PRIVACY POLICY

In compliance with Chapter II of Law 34/2002 (LSSICE), users are informed that this website is owned by POLYLUX, S.L. (hereinafter, “the Provider”), with registered address at Avda. de Roma, 18-26, 08290 Cerdanyola del Vallès (Barcelona), Tax ID B62442736, telephone +34 93 692 65 65, and email personal@polylux.com.

POLYLUX, S.L., as the party responsible for this website and in accordance with current personal data protection legislation — EU Regulation 2016/679 of 27 April 2016 (GDPR), Organic Law 3/2018 of 5 December on Personal Data Protection (LOPDGDD), and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE) — has implemented all the technical and organisational security measures established in Royal Decree 1720/2007 to ensure and protect the confidentiality, integrity and availability of the processed data.

In accordance with the LOPDGDD, POLYLUX, S.L. informs you that the personal data you voluntarily provide will be incorporated into our information systems for the purpose of managing administrative and commercial procedures with website users.
The processing operations carried out include:

  • Responding to queries and/or providing information requested by the user;

  • Providing services and/or products contracted or subscribed by the user;

  • Managing the commercial relationship and, in particular, contractual aspects;

  • Sending information about our organisation and sector;

  • Organising activities, campaigns or events;

  • Sending informative or commercial communications, including electronically;

  • Sending the website newsletter.

The signatory guarantees the accuracy of the data provided and undertakes to notify any changes.

The Provider informs users, via the asterisk (*) in the relevant form fields, which data are mandatory. By entering their data, the user gives unequivocal consent for POLYLUX, S.L. to process such data for the purposes indicated above.

Failure to provide the requested personal data or to accept this Privacy Policy will make it impossible to subscribe, register, or receive information about the Provider’s services.

In compliance with current data protection regulations, the Provider processes personal data lawfully, fairly and transparently, and only collects data that are adequate, relevant and limited to what is necessary for the purposes for which they are processed, in accordance with Articles 5 GDPR and 4 LOPD.

The Controller guarantees that appropriate technical and organisational measures have been implemented to safeguard users’ rights under the GDPR and LOPDGDD.

Rights of the Data Subject

You may exercise your rights of access, rectification, portability, erasure, restriction and objection by writing to:

Avda. de Roma, 18-26, 08290 Cerdanyola del Vallès (Barcelona)
or emailing personal@polylux.com with the subject “LOPD, ARCO Rights”, attaching a copy of your ID or equivalent legal document.

You may withdraw your consent at any time without affecting the lawfulness of processing before its withdrawal.

If you believe your rights have been violated, you may lodge a complaint with the Spanish Data Protection Authority (www.agpd.es).

Confidentiality and Disclosure of Data to Third Parties

Data provided by users will be treated confidentially.
The Provider has implemented all necessary technical and organisational measures to ensure the security of the data, preventing alteration, loss, theft, unauthorised processing or access, considering the state of technology and the nature of the stored data.

Data may be disclosed to:

  • Third-party organisations linked to POLYLUX, S.L. for the management of its products and/or services;

  • Competent public authorities when required by law.

All parties involved in data processing are subject to the duty of professional secrecy and must adopt the security measures required to protect personal data.

Acceptance and Consent

Users declare that they have been informed of the terms regarding personal data protection and accept and consent to the automated processing of their data by POLYLUX, S.L. as described in this Privacy Policy.

Photographs published on the website are the property of POLYLUX, S.L., including those featuring minors. Consent from parents, guardians or legal representatives has been obtained. They may request the removal or pixelation of such images through formal written request.

Accuracy of the Data

Users are solely responsible for the accuracy and correctness of the data submitted and shall be liable for any inaccuracies.
They undertake to keep data updated and provide complete and correct information.

Website Content and Links

POLYLUX, S.L. reserves the right to update, modify or delete website content and may limit or block access if necessary.

The Provider assumes no responsibility for third-party content accessible via links.
Such links are purely informational and do not imply any recommendation or association.

POLYLUX, S.L. shall remove any content that may violate national or international laws, morality or public order and will notify authorities.

Changes to this Privacy Policy

POLYLUX, S.L. reserves the right to modify this policy to comply with legislative or jurisprudential developments.

Commercial Emails

POLYLUX, S.L. does not send unsolicited commercial communications (SPAM).
Users may expressly consent to receiving our newsletter via the appropriate form.

Governing Law and Jurisdiction

Relations between POLYLUX, S.L. and website users are subject to Spanish legislation.
Any disputes shall be submitted to the Courts and Tribunals of Barcelona, expressly waiving any other jurisdiction.

SOCIAL MEDIA PRIVACY POLICY

In accordance with current personal data protection laws and Law 34/2002 (LSSI-CE), POLYLUX, S.L. informs users that it has created profiles on LinkedIn and Instagram for the purpose of promoting its products and services.

POLYLUX, S.L. Details:
Av. de Roma 18-26 – 08290 Cerdanyola del Vallès (Barcelona)
personal@polylux.com
https://polylux.com

By joining our social media profiles, the user gives consent for the processing of data visible on their profile.
POLYLUX, S.L. may access only public information and will not store such data in any internal system.

Users may consult social network privacy policies and adjust their own privacy settings.

User Rights (Social Networks)

Users may exercise their data protection rights directly with POLYLUX, S.L. under GDPR.
POLYLUX, S.L. may:

  • Access public profile information.

  • Publish content on the user’s profile that is already published on POLYLUX, S.L.’s page.

  • Send private messages.

  • Publish updates.

Users may manage their connections and privacy settings.

User Publications

Users may post comments or content but must own the rights to such material.
Any content that is unlawful, offensive, or violates intellectual property rights will be removed.
POLYLUX, S.L. is not responsible for user-generated content.

Images published will remain on the social network and will not be stored by POLYLUX, S.L.

Contests and Promotions

POLYLUX, S.L. may run contests or promotions via social networks.
Such platforms do not sponsor or endorse these promotions.

Advertising

POLYLUX, S.L. may use social networks to promote its services.
Direct marketing actions will comply with GDPR and LSSI-CE.

Links to Social Network Privacy Policies

LinkedIn: http://www.linkedin.com/legal/privacy-policy
Instagram: https://privacycenter.instagram.com/

WHISTLEBLOWING CHANNEL PRIVACY POLICY

Data Controller

POLYLUX, S.L.
Av. de Roma 18-26 – 08290 Cerdanyola del Vallès (Barcelona)
personal@polylux.com

Purposes and Legal Basis

The processing is based on public interest, with the purpose of:

  • Managing and processing reports received through the Whistleblowing Channel.

  • Investigating the reported facts.

Additionally, processing may be based on compliance with legal obligations.

Data Quality

Only data necessary to process whistleblowing reports will be collected.
Users guarantee the accuracy of the data provided.

Retention Periods

Data will be retained only as long as strictly necessary to determine whether an investigation should be initiated.
Retention may be extended for verification and compliance with criminal liability prevention requirements.

If an investigation is ongoing, data may be kept until its completion or until applicable actions prescribe.

Disclosure to Third Parties

Data may be disclosed to:

  • Public Authorities in legally established cases

  • Courts and Tribunals

  • Law Enforcement Agencies

Data Security

POLYLUX, S.L. applies appropriate technical and organisational measures under Article 32 GDPR.
However, users should be aware that no system is completely immune to vulnerabilities.

All data will be processed confidentially.

Rights of Data Subjects

Users may exercise rights of access, rectification, erasure, restriction, and portability.
Requests must be emailed to personal@polylux.com with the reference “Whistleblowing Channel”, attaching proof of identity.

Complaints may be submitted to the Spanish Data Protection Authority.