Privacy Policy

Personal Data Protection: basic information

Data controller: HANSA-FLEX IBÉRICA, S.L. (B84375849)
Purposes of processing: Managing requested products and services and commercial relationships; executing legitimate functions inherent to the Company´s activities; answering questions, job applications and emails; sending commercial communications
Lawfulness of processing: Execution of a service contract, consent of the interested party, data controller ‘s legitimate interests and/or compliance with a legal obligation
Disclosure to third parties: Your data may be forwarded to other companies in the Hansa-Flex Group
Data Protection Rights: You can exercise your rights on data protection at Avenida de la Encina 17, Nave 2, Pol. Ind. El Tempranal 28942 Fuenlabrada (Madrid, Spain) Email: iberia@hansa-flex.es

Privacy Policy – Personal Data Protection

HANSA-FLEX IBÉRICA, S.L. is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our services, in accordance with the General Data Protection Regulation (GDPR - EU Regulation 2016/679), the Spanish Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), and other applicable Spanish data protection regulations.

Data Controller

The data controller responsible for your personal data is HANSA-FLEX IBÉRICA, S.L., with registered office in Spain. For data protection inquiries, you may contact us at: privacy@hansa-flex.es. Our Data Protection Officer can be reached at the same email address.

Website identification and social network presence

Company’s official website is https://www.hansa-flex.es/.

Company’s main official channels in social and professional networks are:

Linkedin: https://www.linkedin.com/company/hansa-flex-iberica/
Youtube: https://www.youtube.com/@HANSAFLEXIB%C3%89RICA

For the purposes of this Privacy Policy, the official Company’s website and official channels on social or professional networks will all be referred to hereinafter as “the website”, except when otherwise specified.

Personal Data We Collect

We collect the following types of personal data: (a) Information you provide directly through forms on our website including name, email address, phone number, company name, department, zone/location, and message content; (b) Technical data collected automatically including IP address, browser type, device information, operating system, and referring URLs; (c) Cookie data and analytics information collected through Google Tag Manager and Google Analytics 4, only with your explicit consent; (d) File attachments you voluntarily upload through contact forms (maximum 5MB, types: PDF, DOC, DOCX, JPG, JPEG, PNG).

Legal Basis and Purpose for Processing

The purposes of the data processing the Company can carry out are:

CUSTOMERS AND WEBSITE USERS:

Purpose: Offering and managing our products and services; process catalogue requests.
Legal Basis: Contract performance (“contractual” or “pre-contractual” relationship according to article 6.1.b of the GDPR); legal obligation (Article 6.1.c GDPR).
Possible recipients: Your data may be forwarded to other companies in the Hansa-Flex Group.
Rights: Please read the “Data Protection Rights” section.

INFORMATION REQUESTS:

Purpose: Providing contact, consultation, processing newsletter subscriptions, sending marketing communications, and communication tools with interested and related people, responding to applications, inquiries and requests.
Legal basis: Consent from the interested party (GDPR art. 6.1.a), when they provide their data for these purposes, by filling in “Contact” forms or similar, and checking the required boxes to accept the conditions and the privacy policy.
Possible recipients: We do not foresee the communication of data to third parties, but depending on the request, your data may be forwarded to other companies in the Hansa-Flex Group.
Rights: Please read the “Data Protection Rights” section.

USERS OF THE WEBSITE AND THE SOCIAL OR PROFFESIONAL NETWORK CHANNELS:

Purpose: Managing and analyzing the use of the website and its corporate presence in social and professional networks; improving website functionality.
Main Legal Basis: Company’s legitimate interest (GDPR art. 6.1.f) in knowing and managing the operation of its website and its channels on social and professional networks.
Specific Legal Basis: Consent from the interested party (GDPR art. 6.1.a), when the data analysis is based on the use of analytical cookies, advertising cookies, or similar technologies, granted by accepting the use of cookies.
Possible Recipients: website-using data may be forwarded to the providers of the analytical tools used on the website.
Right to modify or revoke the consent granted for the use of cookies: The user has the “Cookie Settings” tool available on the website for this purpose.
Other Rights: Please read the “Data Protection Rights” section.

Specific data processing: Job applicants

Any person who provides their curriculum vitae offering their candidacy to work at the Company through forms, email, social or professional network channels or similar mechanisms is informed, in accordance with the provisions of the Personal Data Protection regulations, that the data provided through their job application will be incorporated into our data processing systems.

Their data may be used for the purpose of making them participate in future personnel selection processes inside our Company (or any other company in the Hansa-Flex Group), which may be carried out internally or by external companies that HANSA-FLEX IBÉRICA, S.L. or Hansa-Flex Group hires to carry out personnel selection processes.

Company will keep their resume for approximately one year. After this, the data will be destroyed, applying the necessary security measures to guarantee its confidentiality.

If you do not agree with any of the purposes described, please notify us in writing as soon as possible. Likewise, if there is any change in your data, please keep us informed.

