PICK & PACK SYSTEMS, S.L.U. is committed to safeguarding your privacy when you use any of our services. This Privacy Policy therefore sets out our personal data protection policy on the websites www.pickpacksys.com; based on this information, you may voluntarily decide to what extent you wish to provide your personal data.

In accordance with current legislation, PICK & PACK SYSTEMS, S.L.U. (hereinafter, the Data Controller or PICK & PACK SYSTEMS, S.L.U.) undertakes to adopt the necessary technical and organisational measures, in line with the level of security appropriate to the risk associated with the data collected.

Legislation applicable to this privacy policy

This Privacy Policy complies with current Spanish and European legislation on the protection of personal data online. Specifically, it complies with the following regulations:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
• Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD-GDD).

Principles applicable to the processing of personal data

The processing of the User’s personal data shall be subject to the following principles set out in Article 5 of the GDPR and in Article 4 et seq. of Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights:

• Principle of lawfulness, fairness and transparency: the User’s consent shall be required at all times, following the provision of fully transparent information regarding the purposes for which personal data is collected.
• Principle of purpose limitation: personal data shall be collected for specified, explicit and legitimate purposes.
• Principle of data minimisation: the personal data collected shall be limited to what is strictly necessary in relation to the purposes for which it is processed.
• Principle of accuracy: personal data must be accurate and kept up to date at all times.
• Principle of storage limitation: personal data shall only be retained in a form which permits identification of the User for as long as is necessary for the purposes of the processing.
• Principle of integrity and confidentiality: personal data shall be processed in a manner that ensures its security and confidentiality.
• Principle of proactive accountability: the Data Controller shall be responsible for ensuring that the above principles are complied with.

IDENTITY OF THE DATA CONTROLLER

The data controller for the personal data collected on the websites www.pickpacksys.com (hereinafter the Website) is:

PICK & PACK SYSTEMS, S.L.U.

Tax Identification Number (CIF): B02977981

Address: Polígono Industrial La Isla, Calle Río Viejo, 81, Dos Hermanas, Seville

Contact telephone number: +34 603 728 708

Contact email: info@pickpacksys.com

Registered with the Seville Commercial Register. T6983, Folio 156, Page SE – 128630, 1st Entry

ACCURACY OF DATA PROVIDED BY THE USER

All information provided by the User via the forms on the Website or any other means of data collection made available to them must be accurate. To this end, the User guarantees the authenticity of all data provided and shall ensure that the information supplied to PICK & PACK SYSTEMS, S.L.U. is kept fully up to date so that it reflects, at all times, the User’s actual circumstances.

PERSONAL DATA OF MINORS

In accordance with Article 8 of the GDPR and Article 7 of Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights, only those aged 14 or over may give their consent for the lawful processing of their personal data by PICK & PACK SYSTEMS, S.L.U. In the case of a child under the age of 14, the consent of their parents or guardians will be required for the processing, and this will only be considered lawful to the extent that they have authorised it.

PICK & PACK SYSTEMS, S.L.U. reserves the right to verify the User’s age at any time.

DATA PROCESSING CARRIED OUT THROUGH THE WEBSITE

PICK & PACK SYSTEMS, S.L.U. will process the personal data provided by the User and information relating to their privacy in the following circumstances:

1. Processing of personal data provided by the User via email or telephone:

• Methods of data collection: Emails sent to info@pickpacksys.com or other addresses made available to the User, and telephone calls to the contact number 603 728 708.
• Data categories: The data requested from interested Users generally consists of identification and contact details, such as postal and/or email addresses, telephone numbers, national identity number and payment details, where applicable.
• Purpose of processing: To respond to and resolve requests, enquiries or queries, as well as to provide any information required by the User.
  To facilitate, streamline and fulfil the commitments established between the Website and the User, or to maintain any relationship that may be established with the User.
• Legal basis: The legal basis for the processing of the User’s data shall be consent. Consent shall be deemed to have been given by the User when they voluntarily contact PICK & PACK SYSTEMS, S.L.U. via the collection channels indicated in this section, which are made available to them on the Website.
• Retention of the User’s data: The data will be retained for the period during which the User’s requests, enquiries or queries are being processed. PICK & PACK SYSTEMS, S.L.U. will retain the User’s data once this period has ended, blocking it for the periods provided for by law and for as long as any liabilities that may arise have not become time-barred.
• Disclosure of data: The User’s personal data will not be shared with third parties, except in the cases mentioned in the section on “Disclosure of data provided by the User”.

