DATA PROTECTION POLICY

ZUMEX is committed to respecting the privacy of users and the protection and security of their personal data. For this reason, by means of this privacy policy, users (hereinafter “users”) are informed of the manner in which ZUMEX collects, processes and protects the personal data provided to it via the https://www.zumex.com/ website (hereinafter “website”).

  1. WHO PROCESSES YOUR PERSONAL DATA 

Data controller : The party responsible for processing the personal data collected on this website is ZUMEX GROUP, S.A., whose tax identification code is A46271326 and whose registered office is at Polígono Ind. Moncada III – Calle del Molí – 2 – 46113, Moncada, Valencia (Spain).

Joint controllers: In addition, for certain processing operations of which we will inform you in detail in this policy, certain subsidiaries of the ZUMEX group listed below will jointly process your data, deciding together on the purposes and means used, and are therefore jointly responsible for such processing operations.

  • ZUMEX FRANCE SARL: 5 rue de Villeneuve 94573 Rungis Cedex, Paris, France.
  • ZUMEX MEXICO SA DE CV: Uxmal 616, Colonia Vértiz Narvarte Alcaldía Benito Júarez, CP 03600 Mexico City, Mexico.
  • ZUMEX USA, INC:1573 NW 82nd Ave, Miami, FL 33126 USA.

Detailed information on jointly processed data can be found in section 3 “Information on the purposes of processing”. The data controller and the joint data controllers described above are hereinafter referred to as “ZUMEX”, unless they are expressly and individually identified as “data controller” or “joint data controllers”.

  • HOW WE PROCESS YOUR PERSONAL DATA

ZUMEX will process users’ personal data for various purposes, always in accordance with the provisions of the legislation in force, respecting their rights and with complete transparency. In particular, data processing will be carried out in accordance with current data protection regulations (Regulation (EU) 2016/679 of the Parliament and of the Council of 27 April 2016 (hereinafter “GDPR”), and the Spanish Organic Law 3/2018 of 5 December on the protection of personal data and the guarantee of digital rights.

In view of the above, this data protection policy applies to European citizens, as it is GDPR compliant. This is without prejudice to any applicable local data protection legislation.

  • HOW WE PROCESS YOUR DATA

Users are informed that ZUMEX may process their personal data for the following purposes, using an appropriate legitimate basis for each of them:

  • Management of the subscription and sending of electronic commercial communications.
  • Identification of joint controllers:
  • ZUMEX GROUP, S, A.
  • ZUMEX FRANCE SARL.
  • ZUMEX MEXICO SA DE CV
  • ZUMEX USA, INC.
  • Purpose: to manage the sending of electronic commercial communications about ZUMEX products, services and news.
  • Legitimate basis: consent of the data subject.
  • Type of data processed: contact data (e-mail address) and identification data (first and last name).
  • contact form.
  • Identification of joint controllers:
  • ZUMEX GROUP, S, A.
  • ZUMEX FRANCE SARL.
  • ZUMEX MEXICO SA DE CV
  • ZUMEX USA, INC.
  • Purpose: to manage and resolve requests for information, queries or complaints received via the contact form.
  • Basis of justification: performance of the pre-contractual relationship.
  • Type of data processed: identification data (surname, first name) and contact data (telephone, e-mail address), personal characteristics (city, country), professional data (type of company).
  • Identification of the data controller: ZUMEX GROUP, S.A.
  • Objective: to determine the profile of the future employee as a preliminary step to recruiting the candidate who meets the characteristics and requirements of the position.
  • Legitimate basis: consent and, where applicable, the performance of the pre-contractual relationship.
  • Type of data processed: identification data, contact data, academic and professional data, data on the applicant’s personal characteristics and image.