You can exercise the rights related to the protection of your personal data (access, rectification, erasure, restriction of processing, objection, portability, e.g.), as well as any request on this matter as indicated in the section “Data Protection Rights” of this Privacy Policy.

Cookie Policy and Analytics

We use cookies and similar tracking technologies on our website. Our cookie banner allows you to manage your preferences for: (a) Necessary/Functional cookies: Always active, essential for website operation; (b) Analytics/Measurement cookies: Google Tag Manager (GTM-K2W5PWZF) and Google Analytics 4 (G-XG9PGVV0MN) - Only activated with your explicit consent. These cookies track page views, form submissions, user behaviour, and conversion events. We implement Google Consent Mode v2 to ensure compliance with your choices. You can withdraw your consent at any time through the cookie preferences link in our footer. When you reject analytics cookies, all tracking cookies are immediately deleted, and no data is sent to Google.

Links to social and professional networks

This website offers links to social networks and external websites and channels. HANSA-FLEX IBÉRICA, S.L. assumes no responsibility in relation to these linked sites. Any user who accesses social and professional networks and external websites and channels related to the Company, from the links located on this website or in any other way, is previously and expressly informed that the conditions of use, privacy policies, cookie policies and any other conditions or regulations depend on the entities responsible for said social networks and websites and channels, and never on HANSA-FLEX IBÉRICA, S.L.

Presence in social and professional networks

HANSA-FLEX IBÉRICA, S.L. can have profiles on social and professional networks, with the main purpose of disseminating its products, services, and activities, and establishing channels of communication with companies and professionals. The publications offered through these channels are informative in nature.

By registering in the Company profiles with their profile on a social or professional network, the user gives their express authorization to Company for the processing of their personal data in accordance with this Privacy Policy.

Any information and personal data provided voluntarily by the user through the Company’s social or professional networks may be processed for the purpose of contacting the user and dealing with requests made, sending informative or commercial communications, managing events, invitations and similar activities, to know their opinion or assessment about HANSA-FLEX IBÉRICA, S.L. and its publications and to manage, in general, the presence of the Company in social and professional networks.

Users are informed that the information and content (data, texts, videos, sound, photographs, graphics, comments, messages or other material) that they publish through the Company’s social or professional networks (including, where appropriate, personal data) may be made publicly available to other users of these social or professional networks and may be freely visible, commented on and shared by their visitors, under the terms established by each social or professional network.

Via the configuration of the user profile of each social or professional network, users can configure what information they want to make public in each case, check the permissions they have previously granted, delete or deactivate them, and manage their publications according to their criteria and the rules of use of each social or professional network.

The user will be solely responsible for their publications respecting current legislation, the rules of use and privacy policies established by the corresponding social or professional network, and those of HANSA-FLEX IBÉRICA, S.L., which does not assume any responsibility in relation to the publications that each user performs. HANSA-FLEX IBÉRICA, S.L. will unilaterally and without prior notice remove content that it considers to be in violation of current legislation, the rules of use and established privacy policies, or that it considers inappropriate.

HANSA-FLEX IBÉRICA, S.L. can follow other profiles on other social or professional networks, without this fact implying a link of any kind with them.

In turn, the Company channels in different social or professional networks can be followed by other people or users of those networks, without this fact implying any kind of connection with them.

HANSA-FLEX IBÉRICA, S.L. reserves the right not to respond to messages or comments received through these channels. The Company may modify or delete at any time and without prior notice the publications issued on its social or professional networks.

By becoming a follower, clicking “Like” or taking any other similar action on social or professional networks, you consent to the processing of your personal data in the environment of the corresponding social or professional network, in accordance with its privacy policies, the Company’s access to data contained in the contact list and that of their publications, expressly including those of a commercial nature, appear in your notices and notifications.

If the user wants to stop following the official channels on the Company’s social or professional networks, they must do so using the tools provided for this purpose by each network.

Data Recipients and Third-Party Services

Your personal data may be shared with: (a) FormSubmit.co: For processing contact forms, newsletter subscriptions, and catalog requests. Data sent includes form fields and email communications; (b) Google Ireland Limited: When you consent to analytics, data is processed by Google Tag Manager and Google Analytics 4 for website analytics and conversion tracking; (c) Service providers: Technical service providers who assist us in website maintenance and email delivery, all bound by confidentiality agreements; (d) Legal authorities: When required by Spanish or EU law, or to protect our legal rights. We do not sell your personal data to third parties.

