Our privacy policy

We will process the identification and contact details of our clients' representatives in order to manage the contractual relationship we have with the legal entities they represent. If you are a natural person, we will process your identification, contact and financial data solely for the purpose of managing our contractual relationship with you.

• Preparing quotes and following them up through communications between both parties.
• Providing the contracted services and managing and maintaining the business relationship with our clients.
• Providing information by electronic means regarding your requests.
• Providing commercial information by electronic means, provided there is express authorisation or it falls within our legitimate interest.
• Invoicing and filing the relevant tax returns.
• Carrying out the corresponding transactions.
• Control and debt collection procedures.
• Legal compliance and defence of rights. We may process and retain data when necessary to comply with legal obligations, respond to requests from authorities, prove consent, handle claims or defend our rights and legitimate interests.

• The existence of a contractual relationship between the parties or the application, at the request of the data subject, of pre-contractual measures.
• Compliance with a legal obligation applicable to the Controller.
• Consent given by the data subject or their legal representative.
• The legitimate interest of the Controller.

For the duration of the relationship between the parties and, once it has ended, duly blocked for the legal limitation periods arising from it.

Personal data processed on the basis of the data subject's consent will be kept for as long as that consent is not withdrawn. Once withdrawn, the data will be erased, without prejudice to their retention, duly blocked, for the periods required by law to address possible liabilities.

If you provide us with information through a contact form on cgcspain.com, we will process your identification and contact details and any other data you share with us through that form.

We may also process your IP address, the type of operating system or browser used, and the duration of your visit, in pseudonymised form.

• Managing the requested service, replying to your request or processing your enquiry.
• Providing information by electronic means regarding your requests.
• Providing commercial information by electronic means.
• Analysing and improving the CGC SOLUTIONS, S.L. website in relation to the products or services offered, and improving our commercial strategy.
• Legal compliance and defence of rights. We may process and retain data when necessary to comply with legal obligations, respond to requests from authorities, prove consent, handle claims or defend our rights and legitimate interests.
• Maintaining the security of the website, preventing abuse, detecting spam, preventing misuse, blocking malicious traffic, debugging errors and ensuring the platform works properly.
• Handling enquiries, incidents, complaints or review requests.

• The existence of a contractual relationship between the parties or the application, at the request of the data subject, of pre-contractual measures.
• Compliance with a legal obligation applicable to the Controller.
• Consent given by the data subject or their legal representative.
• The legitimate interest of the Controller.

For the duration of the relationship between the parties and, once it has ended, duly blocked for the legal limitation periods arising from it.

Personal data processed on the basis of the data subject's consent will be kept for as long as that consent is not withdrawn. Once withdrawn, the data will be erased, without prejudice to their retention, duly blocked, for the periods required by law to address possible liabilities.

We will process your image and, where applicable, your vehicle's registration number.

Ensuring the security of property, facilities and people.

The legal basis for the processing is the performance of a task carried out in the public interest.

For 1 month from recording, except in the event of incidents, in which case recordings may be kept for longer until the incident is resolved or until they are handed over to the State Security Forces or competent authorities.

We will process the identification and contact details of our suppliers' representatives, as well as financial, banking and payment details, in order to manage the contractual relationship we have with the legal entities they represent.

• Preparing/approving quotes and following them up through communications between both parties.
• Monitoring the contracted services and managing the business relationship.
• Invoicing and filing the relevant tax returns.
• Providing commercial information by electronic means, provided there is express authorisation or it falls within our legitimate interest.
• Carrying out the corresponding transactions, as well as control and debt collection procedures.
• Legal compliance and defence of rights. We may process and retain data when necessary to comply with legal obligations, respond to requests from authorities, prove consent, handle claims or defend our rights and legitimate interests.

• The existence of a contractual relationship between the parties or the application of pre-contractual measures.
• Compliance with legal obligations applicable to the Controller.
• Consent given by a legal representative of the supplier.
• The legitimate interest of the Controller.

For the duration of the relationship between the parties and, once it has ended, duly blocked for the limitation periods arising from it.

Personal data processed on the basis of the data subject's consent will be kept for as long as that consent is not withdrawn. Once withdrawn, the data will be erased, without prejudice to their retention, duly blocked, for the periods required by law to address possible liabilities.

We will process the data you share with us as part of the recruitment process or an unsolicited application. In general, we will process your identification data, contact details, curriculum vitae and data relating to your professional and/or academic experience.

• Managing candidates' registration and participation in recruitment processes.
• Assessing professional profiles and sending communications related to those processes by electronic means (email, WhatsApp), telephone or other equivalent means.
• Inviting you to job interviews and assessing your application.
• Where applicable, adding the candidate's profile to the Talent Community for consideration in future processes, where express consent has been given.

• Taking pre-contractual steps at the request of the data subject.
• Compliance with legal obligations applicable to the Controller.
• The data subject's consent to add the candidate's profile to the Talent Community for consideration in future processes.

Personal data will be kept until the end of the recruitment process and, if we have your authorisation, for a maximum of twelve (12) months. Once these periods have elapsed, the data will remain duly blocked for the legally established limitation periods.

We will use the data available in your user profile, as well as the data you provide when contacting us through our social media profiles.

• Processing, handling and replying to your enquiries, requests or petitions.
• Managing the requested service.
• Publishing your image on our profiles, where you have given prior consent.
• Interacting with you and building a community of followers.

