Through our Privacy Policy, we inform you of the way in which your personal data will be processed on our Website.

In accordance with personal data protection regulations and in observance of the principle of transparency, we want all information and communication relating to the processing of your personal data to be understandable and easily accessible.

On this Website, we respect and protect users’ personal data. Respect for your privacy is important to us, and you should know that this Website is a safe and trustworthy space, and therefore:

We never request personal information unless it is truly necessary to provide the requested services or respond to your inquiry.
We do not share our users’ personal information with anyone, except to comply with our legal obligations or where we have your express authorization.
We never use your personal data for a purpose different from that stated in this Privacy Policy.

1. Who is responsible for processing the data?

Company name: Minas de Almadén y Arrayanes S.A., S.M.E
Registered address: Cerco de San Teodoro s/n – 13400 Almadén (Ciudad Real), Spain
Tax ID (CIF): A28764140
Email: mayasa@mayasa.es

2. Why do we process the data? What categories of data do we process? Why do we process them? For how long?

The data will be processed for the following purposes, depending on the reason for which they were provided:

To respond to inquiries, requests, complaints, or suggestions made by users through the web contact form, and to subsequently follow up on them.

The data processed by MAYASA for this purpose will be those necessary to respond to the user’s request and will be merely identifying data (first and last name, email address, and telephone number – optional –).

The data provided for the purpose described above will be processed on the legal basis of the consent of the person providing them. Such consent may be withdrawn at any time, although this will not affect the lawfulness of processing carried out prior to its withdrawal. Providing the data is voluntary; however, if it is not provided, your request cannot be processed nor can the corresponding inquiry be answered. Therefore, the communication of your personal data for these purposes is a necessary requirement for us to handle requests submitted through these channels.

The data will be retained for the time necessary to respond to your request or inquiry and consider it definitively closed. Two months after your request has been answered, your data will be deleted.

To address the rights of claimants exercising personal data rights, for the purpose of managing and responding to claimants’ requests in the exercise of the rights established in data protection regulations, with the legal basis being compliance with a legal obligation.

The data will be retained for the time necessary to resolve claims.

In order to process the request, the personal data we will process will, in principle, be identifying data of the data subject.

No automated individual decisions will be made based on the data provided.

International data transfers are not planned. The personal data provided will be stored on servers located within the European Union. Such processing complies with the appropriate protection guarantees required by applicable regulations.

3. To which recipients will we disclose your personal data?
We will not transfer or disclose your data to third parties, except where necessary for the development, control, and fulfillment of the stated purpose(s) in the cases provided by law (e.g., Tax Authorities, Financial Institutions, Public Registries, other Public Administration Bodies, etc.).

4. What are your rights when you provide us with your data?
Any person has the right to obtain confirmation as to whether or not MAYASA processes their personal data.

Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate or incomplete data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. Likewise, data subjects have the right to the portability of their data.

In certain circumstances, data subjects may request the restriction of the processing of their data, in which case they will only be retained for the exercise or defense of claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, MAYASA will cease processing the data, except for compelling legitimate grounds or the exercise or defense of possible claims.

Where commercial communications are sent using MAYASA’s legitimate interest as the legal basis, the data subject may object to the processing of their data for that purpose.

If you have given your consent for a specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal.

You may exercise any of these rights by sending an email to mayasa@mayasa.es.

If you believe that your rights regarding the protection of your personal data have been violated, especially if you have not obtained satisfaction in the exercise of your rights, you may file a complaint with the competent data protection supervisory authority through its website: www.aepd.es.

5. What security measures do we apply to protect your data?
MAYASA will never share users’ personal data with third parties without first obtaining the prior consent of the data owner, except where legally required.

MAYASA guarantees the security and confidentiality of the personal data provided to it. To this end, it has implemented the necessary technical and organizational security measures to prevent alteration, loss, unauthorized processing, or access, in accordance with applicable regulations.

MAYASA will apply the following principles to the processing of your data:

Principle of lawfulness, fairness, and transparency: MAYASA will require consent for the processing of users’ personal data, clearly and transparently informing them of the specific purposes for which the data will be processed and any other information required by regulations.
Principle of data minimization: MAYASA will only request and process the personal data strictly necessary in relation to the purposes for which they are requested.
Principle of storage limitation: data will be kept for no longer than necessary for the purposes of the processing, depending on the purpose. MAYASA will inform you of the applicable retention period in each case.
Principle of integrity and confidentiality: user data will be processed ensuring appropriate security and confidentiality.

6. What is the origin of your data? The personal data we process come from the data subject themselves.

The personal data obtained through the Website are obtained directly from the user when browsing our website and completing any of the forms.

Finally, we remind you that, as a user of the Website, you will in all cases be responsible for the accuracy of the data you provide to us, and you must inform us of any changes to them.

7. Changes to the Privacy Policy
We reserve the right to modify this Privacy Policy to adapt it to legislative, case law, or interpretative developments by the Spanish Data Protection Agency. In such a case, we will announce such changes, clearly indicating the modifications made and giving appropriate notice, and, where necessary, requesting your acceptance of such changes.