Privacy Policy
The information below explains which personal data we process when you visit our website and the rights you have in this regard. The use of terms is based on the definitions in Article 4 of the General Data Protection Regulation (GDPR).
1. Name and address of the controller
OTEC FINISHING SERVICES
Parque Tecnológico de Eibar
C/ Iñaki Goenaga, 5
20600 Eibar
Gipuzkoa
Tel.: +34 943 067 627
Email: a.parreno@otec.de
2. Storage period
Unless otherwise specified in this Privacy Policy, we retain your personal data until the purpose of the data processing no longer applies. If you make a justified request for erasure or withdraw consent to data processing, your data will be erased unless we have other legally compliant reasons to store your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data is erased after these reasons no longer apply.
3. General information on the legal basis for the data processing on this website
If you have consented to the processing of the data, we process your personal data on the basis of Article 6(1)(a) GDPR. In the event of express consent to the transfer of personal data to third countries, data is also processed on the basis of Article 49(1)(a) GDPR.
Consent can be withdrawn at any time. If your data is necessary for the performance of a contract or to carry out pre-contractual measures, we process your data on the basis of Article 6(1)(b) GDPR. Furthermore, we process your data on the basis of Article 6(1)(c) GDPR insofar as this is necessary to comply with a legal obligation. In addition, data may be processed on the basis of our legitimate interest in accordance with Article 6(1)(f) GDPR. The following paragraphs of this Privacy Policy contain information on the specific legal basis relevant in each individual case.
4. Hosting
Our website is hosted by sw hosting & communications technologies SLU, B17659301, Ps. de la Castellana, 194, 28046 Madrid, e-mail privacy@swhosting.com, www.swhosting.com/. For details, please refer to its privacy policy: https://www.swhosting.com/en/legal/rgpd
Our legal basis for using sw hosting & communications technologies SLU is Article 6(1)(f) GDPR. We have a legitimate interest in our website running as reliably as possible.
We have concluded a commissioned data processing agreement with the service provider. This is an agreement prescribed under data protection legislation that ensures that the service provider only processes the personal data of our website visitors in line with our instructions and in compliance with the GDPR.
5. Processing of personal data
5.1 Visiting our website
When you visit our website, server log files are automatically stored (e.g. IP address, date/time, browser type, operating system, referrer URL).
This data is stored in log files to ensure the functionality of our website. Furthermore, this data helps us to optimise our website and ensure the security of our IT systems (e.g. for detecting attacks). The data is not analysed for marketing purposes in this context.
The legal basis is Article 6(1)(f) GDPR. We have a legitimate interest in ensuring that our website is optimised and that it displays without any technical errors.
The aforementioned data is erased once it is no longer required for the purpose for which it was collected.
5.2 Contact form
When you send us queries via the contact form, we collect the following data: company*, name*, e-mail address*, country as well as information about the matter in question. Mandatory fields are marked accordingly. We process your personal data in order to respond to your query and deal with the matter in question. We store your data in case of follow-up questions.
If your query is related to the performance of a contract or is needed to carry out pre-contractual measures (e.g. offers), we process your data on the basis of Article 6(1)(b) GDPR. In all other cases, the data is processed on the basis of our legitimate interest in the effective processing of queries sent to us (Article 6(1)(f) GDPR).
Your personal data will be processed by our internal departments responsible for the matter in question. The data is not passed on to third parties in this context. The data is used solely for the purposes of processing the dialogue and dealing with the matter in question.
We retain the data you entered in the contact form until you request that we erase it or the purpose of the data storage no longer applies (e.g. after the matter in question has been dealt with). Mandatory legal provisions – especially retention periods – are unaffected.
5.3. E-mail, telephone or fax queries
If you contact us by e-mail or telephone, we store and process your query including all the personal data arising from this (name, address, contact details, query) for the purpose of processing your matter.
If your matter is related to the performance of a contract or is needed to carry out pre-contractual measures (e.g. offers), we process your data on the basis of Article 6(1)(b) GDPR. In all other cases, the data is processed on the basis of our legitimate interest in the effective processing of queries sent to us (Article 6(1)(f) GDPR).
Your personal data will be processed by our internal departments responsible for the matter in question. The data is not passed on to third parties in this context. The data is used solely for the purposes of processing the dialogue and dealing with the matter in question.
We retain the data you sent in the query until you request that we erase it or the purpose of the data storage no longer applies (e.g. after the matter in question has been dealt with). Mandatory legal provisions – especially retention periods – are unaffected.
6. Cookies
We use cookies to provide our website and, with your consent, to analyse user behaviour. Cookies are small text files that your browser stores on your device. There are session cookies, which are automatically deleted at the end of your visit, and persistent cookies, which remain on your device until they expire or you delete them. Cookies may originate from us (first-party cookies) or from third-party providers (third-party cookies).
