This Privacy Policy applies to any processing of personal data carried out by GTM SGPS, S.A. through this Website.

Personal information will be treated confidentially, with all the legal and security guarantees imposed by the General Data Protection Regulation (EU) 2016/679 (hereinafter, GDPR), the Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights, the Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce, and other applicable regulations.

  1. IDENTIFICATION

Holder: GTM SGPS, S.A. (hereinafter, “GTM GROUP”)
Address: Calle Ribera de Axpe, 50 – 48950, Erandio, Vizcaya.
Tax ID: A48025225.

To ensure proper management in the processing of your data, GTM GROUP has appointed a Data Protection Officer (DPO), whom you may contact through the following email: dpd@gtmgrupo.com.

  1. INFORMATION AND CONSENT

By accepting this Privacy Policy, the User is informed and gives their free, informed, explicit, specific, and unequivocal consent for the personal data provided through the website located at the URL (https://gtmgrupo.com/) (hereinafter, the “Website”) to be processed by GTM GROUP, as well as data derived from their navigation and any other data that may be provided in the future.

GTM GROUP will not be responsible for data processing carried out through websites that are not under its responsibility.

  1. OBLIGATION TO PROVIDE DATA

The personal data provided through communications made on the form or the email addresses published on the Website are not mandatory, unless otherwise specified in the required field or subsequently required to fulfill the purpose of the inquiry. Therefore, if the data is not provided or is not provided correctly, the aforementioned purposes cannot be addressed, although you will still be able to freely view the content of the Website.

  1. FOR WHAT PURPOSE DO WE PROCESS THE USER’S PERSONAL DATA ON THE WEBSITE?

The personal data provided by the User in the form or through communications made to the email addresses published on the Website will be processed for the purposes of managing the inquiry made, sending information about products or services of interest to the user, and providing the requested service.

  1. WHAT DATA DO WE PROCESS FROM THE WEBSITE USER?

The type of personal data we collect and process from users of the Website, for managing their inquiries, sending the requested commercial information, providing the requested service, or creating a commercial profile includes identifying data (name and surname), contact data (phone number, postal and/or email address), and any other data provided by the users themselves in the open “message” fields.

It is the user’s responsibility to provide data truthfully and keep it updated. If the user provides third-party data, they declare to have their consent and commit to passing on the information contained in this Privacy Policy, exempting the Website owner from any responsibility in this regard. However, the Website owner may perform periodic verifications to confirm this fact, adopting the corresponding due diligence measures, in accordance with data protection regulations.

  1. WHAT IS THE LEGITIMATION FOR PROCESSING THE USER’S DATA?

The legitimation for processing your personal data collected through the Website is the explicit consent of the interested party (Article 6.1 a) of the General Data Protection Regulation (GDPR)), who voluntarily provides their personal data to the provided email address or through the Website’s form, thereby granting legitimate consent for the personal data to be processed in accordance with the purposes of this privacy policy.

Additionally, the processing of your data will be based on the execution of a contract in the case that inquiries made through the website involve the application, at the request of the interested party, of pre-contractual measures.

The legitimacy of commercial communications related to services or products similar to those contracted is found in the legitimate interest of the data controller.

  1. TO WHOM WILL THE USER’S DATA BE SHARED?

The processed personal data may be communicated, to achieve the purposes detailed above, to other companies within GTM GROUP, to collaborating companies in providing the service for managing the contractual relationship interested by the user, to financial entities for managing payments, and to Public Administrations in cases provided by law.

  1. DATA RETENTION

We will retain personal information and data for the time necessary to fulfill the purposes for which the data was collected, as well as to address any possible claims or liabilities that may arise from the processing of the data.

Generally, once the inquiry is completed or the service is provided, the data will be blocked, with no further processing beyond keeping them available to public authorities and the Administration of Justice to address potential liabilities arising from the processing. After the expiration of the limitation period, the data will be deleted.

However, for processing where consideration of liabilities arising from the processing is not necessary, data will be deleted after the time necessary to ensure proper compliance with the purpose for which they were collected.

  1. EXERCISE OF RIGHTS

The user may send a letter to the postal address indicated at the top of this Policy, or by email to dpd@gtmgrupo.com, attaching a photocopy of their identification document, at any time and free of charge, to: revoke given consents, obtain confirmation as to whether we are processing personal data concerning the user, access their personal data, correct inaccurate or incomplete data, request the deletion of their personal data when, for any reason, the data are no longer necessary for the purposes for which they were collected, obtain restriction of data processing when any of the conditions provided in the data protection regulations are met, request the portability of the user’s provided data, and file a complaint regarding the protection of their personal data with the competent authority.

The exercise of the aforementioned rights is subject to the fulfillment of the requirements provided by the current regulations at any given time.

  1. SOCIAL NETWORKS

GTM GROUP has corporate profiles on some of the main Internet social networks, being responsible for the processing of data from its followers, fans, subscribers, commentators, and other user profiles (hereafter, followers) published by the entity. The processing of such data within each of these networks will be the one the social network allows to corporate profiles.

GTM GROUP may inform its followers, when not prohibited by law, via any means that the social network allows, about its activities and offers, as well as provide personalized customer service. In no case will data be extracted from social networks, unless the user’s express and specific consent is obtained (for example, for conducting a contest).

  1. PERSONNEL SELECTION

Candidates for a job who send electronic communications to GTM GROUP for the purpose of participating in the Entity’s personnel selection processes authorize us to analyze the documents sent (for example, the CV), all content directly accessible via Internet search engines (for example, Google), profiles maintained on professional social networks (for example, LinkedIn), data obtained in access tests, and information disclosed in the job interview, with the aim of evaluating their candidacy. If the candidate is not selected, the CV may be kept for a maximum of two years to be considered for future calls, unless the candidate states otherwise.

  1. SECURITY MEASURES

We will process the user’s data at all times in absolute confidentiality and maintaining the obligatory duty of secrecy regarding them, in accordance with the provisions of applicable regulations, adopting the necessary technical and organizational measures to ensure the security of their data and prevent their alteration, loss, processing, or unauthorized access, taking into account the state of technology, the nature of the data stored, and the risks to which they are exposed.