Privacy policy

• Identity: AMBAR Identidad Técnica y Comercial, S.L.
• Tax ID (CIF): [To be completed].
• Postal address: C/ Marqués de Villanueva de la Sagra, 12 — 28694 Chapinería (Madrid — Spain).
• Contact email: ambar@ambar-ic.com.
• Telephone: +34 91 632 24 46.

AMBAR ITC collects personal data only when the user provides it voluntarily through the forms available on the website (general contact form, quotation request / RFQ) or when they contact us through the corporate channels (email, telephone).

In particular, we may process the following categories of data:

• Identifying data: first and last name, company, position or department.
• Contact data: corporate email, telephone, country.
• Project data: sector of activity, type of product requested, technical description, attached files (drawings, specifications, technical documentation).
• Browsing data: IP address, pages visited, session time, device and browser (collected through analytical cookies, subject to consent).

Personal data is processed for the following purposes:

• To handle commercial and technical queries.
• To prepare and send requested quotations.
• To maintain the commercial and operational relationship with clients and prospects.
• To send technical or commercial communications related to AMBAR ITC's activity, only when the user has expressly consented.
• To comply with legal, accounting and tax obligations.
• To carry out statistical analysis of the use of the website in order to improve the experience.

The processing of personal data is based, depending on the case, on one of the following legal bases:

• The user's express consent, given through the submission of forms and acceptance of this policy.
• Performance of a contract or pre-contractual measures taken at the data subject's request (preparation of quotations, supplies).
• Compliance with applicable legal obligations (commercial, accounting, tax).
• The legitimate interest of the controller, duly weighed, for statistical analysis of the site and commercial communications related to existing relationships.

Data is retained for the time strictly necessary to fulfil the purposes for which it was collected, as well as the applicable legal periods. In particular:

• Commercial contact data with no subsequent transaction: up to 5 years from the last effective contact.
• Data linked to a commercial transaction: 6 years from the end of the transaction, in accordance with accounting and commercial obligations.
• Browsing data collected through cookies: in accordance with the periods detailed in our Cookie Policy.

Personal data will not be disclosed to third parties except in the following cases:

• Compliance with legal obligations.
• Data processors engaged by AMBAR ITC under a contract in accordance with article 28 of the GDPR for the provision of services necessary for the website's operation (hosting, sending of transactional emails, anti-spam protection, content management). [Specific list of providers to be completed].

No international data transfers are made outside the European Economic Area, except to providers offering adequate guarantees in accordance with Chapter V of the GDPR.

The user has the following rights over their personal data:

• The right of access to the personal data concerning them.
• The right to rectification of inaccurate data.
• The right to erasure when the data is no longer necessary for the purposes for which it was collected.
• The right to restriction of processing in the cases provided for by the GDPR.
• The right to object to the processing, especially when it is based on legitimate interest.
• The right to data portability in a structured, commonly used format.
• The right to withdraw consent given at any time, without this affecting the lawfulness of the processing prior to its withdrawal.

To exercise any of these rights, the user may contact ambar@ambar-ic.com, clearly indicating the right they wish to exercise and proving their identity.

Likewise, if they do not obtain a satisfactory response, the user has the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), the competent supervisory authority in Spanish territory.

AMBAR ITC has adopted the appropriate technical and organisational measures to guarantee the confidentiality, integrity, availability and resilience of the systems that process personal data, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing.

The measures are reviewed and updated periodically to adapt them to technical and regulatory developments.

AMBAR ITC reserves the right to modify this privacy policy to adapt it to legislative, case-law or technical developments. In the event of substantial modifications, users will be informed through a prominent notice on the website.