2. Processing of data provided by the User via the contact form available on the Website:

• Methods of data collection: Contact form, made available to the User in the “Contact” section.
• Data category: Identifying and contact details (first name and surname, company, email, telephone number). Should it be necessary to fulfil the User’s request or requirement, PICK & PACK SYSTEMS, S.L.U. may request additional information.
• Purpose of processing: To respond to and resolve requests, enquiries or queries, as well as to provide any information required by the User.
  To facilitate, streamline and fulfil the commitments established between the Website and the User, or to maintain any relationship that may be established with the User.
• Retention of the User’s data: The User’s personal data and information will be retained for the period during which the User’s requests, enquiries or queries are being processed, or until the User requests that PICK & PACK SYSTEMS, S.L.U. cease processing their data for the aforementioned purpose. Thereafter, the data will be kept on hold for the statutory periods required to address any potential liabilities and until any liabilities that may arise have become time-barred.
• Data transfer: The User’s personal data will not be shared with third parties, except in the cases mentioned in the section on “Transfer of data provided by the User”.

3. Data processing via cookies

The website uses cookies or other tracking tools to collect information regarding how Users use the website. Please see our Cookies Policy for further information on how PICK & PACK SYSTEMS, S.L. processes data via cookies or other tracking tools.

4. Data processing via PICK & PACK SYSTEMS, S.L.U.’s social media profiles

PICK & PACK SYSTEMS, S.L.U. maintains accounts and pages on the main social media platforms (LinkedIn).

The processing of data relating to Users on these platforms is governed by the terms of use, privacy policies and access rules of the relevant social media platform, which the User has previously accepted.

DISCLOSURE OF DATA PROVIDED BY THE USER

The User’s personal data will not be shared with third parties.

However, the data processors at PICK & PACK SYSTEMS, S.L.U. may have access to the personal data provided by Users, that is to say, the service providers of PICK & PACK SYSTEMS, S.L.U. who, in order to carry out their duties, need to access personal data, as well as data processors employed by subsidiaries and/or affiliated companies of PICK & PACK SYSTEMS, S.L.U. who provide services to our company, such as logistics, transport and delivery services, information technology (storage and processing of information), financial services, audit services, etc.

In such cases, PICK & PACK SYSTEMS, S.L.U. will comply with the regulations applicable to data processors.

Data may also be disclosed where legally required by the competent authorities, including judges and courts or law enforcement agencies.

Finally, certain data transfers may take place between companies affiliated with PICK & PACK SYSTEMS, S.L.U. that belong to the same business group, in cases where there is a legitimate interest for the group’s internal administrative purposes. You can obtain further information on data transfers between affiliated companies within the group by contacting info@pickpacksys.com.

INTERNATIONAL DATA TRANSFERS

Some of our service providers may process your data outside the European Economic Area (“EEA”).

PICK & PACK SYSTEMS, S.L.U. hereby informs you that the service providers which may carry out international data transfers are:

• Email services via Office 365 (Microsoft Corporation – USA)

The location of these service providers outside the EEA may mean a lower level of protection than that provided for under European legislation. However, in order to prevent this, the service providers have entered into the relevant standard contractual clauses approved by the European Commission (“SCCs”), which are intended to ensure European data protection standards are met. Specifically, Microsoft Corporation has subsequently adhered to the principles of the EU–US Data Privacy Framework.

CONFIDENTIALITY AND SECURITY OF PERSONAL DATA

PICK & PACK SYSTEMS, S.L.U. undertakes to adopt the necessary technical and organisational measures, in accordance with the level of security appropriate to the risk posed by the data collected, so as to guarantee the security of personal data and prevent the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorised disclosure of or access to such data. The Website has an SSL (Secure Socket Layer) certificate which ensures that personal data is transmitted securely and confidentially, as the transmission of data between the server and the User, and vice versa, is fully encrypted. However, as PICK & PACK SYSTEMS, S.L.U. cannot guarantee the impregnability of the internet or the total absence of hackers or others who may fraudulently access personal data, the Data Controller undertakes to notify the User without undue delay should a personal data breach occur that is likely to result in a high risk to the rights and freedoms of natural persons.