The legal bases for the processing are the data subject's voluntary consent and, where applicable, acceptance of a contractual relationship within the relevant social network. Data processing within the social network will be carried out in accordance with its privacy policies.

We can only consult or remove your data in a limited way, as we have a specific profile. We will process them for as long as you follow us, are one of our contacts or click “like”, “follow” or similar buttons.

Any rectification of your data or restriction of information or posts must be carried out through your profile or user settings on the social network itself.

No. As a general rule, we only process data provided by the data subjects themselves. If you provide us with third-party data, you must first inform those persons and obtain their consent; otherwise, you release us from any liability for failure to comply with this requirement.

We do not process data of persons under 18. Therefore, please refrain from providing them if you are under that age or, where applicable, from providing data of third parties under that age. CGC SOLUTIONS, S.L. accepts no liability for failure to comply with this provision.

The Controller does not intend to knowingly collect data from minors without an appropriate legal basis. If we detect that data from a minor have been collected without sufficient authorisation, we may delete or block them.

As a general rule, CGC SOLUTIONS, S.L. does not request specially protected data, such as data concerning health, ideology, religion, trade union membership, sexual orientation, biometric data or similar information.

Users should avoid including this type of data in open forms, opinions, incidents or communications, unless strictly necessary for a specific purpose and there is an appropriate legal basis.

If we receive unsolicited special category data, we will delete them or restrict their processing.

CGC SOLUTIONS, S.L. does not sell the personal data it processes to third parties.

• The data subject's personal data may be disclosed to the competent public authorities or bodies when required by law, regulation, legal process or an applicable government request, as well as to banks and financial institutions for the collection of payment for the service provided or product purchased.
• In order to fulfil the purposes set out in this Privacy Policy, we will work with service providers who may have access to your personal data. CGC SOLUTIONS, S.L. has signed the corresponding data processing agreement with these providers, in accordance with the provisions of Article 28 GDPR. CGC SOLUTIONS, S.L. informs you that, where access to data by these providers involves an international transfer of personal data outside the European Economic Area, the appropriate mechanisms and safeguards provided for by applicable legislation will be applied (e.g. a European Commission adequacy decision, Binding Corporate Rules and/or Standard Contractual Clauses, among others) to ensure that these providers apply a level of security equivalent to that required by European data protection legislation.

• To access their personal data.
• To request the rectification of their data if they are inaccurate.
• To request the erasure of their data when they are no longer necessary for the purposes for which they were collected, once the legal retention periods have elapsed, or when they withdraw the consent given for specific processing.
• To withdraw any consent given.
• Under the conditions set out in the General Data Protection Regulation, to request the restriction of processing of their data or its portability.
• In certain circumstances and for reasons relating to their particular situation, to object to the processing of their data.
• Not to be subject to automated decisions (including profiling).
• To lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing of your data does not comply with current legislation. Before lodging such a complaint, or to raise any question or concern regarding the processing of personal data, you may contact the Controller at the postal and email addresses indicated.

If any of your data change, please let us know so that we can keep them up to date.

To exercise these rights, you must send a request to the email address gdpr@cgcsolutions.es or to the postal address Calle Gobelas 35, Edificio HQ, 1st floor, 28023 Moncloa – Aravaca (Madrid), Spain, providing adequate proof of identity. In case of reasonable doubt about the identity of the applicant, CGC SOLUTIONS, S.L. may request additional information.

CGC SOLUTIONS, S.L. provides accessible, free-of-charge channels for exercising these rights.

One month from receipt, extendable by two further months where necessary due to the complexity of the request, in which case you will be notified in due time and form.

CGC SOLUTIONS, S.L. will only send commercial communications, newsletters or similar after requesting the data subject's free, specific, informed and unambiguous consent through a separate, unticked box.

The data subject/user may withdraw their consent at any time:

• By using the unsubscribe link included in the communications;
• By following the instructions in the message;
• By writing to gdpr@cgcsolutions.es.

Withdrawing consent to commercial communications does not affect the handling of information requests previously made by the user, nor communications strictly necessary in relation to those requests.

If the data subject/user provides their telephone number and requests information, we may use it to contact them in relation to that request. Such contact may be made by phone call, SMS, WhatsApp or other equivalent channels where appropriate to handle the request.

If the contact has a commercial purpose not directly linked to a request made, the corresponding legal basis will apply and, where appropriate, consent will be requested.

The use of WhatsApp or other messaging services may involve the processing of data by the service provider in accordance with its own terms and policies.

Given the Controller's commitment to ensuring the security and confidentiality of the personal data processed, the levels of security required to protect personal data have been adopted and the technical means available have been put in place to prevent the loss, misuse, alteration, unauthorised access and theft of personal data provided through the website.

In any case, please bear in mind that security measures on the Internet are not impregnable.

Yes, we use cookies other than strictly necessary ones. You can consult the Cookie Policy available on our website.

CGC SOLUTIONS, S.L. uses cookies and similar technologies to ensure the website works, remember preferences, measure usage, improve content and, where applicable, carry out analytics or advertising.

Non-essential cookies, such as analytics, advertising or advanced personalisation cookies, will only be set once you have given your consent through the cookie panel.

You can accept, reject or configure cookies from the banner or panel provided on the website. You can also change your settings later from Cookie settings.

The data subject/user guarantees that the data they provide are true, accurate, complete and up to date.

If your data change, you must inform us to avoid errors in handling requests, communications or similar.

CGC SOLUTIONS, S.L. shall not be liable for incidents arising from incorrect, incomplete or outdated data provided by the user.