Bac Valves

Privacy Policy

Privacy Policy
June 2025

BAC VALVES, S.A. is committed to protecting the privacy of users who access this website and/or any of its services. Use of the website and/or any of the services offered by BAC VALVES, S.A. implies acceptance by the user of the provisions contained in this Privacy Policy and that their personal data will be processed as stipulated therein. Please note that although our website may contain links to other websites or social media platforms, this Privacy Policy does not apply to the websites of other companies or organizations to which the website is redirected. BAC VALVES, S.A. does not control the content of third-party websites, nor does it accept any responsibility for the content or privacy policies of these websites.

Basic information on data processing (Regulation (EU) 2016/679 and Organic Law 3/2018)

Data controller: BAC VALVES, S.A. Tax ID No.: A17378928 C/ TAPIS 126 17600 FIGUERES Email: bac@bacvalves.com
Purpose of processing: To offer and manage our industrial valve manufacturing and sales services.
Legitimacy:
- Consent obtained from the data subject when they request information from us.
- Execution of the service contract when they contract with us.
- Legitimate interest for the security of the facilities.
- Compliance with legal obligations.
Recipients: The data will not be communicated to third parties unless required by law or necessary to fulfill the purpose of the processing.
Data Subject Rights: Data subjects have the right to exercise their rights of access, rectification, restriction of processing, erasure, portability, and objection by sending their request to our address.
Data retention period: For the duration of the business relationship or for the years necessary to comply with legal obligations.
Complaints: Data subjects may contact the Spanish Data Protection Agency (AEPD) to file any complaint they deem appropriate.
Additional Information: You can consult the additional and detailed information below in the "Privacy Questions" section.

Privacy Questions
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR) and Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we provide you with the following information regarding the processing of your personal data:

Who is responsible for the processing of your data?
Identity: BAC VALVES, S.A.
NIF: A17378928
Address: C/ TAPIS 126 17600 FIGUERES
Tel.: 972677052
Email: bac@bacvalves.com

For what purpose do we process your personal data?
  • We process the information you provide to us to manage our industrial valve manufacturing and sales services.
  • If you contact us through the contact form on our website, we will process it to manage your inquiry.
  • We may also use your data to inform you about our activities, products, or services when you are already a customer or, if you are not, when you have given us your consent to do so.
  • When you sign the visitor log at our facilities, we will process your data to maintain the security of our premises.
  • When you enter our facilities, your image may be recorded by video surveillance cameras for security monitoring purposes.
  • If you send us a resume, we will process the data to manage the CV database for recruitment purposes.
  • For the management of the company's ethics channel, we will process the personal data contained in communications received through this channel to receive, manage, and investigate communications related to potential ethical or compliance breaches or illegalities, as well as to comply with the legal obligations established in Law 2/2023, of February 20, regulating the protection of persons who report regulatory breaches and the fight against corruption.

How long will we retain your data?
  • The personal data provided will be retained as long as you are a user of our services or wish to receive information. You may object to the processing of your data for promotional purposes, either when you provide it to us or at any time thereafter, by contacting us at bac@bacvalves.com. This will then be done for the periods established to comply with our legal obligations. This will be 6 years for accounting and tax documentation for commercial purposes, in accordance with Article 30 of the Commercial Code, and 4 years for tax purposes, in accordance with Articles 66 to 70 of the General Tax Law.
  • Data obtained through visitor registration will be retained for one month.
  • The images captured by the video surveillance system will be kept for one month.
  • In the case of resumes, the data will be kept for a year.
  • The data transmitted through the ethical channel will be kept for the time necessary for the processing of the communication and, subsequently, during the terms legally established for the conservation of the documentation related to the disciplinary procedures or investigations, which will be 3 years from the end of the procedure, imply that there is a legal obligation to preserve for a period superior.