3.4 Technical assistance management

  • Identification of joint controllers:
  • ZUMEX GROUP, S, A.
  • ZUMEX FRANCE SARL.
  • ZUMEX MEXICO SA DE CV
  • ZUMEX USA, INC.
  • Objective: To be able to resolve technical or operating problems with ZUMEX parts or appliances and to be able to exercise the corresponding warranty rights. Possibility of online assistance, technical assistance and satisfaction surveys concerning the technical service provided.
  • Basis of justification: performance of the contractual relationship.
  • Type of data processed: contact data (e-mail address), identification data (first and last name) and professional data (type of company).
  • WHO WILL RECEIVE YOUR DATA

4.1 Communication of data to third parties

Personal data collected via the website, by post or by telephone may be communicated to the various sales representatives or agents required to carry out the management and commercial relationship on the basis of the contractual or, when applicable, pre-contractual relationship.

4.2 Processors

Some of the data processing operations identified in the policy, such as those relating to the support and maintenance of the website, as well as the processing of e-mail marketing, may be carried out by appropriate service providers under contract to ZUMEX. These service providers will only process the data for the purposes indicated and in accordance with the relevant contract, in compliance with the provisions of Article 28 of the GDPR.

  • INTERNATIONAL DATA TRANSFERS

International data transfers involve the flow of personal data from the EU to recipients in countries outside the European Economic Area (the countries of the European Union plus Liechtenstein, Iceland and Norway).

ZUMEX processes your data in the European Economic Area and with service providers located in the European Economic Area or in countries that have been declared as having an adequate level of protection.

Notwithstanding the above, if ZUMEX entrusts some of its services to suppliers who carry out the processing outside the European Economic Area or in countries that have not been declared as having an adequate level of protection, we will ensure the security and legitimacy of the processing of your data.

We also inform users that, in exceptional cases, international transfers of data may be made to ZUMEX subsidiaries located outside the European Economic Area.

For these purposes, international data transfers are carried out in accordance with one of the conditions for carrying out such transfers, as set out in the GDPR. For example, by adopting binding corporate rules that guarantee the protection of information in a similar way to that established by European standards or by subscribing to the current standard clauses approved by the European Commission.

In this respect, users may obtain further information on these transfers or a copy of these guarantees by sending their request to the e-mail address marketing@zumex.com.

  • DATA RETENTION PERIODS

Users’ personal data will be stored in accordance with the principle of “limited storage” established in the RGPD, being limited in time to the fulfilment of the purposes pursued by the processing of the corresponding data.

More specifically, data will be kept on data subjects for the period indicated below, in accordance with the specific purposes:

  • Management of subscriptions and the sending of electronic commercial communications: Personal data will be kept until the user revokes his/her consent by requesting to unsubscribe from the sending of such newsletters by following the instructions at the bottom of each e-mail or exercises the right to erasure his/her data for this purpose.
  • Management of processing and response to requests received via the contact form: personal data will be kept for the time necessary to achieve the purpose for which it was collected and, where applicable, until the erasure of the data is requested.
  • Management of applications received by interested parties: personal data will be kept during the selection procedure and until an applicant is assigned to the vacant post. Notwithstanding the above, applicants’ data will be kept for a maximum period of one year or until they exercise their right of erasure.
  • Management of technical assistance: personal data will be kept for as long as is necessary to achieve the purpose for which it was collected and, where applicable, until the erasure of the data is requested.
  • EXERCISE YOUR DATA PROTECTION RIGHTS

Users may at any time exercise their rights of access, rectification, erasure and objection, portability and limitation of processing, in accordance with the GDPR, by writing to the postal address indicated in the first section of this data protection policy or by email to marketing@zumex.com, indicating the right(s) they wish to exercise.

Users are also informed that if they consider that their rights have not been respected, they may lodge a complaint with the Spanish Supervisory Authority. For further information, see www.aepd.es.

  • UPDATE

ZUMEX reserves the right to modify the content of this website at any time, to add new functionalities and to modify the general conditions in force. In this case, the corresponding update will be published on the web portal so that the user is informed of the changes.

Last update: June 2023