Privacy policy

PRIVACY POLICY

1- WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

The data controller and owner of the website https://tappwater.co/ is TAPPWATER SL. a commercial company with registered office at C/ Muntaner 340, 1-1 08021 (Barcelona), with Tax ID number B66729336 and registered in the Barcelona Mercantile Registry, in T 45288, F 183, S 8, H B 482977, I/A 5 (hereinafter referred to as TAPPWATER).

TAPPWATER has adopted all the technical and organizational measures necessary to comply with the requirements of current data protection regulations, in particular the EU General Data Protection Regulation.

The contact details for data protection are as follows:

info@tappwater.com

2- WHAT TYPE OF PERSONAL DATA DO WE PROCESS AND FOR WHAT PURPOSE?

2.1. Types of personal data we process

In compliance with data protection regulations, TAPPWATER will only process data that is essential, minimizing data processing on its part. We may carry out the following data processing and process the following categories of personal data:

  1. Web contact form: name, email, company, and message.
  2. Social media: user identification data on social media and data shared voluntarily by the user.
  3. Websites: IP address, browser type, operating system, referring website, and web browsing behavior. With your permission, we may also receive your location data.
  4. Customers and suppliers: name, ID number or company identification details, business contact address, email, and telephone number.
  5. Employees: Identification details included in your CV and data derived from the employment relationship, data relating to leave, training, and image.

2.2. Your personal data will only be used for the following purposes:

With regard to the personal data of our customers, students, and suppliers, to carry out the necessary administrative and commercial procedures, as well as to comply with the corresponding legal obligations.

To contact you to process your queries, handle your complaints, or manage your orders.

To send commercial communications, if you have expressly consented to the sending of such communications by electronic means.

Similarly, the data collected during your browsing is processed for the purpose of providing access to the online content of the website, as well as responding to requests from users of the website, keeping a statistical record of visits (IP addresses, browser data, country, page accessed, etc.) for the purpose of enabling us to develop better services and products, optimize our offering, provide more effective customer service, and improve the design and content of our websites.

If you fill in any of the forms on the website or elsewhere, you will be required to provide certain personal data, which will be processed for the purpose for which it is requested.

In the case of our employees, your personal data will be processed for the purpose of managing the company's human resources, managing the employment relationship, and complying with current legal obligations.

In accordance with the LSSICE, we inform you that TAPPWATER does not engage in SPAM practices and therefore does not send commercial emails unless it has the necessary authorization. In any case, you will always have the option to withdraw your consent to receive our communications.

We will not process your personal data for any purpose other than those described above, except when required by law or by court order.

You will not be subject to decisions based on automated processing that produce effects on your data.

3- WHAT IS THE LEGITIMACY FOR THE PROCESSING OF YOUR DATA?

The legal basis that legitimizes the processing of your personal data is your express consent given to carry out the purposes described above, which will be requested when you request information from us, or by checking the corresponding box when providing your data in any of our personal data collection forms.

If you purchase any of our products or contract our services, a contractual relationship will be established between you and TAPPWATER, which will constitute the legal basis that legitimizes the processing of your personal data for the execution of said contractual relationship, as well as, where applicable, compliance with the corresponding legal obligations.

If you do not provide us with your personal data or if you do not accept this privacy policy, TAPPWATER will not process your personal data, but this may also mean that you will not be able to receive information about TAPPWATER products and services and, in any case, that you will not be able to contract our services or purchase our products.

The legal basis that legitimizes the processing of our employees' data is the execution of the employment relationship and the fulfillment of the corresponding obligations.

The legal basis that legitimizes the processing of our suppliers' data is the commercial relationship we have with them.

The legal basis that legitimizes the processing of the images captured by our video surveillance cameras is our legitimate interest in the surveillance, control, and security of our facilities.

4- RETENTION PERIOD How long will we keep your data?

The personal data you provide will be kept for as long as necessary to manage the information you request, as well as to manage the services you request or to comply with any contract between TAPPWATER and you or third parties, or to comply with any legal obligations that apply to us.

The personal data of our employees will be kept for the duration of their employment relationship with TAPPWATER and, subsequently, for the periods provided for by law.