Who is the legitimacy for the treatment of severities?
  • For the management of the contractual relationship with interest, we will base the processing of data on the execution of the contract or on the framework of the pre-contractual relationship.
  • For the sending of commercial information we will base the processing on your consent, so that if you are our client, we will be able to send you information about our products and services, always providing a free and easy way to donate money, in accordance with the provisions of article 21.2 of the Law 34/2002, July 11, governing the information and electronic commerce society.
  • Regarding the information that is sent by minors under 14 years of age, it will be an essential requirement that it is possible to obtain the consent of the parent, guardian or legal representative of the minor so that their personal data may be subject to processing. If this is not the case, the legal representative of the minor must notify you as soon as possible with any further information.
  • Regarding the collection of data in the visitor registry and the capture of images by the video surveillance system, the legitimacy is donated by the legitimate interest of preserving the security of people and goods.
  • For the processing of data through the ethical channel, legitimacy is based on the compliance of legal obligations derived from Law 2/2023, of February 20, regulating the protection of people who report regulatory infractions and the law against corruption, and in the legitimate interest of the company to maintain a adequate ethical and compliance environment.

To whom will the details be communicated?
  • The details will not be communicated to third parties, provided that a law is not required or is still necessary to fulfill both the finality of the transaction.
  • In the case of the ethical channel, the details may be communicated to the competent authorities as necessary to comply with the legal obligations established in the whistleblower protection regulations or as required by the applicable legislation.

Who are the seus drets that facilitate the severities?
  • Qualsevol person can obtain confirmation as to whether or not they are dealing with personal severities.
  • Interested persons have the right to access personal details, as well as to request the rectification of inaccurate data or, if necessary, to request the deletion when, among other reasons, the data is not necessary for the purposes for which it is to be collected.
  • In certain circumstances, the interested parties may request the limitation of the processing of the severities, in which case they will only be retained for the exercise or defense of claims.
  • Also, in certain circumstances and per motius related to the particular situation, interests may be opposed to the treatment of severity. In this case we will stop treating them, except for compelling legitimate reasons or for the exercise or defense of possible claims.
  • Interests are also directed to the portability of the severities.
  • Qualsevol is interested in not being the subject of a decision based solely on automated processing, including profiling, which produces legal effects that affect it or that significantly affect it in a similar way.
  •  Finally, interested parties have the right to file a claim with the competent Control Authority.

In the specific case of the ethical channel, the informants gauge the protection rights established in Law 2/2023, including the right to confidentiality of identity and protection against reprisals.

How can you exercise your rights?
Send us a letter with a copy of a document that identifies you, to our physical or electronic address.

How have we obtained the severity?
The personal details that we treat come from our own interest, we guarantee that the personal details are certain and we are responsible for communicating any modifications. The details marked with an asterisk are mandatory in order to donate the service on request.

Who do you treat?
The categories of data that we can handle are:
  • Identification data
  • Postal or electronic accessories
In the case of the video surveillance system:
  • Image
In the case of resumes, also:
  • Personal characteristics
  • Academics and professionals
In the case of the ethical channel, also:
  • Data relating to administrative or criminal infractions
  • Other categories of data that may be necessary for the investigation of these communications

These data are limited, so we only deal with the data necessary for the provision of our services and the management of our activities.

Do we use cookies?
We use cookies during navigation on our website with the consent of the user.
The user can configure his or her browser to be notified of the use of cookies and to avoid using them. If you like, visit our cookie policy.

Which safety measures do we apply?
We apply the security measures established in article 32 of the RGPD, therefore we adopt the security measures necessary to guarantee a level of security adequate to the risk of data processing that we carry out, both mechanisms that allow us to guarantee confidentiality, integrity, availability and permanent resilience dels systemes i serveis de tractament.

Some of these measurements are:
  • Information on data processing policies for staff.
  • Making periodic security copies.
  • Control of access to data.
  • Regular verification, evaluation and assessment processes.
  • In the case of the ethical channel, reinforced security measures are applied to guarantee the confidentiality of communications and the protection of the identity of informants, in accordance with the standards established in Law 2/2023.