English translation provided for information purposes. In the event of any discrepancy, the Spanish version prevails.
At Valiron Project SL we respect your privacy. This policy explains how we process your personal data in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD) and the LSSI-CE.
1. Data controller
- Controller
- Valiron Project SL
- Tax ID (CIF)
- B02797900
- Address
- Calle Bari, 31 – Oficina, Zaragoza, Spain
- [email protected]
Valiron Project SL is not required to appoint a Data Protection Officer. For any privacy question, please contact us at the address above.
2. What data we process
We only process the data you provide or that is generated when you use the website:
- Contact and request data: name, company, email, origin and destination of the shipment, service type and the content of your message.
- Candidate data: whatever appears in the CV you voluntarily send us.
- Customer and supplier data: details of contact persons needed to manage the business relationship.
- Technical data: IP address, browser type and date and time of access, logged by the server for security purposes.
We do not process special categories of data. Please do not include such information in your messages or CV.
3. Purposes, legal basis and retention
| Purpose | Legal basis | Retention period |
|---|---|---|
| Answering enquiries and quote requests received through the form or by email. | Consent (Art. 6(1)(a) GDPR) and pre-contractual steps (Art. 6(1)(b) GDPR). | As long as needed to handle the request and, if no contract follows, a maximum of 12 months. |
| Managing the business relationship with customers and suppliers (service delivery, invoicing and accounting). | Performance of a contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)). | For the duration of the relationship and then for the statutory periods (generally 6 years under the Spanish Commercial Code and 4 years under tax law). |
| Recruitment based on CVs received. | Consent (Art. 6(1)(a)). | A maximum of 12 months from receipt, unless you authorise us to keep it longer. |
| Sending commercial communications about our services. | Consent, or legitimate interest for existing customers (Art. 21.2 LSSI-CE). | Until you object or withdraw your consent. |
| Website security and abuse prevention. | Legitimate interest (Art. 6(1)(f)). | Technical logs are kept for a limited period, generally no longer than 12 months. |
Once these periods end, data will be kept blocked for the limitation periods of any potential liabilities and then deleted.
No automated decisions or profiling with legal effects concerning you are carried out.
4. Recipients
We do not disclose your data to third parties unless legally required (for example, to the tax authorities, courts or law enforcement).
To provide our services we rely on providers who may access data as processors (web hosting, email, accounting and tax advice). They act on our instructions under a contract that complies with Article 28 GDPR.
Where the transport service requires it, essential data (for example, the contact person at destination) will be shared with the parties involved in the operation.
5. International transfers
No international transfers of data outside the European Economic Area are planned. If a provider were located outside the EEA, the transfer would be carried out with the safeguards provided for in the GDPR, such as a European Commission adequacy decision or standard contractual clauses.
6. Your rights
You may exercise the following rights at any time:
- Access: find out whether we process your data and obtain a copy.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete your data when it is no longer needed.
- Objection and restriction of processing.
- Portability: receive your data in a structured format.
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
To exercise them, write to [email protected] or by post to Calle Bari, 31 – Oficina, Zaragoza, Spain, stating the right you wish to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it.
If you believe we have not handled your rights properly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — www.aepd.es) or with the supervisory authority of your Member State.
7. Minors
The website is intended for professionals and businesses. We do not knowingly collect data from children under 14. If we find that we have received such data, we will delete it.
8. Security and accuracy of data
We apply technical and organisational measures appropriate to the risk to protect your data against loss, alteration or unauthorised access, including encryption of communications via HTTPS.
You confirm that the data you provide is accurate and undertake to inform us of any changes. If you provide data about third parties, you must have informed them beforehand.
9. Changes to this policy
We may update this policy to reflect legal changes or changes to our processing. The current version will always be published on this page with its update date.