Some cookies are strictly necessary, as certain functions of our website would otherwise not be available (e.g. control of the cookie banner). We use these necessary cookies on the basis of Article 6(1)(f) GDPR and Article 22(2) of the Spanish Law on Information Society Services and Electronic Commerce (Ley de Servicios de la Sociedad de la Información y de Comercio Electrónico, LSSI-CE), as we have a legitimate interest in a secure and functional website.
In addition, we use analytics cookies (e.g. in connection with Google Analytics), but only with your consent, and cookies that select the display language based on the visitor’s IP location. These enable us to evaluate the use of our website and improve our offering. These cookies are stored exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR in conjunction with Article 22(1) LSSI- CE. You can give, refuse or withdraw consent at any time with future effect in the Cookie Settings, where you can easily accept or decline various types of cookies. Details about the cookies used, their providers, purposes, storage periods and possible data transfers are provided in the Cookie Settings and in our cookie notice at the bottom left of the screen.
In addition, you can configure your browser to block cookies, to only accept them case by case, or to delete them automatically when you close the browser.
7. Analytics tools
Google Analytics
We use the Google Analytics web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). Google Analytics enables us to analyse the behaviour of visitors to our website, e.g. pages viewed, session length, devices used and interactions.
Google Analytics uses cookies and similar technologies that enable user recognition. The information generated in this way is usually transferred to a Google server in the USA and stored there.
The use of Google Analytics is based exclusively on your consent in accordance with Article 6(1)(a) GDPR in conjunction with Article 22 LSSI-CE. You can withdraw your consent at any time with future effect via the Cookie Settings.
IP addresses are not stored in Google Analytics (GA4); within the EU, the IP address is discarded before further processing. This means that you cannot be directly identified.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission and on Google’s certification under the EU-US Data Privacy Framework (DPF). You can find further information on data privacy at Google by visiting https://policies.google.com/privacy and on DPF certification at https://www.dataprivacyframework.gov/participant/5780.
8. Buttons for social media
Our website features buttons with hyperlinks to the social media networks YouTube and LinkedIn, where we have public business profiles. We use these platforms to provide information about our company, our products and services, and career opportunities, and to engage in dialogue with interested parties.
When you simply visit our website, no personal data is transferred to the aforementioned platforms. A direct connection to the provider’s servers is only established if you click on a social media button. The provider will then receive information that you have visited our website (e.g. date, time, IP address, page accessed).
Please note that the platform operators may process this data for their own purposes (e.g. analytics or marketing), over which we have no influence. The purpose and scope of the processing by the providers, as well as your rights and settings options for protecting your privacy, can be found in the respective privacy policies:
LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland); privacy policy: https://www.linkedin.com/legal/privacy-policy
YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); privacy policy: https://policies.google.com/privacy?hl=en-GB
9. Data security and hosting
We take technical, organisational and, where necessary, contractual measures to guarantee state-of-the-art data processing security. This ensures that we comply with the provisions of data protection laws, in particular the General Data Protection Regulation (GDPR) and that your data is protected against loss, alteration, unauthorised access or unlawful disclosure.
Our security measures include encrypted transmission of data between your browser and our servers. You can recognise SSL encryption by the fact that the address line of your browser begins with ‘https://’ and a lock symbol is displayed. SSL (Secure Socket Layer) protects data transmissions from unauthorised access by third parties.
Please note that data transmission over the Internet can always involve security risks. If you wish to avoid this, you are welcome to send us certain information by other means (e.g. by post or telephone).
10. Your rights
When we process your personal data, you have the following rights under the GDPR:
– Access (Article 15 GDPR): You can obtain access to the personal data that we have processed.
– Rectification (Article 16 GDPR): You have the right to obtain rectification of inaccurate data or to have incomplete data completed.
– Erasure (Article 17 GDPR): You can request that we erase your personal data, provided that there are no legal obligations to retain it.
– Restriction of processing (Article 18 GDPR): You have the right to restrict the processing of your data in specific circumstances.
– Portability (Article 20 GDPR): You can obtain your data in a commonly used, machine-readable format or have it transmitted to another controller.
– Objection (Article 21 GDPR): You have the right to object to the processing of your data at any time, on grounds relating to your particular situation.
– Right to lodge a complaint (Article 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority. The relevant authority in our case is the:
Agencia Española de Protección de Datos (AEPD) [Spanish Agency for Data Protection]
C/ Jorge Juan, 6, 28001 Madrid
Tel.: +900 293 183
11. Amendments to the Privacy Policy
We reserve the right to amend the Privacy Policy in order to adapt it in line with changed legal situations or due to changes in the service or data processing. This only applies with regard to data processing policies, however. Insofar as user consent is required or components of the Privacy Policy contain provisions regarding the contractual relationship with users, the amendments are only made with the users’ consent.
Please read the contents of the Privacy Policy regularly.
Date of the Privacy Policy: 18/08/2025