Once the data has fulfilled the purposes for which it was collected, we will delete it permanently. However, we will keep your data for longer if necessary to comply with legal or registration obligations. Similarly, it may be necessary to keep it for the time necessary for the expiry of any contractual or legal liabilities that may arise.

The data you provide us with to start a selection process will be kept for a maximum period of one year. Subsequently, if you have not joined TAPPWATER or are not part of a selection process, they will be deleted and we will not keep a copy.

The images recorded by our video surveillance system will be automatically deleted within a maximum of 30 days, unless they must be kept for longer, duly blocked, for the purposes of an investigation or a court order.

5- TO WHOM WILL YOUR DATA BE COMMUNICATED?

Within TAPPWATER, your personal data will be processed by duly authorized personnel and, if necessary or practical to fulfill the purposes indicated above, may be processed by third parties.

The categories of recipients to whom your personal data may be communicated are as follows:

  1. Third parties appointed as data processors, such as IT providers, consultants and advisors, and other companies that provide ancillary services, as well as, for operational reasons, any of the companies in our Group with which management and administration are shared.
  2. Social network providers.
  3. Public entities and bodies, exclusively for the purpose of complying with the corresponding legal obligations.
  4. Other providers to whom, in your case, your personal data may be transferred, such as financial institutions, insurance companies, among others.

In any case, all of them will have previously signed the corresponding confidentiality agreement in accordance with our instructions and in accordance with current personal data protection regulations, and will be subject to professional secrecy or will act in compliance with a legal obligation.

6.- WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?

If you wish to exercise the rights granted to you by data protection regulations, please send us an email to the following address info@tappwater.co, stating in the subject line the right you wish to exercise and attaching a copy of your national identity card or passport.

The rights recognized by current legislation and which you may exercise are:

Right of access to data:

You have the right to be informed by TAPPWATER whether or not your personal data is being processed and, if so, to be given access to it by providing the following information:

  • The purposes of the processing.
  • The categories of data concerned.
  • The period or criteria for storing the data.

Right to rectify data:

You have the right to have TAPPWATER rectify your data when it is inaccurate or incomplete by means of an additional rectifying statement.

Right to erasure of data:

The data subject has the right to have TAPPWATER erase their data when:

  • The processing is unlawful.
  • The data subject has withdrawn their consent.
  • It is no longer necessary in relation to the purposes for which it was collected or processed.
  • The data subject has exercised their right to object and there are no other legitimate grounds for processing.
  • The data must be deleted to comply with a legal obligation of TAPPWATER.

The data subject shall not have the right to have their data deleted by TAPPWATER when the processing is necessary:

  • To exercise the right to freedom of expression and information.
  • To comply with a legal obligation of TAPPWATER.
  • For the establishment, exercise, or defense of legal claims.
  • For reasons of public interest based on current legislation for reasons of public health or for historical, statistical, or scientific research purposes.

Right to data portability:

You have the right to have TAPPWATER transfer your data to another Data Controller or to the data subject themselves, in a structured, commonly used and machine-readable format, when the processing is carried out by automated means and is based on:

  • The consent of the data subject for specific purposes.
  • The performance of a contract or pre-contractual measures taken at the request of the data subject.

The right to data portability shall not apply when:

  • The transmission is technically impossible.
  • It may adversely affect the rights and freedoms of third parties.
  • The processing is in the public interest based on current legislation.

Right to restriction of processing:

The data subject shall have the right to object to the processing of their data by TAPPWATER on grounds relating to their particular situation, where the processing is based on:

  • Direct marketing.
  • Profiling.
  • The legitimate interests of the Data Controller or third parties, provided that the interests or rights and freedoms of the data subject do not prevail, especially if the data subject is a child.
  • Historical, statistical or scientific research, unless the processing is necessary for reasons of public interest.

Even if the data subject objects to the processing of their data, TAPPWATER may continue to process it provided that its legitimate interest prevails over the interests or rights and freedoms of the data subject in a legal proceeding that justifies it.

TAPPWATER must inform the data subject of their right to object to the processing of their data in an explicit, clear manner, separate from any other information, at the time of the first communication.

Right to object:

This is the right to prevent the processing of personal data or to have it stopped when your consent to the processing is not necessary, due to the existence of a legitimate and well-founded reason relating to your specific personal situation that justifies it, and provided that no law provides otherwise.