International Data Transfers

Some of our service providers (Google Ireland Limited, FormSubmit.co) may process data outside the European Economic Area (EEA). When data is transferred internationally, we ensure adequate protection through: (a) European Commission adequacy decisions; (b) Standard Contractual Clauses approved by the European Commission; (c) EU-U.S. Data Privacy Framework (where applicable); (d) Other legally approved transfer mechanisms under GDPR Article 46. Google Analytics 4 data is processed by Google in the EU and may be transferred to the United States under appropriate safeguards.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods: (a) Contact form submissions: 2 years from last contact; (b) Newsletter subscriptions: Until you unsubscribe; (c) Catalogue requests: 2 years from request date; (d) Analytics data: 14 months (Google Analytics 4 default); (e) Cookie consent records: 13 months; (f) Legal/tax documents: As required by Spanish law (typically 5-6 years). After the retention period, we will securely delete or anonymize your personal data.

Your Data Protection Rights (GDPR)

Under GDPR and Spanish data protection law, you have the following rights: (a) Right of access (Article 15): Request a copy of your personal data we hold; (b) Right to rectification (Article 16): Correct inaccurate or incomplete data; (c) Right to erasure / 'Right to be forgotten' (Article 17): Request deletion of your data under certain conditions; (d) Right to restriction of processing (Article 18): Limit how we use your data; (e) Right to data portability (Article 20): Receive your data in a structured, commonly used format; (f) Right to object (Article 21): Object to processing based on legitimate interests or for direct marketing; (g) Right to withdraw consent (Article 7.3): Withdraw consent at any time without affecting prior processing; (h) Right to lodge a complaint: File a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD) at www.aepd.es.

To exercise these rights, contact us at: iberia@hansa-flex.es. We will respond within one month of receiving your request.

Your request must include a copy of a document proving your identity or by any other means that legally proves your identity. If you make the request in your capacity as legal representative, you must also attach documentation proving such representation.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Security measures include: (a) SSL/TLS encryption for data transmission; (b) Secure servers with firewall protection; (c) Access controls and authentication; (d) Regular security assessments and updates; (e) Employee training on data protection; (f) Incident response procedures. However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Security Breaches

The user must immediately notify HANSA-FLEX IBÉRICA, S.L. of any incident, security breach, improper or unauthorized access detected in relation to the website, private areas, access codes, presence in social or professional networks or any other circumstance that jeopardizes the security and confidentiality of the information or the proper functioning of the website.

Email address iberia@hansa-flex.es is established as the preferential notification mechanism.

Automated Decision-Making and Profiling

We do not use your personal data for automated decision-making or profiling that produces legal effects or similarly significantly affects you, as defined in Article 22 of the GDPR. Analytics data is used only for aggregate statistical analysis and website improvement, not for individual profiling or automated decisions affecting you.

Children's Privacy

Our website and services are not directed to individuals under the age of 14. We do not knowingly collect personal data from children under 14 without parental consent. If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us at iberia@hansa-flex.es, and we will take steps to delete such information from our systems.

Newsletter and Marketing Communications

If you subscribe to our newsletter, we will use your email address and name to send you periodic updates, news, and promotional materials about HANSA-FLEX IBÉRICA, S.L. products and services. Legal basis: Your explicit consent (Article 6.1.a GDPR). You have the right to: (a) Unsubscribe at any time by clicking the unsubscribe link in any newsletter; (b) Contact us at marketing.es@hansa-flex.es to opt-out; (c) Manage your subscription preferences. We do not share your email address with third parties for their marketing purposes.

Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. When we make significant changes, we will: (a) Post the revised policy on this website with the effective date; (b) Notify you via email if you have provided your email address; (c) Request renewed consent if required by law. Continued use of our website after changes indicates your acceptance of the updated Privacy Policy. We recommend reviewing this policy periodically. Last updated: February 2026.

Compliance with Spanish and EU Law

HANSA-FLEX IBÉRICA, S.L. is committed to complying with all applicable data protection laws and regulations, including: (a) General Data Protection Regulation (GDPR) - EU 2016/679; (b) Spanish Organic Law 3/2018 on Protection of Personal Data and guarantee of digital rights (LOPDGDD); (c) Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE); (d) Guidelines and recommendations from the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD); (e) European Data Protection Board (EDPB) guidelines.

Authority

Any relationships established between the Company and the user will be governed by the provisions of the current regulations regarding the applicable legislation and the competent authority. However, for cases in which the regulations provide for the possibility for the parties to submit to an authority, HANSA-FLEX IBÉRICA, S.L. and the user, expressly waiving any other jurisdiction that may correspond to them, submit to the Courts of Madrid (Spain).

HANSA-FLEX IBÉRICA, S.L. will pursue legal action against the breach of these Conditions, as well as against any improper use of the contents and utilities presented on its website, exercising all civil and criminal actions that may correspond by law, including those of an economic nature.

Contact Information and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us: HANSA-FLEX IBÉRICA, S.L. | Data Protection Contact: iberia@hansa-flex.es | General Inquiries: info@hansa-flex.es | Website: www.hansa-flex.es | Spanish Data Protection Agency (AEPD): If you believe your rights have been violated, you may file a complaint with the AEPD at www.aepd.es or by mail to: Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001 Madrid, Spain.