In accordance with Article 4 of the GDPR, a personal data breach is defined as any breach of security leading to the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or to the unauthorised disclosure of or access to such data. Personal data shall be treated as confidential by the Data Controller, who undertakes to inform and ensure, through a legal or contractual obligation, that such confidentiality is respected by its employees, associates and any person to whom the information is made available.

RIGHTS OF DATA SUBJECTS ARISING FROM THE PROCESSING OF PERSONAL DATA

The User has certain rights in relation to PICK & PACK SYSTEMS, S.L.U. and may therefore exercise the following rights, recognised in the GDPR and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights, against the Data Controller:

• Right of access: This is the User’s right to obtain confirmation as to whether or not PICK & PACK SYSTEMS, S.L.U. is processing their personal data and, if so, to obtain information regarding their specific personal data and the processing that PICK & PACK SYSTEMS, S.L.U. has carried out or is carrying out, as well as, amongst other things, the available information on the origin of such data and the recipients of any communications made or planned in relation to it.
• Right to rectification: This is the User’s right to have their personal data amended where it is found to be inaccurate or, taking into account the purposes of the processing, incomplete.
• Right to erasure (‘the right to be forgotten’): This is the User’s right, unless otherwise provided for by applicable legislation, to have their personal data erased when such data is no longer necessary for the purposes for which it was collected or processed; the User has withdrawn their consent to the processing and there is no other legal basis for it; the User objects to the processing and there is no other legitimate reason to continue with it; the personal data has been processed unlawfully; the personal data must be erased in compliance with a legal obligation; or the personal data has been obtained as a result of a direct offer of information society services to a child under the age of 14. In addition to erasing the data, the Data Controller, taking into account the available technology and the cost of implementation, must take reasonable steps to inform those responsible for processing the personal data of the data subject’s request to remove any links to that personal data.
• Right to restriction of processing: This is the User’s right to restrict the processing of their personal data. The User has the right to obtain restriction of processing where they contest the accuracy of their personal data; where the processing is unlawful; where the Data Controller no longer needs the personal data, but the User needs it to establish, exercise or defend legal claims; and where the User has objected to the processing.
• Right to data portability: Where processing is carried out by automated means, the User shall have the right to receive their personal data from the Data Controller in a structured, commonly used and machine-readable format, and to transmit those data to another data controller. Where technically feasible, the Data Controller shall transmit the data directly to that other data controller.
• Right to object: This is the User’s right to prevent the processing of their personal data or to have such processing by PICK & PACK SYSTEMS, S.L.U. ceased.
• Right not to be subject to a decision based solely on automated processing, including profiling: This is the User’s right not to be subject to an individualised decision based solely on the automated processing of their personal data, including profiling, unless otherwise provided for by applicable legislation.

Users may therefore exercise their rights by sending a written request to the Data Controller, quoting the reference “GDPR”, to the following address and/or email address: Post address: PI La Isla, Río Viejo, 81, 41703, Dos Hermanas, Seville, Spain. Email: info@pickpacksys.com

LINKS TO THIRD-PARTY WEBSITES

The Website may contain hyperlinks or links that provide access to third-party websites other than those of PICK & PACK SYSTEMS, S.L.U., and which are therefore not operated by PICK & PACK SYSTEMS, S.L.U. The owners of these websites will have their own data protection policies and are, in each case, responsible for their own data files and privacy practices.

COMPLAINTS TO THE SUPERVISORY AUTHORITY

Should the User consider that there is a problem or a breach of current legislation regarding the way in which their personal data is being processed, they shall be entitled to effective judicial protection and to lodge a complaint with a supervisory authority, in particular in the country where they have their habitual residence, place of work or the place where the alleged breach occurred. In the case of Spain, the supervisory authority is the Spanish Data Protection Agency (https://www.aepd.es/es).

ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

PICK & PACK SYSTEMS, S.L.U. reserves the right to amend its Privacy Policy, at its own discretion, or in response to a change in legislation, case law or the guidelines of the Spanish Data Protection Agency. The User will not be explicitly notified of any changes or updates to this Privacy Policy. Users are advised to check this page regularly to keep abreast of the latest changes or updates. This Privacy Policy has been updated to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and to Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights.

Privacy Policy updated on 28 March 2024.