Right not to be subject to profiling:

The data subject shall have the right not to be subject to profiling whose purpose is to take individual decisions based on automated data processing and intended to evaluate, analyze, or predict the following personal aspects:

  • Professional performance.
  • Economic situation.

  • Personal preferences or interests.


  • Location or movements of the person.

When profiling is based solely on automated processing:

  • The data subject shall have the right to be informed if the decision that may be taken is likely to produce legal effects concerning him or her or significantly affect him or her.

The data subject shall have the right to obtain human intervention on the part of TAPPWATER, to express his or her point of view and to contest the decision, if the processing has been authorized by:

  • The explicit consent of the data subject.
  • A contract between TAPPWATER and the data subject.

The right not to be subject to profiling shall not apply when the decision that may be taken as a result of the profiling is authorized by:

  • The explicit consent of the data subject.
  • A contract between TAPPWATER and the data subject.
  • Processing based on current legislation.

7-COMPLAINT TO THE SUPERVISORY AUTHORITY:

If you believe that TAPPWATER has violated any of your rights protected by personal data protection regulations or that it has violated any obligation regarding the protection of Personal Data, you have the right to file a complaint with the competent supervisory authority, which in Spain is the Spanish Data Protection Agency located at Calle Jorge Juan, 6. 28001 – Madrid.

Tel. 901 100 099 – 912 663 517

You can also submit an electronic complaint through the electronic headquarters available on your website https://www.aepd.es

8-LEGISLATION AND JURISDICTION

This privacy policy is governed in its entirety by Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

It is also governed by Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights. Likewise, our website is governed by Law 34/2002, of July 11, on information society services and electronic commerce.

Users of this website are subject to Spanish legislation and jurisdiction, to which they expressly submit, with the Courts and Tribunals of BARCELONA being competent to resolve all disputes arising from or related to its use.

9-ADDITIONAL INFORMATION

SOCIAL NETWORKS (PRIVACY POLICY)

We inform you that TAPPWATER may be present on social networks. The processing of data carried out on people who become followers on social networks (and/or perform any link or connection action through social networks) of the official pages of TAPPWATER will be governed by this section, as well as by those conditions of use, privacy policies and access regulations that belong to the social network that applies in each case and previously accepted by the user.

TAPPWATER will process your data for the purposes of correctly managing its presence on the social network, informing you of the provider's activities, products or services, as well as for any other purpose permitted by the regulations of the social networks.

The publication of content is prohibited:

  • That is allegedly illegal under national, community or international regulations or that carries out allegedly illegal activities or contravenes the principles of good faith.
  • That violates the fundamental rights of individuals, lacks courtesy on the network, disturbs or may generate negative opinions among our users or third parties, and in general any content that TAPPWATER considers inappropriate.
  • And in general, content that contravenes the principles of legality, honesty, responsibility, protection of human dignity, protection of minors, protection of public order, protection of privacy, consumer protection, and intellectual and industrial property rights.

Likewise, TAPPWATER reserves the right to remove, without prior notice, any content from the website or corporate social network that it considers inappropriate.

Communications sent through social networks will be incorporated into a file owned by TAPPWATER, which may send you information of interest.

In any case, if you send personal information through the social network, TAPPWATER will be exempt from liability in relation to the security measures applicable to this platform, and the user must consult the specific conditions of the network in question if they wish to know them.

SECURITY MEASURES:

The data you provide will be treated confidentially. TAPPWATER has adopted all technical and organizational measures and all levels of protection necessary to guarantee the security of data processing and prevent its alteration, loss, theft, unauthorized processing, or access, in accordance with the state of technology and the nature of the data stored. Likewise, it is also guaranteed that the processing and recording in files, programs, systems or equipment, premises and centers comply with the requirements and conditions of integrity and security established in current regulations.

LANGUAGE

The language applicable to this Privacy Policy is Spanish. Therefore, in the event of any contradiction in any of the versions provided in other languages, the Spanish version shall prevail.

10-UPDATES.

This Privacy Policy was last updated in April 2025 but may be updated at any time. We recommend that you consult it each time you access our website in case it has been altered.