1- WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

The Data Controller and owner of the website https://tappwater.co/ is TAPPWATER SL, a commercial company with registered office at C/ Muntaner 340, 1-1 08021 (Barcelona), with Tax ID B66729336 and registered in the Barcelona Commercial Registry, in T 45288, F 183, S 8, H B 482977, I/A 5 (Hereinafter referred to as TAPPWATER).

TAPPWATER has adopted all necessary technical and organizational measures to comply with the requirements of current data protection regulations, especially the EU General Data Protection Regulation.

The contact details regarding data protection are the following:

info@tappwater.com

2- WHAT TYPE OF PERSONAL DATA DO WE PROCESS AND FOR WHAT PURPOSE?

2.1. Types of personal data we process

In compliance with data protection regulations, TAPPWATER will only process data that is essential, minimizing the data processing on its part. We may perform the following data processing and process the following categories of personal data:

a. Web contact form: name, email, company, and message.
b. Social networks: user identification data in the social network and data shared by the user voluntarily.
c. Websites: IP address, browser type, operating system, origin website, and web browsing behavior. With your permission, we may also receive your location data.
d. Clients and suppliers: name, ID or company identification data, professional contact address, email, and telephone.
e. Employees: Identification data included in your CV and data derived from the employment relationship, data related to absences, training, and image.

2.2. Your personal data will only be used for the following purposes:

Regarding the personal data of our clients, students, and suppliers, to carry out the necessary administrative and commercial management, as well as to comply with the corresponding legal obligations.

Contact you to process your inquiries, handle your complaints, or manage your orders.

Send commercial communications, in case you have expressly consented to the sending of such communications electronically.

Likewise, the data collected during your browsing is processed with the aim of providing access to the online content of the website, as well as attending to requests from website users, keeping a statistical record of visits (IP addresses, browser data, country, page accessed, etc.) for the purpose of helping us develop better services and products, optimize our offer, provide a more efficient customer service, and improve the design and content of our websites.

In case of completing any of the forms existing on the website or others, it will be necessary to provide certain personal data, which will be processed for the purpose for which they are requested.

In the case of our workers, their personal data will be processed with the aim of managing the company's HR, managing the employment relationship, and complying with current legal obligations.

In accordance with the LSSICE, we inform you that TAPPWATER does not engage in SPAM practices, therefore, it does not send commercial emails if it does not have the necessary legitimation. In any case, you will always have the possibility to withdraw your consent to receive our communications.

We will not process your personal data for any purpose other than those described except for legal obligation or judicial requirement.

You will not be subject to decisions based on automated processing that produce effects on your data.

3- WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?

The legal basis that legitimizes the processing of your personal data is your express consent granted to carry out the purposes described above, which will be requested at the time you request information, or by checking the corresponding box when providing your data in any of our personal data collection forms.

If you acquire any of our products or contract our services, a contractual relationship will be generated between you and TAPPWATER that will constitute the legal basis that will legitimize the processing of your personal data for the execution of said contractual relationship, as well as, where appropriate, compliance with the corresponding legal obligations.

If you do not provide us with your personal data or if you do not accept this privacy policy, TAPPWATER will not process your personal data, but it may also imply the impossibility of receiving information about TAPPWATER products and services and, in any case, of contracting our services or acquiring our products.

The legal basis that legitimizes the processing of our employees' data is the execution of the employment relationship and compliance with the corresponding obligations.

The legal basis that legitimizes the processing of our suppliers' data is the commercial relationship we maintain with them.

The legal basis that legitimizes the processing of the images captured by our video surveillance cameras is our legitimate interest in the surveillance, control, and security of our facilities.

4- RETENTION PERIOD: How long will we keep your data?

The personal data you provide will be kept for the time necessary to manage the information you request, as well as to manage the services you request from us, or for the fulfillment of any contract that is generated between TAPPWATER and you or third parties, or the fulfillment of the legal obligations that affect us.

The personal data of our workers will be kept for the duration of their employment relationship with TAPPWATER and, subsequently, for the legally established periods.

Once the data has fulfilled the purposes for which it was collected, we will delete it definitively. However, we will keep your data longer if it is necessary for compliance with legal or registration obligations. Likewise, it may be necessary to keep them for the time necessary for the prescription of contractual or legal responsibilities that arise.

The data you provide to start a selection process will be kept for a maximum period of one year. Subsequently, if you have not joined TAPPWATER or are not part of a selection process, they will be eliminated and we will not keep a copy.

