appropriate means where necessary.
Official sources
- EUR-Lex: Regulation (EU) 2016/679 (GDPR)
Principles, transparency duties, data-subject rights and international transfers.
- BOE: Spanish Organic Law 3/2018 (LOPDGDD)
The Spanish supplementary framework for data protection.
- AEPD: AEPD: right to information
Content and layered presentation of privacy information.
- AEPD: AEPD: exercising data-protection rights
Data-subject rights and how to exercise them.
- AEPD: AEPD: identity checks when exercising rights
An identity-document copy should not be requested by default; proportionate verification may be used where reasonable doubts exist.