Privacy policy

Data controller

The controller responsible for processing your personal data is Aldeoki (Aldeoki Carpets), whose identifying details are as follows:

• Owner: ALDEOKI, S.L.
• Tax ID (NIF/CIF): B31797962
• Registered address: Polígono Industrial Egüés, calle T, nave 14, 31486 Egüés (Navarra), España
• Email: info@aldeoki.com
• Phone: +34 948 30 25 73

Data we collect

This website has no forms. We only process the personal data you voluntarily provide when you email us, call us or contact us through social media. Specifically:

• Name
• Contact details (email address or phone number)
• The content of your enquiry and any information you choose to share (for example, measurements, photos or plans of your project)

Purpose of processing

We process your data to handle and respond to your enquiries, requests or information requests and, if they lead to a quotation or an order, to manage it.

We do not use your data to build profiles or to send you unsolicited commercial communications, nor do we use it for purposes other than those described here.

Legal basis for processing

The legal basis for processing your data is your consent, which you give when you contact us (Article 6.1.a of the GDPR) and, if you ask us for a quotation or an order, taking pre-contractual steps or performing the contract (Article 6.1.b of the GDPR).

You may withdraw your consent at any time by writing to info@aldeoki.com, without affecting the lawfulness of processing based on consent before its withdrawal.

Retention period

We will keep your data for as long as necessary to handle your enquiry and, where applicable, for as long as the resulting relationship continues.

Once your request has been dealt with, your data will be kept blocked for the periods legally required to address any potential liabilities, after which it will be deleted.

Recipients and processors

We do not share your data with third parties, except where legally required. To provide the service, we rely on providers acting as data processors who only process the data following our instructions:

• Email provider: the service we use to receive and answer your messages.
• Web hosting provider: provides the hosting service for this website; like any server, it logs technical connection data (such as the IP address) for security purposes.

International data transfers

Some of these providers may process data outside the European Economic Area (EEA). In that case, the transfer is made with the safeguards provided for in the GDPR, such as the EU-US Data Privacy Framework or the Standard Contractual Clauses approved by the European Commission.

Your rights

As the data subject, you may exercise the following rights at any time:

• Access: find out what data of yours we process.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request the deletion of your data.
• Objection: object to the processing of your data.
• Restriction: request that processing be restricted.
• Portability: receive your data in a structured, commonly used format.

How to exercise your rights

You may exercise these rights by sending a request to info@aldeoki.com, stating the right you wish to exercise and proving your identity.

If you believe that the processing of your data does not comply with current legislation, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) through its electronic office at www.aepd.es.

Security measures

We apply appropriate technical and organisational measures to ensure the security of your data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art, the cost of implementation and the nature of the data processed.

Changes to this privacy policy

We may amend this privacy policy to adapt it to legislative or case-law changes or to the way we provide our services. We recommend reviewing it periodically; the date of the last update appears at the top of this document.