The images recorded by our video surveillance system will be automatically deleted within a maximum of 30 days, unless for reasons of an investigation or judicial requirement they must be kept, duly blocked, for a longer time.

5- TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

Within TAPPWATER, your personal data will be processed by duly authorized personnel, and, if necessary or practical to fulfill the purposes indicated above, they may be processed, where appropriate, by third parties.

The categories of recipients to whom your Personal Data may be communicated are the following:

a. Third parties appointed as data processors, such as IT providers, consultants and advisors, and other companies that provide auxiliary services, as well as, for operational reasons, to any of the companies in our Group, with which management and direction are shared.
b. Social network providers.
c. Public Entities and Organizations, exclusively for the purpose of complying with the corresponding legal obligations.
d. Other providers to whom, where appropriate, your personal data may be transferred, such as financial institutions, insurers, among others.

In any case, all of them will have previously signed the corresponding confidentiality commitment following our instructions in accordance with current personal data protection regulations, will be subject to professional secrecy or will act in compliance with a legal obligation.

6- WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?

If you wish to exercise the rights that data protection regulations grant you, please send us an email to the following address info@tappwater.co with the subject indicating the right you want to exercise and attaching a copy of your national identity document or passport.

The Rights that current regulations recognize and that, where appropriate, you can exercise are:

7- COMPLAINT TO THE SUPERVISORY AUTHORITY:

In the event that you consider that TAPPWATER has violated any of your rights protected by the personal data protection regulations or that it has violated any obligation regarding the protection of Personal Data, you have the right to file a complaint with the competent supervisory authority, which in Spain is the Spanish Data Protection Agency located at Calle Jorge Juan, 6. 28001 – Madrid.

Tel. 901 100 099 – 912 663 517

You can also submit an electronic complaint through the electronic headquarters available on their website https://www.aepd.es

8- LEGISLATION AND JURISDICTION

This privacy policy is governed in each and every one of its extremes by Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free circulation of these data.

It is also governed by Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights. Likewise, our website is governed by Law 34/2002, of July 11, on services of the information society and electronic commerce.

The Users of this Website are subject to Spanish legislation and jurisdiction to which they expressly submit, with the Courts and Tribunals of BARCELONA being competent for the resolution of all conflicts derived from or related to its use.

9- ADDITIONAL INFORMATION

SOCIAL NETWORKS (PRIVACY POLICY)

We inform you that TAPPWATER may have a presence on social networks. The processing of data that is carried out on people who become followers on social networks (and/or perform any connection link or action through social networks) of the official TAPPWATER pages will be governed by this section, as well as by those conditions of use, privacy policies, and access regulations that belong to the social network that proceeds in each case and previously accepted by the user.

TAPPWATER will process your data for the purposes of correctly administering its presence on the social network, informing you of activities, products, or services of the provider, as well as for any other purpose that the Social Networks regulations allow.

The publication of content is prohibited:

- That are allegedly illegal by national, community, or international regulations or that carry out allegedly illegal activities or contravene the principles of good faith.
- That violate the fundamental rights of people, lack courtesy on the network, annoy or may generate negative opinions in our users or third parties and in general any content that TAPPWATER considers inappropriate.
- And in general that contravene the principles of legality, honesty, responsibility, protection of human dignity, protection of minors, protection of public order, the protection of private life, consumer protection, and intellectual and industrial property rights.

Likewise, TAPPWATER reserves the power to remove, without prior notice, from the website or from the corporate social network those contents that are considered inappropriate.

Communications sent through social networks will be incorporated into a file owned by TAPPWATER, being able to send you information of interest.

In any case, if you send personal information through the social network, TAPPWATER will be exempt from responsibility in relation to the security measures applicable to this platform, the user having to consult the corresponding particular conditions of the network in question in case of wanting to know them.

SECURITY MEASURES:

The data you provide will be treated confidentially. TAPPWATER has adopted all the necessary technical and organizational measures and all levels of protection to guarantee security in the processing of data and avoid their alteration, loss, theft, unauthorized processing or access, in accordance with the state of technology and nature of the stored data. Likewise, it is also guaranteed that the processing and registration in files, programs, systems or equipment, premises, and centers comply with the requirements and conditions of integrity and security established in the current regulations.

LANGUAGE

The language applicable to this Privacy Policy is Spanish. Therefore, in the event that there is any contradiction in any of the versions provided in other languages, the Spanish version will prevail.

10- UPDATE.

This Privacy Policy was last updated in April 2025 but may be updated at any time. We recommend that you consult it each time you access our page in case it has undergone alterations.